Privacy and personal data

Controller and contact

Information and purposes

• Contributions: name, email, amount, currency, frequency, payment references and status, accepted terms version and acceptance time.
• Invitations: requested event, organizer approval and invitation code, where a seat is available.
• Updates: email and evidence of separate consent, only if you choose this option.
• Contact and security: correspondence you send us, technical information such as IP address, browser and security events needed to protect the website.
• Media: photographs, films and information presenting artists and events. Contact us about the use of your image.

You enter card details directly with Stripe. This website does not receive or store full card numbers or CVC codes.

Legal bases

We administer contributions, recurring support and requested invitations to perform the arrangement you request and related preliminary steps — GDPR Article 6(1)(b). Accounting records and legal duties rely on Article 6(1)(c). Website protection, abuse prevention, complaint handling and legal claims rely on legitimate interests — Article 6(1)(f), respecting your rights. Optional event updates rely on consent — Article 6(1)(a).

Media presents cultural activities under the basis appropriate to the situation: consent where required or assessed legitimate interests, without removing your right to object. The website does not make decisions with legal effects solely through automated profiling. Stripe may perform its own fraud checks.

Providers and transfers

Hostinger provides hosting, database and email services; Stripe processes payments and subscriptions. Authorized association staff and, where needed, accountants, advisers and competent authorities may receive relevant information. We do not sell personal data.

Providers and their subcontractors may process data outside the EEA. Applicable transfers use GDPR mechanisms, such as adequacy decisions or standard contractual clauses and supplementary safeguards where needed. Stripe acts as both a processor and an independent controller for certain own purposes, including legal duties and fraud prevention. Details: Stripe Privacy, Stripe DPA and Hostinger Privacy. You may ask us about applicable safeguards.

Retention

• Uncompleted contributions: contact details are removed after 30 days where no payment, subscription or necessary investigation exists.
• Confirmed payments: records follow applicable statutory accounting retention, generally 5 years calculated from 1 July of the year following the financial year. Legal duties or claims may justify necessary additional retention.
• Newsletter: until consent is withdrawn or 24 months without reconfirmation; minimal evidence of consent/withdrawal may be retained for 3 years to demonstrate respect for your choice.
• Ordinary correspondence: normally 12 months after resolution; complaints and mandatory records follow applicable periods.
• Application security logs: up to 90 days, except incidents under investigation. Infrastructure logs and backups also follow provider rules with restricted access.

Removal from current records does not instantly rewrite backups; they expire through rotation and are not used for other purposes. Stripe applies its own statutory retention duties.

Rights and choices

You may request access, rectification, erasure, restriction, portability and object to processing, subject to GDPR conditions. You may withdraw consent to updates at any time without affecting earlier processing. Unsubscribing from updates does not cancel monthly support; use the separate management link.

Write from the contribution email address. We verify identity proportionately and do not routinely request an ID copy. We respond within one month, with reasoned extensions where the law permits. Records required by law may remain even if you request erasure. You may complain to ANSPDCP or another competent authority.

Name and email are needed to administer contributions through this form. Invitations and updates are optional. Do not email card details or identity documents.