Privacy Policy

regarding the processing and security of personal data
during the organization of the event
"Danube Festival" during June 23-25, 2023

The privacy policy aims to provide information regarding the collection, use and disclosure to third parties of personal data by Asociația Mai Mult Verde, with registered office in București, Sector 1, Str. Grigore Mora nr. 33, ap. 2., no of Reg. Com. 173/01.01.2008 CUI: 23078742, as a personal data controller (hereinafter “Association” or “Operator”). 

Considering:

    • The fact that your personal data 1 is to be processed 2 by the operator as a personal data controller;

    • Processing your data in a level playing field, transparency and security is a priority for the operator,

    • The importance of complying with the information obligations established by art. 12 and 13 of Regulation ( EU ) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing it Directive 95/46 / EC ( General Data Protection Regulation ), hereinafter “ Regulation ”, 

we inform you of the following information regarding the processing of your personal data by the Operator: 

1. Categories of personal data subject to processing

The controller will process only those categories of personal data which are appropriate, relevant and necessary for the purposes of the processing, as follows:

        1.1.  Your identification data – name, surname, age;

        1.2.  Your contact details – home, telephone number, e-mail address;

        1.3. Image and / or voice

Personal data means any information about an identified or identifiable natural person, such as: name, identification number, location data, etc. 

2. Processing means any operation relating to personal data, such as: collection, recording, organization, structuring, storage, adaptation, modification, extraction, consultation, use, disclosure by transmission, dissemination or making available in any other way, alignment or combination, restriction, deletion or destruction.

2.1. Your identification and contact data will be processed exclusively for the purpose of performing the verification process and ensuring the participation ( access ) to the DANUBE FESTIVAL 2023. The image / voice will be processed exclusively for marketing and advertising purposes of the event DANUBE FESTIVAL 2023.

2.2. The processing of your personal data has as legal basis the consent. We inform you that you have the right to withdraw your consent at any time, but without affecting the processing carried out prior to the withdrawal of consent.

2.3. The processing of the data subject's personal data will take place throughout the event, as well as for a subsequent period of 6 months. 

3. Recipients of personal data
            3.1. Your identification and contact data will not be available exclusively to the Operator.
These will be disclosed to the following recipients, in compliance with the legal requirements of confidentiality and security:
            • Company and companies in its group for administrative purposes (Payvent payment processor, in order to deliver the free tickets).

4. Data transfer
Your identification and contact data will not be disclosed to third parties other than those mentioned in the above point.

5. Your rights as a data subject
            5.1. Given your quality as a data subject, you enjoy the following rights:

( I) Right to be informed of all essential aspects of data processing;

( III ) Right of access to the data processed and to the following information:
• processing purposes;
• the categories of personal data concerned;
• recipients or categories of recipients to whom personal data have been or are to be disclosed, in particular recipients from third countries or international organizations;
• where possible, the period for which personal data are expected to be stored or, if this is not possible, the criteria used to establish this period;
• the existence of the right to request the Operator to rectify or delete personal data or to restrict the processing of personal data concerning the data subject or the right to object to the processing;
• the right to lodge a complaint with a supervisory authority;
• the existence of an automated decision-making process including the creation of profiles, as well as, at least in those cases, relevant information on the logic used and on the importance and expected consequences of such processing for you.
• the appropriate guarantees established by the Operator in case of transfer of personal data to a third country or an international organization.

( III ) Right to obtain the rectification and / or completion of personal data, without undue delay;

( IV ) Right to obtain the deletion of personal data, without undue delay, when:
• personal data are no longer necessary for the purposes for which they were collected or processed;
• withdraw your consent on the basis of which the processing takes place, when the lawfulness of the processing is based on this consent and there is no other legal basis for the processing;
• you oppose the processing on the basis of pursuing the legitimate purposes of the Operator and there are no legitimate reasons to prevail in terms of processing or oppose the processing for direct marketing purposes;
• personal data must be deleted in order to comply with a legal obligation incumbent on the Operator under Union or national law under which the Operator is subject,
insofar as none of the exceptions provided by art. 17 ( 3 ) of the General Data Protection Regulation ( EU ) 2016/679 ( hereinafter “ ” ).

( v ) Right to obtain processing restriction when:
• challenge the accuracy of the data, for a period that allows the Operator to verify the accuracy of the data;
• we no longer need personal data for processing purposes, but you request them for the establishment, exercise or defense of a right in court;
• you opposed the processing under the legitimate interests of the Operator, for the period in which it is verified that the legitimate rights of the Operator prevail over your rights.
Except for storage, data whose processing has been restricted may be processed only with your consent to the finding, the exercise or defense of a right in court or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
To the extent that you have obtained the processing restriction, we will inform you before lifting the processing restriction.

( vi ) Right to obtain notification to recipients of the rectification or deletion of personal data or of the restriction of processing, unless this proves impossible or involves disproportionate efforts for the Operator.

( vii ) Right to data portability
You have the right to obtain personal data processed in a structured, commonly used manner and which can be read automatically for the purpose of transmitting this data to another operator, without obstacles from the Operator, in the cases provided by art. 20 of the Regulation.

( viii ) Right to object
You have the right to object, for reasons related to your particular situation, to processing under the public interest or legitimate interest of the Operator or for direct marketing purposes, including the creation of profiles based on the respective justifications, except provided by art. 21 of the Regulation.

( ix ) The right not to be subject to a decision based exclusively on automatic processing, except for the exceptions provided by art. 22 of the Regulation.

( x ) Right to lodge a complaint with the National Authority for the Supervision of Personal Data Processing ( ANSPDCP ) or with the Romanian courts.
6. Processing security
            6.1. The operator will ensure the security of the processing of your data from the moment of their conception by implementing appropriate technical and organizational measures.
            6.2. The operator will inform you, without undue delay, if a possible breach of data security is likely to pose a high risk to your rights and freedoms., except for the cases indicated in art. 34 of the Regulation.



©2023 Danube Festival - All Rights Reserved