CARNIVALAND PRIVACY POLICY

 

1-2

  1. Who we are.

 

 1.1 Carnivaland Services.

 

 Welcome to Carnivaland! We are an information and ticketing platform whose goal is to show you the Carnivals around the world. Thanks to our services and through our sales platform, we offer people from all over the world the possibility to discover and share the Carnivals around the world.

 

 The Carnivaland products, features, and offerings available online through Carnivaland.net are collectively referred to as «Carnivaland Properties» or our «Services.».

 

 1.2 Who is who.

 

 When this Privacy Policy uses the term «Organizer» we mean event creators who use the Services to create events for consumers who use our Services (a) to consume information or purchase tickets for such events («Consumers»), or (b) for any other reason. Organizers, Consumers, and third parties who use our Services are collectively referred to in these Terms as «Users», «you», «your» or «you».

 

 Carnivaland is a corporation of  calle del carmen 17, Cabezo de Torres 30110, Murcia and registration number 201999800029622 («Carnivaland», «we», «us», or «our»). If you reside in the European Economic Area («EEA») or Switzerland, Carnivaland is the responsible party or data controller concerning Personal Data (defined below) collected through the Services. Carnivaland’s representative for European data protection law is Carnivaland with its principal place of business at calle del carmen 17, Cabezo de Torres 30110, Murcia 

 

 If you have any questions or doubts, please contact us at the above address or at contact@carnivaland.net.

 

  1. Our privacy statement.

 

 2.1 Application.

 

 This Privacy Policy states the policy concerning information that can be associated with, or that relates to, and could be used to identify a specific individual («Personal Data») that is collected from Users through the Services. We take the protection of your Personal Data very seriously. For that reason, we have drafted this Privacy Policy. Please read this Privacy Policy, as it includes important information about your Personal Data and other information.

 

 Therefore, «Non-Personal Data» as used in this Privacy Policy is any information that does not relate to an individual or cannot be used to identify an individual. When you interact with the Services, we may collect Non-Personal Data. The limitations and requirements in this Privacy Policy on our use, collection, disclosure, transfer, and storage or retention of Personal Data do not apply to Non-Personal Data.

 

3-4

  1. Personal data we collect.

 

 When you interact with us through the Services, we may collect Personal Data. Sometimes this will be on our own behalf and sometimes it will be on behalf of an Organizer using our Services to run an event. This is an important distinction for the purposes of some data protection laws and is explained in more detail below.

 

 3.1 Information collected from all Users.

 

 Information You Provide to Us: As we do with all Users, we collect Personal Information when you voluntarily provide such information to the Services (for example, by registering for access to the Services, contacting us with questions, responding to one of our surveys, or searching for or using certain parts of the Services). The Personal Data that we may collect includes, but is not limited to, your name, address, email, and any other information that you decide to provide and/or that allows the personal identification of Users.

 

 Information We Collect Automatically: Also, we collect automatically collect some technical data that we receive from the computer, mobile device, or browser you use to access the Services («Automatic Data»). Automatic Data includes, but is not limited to, a unique identifier associated with your browser or access device, (including, for example, your Internet Protocol (IP) address), characteristics about your access device or browser, statistics about your activities on the Services, information about how you got to the Services, and data collected through cookies, pixel tags, local shared objects, web storage and other similar technologies. You will find more information about our cookies and other similar tracking technologies in our Cookie Statement.

 

 When you register to the Services or otherwise submit Personal Data to us, we may associate other non-personal Data (including Personal Data we collect from third parties) with your Personal Data. In such case, we will treat all such combined data as if it were Personal Data until it can no longer be associated with you or used to identify you.

 

 3.2 Information collected from Organizers.

 

 If you are an Organizer, we will collect additional Personal Data about you.

 

 Information you provide to us: In some cases, we may collect credit card information from you, some of which may be personal information, to secure certain payments. Besides, if you use our payment processing services, we will collect financial information from you that is necessary to facilitate payments and data required for tax purposes.

 

 Information we obtain from other sources: We may also collect or receive Personal Data including, your name, email address, and other contact information from third-party sources such as third-party websites and marketing partners, your bank, our payment processing partners, and credit reporting agencies.

