Template: review and complete the details in [brackets] before publishing.
This policy explains how [ORGANISATION NAME] (“we”), organiser of Festival Português, collects and uses personal data through festivalportugues.co.uk, in line with the UK GDPR and the Data Protection Act 2018.
Who we are
Data controller: [ORGANISATION NAME], [ADDRESS]. Contact: [email protected].
What we collect and why
- Partner applications: business name, contact name, email, phone, website and social links, business details and your message, so we can assess and reply to your application (legal basis: steps prior to a contract / legitimate interests).
- Newsletter: email address, first name (optional) and language, to send festival news (legal basis: consent, which you can withdraw at any time using the link in every email).
- Technical data: IP address and browser data in server logs, kept for security (legal basis: legitimate interests).
Who we share it with
- Mailchimp (Intuit Inc.), our newsletter provider, which may process data in the USA under the UK Extension to the EU-US Data Privacy Framework / standard contractual clauses.
- Our website host, [HOSTING PROVIDER], in the [UK/EEA].
- We never sell your data.
How long we keep it
Partner applications: up to 24 months after the event they relate to. Newsletter data: until you unsubscribe. Server logs: up to 30 days.
Your rights
You can ask to access, correct, delete, restrict or port your data, and object to its use. Email us and we will reply within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk).
Cookies
See our Cookie Policy.
Last updated: [DATE].
