PRIVACY POLICY

ABOUT PRIVACY POLICY

With peace, love and communication, we guarantee the security of all your data.

We protect your privacy day and night.

In accordance with the General Data Protection Regulation (EU 2016/679) and the Act on the Implementation of the General Data Protection Regulation, SUNSET MEDIA FESTIVAL d.o.o., Ulica Republike Austrije 27, Zagreb, OIB: 28707839574, as the controller of personal data of its users and customers, has created this Privacy Policy. Their purpose is to clearly explain what personal data we collect, why we process it, how we protect it and what rights users have in relation to the processing of their data.

The rules have been developed in accordance with the applicable regulations of the Republic of Croatia and the European Union and in accordance with the best practices of privacy protection, in order to ensure transparency and responsible handling of personal data.

This Privacy Policy (“Policy”) explains how SUNSET MEDIA FESTIVAL collects, uses and manages your personal data contained on the website and made available to SUNSET MEDIA FESTIVAL through the use of the website: sunsetsportsfestival.com.

The Privacy Policy applies to all services provided by SUNSET MEDIA FESTIVAL, with the aim of presenting visitors, partners and users of our services (hereinafter: data subjects) in a clear, understandable and transparent way the procedures for processing their personal data, as well as their rights.

SUNSET MEDIA FESTIVAL is dedicated to protecting and respecting your privacy. Please read this policy carefully to understand for what purposes and how we collect your personal data and how we process and use it.

In relation to the personal data we collect, SUNSET MEDIA FESTIVAL acts as a controller, which means that it determines the purposes and means of personal data processing.

SUNSET MEDIA FESTIVAL, as a service provider through sunsetsportsfestival.com, attaches special importance to the protection of privacy and security of users personal data.

If you would like to contact us regarding this Policy or the processing of your personal data, please use the following contact details:

SUNSET MEDIA FESTIVAL d.o.o.

Ulica Republike Austrije 27

10 000 Zagreb

Croatia

Email: info@sunsetsportsfestival.com

How and when do we collect your personal data?

We collect your personal data when it is necessary to meet your needs and requirements, to provide services or for the purposes of our business and the organization of the Sunset Sports Festival.

When purchasing a ticket, SUNSET MEDIA FESTIVAL will ask you to provide certain information (personal data) such as name and surname, address, OIB, country, city, postal code, e-mail address, phone number. In the case of purchasing an application form, a contractual relationship is concluded, which is the basis for the processing of your personal data, given the necessity of performing the contract in which you are a customer, our visitor, a party. We also process your data in order to take actions at your request, and before concluding a contract.
at the time you access sunsetsportsfestival.com, we will also collect your IP address, which is also considered personal data,
when registering a person as a user or recipient of newsletters or other notifications about our products and promotions. As the controller, we will ask you to enter information about yourself (personal data) such as your name, surname and e-mail address. The legal basis for processing your data is consent. Therefore, a user who signs up to receive notifications about our products and promotions by entering their data on sunsetsportsfestival.com gives consent to the processing of their personal data. The user can withdraw the consent at any time by notifying the e-mail address info@sunsetsportsfestival.com
situations in which we collect other types of information, such as the date and time of access to the Site, information about the hardware, software or Internet browser you use, as well as your computer’s operating system and application version and your language preferences. We may collect information about clicks and your access to sunsetsportsfestival.com page that is shown to you,
when you contact our office and ask us for help or ask a question in order to exercise one of your rights guaranteed by the applicable regulations,
When you contact us through social networks, we collect the data that you have made available to us when you make an inquiry or request,
When you want to unilaterally terminate the concluded contract, we collect your name, surname, personal identification number, address, account information and purchase amount, all depending on the selected payment method,
When you participate in our prize games, we will process data depending on the type of prize game, which we will further inform you about in the rules of the prize game. The data that can be processed are, for example, name, surname, address for sending the prize,
when you complete a satisfaction survey , we process information such as your IP address,
when you ask us any inquiry related to our offer, we will process your contacts and/or other data that you provide to us when sending your inquiry,
if you wish to send an open job application, we will process data such as your name, surname, age, title, occupation, work experience, contact phone number and other data contained in your open application,
By using the Sunset Sports Festival application, we collect basic identification and contact information, information about the use of the application and technical data about the device, to provide access to the user account, personalize the content and program, send notifications related to the event and improve the functionality of the application.
For the purposes of web analytics via Google Analytics, we use the application “_gat._anonymizelp”, through which the IP address of the data subject is shortened by Google and anonymized when the website of the Sunset Sports Festival is accessed by a data subject from an EU or EEA member state.
when photographing and recording lectures and/or short video clips or atmosphere, we will process your photo, movement, hair color, etc., all based on legitimate interest, and
when you have purchased a ticket or are on the list of our visitors or you are a lecturer at the Sunset Sports Festival, we will inform you about the program, news, exhibitors and other important issues, which we believe are important and are part of the organizational process. During these activities, we will process your e-mail or other contact based on a legitimate interest or in order to perform the contractual obligations we have towards you in accordance with the concluded contract.