 

 3.3 Information collected from Consumers.

 

 If you are a Consumer, we will collect additional Personal Data from you, sometimes for our purposes and sometimes on behalf of an Organizer (see section 16 below for more information).

 

 Information you provide through the Carnivaland Sites: If you register for a paid event, you will provide financial information (e.g., credit card number, expiration date, billing address). And some of that data may be Personal Data. In addition, Organizers may set up event registration pages to collect virtually any type of information from consumers, in connection with registering for an Organizer’s event listed on the Services. Carnivaland does not control an Organizer’s registration process or the Personal Data they collect. By registering for, or otherwise providing information to Carnivaland related to an event or activity of an Organizer, whether that information is yours or a third party, related to a purchase, registration, or exchange, that Organizer will receive it and it is possible to use the information you provide. Please, see Section 5.5 below, titled «How We Disclosure and Transfer Your Personal Data – Organizers» for more information on the receipt and use of your data by an Organizer.

 

 Information we obtain from other sources: We may also collect or receive Personal Data from third-party sources such as Organizers, other Consumers, integrations with social networks or other third parties, the bank that issued your credit card, our payment processing partners, or other third parties.

 

  1. How we use your personal information.

 

 Recopilamos y utilizamos los datos personales que recopilamos de forma constante con esta Política de privacidad y las leyes de privacidad aplicables. Podemos utilizar los datos personales de las siguientes formas:

 

 4.1 Specific reason.

 

 If you provide Personal Data for a specific purpose, we may use it for the purpose for which it was provided. For example, if you contact us by e-mail, we will use the Personal Information you provide to respond to your inquiry or troubleshoot the problem, and we will respond to the e-mail address from which you sent the message.

 

 4.2 Access and Use.

 

 If you provide Personal Data to get access to or use the Services or any related activity, we will use such Personal Data to provide you with access to or use of the Services or features and to analyze your use of the Services or features. For example, if you provide Personal Data about your identity or suitability to use some parts of the Services, we will use such information to decide whether to allow you to access or use such Services and to evaluate your suitability for use of such Services on an ongoing basis.

 

 4.3 Internal business purposes.

 

 We may use your Personal Data for internal business purposes such as, but not limited to, relying on it to improve the content and functionality of the Services, better understand our users, improve the Services, protect, identify or address fraudulent activity, enforce our Terms of Service, manage your account and provide you with customer service, and generally manage the Services and our business, among others.

 

 4.4 Marketing of Carnivaland.

 

 We may use your Personal Data for our marketing and advertising purposes, including (without limitation) by email, SMS marketing, display media, and for other devices (such as tablets, mobile devices, and televisions). We do this to inform you about services or events that we believe may be of interest to you, develop promotional or marketing materials, and display Carnivaland or event-related content and advertising on or off the Services that may be of your interest. We may also do this on behalf of an Organizer, for example, when your previous interactions with an Organizer suggest that you may be interested in a particular type of event. 

You may at any time notify us of your intention to unsubscribe from Carnivaland’s email marketing communications list by sending an email to contact@carnivaland.net.

 

 You may see advertisements for our Services (or our Organizer’s events) on third-party websites, including social media platforms. If you see an advertisement on a third-party website, or social media platform, it may be because we have engaged the third-party or social media platform to display this advertisement to our Users, or others, who have similar attributes to our Users. In some cases, this involves sharing your email address or other contact details with the third-party or social media platform so that they can identify you as one of our Users, or identify other individuals with similar attributes to you to show them advertisements for our Services (or our Organizer’s events). If you no longer wish to have your Data used for these purposes, please contact us at contact@carnivaland.net. For more information on how we market and interact with social media sites, please see section 5.6.

