PrivacyPolicy

This Privacy Policy explains how EIDE Euskal Diseinuaren Elkartea – Asociación del Diseño Vasco processes personal data in connection with the Diseinuz project, in accordance with the principles of lawfulness, fairness and transparency.

Who is responsible for processing your data?

The controller of the personal data used by EIDE to manage Diseinuz is EIDE Euskal Diseinuaren Elkartea – Asociación del Diseño Vasco, with tax identification number G48202535 and registered office at Plaza Ensanche, 11 – Edif. Ensanche, Bilbao, Spain.

You can contact EIDE about the processing of your data or the exercise of your rights at info@eidedesign.eus.

What data do we process and how do we obtain it?

EIDE processes the personal data you provide when contacting the organisation, subscribing to the newsletter or registering for Diseinuz through Eventbrite, the platform used for ticket sales and management.

To manage registrations, EIDE accesses attendees’ identification and contact details and information about their registration or ticket. To manage the newsletter, EIDE processes your email address and the information you provide when subscribing. When you submit an enquiry, we also process the information included in your message.

For what purposes and on what legal basis do we process your data?

• To manage registration and participation in Diseinuz, including ticket management, attendance checks, handling issues and sending necessary communications about the event. The legal basis is the performance of the contract arising from your registration or ticket purchase.
• To respond to enquiries and requests. When these relate to registration or a contract, the legal basis is taking steps at your request before entering into a contract or performing that contract. For other enquiries, the legal basis is EIDE’s legitimate interest in handling incoming communications and responding to people who contact the organisation.
• To send the newsletter and informational or promotional communications about Diseinuz. The legal basis is the consent you give when subscribing or expressly authorising these communications. The newsletter is managed through Mailchimp.
• To comply with applicable legal obligations, including tax, accounting and data protection obligations. The legal basis is compliance with those obligations.

Registering for Diseinuz does not automatically subscribe you to the newsletter. Communications necessary to manage your participation in the event are separate from promotional communications.

Data marked as mandatory is necessary to process the relevant request, registration or service. If you do not provide it, we may be unable to respond to your request or manage your participation. Optional fields may be left blank.

What roles do Eventbrite and Mailchimp play?

Eventbrite is the platform used for ticket sales and management. When you register or purchase a ticket, you provide your data through this platform, and EIDE accesses the information necessary to manage your participation as the event organiser.

For ticket management services provided on EIDE’s behalf, Eventbrite acts as a data processor under the terms applicable to organisers. Eventbrite may also process data as an independent controller for its own purposes, as described in its Privacy Policy.

Mailchimp is the platform EIDE uses to manage subscriptions and send the newsletter. To provide this service, Mailchimp processes subscribers’ data on EIDE’s behalf under its Data Processing Addendum.

How long will we retain your personal data?

• Registration and participation data: for as long as necessary to manage the event and resolve issues related to your participation.
• Enquiry data: for as long as necessary to respond to your request and carry out any appropriate follow-up.
• Newsletter data: for as long as you remain subscribed and have not withdrawn your consent or requested to unsubscribe.
• Documents subject to legal retention obligations: for the retention periods required by applicable legislation, particularly tax and accounting legislation.

Once the purposes of processing have ended, the data will be deleted or, where required, retained in a blocked state for the applicable limitation periods for any potential liabilities. Once those periods have expired, the data will be deleted.

After you unsubscribe from the newsletter, we may retain the minimum information necessary to respect your decision not to receive further communications and demonstrate compliance with data protection obligations.

The retention periods for Eventbrite’s own processing activities are described in its privacy policy.

Who may access your data?

Your data may be accessed by authorised EIDE personnel who need it to perform their duties and by providers delivering services necessary for the purposes described, subject to the corresponding data protection obligations.

These providers include Eventbrite for ticket sales and management, and Mailchimp for managing and sending the newsletter. EIDE’s web hosting, email and technical support providers may also access data where necessary to provide their services.

Data may be disclosed to public authorities, courts or other bodies where required by law.

Are international data transfers carried out?

The use of Eventbrite and Mailchimp may involve transfers of data outside the European Economic Area, including to the United States.

For services provided on behalf of organisers, Eventbrite sets out safeguards for international transfers in its Data Processing Addendum, including European Commission-approved Standard Contractual Clauses where applicable.

Mailchimp states that it participates in the EU–US Data Privacy Framework through Intuit and incorporates Standard Contractual Clauses into its Data Processing Addendum. You can consult the applicable mechanisms in its information on international transfers and its Data Processing Addendum.

You can request further information or a copy of the safeguards applicable to the processing of your data on EIDE’s behalf by writing to info@eidedesign.eus.

What are your rights?

Subject to the conditions established by applicable law, you may exercise the following rights:

• Access: to know whether we process your personal data and obtain information about that processing.
• Rectification: to request the correction of inaccurate or incomplete data.
• Erasure: to request the deletion of your data where applicable.
• Objection: to object to processing in the circumstances provided by law, particularly where it is based on legitimate interests.
• Restriction of processing: to request that the use of your data be restricted in the circumstances provided by law.
• Data portability: to receive your data in a structured, commonly used and machine-readable format and transmit it to another controller where the legal requirements are met.
• Withdrawal of consent: to withdraw your consent to processing at any time, without affecting the lawfulness of processing carried out before its withdrawal.

You can exercise your rights free of charge by writing to info@eidedesign.eus or EIDE’s registered office, specifying the right you wish to exercise and providing the information necessary to handle your request.

You are not generally required to provide a copy of your identity document. If we have reasonable doubts about your identity, we may request the additional information necessary to verify it.

We will respond to your request within one month of receipt. Where necessary due to the complexity or number of requests, this period may be extended by a further two months. We will inform you of the extension and the reasons for it within the first month.

To exercise rights relating to processing for which Eventbrite acts as an independent controller, you should contact the platform through the channels specified in its privacy policy.

How can you unsubscribe from the newsletter?

You can withdraw your consent and unsubscribe at any time using the unsubscribe link included in each newsletter or by writing to info@eidedesign.eus. Unsubscribing will not affect the lawfulness of processing carried out before you withdrew your consent or prevent you from receiving communications necessary to manage an active event registration.

Where can you lodge a complaint?

If you consider that the processing of your data infringes data protection legislation, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) through www.aepd.es, or with the competent supervisory authority.

You can also contact EIDE at info@eidedesign.eus with any questions or concerns. You are not required to contact us before lodging a complaint.

Security and confidentiality

EIDE implements technical and organisational measures appropriate to the risk to protect personal data against destruction, loss, alteration, and unauthorised access or disclosure. Persons authorised to process the data are subject to confidentiality obligations.

If the information needed to manage your request, subscription or participation changes, please let us know so that we can keep it up to date.

Updates to this policy

EIDE may update this Privacy Policy to reflect changes in legislation or changes to data processing activities related to Diseinuz. Where appropriate, we will inform you of significant changes and request renewed consent if necessary.