PRIVACY

Data controller

Senja Event og Utvikling AS is the data controller for personal data collected through fifest.no and in connection with the festival.

What information we collect

When you fill in the form for companions, volunteers or stalls, we store your name, phone number, e-mail address, date of birth and the information you give in the form. For stalls we also store the organisation number.

To protect the forms against misuse, we limit the number of requests. While this protection is active, a hash of your IP address is stored in Upstash Redis together with request counters.

Purpose

The information is only used to administer your registration (for example allocating companion tickets, volunteer rotas and stall placement) and to contact you about it.

Legal basis

When you sign up as a volunteer or register a stall, we process the information because it is necessary to carry out the agreement you ask for (GDPR Article 6(1)(b)). Accounting records for stall rental are kept for as long as the Norwegian Bookkeeping Act requires.

If you will be under 18 when the festival starts, we need approval from one of your parents or guardians. We then ask for the name and phone number of a parent or guardian. We only use this information to confirm the approval and to contact your parent or guardian about the sign-up, on the basis of our legitimate interest in making sure that volunteers under 18 have their guardian's approval (GDPR Article 6(1)(f)). It is deleted together with the sign-up.

When you register a companion certificate, we also process information about your accessibility needs. This is health information, and we only process it with your explicit consent (GDPR Article 9(2)(a)). You can withdraw your consent at any time by e-mailing us. We will then delete the information, but we can no longer make arrangements for a companion.

We process the hash of your IP address used against misuse on the basis of our legitimate interest in protecting the forms (GDPR Article 6(1)(f)). You can object to this processing by contacting us.

Ticket purchases

Tickets are sold through Tikkio. Tikkio is an independent data controller for the information you provide when buying, and their privacy policy applies.

Storage and deletion

The information is kept for as long as necessary for the purpose and deleted no later than six months after the festival, unless the law requires otherwise.

Cookies

We do not use any analytics or marketing cookies on this website, so you will not see a cookie banner.

Who we share data with

Registrations from the forms are sent via Postmark (e-mail provider). Postmark processes and may temporarily store message content and metadata for delivery and troubleshooting, in line with the account settings and the data processing agreement.

In addition, our website provider, as a data processor, stores the content of the forms as a backup, as documentation of the retention period and to monitor and secure the operation of the service. The sub-processors Supabase (database storage) and Vercel (file storage) are used for this storage.

We do not sell your information. Beyond what is described above, we do not share it with others for marketing.

Your rights

You have the right to access, correct and delete the information we hold about you. You can also complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no), if you believe the processing breaks the rules. You can withdraw consent and object to processing based on legitimate interest.

Send requests to post@fifest.no. Requests are handled within the deadlines set by the General Data Protection Regulation (GDPR Article 12).

Changes to this policy

We may update this policy when needed. Significant changes will be clearly announced on the website. The date at the top shows the latest update.