 

 4.5 E-mails from the Organizers.

 

 We allow Organizers to use our email tools to contact consumers about their current and past events, so you may receive emails from those Organizers from our system that we send on their behalf. If you have registered for an event on the Services, your email address will be available to that Organizer. However, Organizers may import email addresses they have from external sources and send communications through the Services to such addresses, and we will send such communications to such email addresses on behalf of the Organizer. The Organizer, and not Carnivaland, is responsible for sending these emails. 

contacto@carnivaland.net 

 

 4.6 Use of interest-based data

 

 Sometimes we deduce the type of events or activities you might be interested in. We may use these inferences to help target advertising or customize recommendations for you, including on behalf of the Organizers. We may do this on an aggregate or generalized basis. For example, we may determine that our users who attend many comedy events also attend or show interest in drag-related events or content. We may target (or help target) content or recommendations related to both comedy and drag to those Users.

 

 4.7 Other purposes.

 

 If we would like to use your Personal Data consistently with this Privacy Policy, we will inform you before such use, or at the time such Personal Data is collected, or we will obtain your consent after such collection, but always before such use.

 

 4.8 Aggregated personal data.

 

 In an ongoing effort to understand and serve our users, we make frequent reports on our customers’ demographics, interests, and behavior based on Personal Data and any other information we have collected. This research is generally conducted only in aggregate form and does not identify you. Once Personal Data is in aggregate form, for this Privacy Policy, it becomes non-personal Data.

 

5-6

  1. How we disclose and transfer your personal data.

 

 5.1 Record.

 

 Our business is not based on the sale of your Personal Information. We consider this information to be a vital part of our relationship with you. Therefore, we will not sell your Personal Information to third parties, including third-party advertisers. There are some circumstances under which we may disclose, transfer or share your Personal Information with certain third parties without notifying you, as described in this Privacy Policy.

 

 5.2 Business transfers.

 

 As we develop our business, we may buy or sell businesses or assets. In the event of a sale, merger, reorganization, corporate dissolution, or similar event, Personal Data may become part of the assets transferred. We may also disclose your Personal Data in the course of due diligence for such an event. You acknowledge and agree that any successor or purchaser of Carnivaland (or its assets) will continue to have the right to use your Personal Data and other information under the terms of this Privacy Policy.

 

 5.3 Parent companies, subsidiaries, and affiliates

 

 We may also share your Personal Data with our parents, subsidiaries, and/or affiliates for purposes consistent with this Privacy Policy. Our parents, subsidiaries, and affiliates will be obligated to retain such Personal Data under this Privacy Policy.

 

 5.4 Agents, Advisors, and Service Providers.

 

 We may share your Personal Data with our contractors and service providers who process Personal Data on Carnivaland’s behalf to perform certain business-related functions. These companies include our marketing agencies, online advertising providers, data enhancement service providers, database service providers, backup, disaster recovery service providers, email service providers, payment processing partners, customer support, technical support, hosting companies, and others. When we engage other companies to perform such functions, we may provide them with information, including Personal Data, in relation to the performance of those functions.

 

 

 5.5 Organizers.

 

 Also, when you register for an event, sign up to receive communications, enter a contest, or enter your Personal Information (e.g., through a web form) to communicate with an Organizer or participate in an Organizer event, that Organizer will receive that information. For example, if you enter your name and email address on a web form for an Organizer offer, activity, or event, the Organizer will receive that information. The Organizer may then send you marketing or other communications, which may be subject to its separate privacy policy. Also, if you provide your phone number, you may receive informational messages related to the service, event, activity, or information you are interested in.

 

 When you purchase tickets, register or donate to an event, change your ticket or registration for an event to another person, enter a contest, or otherwise enter your Personal Data (such as through a web form) or otherwise communicate with an Organizer, or participate in an Organizer’s event or activity, that Organizer will receive the information you provide, including your Personal Data and, in cases where a change of ticket or registration is made, also the Personal Data of the person to whom the change is made. Other third parties who are involved in or on whose behalf an event or activity is promoted may also receive such Personal Data.

 

 For example, and without limitation, a concert venue (the Organizer, in this case) may allow third-parties, promoters, or production companies (the Third-Party Organizers) to create events to be held at the Organizer’s venue using your Carnivaland account. In that case, we may provide your Personal Data to the Third Party Organizers on behalf of the Organizers. The same applies to contests and sweepstakes: we may provide your Personal Data both to the Organizer promoting the contest or sweepstakes, and to any legal sponsor of the contest or sweepstakes (such as a brand sponsor).