We collect certain categories of your personal data listed above either on the basis of the consent shown to you when you come to sunsetsportsfestival.com via a pop-up window, or on the basis of a legitimate interest (for example, in cases where cookies are necessary for the functioning of sunsetsportsfestival.com website or when we already send you some interesting notifications and/or offers of promotions as our weekend getaway), or in order to fulfil our obligations arising from the applicable regulations of the Republic of Croatia.

If the processing is based on your consent, you have the right to withdraw your consent at any time. It is necessary to notify the Controller of the withdrawal of consent by e-mail: info@sunsetsportsfestival.com or at the address Ulica Republike Austria 27, 10 000 Zagreb. Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal

Please pay attention to the mandatory scope of the data we ask you to provide, because in the event that you do not provide the requested information that is determined as mandatory in order to perform the requested or expected activity for you, unfortunately, you will not be allowed to participate in it, without the requested data the activity will not be technically feasible.

Processing of personal data in the payment process

SUNSET MEDIA FESTIVAL as a condition for payment of products and services with credit or debit cards asks the customer for the information to activate the payment process. When paying through contracted providers of processing and billing services (credit or debit) cards, contractual partners of SUNSET MEDIA FESTIVAL as processors or independent controllers of personal data, your data will be shared (for example, Entrio tehnologije d.o.o., Strojarska cesta 20, 10000 Zagreb, Croatia, OIB: 30513194761).

The processing of data when making a payment is necessary to perform all actions that precede the purchase or conclusion of a contract with the controller. When we talk about the legal basis for data processing related to certain types of payments or legal entities that provide the mentioned services, payment data such as name, surname, code, amount, account number or other transaction codes are shared with the credit card company or bank or third party through which the payment is made, all at the request of the data subject who independently chooses the payment method.

SUNSET MEDIA FESTIVAL warns customers and visitors to take care of the information provided on the card so that this information is not available to third parties and that it is not misused.

So, to summarize all of the above, we generally collect your personal data directly from you, whether to enter into a contract with us, to perform an action at your request, when you hire us to perform some of the services provided by us or our contractual partners, or fill out a certain form, or when you want to receive our newsletter.

We do not use your personal data for marketing purposes unless you tell us that you agree to this. If you want us to send you details about our products, the organization of our events, services, offers and promotions, please subscribe to this by giving us your consent when subscribing to the newsletter.

We treat your personal data as confidential data, and it is properly protected by SUNSET MEDIA FESTIVAL and/or our trusted partners.

What data do we collect directly from you and for what purpose?

Typical categories of information we collect from users are as follows: name, payment address, bill delivery address, financial information including credit, debit card or other payment information that you provide when filling out forms on the Websites or when you communicate with us by phone or email.

