The Organizers of the European Longevity Festival are Studio LuksLu, a craft business for marketing, design and event management, owned by Katja Đujić, OIB: 41664449214, Ružić Selo 62, 51226 Hreljin, and Association for Healthy Living „Amara", Strossmayerova 8, 51000 Rijeka, OIB: 91956006513 (hereinafter jointly: the Organizers).
In accordance with the General Data Protection Regulation (EU 2016/679) and the Act on the Implementation of the General Data Protection Regulation, the Organizers, as joint controllers of the personal data of their data subjects, have prepared these Privacy Rules.
Their purpose is to clearly explain which personal data we collect, why we process it, how we protect it, and what rights users have in relation to the processing of their data.
The Rules have been prepared in accordance with the applicable regulations of the Republic of Croatia and the European Union and in accordance with best privacy protection practices, in order to ensure transparency and responsible handling of personal data.
These Privacy Rules ("Rules") explain how the Organizers collect, use and manage your personal data that is located on the website and made available to the Organizers through the use of the website: european-longevity-festival.com
The Privacy Rules apply to all services offered by the Organizers, whereby the purpose of the Rules is to clearly and transparently inform our visitors, partners and users of our services (hereinafter: data subjects) about the processing of their personal data and their rights.
The Organizers are committed to protecting and respecting your privacy. Please read these Rules carefully to understand why and how we collect your personal data and how it will be used. With regard to the personal data we collect, the Organizers are "data controllers", i.e. those who determine the purposes for which and the means by which personal data are processed.
The Organizers, as providers of website services, are committed to protecting the privacy of personal data.
If you wish to contact us regarding these Rules or regarding your personal data, please use the following contact information:
info@european-longevity-festival.com
How and when do we collect your personal data?
We collect your personal data when this is necessary to meet your needs and requests, perform services or for the purposes of our business and organization of the European Longevity Festival:
when purchasing a ticket, the Organizer or the Organizer’s data processor will request the provision of certain information (personal data), such as first and last name, address, e-mail address. In the event of purchasing a ticket, a contractual relationship is concluded, which is the basis for the processing of your personal data given the necessity of performing the contract to which you, as the purchaser, our visitor, are a party. We also process your data in order to take steps at your request, prior to entering into a contract,
when you access the European Longevity Festival websites, we will also collect your IP address, which is also considered personal data,
when registering a person as a user or recipient of the newsletter or other notifications about our products and promotions. As data controllers, we will request you to enter information about yourself (personal data), such as your e-mail address and first and last name. The legal basis for processing your data is consent. Thus, a user who registers to receive notifications about our products and promotions by entering their data on european-longevity-festival.com gives consent to the processing of their personal data. The user may withdraw their consent at any time by notifying the e-mail address of the Data Protection Officer,
situations in which we collect other types of data, such as the date and time of access to the website, information about the hardware, software or Internet browser you use, as well as about the operating system of your computer, the application version and your language settings. We may collect information about clicks and your access to european-longevity-festival.com, when you contact our office and request our assistance or ask a question in order to exercise any of your rights guaranteed by applicable regulations,
when you contact us via social networks, we collect the data that you have made available to us when submitting an inquiry or request,
when you wish to unilaterally terminate a concluded contract, we collect your first name, last name, personal identification number, address, account details and purchase amount, depending on the selected payment method,
when you wish to exercise the right to a refund of the amount paid for tickets (right of entry to the event), we process the data you provided to us when purchasing the ticket,
when you participate in our prize games, we will process data depending on the type of prize game, about which we will additionally inform you in the rules of the prize game itself. The data that may be processed include, for example, first name, last name, address for sending the prize,
when you complete a satisfaction survey, we process data such as your IP address,
when you submit any inquiry related to our offer, we will process your contact details and/or other data that you provide to us when submitting the inquiry,
if you wish to submit an unsolicited job application, we will process data such as your first name, last name, age, qualifications, occupation, work experience, contact telephone number and other data contained in your unsolicited job application,
when photographing and recording lectures and/or short video clips or the atmosphere, we will process your photograph, movement, hair color, etc., and
when you have purchased a ticket or are on our visitor list or are a speaker at the European Longevity Festival or other events organized by the Organizers, we will inform you about the program, news, exhibitors and other important matters which we consider relevant and which form part of the organizational process. During the aforementioned activities, we will process your e-mail or other contact details based on legitimate interest or in order to perform our contractual obligations towards you in accordance with the concluded contract.
We collect the aforementioned certain categories of your personal data either on the basis of consent presented to you when accessing https://european-longevity-festival.com/ via a pop-up window, or on the basis of legitimate interest (for example, in cases involving cookies that are necessary for the functioning of: https://european-longevity-festival.com/) or in order to fulfil our obligations arising from the applicable regulations of the Republic of Croatia.