 We are not responsible for the actions taken by such Organizers or their Third Party Organizers (or other recipients of your Personal Data) about your Personal Data. It is crucial that you review the applicable policies of the Organizers and, if applicable and available, Third Party Organizers of an event (and related fundraising site, if any) before you provide Personal Data or other information about such event or related fundraising site.

 

 

 5.6 Facebook, social networks, and other third-party connections.

 

  1. Linking your Carnivaland account to social media services. We may connect your Carnivaland account with your accounts on third party services such as Facebook, Google, and others. In that case, we may collect, use, disclose, transfer and store/save information relating to your account with such third party services under this Privacy Policy. For example, if you link your Facebook, we will save your Facebook ID, first name, last name, email address, location, friends list, and profile picture, and use this data to connect with your Facebook account to provide some features on the Services, such as recommending events that your Facebook friends are interested in, and sharing events you are interested in, or attending, with some groups of people (e.g., your Facebook friends).

 

  1. «Like» or «Follow» Carnivaland on social media. Besides, when you «Like» or «Follow» us on Facebook, Instagram, Twitter, or other social media sites (to the extent we provide that capability), we may collect certain information about you, including your name, email address, and any comments or content you post that is relevant to us. We may also collect information from you if you sign up for one of our promotions or submit information to us through social media sites.

 

  1. Facebook plugins and links on our pages. The Carnivaland website may also contain links to Facebook or other social media, for example: through the Facebook «Like» or «Share» button or other social plugins. When you interact with these functions and links, your browser will establish a direct link to Facebook’s servers, and Facebook will receive information about your browser and your activity and can link it to your Facebook user account. For more information on how Facebook uses data, please refer to Facebook’s policies.

 

  1. Additional marketing and connectivity from Facebook or other social media. Besides, if you are a member of Facebook (or other social media platform) and you provide Personal Data to an Organizer (for example, in the way described in Section 5.5), the Organizer may use that Personal Data to send you advertising and offers through Facebook (or other social media), including when you are on Facebook or other social media platform. The Organizer may work with us and third parties to enable this data integration and advertising. Facebook and other social media platforms may provide a way to opt-out of such advertising. Please review their user settings and support pages for more information on how they help you manage your privacy and marketing choices.

 

  1. Third-party services and integrations. Carnivaland may provide you with the opportunity to contract directly with third parties and/or integrate with third-party services or applications through our platform. In such cases, we will disclose your Personal Data to other entities to fulfill a request from you or to provide you the services you have requested.

 

 5.7 Legal requirements.

 

 We may disclose your Personal Data if required by law to (for example) in the event of a subpoena or a request from a government agency (including responses to public authorities to meet national security or law enforcement requirements), or if we believe in good faith that such action is necessary (a) to comply with a legal obligation; (b) to protect or defend our rights, interests or property, or those of a third party; (c) to prevent or investigate potential wrongdoing in connection with the Services; (d) to act in urgent circumstances to protect the personal safety of users of the Services or the general public; or (e) to protect against legal liability.

 

  1. How we store your personal data.

 

 We may store the Personal Data itself or transfer it to a third party, who will store it under this Privacy Policy. We use steps we believe are reasonable to protect Personal Data collected by the Services from loss, misuse, unauthorized use, unauthorized access, inadvertent disclosure, alteration, and destruction. However, no network, server, database, Internet, or e-mail transmission is completely secure or error-free. Therefore, you should take special care in deciding what information you send to us electronically. You should keep this in mind when disclosing Personal Data.

 

7-8

  1. How to access, update, correct or delete your Personal Data.

 

 You can access or delete your Personal Data that we store. If you are a registered user, you can do so by logging in and visiting the different sections and personal areas, as well as completely deleting your data by requesting it through contacto@carnivaland.net. You can also edit some of your personal data directly through your account. In some cases, you can ask us to correct and update any of your incorrect Personal Data using the contact information below, and we will consider your request under applicable laws.