We collect your personal data to:

• performance of the service, fulfilment of a contract or other means of ensuring the provision of the requested service

• use of all services on the website sunsetsportsfestival.com

• to respond as efficiently as possible to your inquiry and process your requests

• statistical data processing

• sending materials, offers and contacting

• Improving the quality of content, functionality and services.

What privacy rights do you have?

Please note that you have the right to request the following from SUNSET MEDIA FESTIVAL A at any time:


to give you access to your personal data	You can ask SUNSET MEDIA FESTIVAL what personal data it uses about you, and you can also request access to that personal data. You have the right to know the purpose of the processing, which categories of your personal data we keep, the authorities or categories of bodies with whom we share your personal data, the data retention period, as well as the source of the data in the case where the data is indirectly collected. You can contact us if you would like a copy of some or all the personal information we hold about you.
request correction of incorrect data	We want your personal information to be accurate and up to date. You can ask us to correct or remove information that you think is inaccurate or out of date.
request the deletion of personal data	You can ask SUNSET MEDIA FESTIVAL to stop processing or even deleting your personal data. If we need your personal data to perform a contractual obligation towards you, SUNSET MEDIA FESTIVAL may cease to be able to perform such contractual obligations. Also, if your personal data is necessary to be able to comply with certain legal obligations (e.g. tax obligations), your request may not be able to be fulfilled.
request the restriction of the processing of your data (to us and/or third parties) in certain processes or completely	If you want to contest the accuracy of the data, or we no longer need the personal data for the purpose of processing, but you need them to establish, exercise or process legal claims, or you have objected to the processing on the basis we consider legitimate, you have the right to request the restriction of the processing of personal data.
Complain about how we use your information	Remember that you have the right to object to the processing of personal data based on a legal basis that SUNSET MEDIA FESTIVAL considers legitimate.
request the transfer of data to another controller (portability of rights)	If the processing is based on your consent or is carried out by automated means, you have the right to request SUNSET MEDIA FESTIVAL A transfer of data to another processor.

To exercise any of the above rights, please use the contact details provided at the beginning of the Privacy Policy.

If you believe that your rights are not respected, you have the right to file a complaint with the Personal Data Protection Agency.

Where is your personal data stored?

We keep the personal information we collect about you in a secure environment. Your personal information is protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual.

The processed data is stored on our premises and secure IT systems, but sometimes we store the data on the servers of our trusted service providers located in the EU.

SUNSET MEDIA FESTIVAL will ensure that personal data is kept in a secure location (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or modification of personal data), which can only be accessed by authorized persons. All authorized persons sign a confidentiality statement.

The data collected for the purposes specified in this policy will be stored only for as long as necessary to fulfil the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than SUNSET MEDIA FESTIVAL reasonably deems necessary to achieve the purpose for which it was collected or processed. SUNSET MEDIA FESTIVAL will keep certain personal data for the period prescribed by the law or regulation that obliges SUNSET MEDIA FESTIVAL to keep data.

If you have given us consent (for example, you have subscribed to our newsletter, selected a certain category of cookies to use), we will process your personal data until you withdraw your consent. If you raise a well-founded objection to the processing of personal data based on legitimate interest, we will not process your personal data in the future.

In addition to all of the above, it is important to point out the following; If judicial, administrative or out-of-court proceedings have been initiated, personal data may be stored until the end of such proceedings, including the possible period for filing legal remedies.

Does SUNSET MEDIA FESTIVAL share the collected data?

The protection of your privacy is important to us and SUNSET MEDIA FESTIVAL will not share your personal information with third parties, except in cases where it is necessary for the purposes described in this Privacy Policy or when there is an appropriate legal basis for doing so. You will be notified in a timely manner of any such sharing or transfer of data, where applicable.

