Privacy policy

Introduction

The privacy policy set out below relates to the processing of personal data by Which Mountain? vzw and applies to:

This privacy policy explains:

  1. Who is the data controller for the personal data collected and processed via the website
  2. What personal data is collected, why this is done and under what conditions that data is processed
  3. The legal basis for the processing of that data
  4. The extent to which personal data is shared with third parties
  5. The measures taken to safeguard personal data
  6. How users can monitor the processing of their personal data and exercise their rights under the Data Protection Act
  7. When the privacy policy was last revised

Important note: Our website(s) and app(s) are not intended for children, but for adults only. The collection of children’s personal data is therefore not a deliberate action. Please contact us immediately via info@downthehill.be if, as a parent (or legal guardian), you believe your child has provided us with their data.

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

The organisation responsible for processing personal data is:

Which Mountain? vzw

  • Address: Papenakkerstraat 49, 3200 Aarschot, Belgium
  • Company registration number: 0725.723.811
  • Contact: info@downthehill.be

Data processors

In addition, Which Mountain? vzw uses data processors. A data processor is the natural person, legal entity or service provider that processes personal data on behalf of Which Mountain? vzw and is responsible for the proper technical functioning of the website (data transmission).

Naturally, the data controller exercises the utmost care in selecting data processors. For instance, the data processor must implement adequate technical and organisational security measures for the processing and comply with the obligations set out in Article 28 of the Privacy Act.

Disclaimer:

  • The data controller accepts no liability whatsoever for the loss or corruption of data
  • Identity theft, data theft, viruses or Trojan horses
  • SQL injections or other attacks on the data processor’s IT systems or online cloud portals

The data processor decides independently on the most technically suitable application for processing the data, drawing on its professional expertise. The data controller cannot be expected to possess the same level of expertise.

2. WHAT PERSONAL DATA DO WE PROCESS AND WHY?

2.1 WEBSITE

When you visit our website, we store certain data in the statistics of Google Analytics. This data includes, amongst other things:

  • IP address
  • Browser type
  • Device model
  • Operating system
  • Geography
  • The domain name of the website that referred you to our website
  • How you use our website

Purpose:

  • To analyse the use of our website
  • To continue optimising our website
  • To detect fraud

Privacy guarantee: All data is anonymous and we therefore certainly do not use it to identify you.

Exception: Where criminal offences have been committed against or via the website, this data may be used to determine who is responsible.

We collect this data via cookies placed by Google Analytics. When you visit our website for the first time, we will first ask you whether you wish to accept the cookies.

Further information: You can find more information about what cookies are, why we use them, which cookies are placed via our site, how long the cookies are stored for and how you can manage them in our Cookie Policy.

2.2 TICKET SALES

When you purchase a festival ticket, we record identification details such as:

  • Surname
  • First name
  • Street
  • House number
  • Bus
  • Postcode
  • Town/city
  • Email address
  • Telephone number

Purpose:

  • To be able to deliver a valid ticket to you
  • For administrative and contractual purposes

Storage:

  • We store this data in a secure database
  • On a secure server in Belgium
  • We then retain it for 1 year (the statutory retention period is 7 years)

Payment details

When you make an online payment whilst purchasing your festival ticket, your payment details (card number and PIN) are processed securely by Event-tickets.

  • They require this data to communicate with the banks
  • So that a secure online payment can be processed
  • Event-tickets retains your data for as long as is necessary to provide the requested service, in accordance with the statutory retention period

Further information: You can find more information on this in the Event-tickets privacy policy.

Marketing communications

When you have purchased a festival ticket from us, we reserve the right to use your data to inform you about:

  • Practical information
  • News and updates
  • Events
  • Services provided by Which Mountain? vzw

This is done in the context of our legitimate interest in promoting these services to customers.

Opt-out:

  • If you no longer wish to receive such information, you can use the unsubscribe link found at the bottom of every information email we send you
  • Alternatively, you can submit a written request to this effect, stating your email address

2.3 NEWSLETTER

When you subscribe to our newsletter, we store the following data:

  • Surname
  • First name
  • Email address

Purpose:

  • To send you the newsletter
  • To provide practical information, news, events and services

Storage:

  • We retain this data until you unsubscribe from our newsletter

External storage:

  • Your email address is stored securely on Wix.com’s servers
  • Wix.com protects your data and respects your privacy

Further information: For further information, please refer to the Wix.com privacy policy.