 

 If a Consumer initiates a data deletion request, Carnivaland is authorized to remove or anonymize the requesting Consumer’s Personal Data from the Services, even if that means removing its availability to the Organizer through the Services. However, if you are a Consumer, you understand that even if Carnivaland deletes or anonymizes your Personal Data upon your request or under this Policy, your Personal Data may still be available in the Organizer’s databases if it is transmitted to the Organizer before Carnivaland receives or takes action on any deletion or anonymization activity.

Non-registered Users may also access, update, correct or delete Personal Data and exercise these rights by using the contact information below. We will consider and respond to all requests under applicable law.

 

  1. How long we keep your Personal Data.

 

 We may retain your Personal Data for as long as you are registered to use the Services. You may delete your account at any time by sending an email to contacto@carnivaland.net indicating so in the subject line. However, we may retain Personal Data for a long period if permitted or required by applicable law. Even if we delete your Personal Data, it may continue to exist on archival or backup media for additional time for legal, tax, or regulatory reasons or legitimate and lawful business purposes.

 

9-10

  1. Cookies, pixel tags, local shared objects, web storage, and similar technologies.

 

 Please see our Cookie Statement (link) for more information about our use of cookies and other similar tracking technologies.

 

  1. Your options.

 

 You have several options regarding your Personal Data:

 

 10.1 Limit the Personal Data you provide.

 

 You may use the Services without providing any Personal Data (other than Automatic Data, to the extent Personal Data is considered Personal Data under applicable law) or by limiting the Personal Data you provide. If you choose not to provide any Personal Data or to limit the Personal Data you provide, you may not be able to use some features of the Services. For example, to purchase tickets as a Consumer, you must provide your name and email address to the Organizer.

 

 10.2 Unsubscribe from e-mail messages.

 

 (a) Carnivaland marketing communications.

 

 Where consistent with our marketing preferences, Carnivaland may send you electronic messages containing advertising or marketing content about the Services itself or events on the Services if you have registered for the Services, purchased a ticket, or registered for an event on the Services. You may also choose to «unsubscribe» from receiving these emails by clicking on the «Unsubscribe» link at the bottom of such emails or by sending an email to contacto@carnivaland.net indicating so.

 

 (b) Messages sent by the Organizer.

 

 Organizers may use our email tools to send emails to people on their subscription lists, including Consumers who have registered for their events using the Services. Although these emails are sent through our system, Carnivaland does not determine their content or recipients. Organizers are required to use our email tools only under applicable laws. Carnivaland provides an «Unsubscribe» link in all these emails, which allows recipients to choose to stop receiving emails from a particular organizer, and the user can always unsubscribe by sending an email to contacto@carnivaland.net.

 

 (c) Social notifications.

 

 If you link your Facebook account or any other enabled social media or subscribe to integrations with other social media whose features include social notifications (i.e., updates about your friends’ actions on the Services), you will receive such notifications.

 

 (d) Response or transactional messages.

 

 Some Carnivaland emails are sent in response to your requests. For example, if you are a Consumer, we must email you the ticket or registration on behalf of the Organizer when you purchase that ticket or registration. Another example would be that if you send an email to the customer service department, we will send you an email to respond to you. Notwithstanding any subscriptions you have unsubscribed from, you will continue to receive these transactional or responsive emails. You can only stop receiving such emails by contacting us at contacto@carnivaland.net with your request. By choosing to stop receiving all emails from us or through our system, you will stop receiving updates about events you have created (including payment broadcasts) or registered to attend (including emails with your tickets). It is not advisable to do this unless you plan to stop using the Services, are not currently registered for an event, are not currently organizing an event, and do not need to receive messages from us or through our system.

 

 (e) Retention.

 

 It may take up to forty-eight (48) hours to complete the processing of your unsubscribe request. Even if you choose to stop receiving all emails, we will still retain your Personal Data under this Privacy Policy, but we will no longer use it to contact you. However, those organizers who have already received your Personal Information under this Privacy Policy may continue to use that information to contact you under their own Privacy Policies but may not use our system for that purpose.

 

 10.3 Do not track.

 

 We do not currently participate in any «Do Not Track» framework that allows us to respond to signals or other mechanisms you send us in connection with the collection of your personal information.