If the processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawal of consent must be notified to the data controllers at the e-mail address: info@european-longevity-festival.com. Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.
Please pay attention to the mandatory scope of the data we request because, if you do not provide the requested information that is designated as mandatory in order for us to perform the requested or expected activity for you, unfortunately, you will not be permitted to participate in it; without the requested data, the activity will not be technically feasible.
Processing of personal data in payment processing
The processing of personal data is necessary to enable the execution of payment and the conclusion of a contract with the Organizers. Depending on the selected payment method and service provider, data such as first name, last name, amount, account number, code or other transaction identifiers may be shared with the card company, bank or third party through which the payment is made. Data sharing is carried out exclusively at the request of the user, who independently selects the payment method.
The Organizers warn purchasers, i.e. visitors, to take care of the data stated on the card so that such data is not available to third parties and is not misused.
„CoreEvent" is a company registered under Croatian law under the company name CoreEvent d.o.o. in the court register of the Commercial Court in Zagreb under OIB: 36611335369 and MBS: 081377997, with its registered office in Zagreb, Dunjevac 15, which, pursuant to the commercial representation agreement with the Organizers, negotiates and concludes ticket sales agreements with Buyers (third parties) in the name and on behalf of the Organizers.
CoreEvent is a data processor in relation to personal data determined by the Organizers as data controllers.
CoreEvent will store the personal data provided by the Buyer during the registration process in its databases and use them for processing that is necessary to fulfil contractual obligations towards the Organizers and the Buyer and in relation to the personal data and the purpose for which the Buyer – data subject has given their consent.
More information can be found here: https://core-event.co/personal-data/
What data and for what purpose do we collect directly from you?
Typical categories of data that we collect from users are as follows: name, billing address, address for delivery of invoices, financial information including information on credit cards, debit cards or other payment information that you provide when completing forms on the websites or when communicating with us by telephone or e-mail.
We collect your personal data for the following purposes:
· performance of the service, fulfilment of the contract or another way of ensuring the provision of the requested service
· use of all services on the website
· responding to your inquiry and processing your requests as efficiently as possible
· statistical processing of data
· sending materials, offers and contacting you
· improving the quality of content, functionality and services.
Therefore, to summarize all of the above, we generally collect your personal data directly from you, whether in order for you to enter into a contract with us, for us to take action at your request, when you engage us to perform certain services provided by us or our contractual partners, or when you complete a specific form or when you wish to receive our newsletter.
We do not use your personal data for marketing purposes unless you tell us that you agree to this. If you would like us to send you details about our products, the organization of our events, services, offers and promotions, please subscribe to this by giving us your consent when subscribing to the newsletter.
The Organizers may send you notifications and information that are necessary for participation in the event for which you purchased a ticket, including organizational details, schedule changes, safety instructions and other relevant notifications. Such communication is based on our legitimate interest in ensuring the proper performance of the purchased service and timely information of participants.
We treat your personal data as confidential information, and it is properly protected by the Organizers and/or our trusted partners.
What privacy rights do you have?
Please note that at any time you have the right to request the following from the Organizers:
|
You may ask the Organizers which of your personal data they use, and you may also request access to such personal data. You have the right to know the purpose of the processing, which categories of your personal data we retain, the bodies or categories of bodies with which we share your personal data, the retention period of the data, as well as the source of the data where the data are collected indirectly. You may contact us if you wish to obtain a copy of some or all of the personal data we hold about you. |
|
We want your personal information to be accurate and up to date. You can ask us to correct or remove information that you think is incorrect or outdated. |
|
You may request the Organizers to stop processing or even delete your personal data. If we need your personal data to perform a contractual obligation towards you, the Organizers may no longer be able to fulfil such contractual obligations. Also, if your personal data is necessary for us to fulfil certain legal obligations (e.g. tax obligations), your request may not be able to be fulfilled. |
|
If you wish to contest the accuracy of the data, or we no longer need the personal data for the purpose of processing, but you need them for the establishment, exercise or defence of legal claims, or you have objected to the processing on a basis that we consider legitimate, you have the right to request restriction of the processing of personal data. |
|
Please remember that you have the right to object to the processing of personal data based on a legal basis that the Organizers consider legitimate. |
|
If the processing is based on your consent or is carried out by automated means, you have the right to request that the Organizers transfer the data to another data processor. |
To exercise any of the above rights, please use the contact information provided at the beginning of the Privacy Notice.
If you believe that your rights are not being respected, you have the right to file a complaint with the Croatian Personal Data Protection Agency.
Where is your personal data stored?
We keep the personal data we collect about you in a secure environment. Your personal data is protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual.
