Date of entry into force: 16 August 2018
1. Personal data controller
2. Types of personal data that will be processed
The Data Controller collects and processes your personal data (for example, information that can directly or indirectly identify you, especially identifiers such as your name and surname, email address, IP address, or photographs taken by the official photographer at a festival (“Personal Data”)), when you:
are present at a festival that has been marked as an area that will be filmed and photographed,
contact us or connect with us on social media,
use the contact form on the Website.
The Data Controller shall not collect Personal Data unless you provide it voluntarily, with the exception of certain Personal Data that is collected by the information systems and programmes used to operate the Website, the transmission of which is inherent in the use of Internet communication protocols (for example, your IP address when you use the contact form) and shall not ask for more information than participation in certain activities requires. If you do not want to provide us with Personal Data (except for Personal Data relating to the use of Internet communication protocols that is usually collected when you visit a website), you can still access our Website, but you will not be able to use the contact form.
Visitors/senders provide their information voluntarily and there is no contractual obligation or requirement that the visitor/sender do so. The Data Controller shall not perform profiling based on the collected information - that is, there shall be no automated decision-making.
When we receive photographs and videos from our partners / event sponsors, who have photographed and filmed an event they themselves organized as a part of the Festival, ALPHERA d.o.o. shall act as the Data Processor, publishing photographs on this Website following orders from the Data Controller, in this case the partner / event sponsor, for the purpose of promoting the event organized by the partner/sponsor, so that it can gain media recognition and improve in the future.
Google Analytics and Google Tag Manager
On the Website, we use Google Analytics and Google Tag Manager, a web analytics service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”), which uses so-called cookies, small files that are stored on your computer. We collect the log information and information on how many visitors visit specific parts of the Website. Google analyses the use of the Website and the cookies enable us to analyse the visits by assigning a unique randomly generated ID to your device, which allows us to identify it the next time you visit the Website. The lifespan of these cookies is 24 months and they are provided by Google. When you visit this website for the first time, a notice inviting you to give your consent to the use of these cookies will appear on the website. If you give your consent, we will store a cookie on your computer and the notice will not re-appear for as long as the cookie is valid. When the cookie expires or if you actively delete it beforehand, the notice will re-appear the next time you visit the Website and you will be asked to give your consent again. The information that Google collects regarding your use of the Website (for example, your starting URL, the pages you visited on our Website, the web browser you used, your language preferences, the operating system you used and the resolution of your display) is uploaded to Google's server in the USA, where it is stored, analysed and made available to us in an anonymous form. Your usage data is not associated with your full IP address. On this website, we have activated the IP-anonymization function offered by Google, so that the last 8 numbers (type Ipv4) or the last 80 bits (type Ipv6) of your IP address shall be deleted.
4. The purpose of and legal grounds for processing and the potential consequences of failing to provide Personal Data
taking steps in accordance with your request, e.g. responding to questions and comments you submit through the contact form or on social media,
using your photographs taken at the festival site for the purpose of promoting the Istra & Craft Beer Festival,
the process of investigating suspected fraud, harassment, threats of physical harm or other breaches of the Website policy or any suspicious behaviour that we find impolite.
Providing Personal Data for the purpose listed under A. is voluntary, but in certain situations it is necessary, so the refusal to provide such data can prevent ALPHERA d.o.o. from responding to your requests. Data processing for the purposes listed under B and C is based on legitimate and public interest. If we have received your consent for filming/photographing and publishing videos/photographs, such processing is based on that consent. It is our legitimate interest to film/photograph festival participants for the purpose of promoting the festival so that it can gain media recognition and improve in the future.
Your Personal Data can be disclosed in the following cases:
to subjects who maintain our IT systems,
to technical suppliers in connection with website creation and maintenance,
to persons whom ALPHERA d.o.o. has authorized to process Personal Data and who are subject to an appropriate legal obligation of confidentiality (the employees of ALPHERA d.o.o.),
to ALPHERA d.o.o.’s legal advisors if the data needs to be forwarded for the purpose of legal proceedings,
to media companies and digital marketing agencies for the purpose of publishing photographs in print-based media, on websites and social media,
to clients / festival partners for the purpose of promoting the festival in question.
6. Transfer of Personal Data to third countries
ALPHERA d.o.o. transfers Personal Data outside the EU and EEG, except Switzerland, especially to the US, but always on the basis of data transfer safeguards in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679, and especially on the basis of the Privacy Shield, which ensures adequate personal data protection.
ALPHERA d.o.o. shall process the Personal Data it has collected from you for the purposes of a query for no longer than 6 months, while videos/photographs shall be processed for as long as you do not exercise your right to object or withdraw your Personal Data processing consent.
8. Your rights
ALPHERA d.o.o. informs you that, in accordance with and to the extent allowed by the applicable law, you have the right to demand access to and rectification or erasure of the Personal Data, or the restriction of the processing of your Personal Data, as well as the right to object to the relevant processing activity and the right to lodge a complaint with a competent supervisory authority (in the Republic of Croatia, the Personal Data Protection Agency). In addition to this, you have the right to be made aware of the recipients or categories of recipients to whom your Personal Data has been or will be revealed, especially recipients in third countries.
9. Connected websites
The Website can contain links to other websites that are not owned, managed or maintained by ALPHERA d.o.o. and for which ALPHERA d.o.o. is not liable. When you leave the Website, you must take note of and read the privacy terms and conditions for every website you visit.
10. Security practices
The security of your Personal Data is extremely important to us, so we have implemented appropriate physical, electronic and management procedures in order to protect the data we collect. However, due to the inherently open nature of the Internet, we cannot guarantee that communication between us or the information stored on the Website or on our servers will be completely safe from unauthorized third-party access. To the greatest extent allowed by the applicable law, we waive all liability, as well as all liability for any damage you may suffer due to any loss, unauthorized access, abuse or alteration of any information you send to the Website.
11. Applicable law
13. Contact information
Personal data controller
ALPHERA d.o.o. for public relations
52100 Pula, Croatia