2.4 AT THE FESTIVAL

Main entrance and token tent

We use the data associated with your ticket at both the main entrance and the token tent.

Purpose:

  • To fulfil the contract
  • To verify your identity in order to prevent fraud

Process: As soon as your ticket has been scanned, your ticket and the data associated with it are invalidated.

Photos and Videos

During the event, atmospheric photos may be taken, which we will subsequently use for:

  • Our website
  • Social media

Right to erasure:

  • If you wish to be removed from a photo, this can be done upon simple request
  • Please contact us at info@downthehill.be
  • Describe the photo in question
  • We will take the necessary action as soon as possible

Targeted photos:

  • If we take targeted photographs during the event, we will ask for your consent verbally on the spot
  • If you still wish to have this photograph removed, this can also be done upon simple request by contacting us via info@downthehill.be and describing the photograph in question

Video recordings:

  • During the festival, recordings will be made which may be used for distribution via:
    • The web
    • Social media
    • Television
  • There is a possibility that you may be filmed
  • By entering the festival, you waive your right to privacy

3. WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA?

By accepting cookies, purchasing a ticket and/or subscribing to the newsletter, you give your explicit consent to Which Mountain? vzw to process your data for the purposes set out above.

This consent also includes authorisation to transfer the personal data to and have it processed by:

  • The holders of the intellectual property rights to the Down The Hill festival
  • The holders of the intellectual property rights to the Down The Hill brand
  • The owners of the Website’s domain names

In addition, Which Mountain? vzw also relies on legitimate interest to use your data, following the purchase of a festival ticket, for communications regarding the festival and other events organised by Which Mountain? vzw.

4. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

Apart from the categories of data processors mentioned above and the designated number of staff employed by Which Mountain? vzw, Which Mountain? vzw does not pass on any personal data to third parties, unless:

  • At the express request of judicial authorities
  • In cases where this is expressly required by law

If Which Mountain? vzw nevertheless wishes to pass on certain personal data to third parties:

  • Prior specific consent will be expressly requested
  • The user’s specific attention will be drawn to this

5. HOW DO WE PROTECT YOUR PERSONAL DATA?

Personal data provided via the website is:

  • Stored and processed via a secure electronic system
  • Kept in a restricted environment that is not publicly accessible

Access:

  • This data is accessible solely to:
    • The designated data processors
    • A limited number of staff at Which Mountain? vzw who are authorised to view and process the data

In this way, Which Mountain? vzw endeavours to:

  • Prevent loss
  • Prevent theft
  • Prevent unauthorised access

6. WHAT ARE YOUR RIGHTS?

As a user of the website, you have a number of rights relating to the processing of your personal data, in accordance with the provisions of the Data Protection Act:

RIGHT OF ACCESS AND RIGHT TO CORRECTION

You have the right to:

  • Access the personal data processed by Which Mountain? vzw
  • Correct and/or supplement any incorrect or incomplete data

RIGHT TO BE FORGOTTEN

You have the right to have your personal data deleted from the Which Mountain? vzw database.

RIGHT TO LODGE A COMPLAINT

If you believe that Which Mountain? vzw has processed your data unlawfully, you have the right to lodge a complaint with the competent authority:

RIGHT TO WITHDRAW CONSENT

You have the right to object to the processing of your personal data.

RIGHT TO RESTRICTION OF PROCESSING

You have the right to (temporarily) suspend the processing of your personal data.

Contact details for exercising your rights

If you have any questions about the processing of your personal data by Which Mountain? vzw or if you wish to exercise your rights under the Privacy Act:

  • Please contact Which Mountain? vzw
  • By means of a written, clear and reasoned request
  • Stating your email address
  • To: info@downthehill.be
  • Or by post to: Papenakkerstraat 49, 3200 Aarschot, Belgium

7. AMENDMENTS TO THE PRIVACY POLICY

Which Mountain? vzw reserves the right to amend this privacy policy should it be necessary.