The processed data is stored on our premises and in secure IT systems, but sometimes we store data on the servers of our trusted service providers (trusted service provider) located in the EU.
The Organizers will ensure that personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons. All authorized persons sign a confidentiality statement.
The data collected for the purposes stated in these Rules will be stored only for as long as necessary to fulfil the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than the Organizers reasonably consider necessary to achieve the purpose for which it was collected or processed. The Organizers will retain certain personal data for the period prescribed by law or by a regulation that obliges the Organizers to retain the data (more under „How long will the Organizers retain your personal data?").
In the event that you have given us your consent (for example, you have subscribed to our newsletter, selected a certain category of cookies for use), we will process your personal data until the withdrawal of consent. If you submit a justified objection to the processing of personal data based on legitimate interest, we will not process your personal data in the future.
In addition to all of the above, it is important to point out the following; if judicial, administrative or out-of-court proceedings have been initiated, personal data may be stored until the end of such proceedings, including any possible period for exercising legal remedies.
How long will the Organizers retain your personal data?
The Organizers will not retain your personal data for longer than the period for which the data is necessary to fulfil the purpose of their use, and for a maximum period of 3 years, except in exceptional cases where a longer data retention period is prescribed by law (for example, we will retain data related to unilateral termination of the contract and complaints for 1 year, data related to exercising your privacy protection rights permanently, data related to prize games for 5 years, data on speakers for 5 years, photographs from lectures and other organized events at the European Longevity Festival and other events until your objection to the processing is accepted, e-mail addresses for the purpose of sending newsletters until withdrawal of consent, while we will retain account data for 11 years).
You can find out more details about data retention periods by contacting our Data Protection Officer.
What will we use your data for?
We may use your personal data in different ways, primarily for the purpose of fulfilling our legal obligations and obligations towards you, but sometimes also for the purpose of improving your user experience on the European Longevity Festival websites and for security reasons.
The purposes for which we process your data are described in these Rules. If your data were to be used for a new, additional purpose, you will be informed about this before such processing begins.
Newsletter
The Organizers would like to send you information about our activities and news that you may be interested in. Please note that at any time you may opt out of receiving such information by exercising your rights specified in these Rules. To subscribe to the newsletter, the Organizers collect and process: e-mail addresses.
The newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic element embedded in an email sent in HTML format in order to enable storage and analysis through log files. This enables statistical analysis of the success of marketing campaigns. Through tracking pixels, the Organizers can see when and whether an email has been opened by you as a data subject and which links you have followed. Personal data collected through tracking pixels in the newsletter are stored and analyzed by the Organizers as data controllers of personal data in order to optimize the newsletter sending process, as well as to adapt the content of future newsletters to the interests of data subjects.
Video surveillance and photography
We are aware that you also come to the location of the European Longevity Festival to have your picture taken, be filmed and be seen. Due to your expectations, but also for promotional activities, all material will be used globally for promotional purposes of the European Longevity Festival and other events.
At the location of the European Longevity Festival, numerous television crews and photographers will be filming, and we particularly emphasize that drones will also be present to film the entire event. At the entrance to the area where the European Longevity Festival is held, there will also be a special notice regarding filming and photography. By entering the area where the festival is held, expect to be filmed and photographed. All material from the European Longevity Festival may be used globally for promotional purposes of the European Longevity Festival.
During photography and filming, as well as the use of drones to film lectures and/or short video clips or the atmosphere, data such as your appearance, movement, hair color and eye color are processed. The video surveillance system is also used for the protection of property and security. The legal basis for processing in relation to visitors is consent, while in relation to our employees, as well as students and volunteers, it is the fulfilment of obligations arising from occupational safety regulations.
Cookies
In order to maintain the website and ensure that its functionalities are at the expected level, the Organizers use a technology known as „cookies".
Cookies are small files that we send to your computer and can access later. They can be temporary or permanent. Thanks to cookies, you can browse our websites without difficulty. Cookies show us what interests you and other visitors to our website, which helps us improve it.
We regularly update the tables with cookies that are found on the https://european-longevity-festival.com/. However, given that cookies are a very variable category, from time to time there may be changes to the tables contained in the Cookie Policy, therefore the list that is primarily accurate is the one found in the pop-up window that appears immediately when you visit a https://european-longevity-festival.com/ or in the place designated for cookie settings on the platform or website, as well as in the browser you use.
For more information about cookies, please read the Cookie Policy on the European Longevity Festival websites.
Does Organizers share data with third parties?
Privacy protection is important to us, therefore we will never share your personal data with third parties except for the purposes described in these Rules. We will always inform you about the sharing and transfer of data.
The Organizers cooperate with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that ensures an adequate level of protection in accordance with EU legislation.
We will share your data for the purpose of performing cooperation agreements with our partners who work on the promotion of the European Longevity Festival.