SUNSET MEDIA FESTIVAL cooperates with certain companies and service providers for the purpose of organizing and implementing its activities. In this context, certain personal data may be processed through secure information systems and may be transmitted and stored on servers located in the European Union or in countries that have been determined by the European Commission to ensure an adequate level of protection of personal data in accordance with applicable European Union legislation.

Joint controllers (participants, panelists, speakers)

Regarding the processing of personal data of participants, panelists, speakers and other participants in the event, SUNSET MEDIA FESTIVAL acts as a joint controller together with PEPERMINT d.o.o., Ulica Republike Austria 27, 10000 Zagreb, OIB: 13120899290 (hereinafter: “joint controllers”). The joint controllers jointly determine the purposes and mean of the processing of personal data, for the purpose of organising, implementing and managing events, including communication with participants and related administrative and promotional activities.

Regardless of the internal relations between the joint controllers, SUNSET MEDIA FESTIVAL is designated as the primary point of contact for data subjects based on the joint controller agreement and is solely responsible for exercising the rights of data subjects in relation to this processing, including receiving and acting on data subject requests.

The mutual relationship between SUNSET MEDIA FESTIVAL d.o.o. and PEPERMINT d.o.o. is regulated by the agreement on joint controllers in accordance with Article 26 of General Data Protection Regulation. This agreement defines the responsibilities of the joint controllers, including the allocation of obligations regarding the fulfilment of personal data protection requirements and ensuring the rights of data subjects.

In certain cases, our contractual partners who provide services on behalf of or for SUNSET MEDIA FESTIVAL may also process personal data outside the European Union. In such situations, we ensure that such data transfers are protected by appropriate safeguards, including contractual obligations and standard safeguard clauses, to ensure the level of protection of personal data in accordance with applicable European Union regulations.

On 10 July 2023, the European Commission adopted a new adequacy decision allowing personal data to be freely transferred from the European Union to companies in the US that participate in the Data Privacy Framework.

The adequacy decision is based on Article 45 of the Constitution. It is a mechanism that ensures the safe and lawful transfer of data to third countries. Companies in the U.S. that wish to participate in the Data Protection Framework must undergo a self-certification process and enrol in the list of companies that have joined the Data Privacy Framework.

Also, if our contractual partner is based in the USA, we will revise existing contracts and check the security standards guaranteed by our partner to ensure the protection of all our data subjects with the latest standards approved and suggested by the competent institutions.

The purposes for which we share data with our trusted partners are, for example, marketing, website maintenance, sunsetsportsfestival.com, advertising, payment processing, delivery (delivery) and other services in and outside of the Sunset Sports Festival. These service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose strictly specified by us. We also oblige them to adequately protect your data and to consider it a trade secret.

Once a year, we audit all our partners to ensure that the protection of your personal data is still at the required level and that it complies with applicable regulations.

How long will SUNSET MEDIA FESTIVAL retain your personal data?

SUNSET MEDIA FESTIVAL will not retain your personal data for longer than the period for which the data is necessary to fulfil the purpose of their use, and no longer than for a period of 3 years, except in exceptional cases when a longer data retention period is prescribed by law (for example, we will keep data related to unilateral termination of contracts and complaints for 1 year, we will keep data related to the exercise of your privacy rights permanently, data related to prize games will be kept for 5 years, information about lecturers for 5 years, photos from lectures and other organized events at the SUNSET MEDIA FESTIVAL until your objection to processing is accepted, e-mail addresses for the purpose of sending newsletters until withdrawal of consent, while we will keep account data for 11 years).

You can find out more about data retention periods by contacting e-mail: info@sunsetsportsfestival.com

What will we use your data for?

We may use your personal information in several different ways, mainly to perform our legal and other obligations to you, but sometimes also to improve your experience of using the website and for security reasons.

The purposes for which we use your data are described in this policy, and if your data is processed for other purposes, you will be informed before such (new) processing is carried out.

