By using our services, you are entrusting us with your personal data, which will be required by the event organiser Laws of life OÜ (hereinafter the Organiser). We take data privacy seriously and only collect data from you to the extent necessary to use our services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR, EU 2016/679) and the laws of the Republic of Estonia. The organiser does not process sensitive personal data as defined in the GDPR Regulation.

What personal data do we collect?

We collect personal data to provide you with our services in the following two ways:

Data that you provide to us

For example, when you buy tickets, you provide different types of personal information:

• E-mail address
• Phone number
• Types, prices and quantities of tickets purchased
• Promotional code used on purchase
• Possible additional fields that we have added to the registration form

Why do we collect and process personal data?

In order to purchase tickets to our events, we need to process your personal data. Without the processing of personal data, it is not possible to provide you with tickets and to fulfil the related obligations. We use the data collected from all services to provide, manage, protect and improve our services and to develop new services.

We collect and process personal data for the following purposes:

• Ticketing.
• Accepting payment for your ticket.
• Avoiding ticket reuse.
• Business analytics and service improvement.
• Providing user support.
• Fulfilling your legal obligations.

We will ask for your explicit consent before using your data for purposes other than those set out in our Privacy Policy.

To whom is the data transferred?

We will treat the personal data we process as confidential and will only disclose it to other persons or companies (or recipients) to the extent necessary to provide the service.

We do not share personal information with companies, organisations and individuals outside Laws of life OÜ, except in the following circumstances:

• When you pay for your ticket by credit card or bank transfer, access to your bank card information and bank details will only be transferred to Montonio Finance. Montonio FInance’s privacy policy can be found on their website https://montonio.com/et/.
• Without the consent of the person concerned, personal data may be transferred to an authority or a person who has a direct legal right to do so in accordance with data protection legislation.
• In the event of a merger or acquisition involving Laws of life OÜ, personal data may be transferred to third parties related to the merger or acquisition.
• Where we use external service providers to provide certain services to us, such as website service or accommodation providers, marketing service providers and IT support service providers, these external service providers may have access to and/or process your personal data when providing such services. We require these external service providers to implement and maintain security measures to ensure the integrity and security of your personal information.
• If you have given your explicit consent to the transfer of personal data to a specific recipient.

Transfer of personal data outside the EU

We do not transfer personal data outside the European Union or the European Economic Area (EEA).

Data security

We work to protect your information from unauthorised access or unauthorised alteration, disclosure or breach.

To keep your data secure, we do the following:

• We treat all personal data as confidential.
• We encrypt services where possible using SSL.
• We restrict access to personal information by granting access only to those employees and contractors who need the information in order to process it, who are subject to strict contractual confidentiality obligations, and who may be sanctioned or terminated if they fail to comply with those obligations.
• We keep personal data mainly in digital format rather than on paper to ensure more secure access control.

While we apply strict security rules to the personal information that we receive, it should be noted that the internet is never completely secure and we cannot guarantee the security of any information you send to us. The security of the data you send is always at your own risk.

What rights do you have and how can you exercise your rights?

If you have consented to the collection, processing and use of your personal data in certain ways, you may withdraw your consent at any time in the future.

In accordance with applicable data protection laws, you are entitled to:

• Request access to your personal data.
• Request correction of your personal data.
• Request the deletion of your personal data.
• Request restriction of the processing of your personal data.
• Request the transfer of your personal data.
• Request the withdrawal of your consent to the processing of your personal data.
• Oppose automated decision-making (including profiling).

To exercise your rights and submit your request, please contact us by email: info@elinasufia.com . The application must unambiguously identify you.

Please note that you can only request the deletion of your personal data, the restriction of their processing or other measures if there is a lawful basis for you to do so and in accordance with data protection legislation.

If you request restriction, suspension or deletion of the processing of your personal data, this may result in a partial or total suspension of the services we provide to you.

In the event of a complaint, you have the right to lodge a complaint with the competent data protection authority. We work with the relevant regulatory authorities, including local data protection authorities, to resolve complaints about transfers of personal data.

How long do we keep your personal data?

Your personal data will be kept for as long as necessary to provide you with the services you have requested, and in addition in accordance with the applicable legal requirements.

Data collected in an anonymised form is kept indefinitely.

Privacy Policy terms and conditions and changes

By using the services of Laws of life OÜ, you have read and accepted these terms and conditions.

Our privacy policy may change from time to time. We will not derogate from your rights under this Privacy Policy without your express consent. We will post a notice of any changes to the Privacy Policy on this page and provide a more specific notice in the event of major changes.

Contact us

If you have any concerns or questions about our privacy policy, please contact us:

Laws of life OÜ, Õie tn 1/5, Kuressaare town, 93818 Saaremaa municipality, Saare county
+372 53 620 813
info@elinasufia.com