GDPR Compliance Statement
Introduction
As Borealis is organized within the EU/EEA, we adhere to the General Data Protection Regulation (GDPR) to ensure your personal data is collected, processed, and protected lawfully. This page explains your rights under the GDPR and how you can exercise them.
Your Rights Under the GDPR
Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You may request corrections to any inaccurate or incomplete personal data.
Right to Erasure (“Right to be Forgotten”): You can ask us to delete your personal data if it is no longer necessary for the purpose it was collected or if you withdraw consent.
Right to Restriction of Processing: Under certain circumstances, you have the right to request limited processing of your personal data.
Right to Data Portability: You can request a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You have the right to object to processing your personal data, including for direct marketing purposes.
Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
How to Exercise Your Rights
To submit a request or question regarding your rights under the GDPR, please contact us at:
Email: [email protected]
We will respond to your inquiry or request within one month, in compliance with GDPR.
Legal Basis for Processing
We process personal data only when there is a valid legal basis, such as:
Consent
(e.g., when you sign up for newsletters)
Contractual Necessity (e.g., to manage event registrations)
Legal Obligations (e.g., accounting and tax requirements)
Legitimate Interests (e.g., organizational or marketing interests, balanced against individual rights)
Data Transfers
Personal data may be transferred to trusted third-party providers to help us with payment processing, ticketing, or communications. Where such providers are located outside the EEA, we ensure an adequate level of protection, for example through EU Standard Contractual Clauses or equivalent frameworks.
Data Protection Officer (DPO)
If you have any GDPR-related concerns that you feel we have not adequately addressed, you can also direct them to our designated Data Protection contact or your local Data Protection Authority.
Final Note
By attending Borealis and using our services, you acknowledge that your personal data will be processed in accordance with these policies. We appreciate your trust in us and are committed to safeguarding your personal information. If you have any additional questions or concerns, do not hesitate to reach out at the email addresses provided.