Privacy

Pynarello
This privacy statement applies to the processing of personal data by Stichting Pynarello (Postbus 80142, 3515 AZ Utrecht, Chamber of Commerce: 68122780), hereinafter referred to as Pynarello. The protection of personal data is very important to Pynarello. We respect your privacy and ensure that your personal information is always treated confidentially and in accordance with applicable privacy legislation.

Which personal data do we process?
Pynarello processes your personal data because you use our services and/or because you have provided this data to us yourself. Below is an overview of the personal data we may process. The data collected depends on the type of service provided:

  • First and last name

  • Address details

  • Date of birth

  • Telephone number

  • Email address

  • Bank account number

Purposes and legal grounds for processing
Pynarello may only process your personal data for a specific purpose and on the basis of a legal ground. The GDPR recognizes the following legal grounds for the processing of personal data:

  • Consent (C): your explicit consent (Article 6(1)(a) GDPR);

  • (Pre)contractual (PC): taking pre-contractual steps at your request and/or performing the agreement concluded with you (Article 6(1)(b) GDPR);

  • Legal obligation (LO): compliance with legal obligations (Article 6(1)(c) GDPR);

  • Vital interests (VI): protecting vital interests of yourself or others (Article 6(1)(d) GDPR);

  • Public task (PT): the performance of a task carried out in the public interest or in the exercise of official authority (Article 6(1)(e) GDPR);

  • Legitimate interest (LI): pursuing the legitimate interests of Pynarello or a third party (Article 6(1)(f) GDPR).

Pynarello processes your personal data for the following purposes. The legal ground(s) on which we rely are indicated in brackets:

  • to perform an agreement (PC);

  • to maintain administration and internal management (LO);

  • to calculate and collect amounts due (LO);

  • to contact you and respond to questions (C, PC, LI);

  • to inform you about new services from Pynarello (LI);

  • to send digital newsletters (C, LI);

  • to improve Pynarello’s website and services (LI);

  • to comply with legal obligations, such as administration and record-keeping requirements (LO);

  • to handle disputes and carry out audits (LO).

Legitimate interest
Where legitimate interest is indicated as the legal ground, our interest is as follows. To ensure the success of Pynarello, we pursue an active marketing policy. This is very important to us, as otherwise we would not be able to reach you—our loyal concert visitor or newly interested customer. For marketing purposes, we only use your email address and name (and any other data you have provided to us). We have carefully weighed our interest in conducting effective marketing activities against your interest in privacy and have concluded that the limited processing of your data does not outweigh our legitimate interest. You may, however, object to processing based on “legitimate interest” by exercising your right to object. For processing based on “consent,” you have the right to withdraw your consent at any time. More information about these rights can be found later in this statement.

Mandatory provision
When we request personal data from you, we will indicate in each case whether providing the data is necessary or required, and what the (possible) consequences may be if the data is not provided. Our guiding principle is always that Pynarello will not process more personal data than is necessary for the purposes described above.

Sharing with third parties
Pynarello only shares your personal data with third parties when this is necessary to perform an agreement or to comply with a legal obligation. With companies that process your data on our behalf, we conclude a data processing agreement to ensure the same level of security and confidentiality of your data. Pynarello remains responsible for these processing activities. In all other cases, Pynarello will only provide your personal data to third parties who use the data for their own purposes if you have given prior consent for such provision.

Mailchimp
We use the mailing program Mailchimp to send out our newsletters. For this, we require your email address. In addition, we ask for your first and last name so that we can personalize the greeting in our newsletters, as well as your language preference so we can send newsletters in the desired language. Mailchimp uses a standard data processing agreement that complies with GDPR regulations. Their privacy policy explains how Mailchimp handles this data, which you can read here. You can unsubscribe from newsletters or change your preferences at any time via the link in the footer of each newsletter.

Stager
For ticket sales for concerts we organize ourselves, we use the ticketing software provided by Stager. Through this platform we receive the names and email addresses of customers, enabling us to contact them if necessary for service purposes. Stager processes the personal customer data in connection with our ticket sales. These data are used by Stager in accordance with their privacy policy, which you can read here.

Microsoft
All our files are stored in a cloud environment managed by Microsoft. A data processing agreement has been concluded with Microsoft that complies with current European legislation. All our data is hosted by Microsoft within the EU.

Does Pynarello use cookies?
Pynarello uses cookies on its website. Cookies are small text files that your browser stores on your computer when you visit our website. Cookies are not harmful and cannot spread viruses. More information about our use of cookies can be found in our cookie statement.