 

11-12

  1. Exclusions.

 

 11.1 Personal data provided to third parties.

 

 This Privacy Policy does not apply to Personal Data you provide to another User or visitor through the Services or otherwise, including data provided to Organizers on event pages or information you post in one of the public areas of the Services.

 

 11.2 Third-party links.

 

 This Privacy Policy applies only to the Services. The Services may contain links to other websites not controlled by us («Third Party Sites»). The policies and procedures described here do not apply to Third-Party Sites. Links from the Services do not imply that we endorse or have reviewed the Third-Party Sites. We recommend that you contact those sites directly for information about their privacy policies.

 

  1. Children – Children’s Online Privacy Protection Act.

 

 We do not intentionally collect Personal Information from children under the age of 18. If you are under 18, please do not submit Personal Information through the Services. We encourage parents and legal guardians to supervise children’s use of the Internet and to help enforce our Privacy Policy by teaching your children never to provide Personal Data through the Services without your consent. If you have reason to believe that a child under the age of 13 18 has provided us Personal Information through the Services, please contact us at contacto@carnivaland.net, and we will use our best efforts to delete such information from our databases.

 

13-14

 

  1. Global Privacy Laws

 

 If you access the Services from outside the United States, please be aware that you are sending information (including Personal Data) to the United States, where our servers are located. Such information may be transferred within the United States or back from the United States to countries outside of your country of residence, depending on the type of information involved and how we store it. These countries (including the United States) may not necessarily have data protection laws as comprehensive or protective as those in your country of residence; however, our collection, storage, or use of your Personal Data will continue to be subject at all times by this Privacy Policy.

 

  1. Changes in this Privacy Policy.

 

 The Services and our business may change. As a result, sometimes, we may need to make changes to this Privacy Policy. We reserve the right in our absolute discretion to update or modify this Privacy Policy at any time (collectively, «Modifications»). Modifications to this Privacy Policy will be posted on the Site with the new «Updated» date at the top of this Privacy Policy. In certain circumstances, Carnivaland may, but is not obligated to, provide you with additional notice of such Modifications, for example, through email notifications or within the Service. The Modifications will be effective thirty (30) days after the «Update» date or on the date we provide you with any other notice.

 

 Please check this policy periodically, especially before providing Personal Data. We updated this Privacy Policy on the date indicated above. Your continued use of the Services after the effective date of any Modifications to this Privacy Policy will constitute your acceptance of such Modifications. If you do not accept all modifications in this Privacy Policy, you must stop accessing, browsing and otherwise using the Services.

 

15-16

  1. Dispute resolution.

 

 If you have a complaint about Carnivaland’s privacy practices, please write to us at the following address:

 

Carnivaland, Inc., Attn: Privacy Officer, 155 5th Street, Floor 7, San Francisco, CA 94103, USA or an email (LINK). We will take reasonable steps to work with you and try to resolve your claim.

 

Residents of the EEA, Switzerland, or the United Kingdom who believe that their information has not been processed under the Privacy Shield principles can present their complaints in several ways. For more information, see our Privacy Shield Notice (LINK).

 

  1. AEE, SWITZERLAND AND UNITED KINGDOM ONLY

 

 The EU’s General Data Protection Regulation (GDPR)

 

 In May 2018, a new data privacy law known as the EU General Data Protection Regulation (or «GDPR») was put into effect. The GDPR requires Carnivaland and the Organizers to use the Service to provide Users with more information about the processing of their Personal Data.

 

 Here is what you need to know:

 

 Legal basis for processing your Personal Data

 

 The GDPR requires us to inform you of the lawful basis on which we are relying to process your Personal Data. The legal reasons on which we process your Personal Data for the purposes set out in Section 4 above will usually be as follows:

 

– you have given your consent;

– it is necessary for our contractual relationship;

– the processing is necessary for us to comply with our legal or regulatory obligations; 

– the processing is in our legitimate interests as an event organization and ticketing platform (e.g., to protect the security and integrity of our systems and to provide you with customer service, etc.)

