We (BSides København Association) process personal data and must comply with applicable legislation and the principles of good data processing practices. Therefore, we have adopted this Privacy Policy, which briefly explains how we process personal data in a lawful and transparent manner.
We only process personal data for clear and legitimate purposes based on the association’s legitimate interests. We only process personal data that is relevant and necessary to fulfill the stated purposes, and we delete your information when it is no longer needed—or when you ask us to do so.
We are responsible for processing your personal data
BSides København Association is the data controller and ensures that your personal data is processed in accordance with applicable legislation.
You can always contact the association’s data protection contact person:
Contact person: Martin Gohs
Address: C.F. Møllers Allé 12, 3.th, 2300 Copenhagen S, Denmark
CVR No.: 40777288
Phone: +45 42 72 31 20
Email: [email protected]
Website: https://www.bsideskbh.dk
Processing of personal data
We process the following personal data:
Membership information
General personal data: Name, membership registration date, and email address.
Information about volunteers
General personal data: Name and email address.
Bank account number
Information about participants in our events
General personal data: Name and email address.
Information relevant to the specific event. (See an overview of the data collected for each event.)
Where we collect information from
We normally obtain information directly from you. In some cases, information may come from other sources, such as:
- Registration through our website
- Ticket providers (see an overview of current and previous ticket providers)
The association’s purpose for processing your personal data
We process your personal data for specific purposes when we have a lawful basis for doing so.
The lawful bases for processing your information include:
- The association has a legitimate interest in processing your information
- Processing is necessary for us to fulfill an agreement with you
- Processing is required by law
- You have given consent for us to process your information
Purposes for processing information about association members
- To process membership information, including collecting membership fees and sending newsletters
- To manage the association’s activities, including planning, carrying out, and following up on them
- To provide products and services you have ordered
- To administer your relationship with the association
Purposes for processing information about volunteers
- To coordinate and manage volunteer tasks within the association
- To maintain an overview of and develop volunteers’ experience and competencies
- To reimburse transportation and travel expenses, refunds, and similar payments
- To administer your relationship with the association
Purposes for Processing Information About Participants in Association Events
- To manage the association’s activities, including planning, carrying out, and following up on them
- To provide products and services you have ordered
- To enable your participation in our events
We only process personal data based on legitimate interests
To the extent that we process your personal data, this is done solely on the basis of the association’s legitimate interests, including:
- Managing your membership rights (for example at the General Meeting) in accordance with the association’s bylaws
- Enabling you to fulfill your obligations as a member of the association, including payment of membership fees
- Planning and organizing social events and activities
- Displaying situational photographs from specific association activities or events
- Preserving information of historical value for statistical and similar purposes
Consent
When we process information about you, this is often based on a lawful basis other than your consent. Therefore, we only obtain your consent when it is exceptionally necessary to process your personal data for the purposes described above.
If we obtain your consent, it is entirely voluntary whether you choose to provide it, and you may withdraw your consent at any time by notifying us.
Disclosure of your personal data
We do not disclose information about you to third parties outside the association—for example for marketing purposes—without your consent.
Storage and deletion of your personal data
We have different processing purposes and retention periods depending on whether we process your personal data as a member, volunteer, or participant.
Members
We delete information about you six months after your membership has ended.
Volunteers
We delete information about you six months after your volunteer engagement has ended.
Participants
We retain your data for as long as you remain registered with our ticket provider. See the overview of data collected and how you may exercise your right to be forgotten.
Please note that we may retain data for a longer period if required by applicable legislation. We also note that even after you request deletion of your data, it may remain stored on backup media for an additional period if necessary to comply with legal obligations or due to technical limitations.
Your rights
When we process your information, you have a number of rights under the General Data Protection Regulation (GDPR):
- The right to be informed that we process information about you (this Privacy Policy fulfills that obligation)
- The right to access the information we process about you (right of access)
- The right to have inaccurate information corrected (right to rectification)
- The right to have information deleted (right to erasure, also known as the right to be forgotten)
- The right to object to the use of your information for marketing purposes
- The right to data portability, meaning that we must provide the information we hold about you in a commonly used format
You may exercise your rights, including objecting to our processing of your information, by contacting us. Our contact details can be found at the beginning of this Privacy Policy.
If you contact us with a request to correct or delete your personal data, we will assess whether the relevant conditions are met and, if so, carry out the correction or deletion as quickly as possible.
You may lodge a complaint regarding our processing of your personal data with the Danish Data Protection Agency (Datatilsynet).
Revisions to this privacy policy
We reserve the right to amend the association’s Privacy Policy. Whenever we make changes to this Privacy Policy, we will also update the date at the top of this document. In the event of significant changes, you will be notified accordingly.
The current version of the Privacy Policy is always available on our website.