Newsletter

SUNSET MEDIA FESTIVAL would like to send you information about our activities and news that you might be interested in. Please note that you may withdraw from receiving them at any time by exercising your rights as set forth in this policy. To subscribe to the newsletter, SUNSET MEDIA FESTIVAL collects and processes: e-mail addresses.

The newsletter contains the so-called tracking pixels. A tracking pixel is a miniature graphic element embedded in an email that is sent in HTML format to allow storage and analysis via log files. This allows statistical analysis of the success of marketing campaigns. Through the tracking pixel, SUNSET MEDIA FESTIVAL can see when and if an email has been opened by you as a data subject and which links you have followed. Personal data collected through tracking pixels in the newsletter are stored and analysed by SUNSET MEDIA FESTIVAL A as the personal data controller to optimize the process of sending newsletters, as well as to adapt the content of future newsletters to the interests of the data subjects.

Video surveillance and photography

We are aware that you also come to the location of the Sunset Sports Festival to take pictures, film and be seen. Due to your expectations, as well as promotional actions, all material will be used globally for promotional purposes of the Sunset Sports Festival and other events.

Numerous television crews and photographers will be filming at the location of the Sunset Sports Festival, and we especially emphasize that drones will be present to film the entire event. At the entrance to the area where the Sunset Sports Festival is held, there will be a special notice about filming and photography. By entering the festival venue, expect to be filmed and photographed. All material from the Sunset Sports Festival may be used globally for promotional purposes of the Sunset Sports Festival.

When taking photos and filming and using a drone to record lectures and/or short video clips or atmosphere, data such as your physiognomy, movement, hair color, eye color are processed. The video surveillance system is also used for asset protection and security. The legal basis for processing in relation to visitors is a legitimate interest, while in relation to our workers and diligent students and volunteers is the fulfilment of obligations arising from occupational safety regulations.

Sunset Sports Festival App

By using the application, we collect basic identification and contact information, information about the use of the application and technical data about the device, to enable access to the QR code ticket, user account, personalize the content and program, send notifications related to the event and improve the functionality of the application. The application may send push notifications that the user can turn off in the device settings, and data may be shared with technical partners and organizers solely for the purpose of ensuring the operation of the application, subject to the application of applicable data protection regulations; Users have the right to access, rectify and delete their data at any time.

Cookies

To maintain the website and ensure that its functionalities are at the expected level, SUNSET MEDIA FESTIVAL uses a technology known as “cookies”.

Cookies are small files that we send to your computer and can be accessed later. They can be temporary or permanent. Thanks to cookies, you can browse our pages without difficulty. Cookies show us what interests you and other visitors to our website, which helps us to improve it.

Read more about cookies in the Cookie Policy.

Other websites

Other websites that can be accessed through sunsetsportsfestival.com have their own statements on confidentiality and data collection and the ways in which they are used and published.

SUNSET MEDIA FESTIVAL is not responsible for the ways and conditions of operation of third parties.

SUNSET MEDIA FESTIVAL collects and processes personal data through user interactions on social networks such as Facebook, Instagram, X Corp. (ex-Twitter), YouTube and LinkedIn. SUNSET MEDIA FESTIVAL or the responsible persons appointed by SUNSET MEDIA FESTIVAL have access to messages and/or posts on the mentioned social networks, however, personal data collected through them, especially those contained in messages, SUNSET MEDIA FESTIVAL does not store and does not further process except for the purposes specified in these Rules.

SUNSET MEDIA FESTIVAL uses a business profile using the services of Facebook, YouTube, Twitter, Instagram and LinkedIn, and you can see their Privacy Policy or confidentiality statements, as well as the way they use your personal data, at:

FACEBOOK ONLINE	https://www.facebook.com/policy.php
YOUTUBE ONLINE	https://policies.google.com/privacy?hl=hr
INSTAGRAM ONLINE	https://help.instagram.com/519522125107875
X CORP. (TWITTER) ONLINE	https://x.com/en/privacy
LINKEDIN ONLINE	https://www.linkedin.com/legal/privacy-policy

