Privacy Policy
1. Introduction
At iomvikingfestival.com (“the Website,” “we,” “our,” or “us”), we are committed to safeguarding the privacy and personal data of all our users, visitors, customers, and other data subjects. We recognize the importance of protecting personal information and are fully committed to compliance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant data protection laws and regulations. This Privacy Policy outlines how we collect, process, store, and protect your personal data when you interact with our Website or use any of our services.
2. Scope of Policy & Data Controller
This Privacy Policy applies to all user data collected through iomvikingfestival.com and associated services. For the purposes of relevant data protection legislation, iomvikingfestival.com is the data controller responsible for the collection and use of your personal data as described in this policy. This policy applies regardless of whether data is collected via desktop, mobile, tablet, or other online technologies.
3. Categories of Data Processed
We may collect and process the following categories of personal data, depending on your interaction with the Website:
a) Usage Data
Includes information about how you access and use our Website, such as IP address, browser type, browsing actions, page interactions, date/time stamps, referring/exit pages, and session duration.
b) Account Data
When you register or create an account with us, we may process your full name, email address, telephone number, delivery address, and other registration information.
c) Profile Data
Includes your preferences, purchase history, event bookings, behavioral information, and interests relevant to your experience on our Website.
d) Communication Data
Includes correspondence sent to us via email, contact forms, support tickets, or otherwise, and our responses. This may include communication history maintained for customer service or legal purposes.
e) Technical Data
Includes details about your device and systems used to access the Website, such as device type, operating system, browser version, unique device identifiers, language settings, and mobile carrier.
f) Transaction Data
We collect data related to purchases or financial interactions, including billing and shipping addresses, payment method used (no credit card numbers are stored directly), order details, and delivery tracking information.
g) Preference Data
Includes your responses to marketing communications, your consent preferences, subscriptions, and interests relating to the content, products, or services we offer through iomvikingfestival.com.
4. Legal Bases for Processing
We only process your personal data when we have a valid legal basis, including:
– Consent: Where you give us explicit permission to use your data (e.g., subscription to newsletters, acceptance of cookies, participation in surveys).
– Contractual Necessity: Where processing is necessary to perform our contractual obligations to you (e.g., purchasing tickets or products).
– Legal Obligations: Where processing is necessary to comply with legal or regulatory requirements (e.g., tax or accounting obligations).
– Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., to ensure Website security, operate efficiently, or market our services), provided such interests are not overridden by your data protection rights and interests.
5. Your Rights
Under applicable law, particularly the GDPR and CCPA, you have the following rights in relation to your personal data:
– Right to Access: You may request details of the personal data we hold about you.
– Right to Rectification: You can ask us to correct any inaccuracies or incomplete data.
– Right to Erasure: In certain cases, you may request that we delete your personal data.
– Right to Restrict Processing: You have the right to request that we restrict the processing of your data under specific conditions.
– Right to Data Portability: Where applicable, we will provide your data in a structured, commonly used, machine-readable format for transfer to another controller.
– Right to Object: You may object to processing based on our legitimate interests or for direct marketing purposes.
– Right to Withdraw Consent: When processing is based on consent, you have the right to withdraw it at any time.
– Right to Non-Discrimination (under CCPA): You will not be discriminated against for exercising your rights.
To exercise any of your rights, please contact us at [email protected].
6. Security Measures
We implement appropriate technical and organizational security measures to protect your personal data, including:
– SSL encryption for data transmission
– Role-based access controls and authentication protocols
– Regular data backups and secure storage practices
– Vulnerability assessments and patch management
– Staff training on data protection and information security
While we strive to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure.
7. International Data Transfers
We may transfer your personal data to jurisdictions outside your country of residence. When we do so, such transfers are made in compliance with applicable data protection legislation. We utilize the European Commission’s Standard Contractual Clauses or rely on similar appropriate safeguards that ensure adequate data protection standards are maintained.
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and in accordance with applicable legal, regulatory, and operational requirements. General retention periods include:
– Account and Profile Data: Active duration of account and up to 2 years post-closure unless otherwise requested;
– Transaction Data: Retained for at least 7 years for tax and accounting purposes;
– Communication Data: Retained for customer service effectiveness for up to 3 years;
– Technical and Usage Data: Retained for analytics up to 24 months.
We securely delete or anonymize personal data that is no longer required.
9. Cookie Policy
We use cookies and similar technologies to enhance your browsing experience, analyze usage patterns, and provide personalized features. The types of cookies used include:
– Essential Cookies: Required for core functionality of the Website.
– Functional Cookies: Remember preferences and settings.
– Analytical Cookies: Collect aggregated data on user behavior and interaction (e.g., Google Analytics).
– Performance Cookies: Optimize site responsiveness and performance.
10. Cookie Management & Compliance with GDPR & CCPA
On your first visit to iomvikingfestival.com, you will be presented with a cookie consent banner that gives you clear control over which types of cookies to enable or disable. You may also manage your cookie preferences at any time via your browser settings or through our dedicated cookie management tool. In compliance with GDPR and CCPA, we do not load non-essential cookies without your prior, explicit consent.
11. Children’s Privacy
Our Website is not directed to individuals under the age of 13, and we do not knowingly collect or process personal data relating to children. If we become aware that a child under 13 has provided personal data, we will take appropriate steps to delete such information promptly. Parents or legal guardians who believe that we may have collected data from a child can contact us at [email protected].
12. Policy Updates
We reserve the right to update or amend this Privacy Policy to reflect legal or operational changes. Any changes will be posted on this page. Where required by law, we will notify you of material changes and, where applicable, obtain your consent.
13. Contact
Should you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us using the following details:
Email: [email protected]
Website: https://iomvikingfestival.com
We are committed to upholding your rights and complying with all applicable data protection standards. If you have concerns about how your personal data is handled, please do not hesitate to get in touch.