Linda Van Coppengahen (“The artist”) is committed to protecting the personal data of all individuals. This policy outlines how the artist handles data in accordance with the European General Data Protection Regulation Act, 2016 (“GDPR”) and the German Federal Data Protection Act, 2017 (“BDSG-new”).
Lawful Basis for Processing
The artist ensures that personal data is collected and processed based on a valid legal basis. For competitions, explicit consent is obtained and explained online to participants before they choose to submit any information. This consent is clearly communicated on entry forms, ensuring that participants understand what they are agreeing to.
Transparency
The artist prioritizes transparency in data practices. Participants receive clear information about how their data will be used, including the specific purposes for which it is collected. This information is readily available on the artist’s website and includes details about data processing, storage, and sharing. The artist endeavors to, on request, disclose the details to an individual who such data pertains to unless such request places the artist at risk of disclosing business or trade secrets.
Data Processing
Personal data collected is processed by the artist for the following purposes:
– Verifying participant eligibility for a competition.
– Contacting winners and administering prizes for competitions.
– Analyzing competition participation and engagement.
– Improving the user experience on the website or obtaining feedback about live events.
– Making contact with and following up with the individual who submitted their personal information.
– To conclude a sale of an item for follow-up and cancellation purposes.
Data processing activities are conducted in a secure and confidential manner, accessible only to authorized associates who require the information to perform their duties.
Data Storage
Personal data is stored securely on servers located within the European Economic Area (EEA). The artist implements robust access controls and regular backups to protect the integrity and confidentiality of the data. Participants’ information is retained only for as long as necessary to fulfill the purposes of the related response, after which it is securely deleted in accordance with the data retention policy summarized here.
Data Sharing
The artist does not share, sell, or disclose participants’ personal data to third parties, except where necessary to fulfill the purposes of the competition or as required by law. In such cases, the artist ensures that recipients are bound by confidentiality agreements and adhere to data protection standards equivalent to their own. If third-party service providers are engaged to assist with competition administration or data processing, the artist carefully selects and contractually binds them to maintain the security and confidentiality of the data. These service providers are prohibited from using the data for any other purpose and are subject to report-back oversight and system access monitoring.
Purpose Limitation
Personal data is collected strictly for the purposes listed above under data processing. The artist does not use the data for unrelated activities or purposes. Online forms specify the intended use of the data, ensuring that individuals are fully informed.
Data Minimization
The artist adheres to the principle of data minimization by only collecting information that is necessary for the relevant type of engagement. Excessive or irrelevant data is avoided, focusing solely on what is required to facilitate the event, sale or enquiry and enhance the customer experience whether in person, in live audience or online.
Accuracy
Steps are taken to maintain the accuracy of the personal data collected. Participants have the opportunity to contact the artist to review and update their information as needed. They are encouraged to inform the artist of any inaccuracies to ensure that records remain current and correct. The artist corrects indicated inaccuracies.
Storage Limitation and Data Retention
Although the law does not prescribe a maximum retention period that the artist may retain personal data, it is retained only for as long as necessary to fulfill the purposes of the relevant event, up to 48 months thereafter or once the data is no longer needed, whichever comes first. Thereafter it is securely deleted
Integrity and Confidentiality
Security and access measures are implemented to protect personal data from unauthorized access, loss, or breaches. Security measures are restricted to that allowed to the artist at a software level by the relevant hosting company. The artist has chosen a reputable hosting provider in order to reasonably ensure that the data collected is hosted with a company who’s staff are trained on data protection best practices, and security protocols are regularly reviewed to ensure compliance with GDPR and BDSG-new across the information technology stack.
Accountability
The artist is committed to accountability in data processing activities. Documentation of compliance measures is maintained and listed here and the artist is prepared to demonstrate adherence to data protection laws upon request. This commitment to data protection is integral to operations.
Enquiries
For any questions or concerns regarding data protection practices or this policy, participants are invited to contact the artist at info@lindavancoppenhagen.de. Inquiries are welcomed, and the artist is dedicated to addressing any issues promptly.
This policy reflects the artist’s commitment to data protection and compliance with applicable laws, ensuring that the privacy of individuals is respected.
.