Agreement on Data Processing in Connection with Participation in Competitions at TatzuCon Events (GDPR)

Use of Certain Terms This agreement concerns personal data, but for simplicity, we will use terms such as «data,» «information,» or «details.» You can read more about personal data on the Norwegian Data Protection Authority’s website.

For Those Under 15

If you are younger than 15 years old, you cannot consent to us storing your information on your own. You must have your parents, foster parents, or similar read through the agreement and approve it on your behalf.

Data Controller

The data controller (TatzuCon) determines which data is collected and how it is used. To contact us regarding privacy matters, please send an email to our contact person or a letter to the provided address.

Contact Person

Alexander Magnussen
alexander@tatzucon.com

Company

TatzuCon
Org. no. 931 974 513

Mailing Address

TatzuCon v/ Alexander Magnussen
Fjøsangerveien 197
5073 Bergen

About Data Processing

What Data is Collected

Name
Email address
Phone number

Purpose of Data Collection

The collected data will be used to contact participants in competitions if necessary and to reach out to winners in case a delivery address or payment information is needed to distribute prizes.

Legal Basis for Data Processing

The information is collected because it is necessary to conduct the competition.

Data Retention Period

This information will be stored for a maximum of one month after the competition has ended and any prizes have been delivered.

Data Processors

The following organizations are involved in processing your data, including collection, storage, transfer, and similar activities. We have entered into a separate data processing agreement with each organization, stating that they cannot use the data for anything other than what has been agreed upon. For organizations located outside the EEA or multinational companies with branches outside the EEA, we have also entered into strict agreements to ensure that data is transferred securely if it must be sent outside the EEA.

To request access to these agreements, you can contact us via email or mail. Data processors are also required to provide access to the data they have stored about you and to correct or delete it upon request.

Google Workspace
Google
+47 800 30 103
https://workspace.google.com/

Purpose Storage of data on behalf of TatzuCon, including image and video material, information about volunteers and competition participants, emails, etc.

Third Countries

This data processor is located in a country outside the EEA or has branches both within and outside the EEA and is subject to additional requirements to guarantee that all data is processed securely and in compliance with EU and Norwegian privacy regulations.

Your Rights

We are obligated to uphold your rights. If you wish to exercise any of the rights described below, you can contact us via email or mail.

Right to Access

You have the right to know, among other things, why and how we process your data and what data we have stored. However, there are some exceptions, for example, if access would infringe on the rights and freedoms of others.

You will receive the requested information as soon as possible and no later than one month. Read more about the right to access on the Norwegian Data Protection Authority’s website.

Right to Rectification

If you notice that we have stored incorrect data about you, you have the right to request corrections. However, there are cases where rectification may not be practically possible.

We will correct your data as soon as possible and no later than one month. Read more about the right to rectification on the Norwegian Data Protection Authority’s website.

Right to Erasure

In certain cases, you can request that your data be deleted. This applies, for example, if you have given your consent for us to collect your data and then withdraw your consent.

We will delete your data as soon as possible and no later than one month.

Read more about the right to erasure, also known as the «right to be forgotten,» on the Norwegian Data Protection Authority’s website.

Right to Restriction of Processing

If, for example, you have requested the correction of your data, you also have the right to have all use of your data halted while we process the corrections. Your data will still be stored, but we cannot use it for anything without your permission. You will always be notified before a restriction is lifted.

We will ensure that your data is restricted as soon as possible and no later than one month. Read more about the right to restriction on the Norwegian Data Protection Authority’s website.

Right to Object

Sometimes, we process your data without asking for your consent. In such cases, we must provide another legal basis for the processing, such as that the data is necessary to perform the service you wish to use. In other cases, we may be required by law to process the data.

Outside of these cases, you have the right to object to the processing. If you object, we can no longer use your data. If the data is not used in other contexts, it must also be deleted. You also always have the right to object to the use of your data for direct marketing purposes.

We will respond to your objection as soon as possible and no later than one month. Read more about the right to object on the Norwegian Data Protection Authority’s website.

Right to Data Portability

You have the right to receive your data in a format that makes it easy to transfer to another system, allowing you to review it or transfer the data to another service provider.

The data will be transferred encrypted, and we must verify your identity before releasing the data. This right only applies to data collected directly from you, such as information from a user account. We must provide your data as soon as possible and no later than one month.

Read more about the right to data portability on the Norwegian Data Protection Authority’s website.

Right to Information

You have the right to receive clear and understandable information about how we use your data and your rights. We have done our best to write as clearly and concisely as possible, but if anything remains unclear, you can send us an email, contact us on Facebook, or send us a letter. We will do our best to explain what you need to know!