GDPR Compliance

Introduction:

MakerFest is committed to protecting the privacy of its website visitors and users. As part of this commitment, we have implemented measures to ensure that our website complies with the General Data Protection Regulation (GDPR).

This GDPR compliance policy outlines how MakerFest collects and processes personal data through a form on our website, and how we ensure compliance with the GDPR.

Data Controller:

The data controller for the personal data collected through our website's form is MakerFest. Our contact details are as follows:

MakerFest
Birk Centerpark 15
7400 Herning
gdpr@makerfest.dk/p>

Types of Personal Data Collected:

The personal data that we collect through our website's form includes:

Company/organisation
Contact person
Email address
Phone number
Any other personal data provided by the user in the form's free text box

Purpose of Data Collection:

The personal data collected through our website's form is used solely for the purpose of providing requested information. This includes registration of exhibitors and sponsors.

Legal Basis for Data Processing:

The legal basis for processing the personal data collected through our website's form is the consent of the user filling the form. This legal basis is justified because the user has checked the corresponding box agreeing to the data collection.

Data Retention:

The personal data collected through our website's form will be retained for three years. After this period, the data will be securely deleted.

Data Recipients:

The personal data collected through our website's form will not be shared with any third parties, except for AU Herning. These recipients are required to maintain the confidentiality and security of the personal data and to comply with the GDPR.

User Rights:

As a user of our website's form, you have the following rights regarding your personal data:

  1. Right to access: You have the right to request access to your personal data that we hold.
  2. Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
  3. Right to erasure: You have the right to request that we delete your personal data.
  4. Right to restriction of processing: You have the right to request that we restrict the processing of your personal data.
  5. Right to data portability: You have the right to request that we provide your personal data to you in a structured, commonly used, and machine-readable format.
  6. Right to object: You have the right to object to the processing of your personal data.

To exercise these rights, please contact us using the contact details provided above.

Data Security:

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to ensure the confidentiality, integrity, and availability of your personal data. These measures include:

  1. Access controls: Implementing access controls to restrict access to personal data to authorised personnel only.
  2. Encryption: Encrypting personal data both at rest and in transit to protect it from unauthorised access.
  3. Pseudonymisation: Pseudonymising personal data to ensure that it cannot be directly linked to an individual without the use of additional information.
  4. Regular backups: Regularly backing up personal data to ensure that it can be recovered in the event of a data loss or corruption.
  5. Data minimisation: Only collecting and retaining personal data that is necessary for the purposes for which it is being processed.
  6. Data retention policies: Establishing data retention policies that ensure that personal data is not kept for longer than necessary.

Data Breach Notification:

In the event of a data breach involving the personal data collected through our website's form, we will notify the relevant supervisory authority and affected users without undue delay, in accordance with our legal obligations under the GDPR.

Updates to this GDPR Compliance Policy:

We may update this GDPR compliance policy from time to time. The latest updates will always be available on our website. We recommend that you check this webpage regularly to ensure that you are aware of any changes.

Conclusion:

By using our website's form, you agree to the collection and processing of your personal data as outlined in this GDPR compliance policy. If you have any questions or concerns about our data processing practices, please contact us using the contact details provided above.