Privacy Policy

If you are a customer, newsletter subscriber or visitor to our website, you are entrusting us with your personal data. We are responsible for their protection and security. Please familiarise yourself with the privacy policy, principles and rights you have in relation to GDPR (General Data Protection Regulation).

Who is the administrator?

We are Company RV s.r.o. , ID No.: 55 817 394 with registered office Hollého 12, Nitra 949 01 which operates the website www.rubiconfestival.sk We process your personal data as a controller, i.e. we determine how the personal data will be processed and for what purpose, for how long and we select any other processors who will assist us with the processing.

Contact details

If you would like to contact us during the processing, you can contact us by e-mail: hello@rubiconfestival.sk .

We declare

We declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Data Protection Act and the GDPR, and therefore that:

• we will only process your personal data on the basis of a valid legal ground, in particular a legitimate interest, the performance of a contract, a legal obligation or the consent given,
• we comply with the information obligation under Article 13 of the GDPR prior to the processing of personal data,
• we will enable and support you in exercising and fulfilling your rights under the Data Protection Act and the GDPR.

Scope of personal data and purposes of processing

We process the personal data you entrust to us for the following reasons (for the fulfilment of these purposes):

Provision of services and performance of the contract

• your personal data in the scope of: billing data, e-mail, telephone, or correspondence address are strictly necessary for the performance of the contract.

Bookkeeping

• if you are a customer, we necessarily need your personal data (billing data) in order to comply with our legal obligation to issue and record tax documents.

Marketing - sending newsletters

• We use your personal data (email), what you click on in the email and when you open it most often for the purpose of direct marketing - sending you commercial communications. If you are a customer of ours, we do so out of legitimate interest, because we reasonably assume that you are interested in our newsletters, and for a period of at least 5 years from your last order. If you are not our customer, we only send you newsletters on the basis of your consent, for a period of at least 5 years from the date of issue.

We retain your personal data for the period of limitation periods, unless the law provides for a longer retention period or we have indicated otherwise in specific cases.

Cookies

When you browse our website, we record your IP address, how long you stay on the site and which page you come from. We see the use of cookies to measure web traffic and to customize the display of the website as a legitimate interest of our administrator, because we believe that this allows us to offer you an even better service. Advertising targeting cookies will only be processed with your consent. Our website can also be browsed in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer in your internet browser.

Security and protection of personal data

We protect personal data to the maximum extent possible by using modern technologies that correspond to the state of the art. We protect it as if it were our own. We have adopted and maintain all possible (currently known) technical and organisational measures to prevent the misuse, damage or destruction of your personal data.

Transfer of personal data to third parties

Your personal data can be accessed by our employees and associates who are bound by confidentiality and trained in processing security. We handle most processing operations ourselves and do not need 3rd parties to do so.

To ensure some specific processing operations that we cannot provide on our own, we use the services and applications of processors who specialize in the processing and are GDPR-compliant. These are the providers of the following platforms and services:

• MailChimp - application for communication and email marketing
• Google - Google Analytics

It is possible that in the future we may decide to use another application or processor to facilitate and improve the quality of processing. However, we promise you that in such a case, we will place at least the same demands on the processor in terms of security and quality of processing as we place on ourselves.

Transfer of data outside the European Union

We only process data in the European Union or in countries that provide a level of protection based on a decision of the European Commission.

Your rights in relation to the protection of personal data

You have rights in relation to the protection of personal data. If you would like to exercise any of these rights, please contact us via email: hello@rubiconfestival.sk

You have the right to information, which is already fulfilled by this information page with the principles of personal data processing. Thanks to the right of access, you can ask us at any time and we will document within 30 days what personal data we are processing and why.

If anything changes about you or any of your personal data is outdated or incomplete, you have the right to have your personal data completed and amended.

You can exercise your right to restrict processing if you believe that we are processing your data inaccurately, if you believe that we are processing unlawfully but you do not want to delete all of your data, or if you have objected to the processing.

You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial communications.)

Right to erasure (to be forgotten)

Your other right is the right to erasure (to be forgotten). We do not want to forget you, but if you wish to be forgotten, you have the right to do so. In that case, we will delete all your personal data from our system and from the system of all sub-processors and backups. We need 30 days to secure the right to erasure.

In some cases, we are bound by a legal obligation and, for example, we have to keep records of tax documents issued for the period prescribed by law. In this case, we will therefore delete all such personal data that is not bound by another law. We will notify you by e-mail when the deletion has been completed.

Complaint to the Data Protection Authority

If you feel that we are not treating your data in accordance with the law, you have the right to contact the Data Protection Authority at any time with your complaint. We will be very happy if you first inform us of this suspicion so that we can do something about it and correct any wrongdoing.

Opting out of newsletters and commercial communications

Emails with inspiration, articles or products and services are sent to you if you are our customer or if you have contacted someone from our company and given me your contact details, we do so on the basis of our legitimate potential business interest.

If you are not yet a customer, we only send you this newsletter on the basis of your consent. In either case, you can stop receiving our emails by pressing the unsubscribe link at the bottom of each email we send you.

Silence

Please be assured that our employees and associates who will process your personal data are obliged to maintain confidentiality of personal data and security measures, the disclosure of which would compromise the security of your personal data. This confidentiality shall continue even after the termination of the contractual relationship with us. Your personal data will not be released to any other third party without your consent.