Automated decision-making and profiling
Pynarello does not make decisions based on automated processing that could have (significant) consequences for individuals. This refers to decisions made by computer programs or systems without human involvement (for example, by a Pynarello staff member).

Retention period
Pynarello aims not to retain your personal data longer than strictly necessary to achieve the purposes for which your data is collected. We apply the following retention periods for the following categories of personal data:

  • Marketing data (such as newsletter subscriptions): after unsubscribing, we delete this data within 2 months.

  • Administrative data (such as invoices from freelancers): these are subject to a legal obligation to be retained for 7 years.

  • Job applications: these are stored for up to 4 weeks after the procedure has ended. If we wish to retain this data longer, we will request your consent.

Protection of personal data
Pynarello has taken appropriate technical and organizational measures to protect personal data against loss or any form of unlawful processing. These measures include, among others, data encryption, secure communication, and treating all data as strictly confidential.

Your rights
Under the law, you have several rights with regard to your personal data. We have listed them below:

  • Right of access
    You have the right to access the personal data processed by Pynarello.

  • Right to rectification and erasure
    You have the right to have your data corrected or even deleted if the data is no longer accurate, or if its processing is no longer justified.

  • Right to object
    The right to object means that, due to your specific situation, you may object to certain processing of personal data. You have this right for all processing that is not based on (1) your consent, (2) the taking of pre-contractual steps at your request and/or the performance of the agreement concluded with you, (3) compliance with legal obligations, or (4) the protection of vital interests of yourself or others.

    If you object to the use of your personal data to inform you about Pynarello’s activities and similar (“direct marketing”) processing, we will always honor this objection. Your data will then no longer be used for direct marketing purposes.

    If you object to other forms of processing of your personal data, we will assess whether we can comply with your objection. In such cases, it is up to Pynarello to demonstrate that, despite your objection, we still have a legitimate interest in continuing to process the data. If this balancing of interests turns out in your favor, we will cease processing your data.

  • Right to restriction
    In certain circumstances, you also have the right to restrict the processing of your data. In short, this means that Pynarello temporarily “freezes” the processing of your data. You may exercise this right in four situations: (1) pending the assessment of a rectification request, (2) if data should in principle be deleted but you do not wish it to be erased, (3) if Pynarello no longer needs the data but you still require it for (preparation of) legal proceedings, and (4) pending the assessment of an objection.

  • Right to data portability
    You have the right to receive the data you have provided to Pynarello in a commonly used file format. This right only applies to personal data we process on the basis of your consent or an agreement with you. It also applies only to data we already process in digital form (not to data in paper form). You are free to transfer such data to another party.

  • Withdrawal of consent
    For certain processing activities, we rely on the legal ground of consent (see above). You have the right to withdraw your consent at any time. We will then immediately cease processing your data. Withdrawal of consent has no retroactive effect, which means all processing carried out prior to withdrawal remains lawful.

  • Exercising your rights
    Exercising your rights is free of charge, unless in cases of abuse. You can exercise your rights by contacting us using the details below. As a rule, we will respond to your questions/requests within one month. Should it take longer to respond, we will inform you within one month. Due to the complexity and/or number of requests, the response period may extend up to three months. In all cases, we may ask you to provide additional proof of your identity to ensure that personal data is not disclosed to the wrong party. Finally, please note that the rights described above are not absolute. There may be circumstances in which we cannot comply with a particular request. If we cannot (fully) comply with your request, we will inform you of this, stating our reasons. The right to object to the use of your data for direct marketing purposes, however, is absolute. Unsubscribing from our marketing communications will always be honored.

Supervisory authority
You are always free to lodge a complaint with the supervisory authority. The Dutch supervisory authority for privacy legislation is the Autoriteit Persoonsgegevens. You can find their contact details on the website www.autoriteitpersoonsgegevens.nl.

Questions
Of course, you are always free to ask questions about the personal data we process. For questions about privacy, please contact us using the contact details below.

Amendments
This Privacy Statement may be amended. Any changes will be published on Pynarello’s website. Pynarello may process your personal data for new purposes that are not yet stated in this Privacy Statement. In such cases, we will contact you before using your data for these new purposes, to inform you of the changes to our privacy policy and to give you the opportunity to object.

Contact details
If you have any questions about this Privacy Statement or our privacy policy, or if you wish to exercise any of your statutory rights, please contact us at: info@pynarello.com

Website by HOAX Amsterdam