Use of Certain Terms
This agreement concerns personal data, but for simplicity, we will use terms such as «data,» «information,» or «details.» You can read more about personal data on the Norwegian Data Protection Authority’s website.
For Those Under 15
If you are under 15 years old, you cannot consent to the storage of your personal data on your own. You must have your parents, foster parents, or guardians read through the agreement and approve it on your behalf.
Data Controller
The Data Controller (TatzuCon) determines which data is collected and how it is used. To contact us regarding privacy matters, send an email to our contact person or send us a letter to the provided address.
Contact Person
Alexander Magnussen
alexander@tatzucon.com
Organization
TatzuCon
Org. no. 931 974 513
Postal Address
TatzuCon c/o Alexander Magnussen
Fjøsangerveien 197
5073 Bergen
About Data Processing
Data Collected
- Name
- Email address
- Phone number
- Video recordings
- Photographs
Purpose of Data Collection
- Name, email address, and phone number are collected to confirm the identity of the person depicted if they contact us to exercise their rights.
- Photographs and video recordings are collected for promotional use by TatzuCon, including sharing on our social media profiles (such as Facebook, Instagram, Twitter, and YouTube), on our website, and in printed materials such as posters, brochures, flyers, etc. These photos and videos may be edited as necessary (cropping, color adjustments, adding text, etc.).
- We may also collect a separate photo of the depicted individual along with their name, email, and/or phone number to identify which images and video recordings they appear in, if necessary, to fulfill their rights.
Legal Basis for Data Processing
- Discretionary assessment for situational images (where the activity in the image is more important than the individuals depicted).
- Written consent for portrait images (where the primary focus is on the individual in the image).
- Written consent is recorded on a separate card specifying the event covered by the agreement.
Data Retention Period
Photos and video recordings will be stored indefinitely or until the depicted individual requests to exercise their right to rectification or deletion of their personal data. If an image or video contains multiple people, it will not be deleted, but the requesting individual will be anonymized (blurred) unless deletion is the only practical solution.
Data Processors
The following organizations are involved in processing your data, including collection, storage, and transfer. We have separate data processing agreements with each organization, ensuring they only use the data as agreed. For organizations outside the EEA, or multinational companies with branches outside the EEA, we have implemented additional agreements to ensure secure data transfers.
To request access to these agreements, contact us via email or mail. The data processors are also required to provide access to the data they store about you and to correct or delete it upon request.
Google Workspace
Google
+47 800 30 103
https://workspace.google.com/
Purpose: Data storage for TatzuCon, including image and video materials, volunteer and competition participant data, emails, etc.
Third Country: This processor operates outside the EEA and is subject to strict data security requirements.
YouTube
https://www.youtube.com/t/terms_dataprocessing
Purpose: Storage and publication of images and videos for TatzuCon.
Third Country: Operates outside the EEA, subject to strict data security requirements.
Twitter, Inc.
c/o Trust & Safety – Legal Policy
1355 Market Street, Suite 900
San Francisco, CA 94103
Fax: 1-415-222-9958
https://twitter.com/
Purpose: Storage and publication of images and videos for TatzuCon.
Third Country: Operates outside the EEA, subject to strict data security requirements.
Facebook & Instagram
Facebook Legal – GDPR
Purpose: Storage and publication of images and videos for TatzuCon.
Third Country: Operates outside the EEA, subject to strict data security requirements.
DigitalOcean
DigitalOcean, LLC
privacy@digitalocean.com
https://www.digitalocean.com/
Purpose: Server and database hosting for TatzuCon.
Third Country: Operates outside the EEA, subject to strict data security requirements.
Squarespace
Squarespace, Inc.
https://www.squarespace.com/dpa
Purpose: Storage and publication of images and videos for TatzuCon.
Third Country: Operates outside the EEA, subject to strict data security requirements.
Your Rights
We are committed to upholding your rights. If you wish to exercise any of the rights listed below, you may contact us via email or mail.
Right to Access
You have the right to know how and why we process your data and what data we have stored about you. Exceptions may apply if disclosure infringes on the rights of others.
Right to Rectification
If you find that we have incorrect data about you, you have the right to request correction. Some situations may limit the possibility of rectification.
Right to Erasure
You can request deletion of your data in certain cases, such as when consent is withdrawn.
Right to Restriction
If you request correction, you also have the right to restrict the use of your data while corrections are being made.
Right to Object
If we process your data without your consent, you have the right to object. If you object, we must stop processing your data unless legally required.
Right to Data Portability
You have the right to receive your data in a format that allows easy transfer to another service provider.
Right to Information
You have the right to clear and understandable information about how we use your data. If anything is unclear, you can contact us via email, Facebook, or mail.
For more details on your rights, visit the Norwegian Data Protection Authority’s website.