If you have any questions regarding the collection and processing of data by Facebook, YouTube, X, Instagram and LinkedIn or if you wish to exercise any of your rights guaranteed by the General Data Protection Regulation, please contact:

FOR FACEBOOK: META PLATFORMS Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland
Contact of the Data Protection Officer:	https://hr-hr.facebook.com/policy.php https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the way your personal data is collected and processed, you can contact Facebook’s lead supervisory authority, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

On the website sunsetsportsfestival.com we use Facebook plugins provided by Meta Platforms. When you visit sunsetsportsfestival.com, your browser automatically loads these components, and Facebook can receive information about the subpage you have opened. A list of Facebook plugins is available at https://developers.facebook.com/docs/plugins/.

If you are logged into your Facebook account, Facebook can associate your visit to sunsetsportsfestival.com with your user account. The same goes when using the integrated Facebook buttons, such as “Like” or leaving a comment.

Facebook is operated by Meta Platforms Inc. (USA) or Meta Platforms Ireland Ltd. for users outside the US and Canada. If you don’t want Facebook to associate your sunsetsportsfestival.com activity with your account, please log out of Facebook before visiting our site.

FOR YOUTUBE: Google Ireland, Gordon House Barrow St, Dublin 4, Ireland
Contact of the Data Protection Officer:	https://support.google.com/policies/contact/general_privacy_form
If you are not satisfied with the way your personal data is collected and processed, you can contact YouTube’s lead supervisory authority, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

On the website sunsetsportsfestival.com we use YouTube components provided by YouTube LLC, a subsidiary of Google. When you open a subpage containing a YouTube video, your browser automatically loads YouTube content, and YouTube and Google can receive information about the page you visited.

If you’re signed in to your YouTube account, YouTube can associate your visit to sunsetsportsfestival.com to your account, regardless of whether you started the video or not.

YouTube is operated by YouTube LLC (USA) or Google Inc. If you do not want YouTube to associate your activities on sunsetsportsfestival.com with your account, please log out of YouTube before visiting our site.

FOR INSTAGRAM: META PLATFORMS Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland
Contact of the Data Protection Officer:	https://hr-hr.facebook.com/policy.php https://www.facebook.com/help/contact/540977946302970
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for Instagram, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

ZA X Corp. (ex TWITTER): Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
Contact of the Data Protection Officer:	https://x.com/en/privacy
If you are not satisfied with the way your personal data is collected and processed, you can contact Twitter’s lead supervisory authority, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

On the Website, we sunsetsportsfestival.com use components of the X Service (formerly Twitter), which is provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

When you visit a page that contains an X component (e.g. an X button), your browser automatically loads that content, whereby X can receive information about the subpage you have opened. The integration of these components makes it possible to share content and increase the visibility of our site.

If you are logged into your X account, X may associate your visit to our website with your user account, including information about which subpages you have visited. The same applies if you click on the integrated X buttons, this information can be transferred and stored in your X account.

X may receive this information every time you are logged into your account during your visit to sunsetsportsfestival.com, regardless of whether you have clicked on the X button or not. If you do not want such a transfer of information, please log out of X account before visiting sunsetsportsfestival.com.

Additional information and X Corp.’s privacy policy can be found at https://x.com/en/privacy.

FOR LINKEDIN: LINKEDIN IRELAND, Wilton Plaza, Wilton Place, Dublin 2, Ireland
Contact of the Data Protection Officer:	https://www.linkedin.com/help/linkedin/ask/TSO-DPO
If you are not satisfied with the way your personal data is collected and processed, you can contact the lead supervisory authority for LinkedIn, the Irish Data Protection Commissioner or the Personal Data Protection Agency of the Republic of Croatia.

Effective date of this Privacy Policy change

This Policy comes into force upon publication on the website.

SUNSET MEDIA FESTIVAL reserves the right to amend the Privacy Policy and it will be published on the website.