 

 Transfers of personal data

 

 As Carnivaland is a global company, we may need to transfer your Personal Data outside of the country from which it was originally provided. This may be intra-group or to third parties that we work with and who may be located in jurisdictions outside of the EEA, Switzerland, and the United Kingdom that do not have data protection laws or laws that are less strict compared to Europe.

 

 Where we transfer Personal Data outside the EEA, Switzerland, or the UK, we use the required legal steps to ensure that appropriate security measures are in place to protect your Personal Data. This includes the use of Standard Contractual Clauses.

 

 Carnivaland complies with the EU-U.S. and Swiss-U.S. Privacy Shield as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data from those countries. We comply with the Privacy Shield Principles of notice, choice and accountability for onward transfers, security, data integrity and purpose limitation, access and recourse, compliance and accountability when processing EEA, Swiss and U.K. Personal Data in the United States. You will find more information about our commitment to the EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield Framework in our Privacy Shield Notice. We recognize that the Court of Justice of the European Union ruled in July 2020 that a certification under the EU-U.S. Privacy Shield Framework can no longer serve as a basis for entities subject to the GDPR to export data of individuals outside the United Kingdom and the European Economic Area. As we transition to other transfer mechanisms (described above), we will continue to meet our obligation to comply with the Privacy Shield Principles for such data.

 

 Please feel free to contact us, as set out in Section 15 for more information about the safeguards we have put in place to protect your Personal Data and your privacy rights in these circumstances at contacto@carnivaland.net.

 

Retention of Personal Data

 

We retain your Personal Data for as long as necessary to provide you our Services, or for other purposes, such as complying with legal obligations, resolving disputes, and maintain our agreements.

 

If you have an account with us, we will generally retain your Personal Data for a period of ninety (90) days after you have requested that your account be closed or if it has been inactive for seven (7) years.

 

 Your Rights. 

 

 Data protection law gives you rights concerning the Personal Data we hold about you, including the right to request a copy of the Personal Data, request that we rectify, restrict or delete your Personal Data, object to profiling, and unsubscribe from marketing communications.

 

 In most cases, you can exercise these rights by logging in and visiting your personal section or by changing the «cookie settings» in your browser (see our Cookie Statement for more information). If you do not find what you are looking for in your personal section, please contact us using the contact information set out in Section 15 above. Please note that requests to exercise data protection rights will be evaluated case-by-case. There may be circumstances in which we are not legally required to comply with your request due to the laws in your jurisdiction or due to exemptions provided in data protection legislation.

 

 If you have a complaint about how we handle your Personal Data, please contact us as set out in Section 15 to explain or at contacto@carnivaland.net. If you are not satisfied with how we have attempted to resolve your dispute, you may contact the relevant data protection authority.

 

 Carnivaland as data controller and data processor

 

 EU data protection law makes a distinction between organizations that process Personal Data for their purposes (known as «data controllers») and organizations that process Personal Data on behalf of other organizations (known as «data processors»). If you have questions or complaints about how your Personal Data is handled, you should always address them to the relevant data controller, as they are primarily responsible for your Personal Data.

 

 Carnivaland may act as a data controller or data processor concerning your Personal Data, depending on the circumstances.

 

 For example, if you create an account with us to organize your events, Carnivaland will be a data controller concerning the Personal Data you provide as part of your account. We will also be a data controller of Personal Data we have obtained about your use of the Carnivaland Applications or Properties, which may relate to Organizers or Consumers. We use this to conduct research and analysis to help us to understand and serve Users of the Services, as well as to improve our platform and provide you with more targeted recommendations about events that we believe may be of interest to you.

 

 However, if you register for an event as a Consumer, we will process your Personal Data to help manage that event on behalf of the Organizer (sending confirmation emails, promotions and feedback, payment processing.) and to assist the Organizer’s objective and understanding of the success of its event planning (providing event reports, using analytics to gain insight into the effectiveness of various sales channels.)In these circumstances, Carnivaland merely provides the tools for the Organizers; Carnivaland does not decide what Personal Data to request on the registration forms, nor is Carnivaland responsible for the continued accuracy of the Personal Data provided. Therefore, any questions you may have regarding your Personal Data and your rights under data protection law should be directed to the Organizer as the data controller, not to Carnivaland.