In some cases, our partners who provide services on behalf of or for the Organizers may process your data outside the European Union. However, the agreements we conclude with such entities oblige them to handle your data with special security measures in accordance with the regulations in force in the Member States of the European Union.
In July 2023, the European Commission adopted a new adequacy decision based on which personal data may be freely transferred from the European Union to companies in the USA that participate in the Data Privacy Framework.
The adequacy decision is based on Article 45 of the General Data Protection Regulation and represents a mechanism that ensures the secure and lawful transfer of data to third countries. Companies in the USA that wish to participate in the Data Privacy Framework must undergo a self-certification process and be registered on the list of companies that have joined the Data Privacy Framework.
Also, if our contractual partner is based in the USA, we will review the existing agreements and check the security standards guaranteed by our partner in order to ensure the protection of all our data subjects with the latest standards approved and recommended by the competent institutions.
The purposes for which we share data with our trusted partners include, for example, marketing, maintenance of european-longevity-festival.com, advertising, deliveries and other services within and outside the Organizers. These service providers are obliged, pursuant to the relevant agreements, to use the data entrusted to them only in accordance with our instructions and exclusively for the purpose we have strictly specified. We also require them to adequately protect your data and to treat it as a business secret.
Once a year, we conduct an audit of all our partners in order to ensure that the protection of your personal data remains at the required level and is in accordance with the applicable regulations.
Other websites
Other websites that can be accessed through european-longevity-festival.com have their own privacy and data collection statements and the ways in which they are used and disclosed.
The Organizers are not responsible for the methods and terms of operation of third parties.
When you access other websites through european-longevity-festival.com, the data controller of the website you have accessed is responsible for the processing of personal data through cookies on those websites.
The Organizers collect and process personal data through user interactions on social networks such as Facebook, Instagram and LinkedIn. The Organizers, i.e. the persons appointed by the Organizers, have access to messages and/or posts on the aforementioned social networks; however, the Organizers do not store the personal data collected through them, in particular those contained in messages, nor further process them except for the purposes stated in these Rules.
The Organizers use business profiles using the services of Facebook, Instagram and LinkedIn, and their Privacy Policies, i.e. privacy statements, as well as the manner in which they use your personal data, can be viewed at:
| FACEBOOK ONLINE | https://www.facebook.com/policy.php |
|---|---|
| INSTAGRAM ONLINE | https://help.instagram.com/519522125107875 |
| LINKEDIN ONLINE | https://www.linkedin.com/legal/privacy-policy |
If you have any questions regarding the collection and processing of data by Facebook, Instagram and/or LinkedIn, or if you wish to exercise any of your rights guaranteed by the General Data Protection Regulation, please contact:
FOR FACEBOOK: META PLATFORMS IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland |
|
|---|---|
| Contact of the Data Protection Officer: | |
| If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory body of Facebook, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia. |
On the website, we use Facebook plugins provided by Meta Platforms. When you visit our pages, your browser automatically loads these components, and Facebook may receive information about the subpage you have opened. A list of Facebook plugins is available at https://developers.facebook.com/docs/plugins/.
If you are logged into your Facebook account, Facebook may associate your visit to our pages with your user account. The same applies when you use integrated Facebook buttons, such as „Like" or leaving comments.
Facebook is operated by Meta Platforms Inc. (USA) or Meta Platforms Ireland Ltd. for users outside the USA and Canada. If you do not want Facebook to associate your activities on the website with your account, log out of Facebook before visiting our pages.
FOR INSTAGRAM: META PLATFORMS Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland |
|
|---|---|
| Contact of the Data Protection Officer: | |
| If you wish to raise a concern about Instagram use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority or Instagram International Company’s lead supervisory authority, the Irish Data Protection Commission or the Personal Data Protection Agency of the Republic of Croatia. |
FOR LINKEDIN LINKEDIN IRELAND UNLIMITED COMPANY, Wilton Plaza, Wilton Place, Dublin 2, Ireland |
|
|---|---|
| Contact of the Data Protection Officer: | <https://www .linkedin.com/help/linkedin/ask/TSO-DPO> |
| If you are not satisfied with the way your personal data is collected and processed, you can contact the leading supervisory authority for LinkedIn Ireland, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia. |
Entry into force and privacy policy changes
This Policy shall enter into force upon publication on the website.
The Organizers reserve the right to amend and supplement the Privacy Rules, and the amended and supplemented Rules will be published on the website.
Contact
Studio LuksLu, a craft business for marketing, design and event management, owned by Katja Đujić, OIB: 41664449214, Ružić Selo 62, 51226 Hreljin
Association for Healthy Living „Amara", Strossmayerova 8, 51000 Rijeka, OIB: 91956006513