Eventboost S.A. based in Corso San Gottardo 14, 6830, Chiasso, Switzerland (hereafter “Eventboost”) is committed to protecting privacy of its users. This document was drafted pursuant to art. 13 of EU Regulation 2016/679 (hereafter: “Regulation”) in order to make you aware of our privacy policy, to understand how your personal information is handled when you use our website (hereafter “Site”) and, if necessary, to consent to the processing of your personal data.
Eventboost offers its users an integrated web and tablet solution for creating, managing and promoting events. In particular, Eventboost allows you to:
a) plan and promote events;
b) manage and personalize invitations, confirmations, messages and event registration pages;
c) manage access to events (check-in);
d) monitor the progress of registration and participation in events;
e) consult the event-following statistics and send follow-up communications;
f) take advantage of additional services, such as tablet rental, address standardization, etc.;
Eventboost acts as data controller according to article 4 (7) of the Regulation, when processing data of the organizers and / or promoters of events (hereinafter “Organizer”), alongside with navigation data, in particular the data of referred to in points 1(a) and 1(b) of this notice.
Eventboost acts as data processor in accordance with Article 4 (8) for data provided by the Organizers in the context of the creation, organization and promotion of events. The processing activities carried out by Eventboost in relation to these categories of data is governed by the Addendum on the processing of personal data pursuant to Article 28 of the Rules. The Data Processing Contract forms an integral part of the contractual relationship between Eventboost and the Organizer, together with this information and the Terms and conditions.
Eventboost does not use the data provided by the Organizers for their own purposes, such as marketing, communication to third parties or dissemination.
According to the rules of the Regulation, the processing carried out by the data controller will be based on the principles of lawfulness, fairness, transparency, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality.
- What types of personal data we process
a. Data provided during registration and data necessary for payment
Eventboost will process the personal data necessary to register correctly on the site to allow you access to our platform and the use of related services. These data are provided directly by the interested party and may include personal data and contact details, including, but not limited to, the name, surname, date of birth, e-mail address and contact numbers.
Eventboost will also process the data necessary for the payment of services by the registered user, including any billing and financial information.
If you authorize us or through the use of cookies we may store authentication or payment methods, which you can cancel at any time and will be used only for the purposes of execution of the contract.
b. Navigation data
The information systems acquire, during the use of the platform and for its normal use, data that by their nature do not have an identifying function; such data could however possess an identifying function when processed or associated with data held by third parties.
For example, the IP addresses, the Uniform Resource Identifier (URI) of requested resources, such as the time of requests, the characteristics of the device used, the size of the exchanged files or other types of information could fall into this category.
This is anonymous or aggregated data that ordinarily does not allow your identifiability and are used to identify anomalies and problems. The data could be stored to protect our rights. Save for this last hypothesis, your data will not be stored for more than one month.
c. Personal data processed as data processors
Eventboost processes data provided by the Organizers as a data processor and according to the provisions contained in the Addendum on the processing of personal data.
Eventboost undertakes to comply with the instructions of the Organizer and does not use such data for its own purposes, such as marketing, communication to third parties or dissemination.
- Purposes, legal basis and further details
In the table below, you will find the purposes for each processing activity carried by us as data controllers, the related legal basis requested by the Regulation and a brief explanation.
| Purpose | Legal basis | Further details |
| a) Registration, authentication and usage of the platform | Performance of the contract | |
| b) Payment elaboration | Performance of the contract | |
| c) Memorisation of your credentials | Consent | We may ask you to save your data to speed up the purchasing process. Without consent we will not save anything. |
| d) Communication to our business partners and third parties | Consent | With your authorisation, we could communicate data to third parties and business partners. |
| e) Newsletter | Consent | By entering your e-mail in the newsletter section, you will allow us to send you news and information on the topics of your interest |
| f) Direct marketing communications | Legitimate interest | We will send you marketing e-mails solely related to our products or services, in case you have previously purchased something from us. This allows us to make new products or services more easily accessible and to keep you updated. Our e-mails will not be frequent or invasive and you have the opportunity at any time to deactivate their reception. |
| g) Maintenance and improvement of the service and of your experience, management planning and market researches | Legitimate interest | We use anonymous and aggregated data as much as possible for any form of service improvement, market research or management planning; we could also need your personal data, but they will be available only to us and by adopting all appropriate legal and technical measures. |
| h) Detect or prevent fraudulent activities | Legal obligation and Legitimate interest | We may need to process your personal information in the event of malicious activities on our site. |
| i) Compliance with orders from judicial authorities or other public authorities | Legal obligation | |
| l) Conservation of accounting records | Legal obligation |
- What happens if you do not provide us with your personal data?
The provision of your personal data for the purposes a) and b) of paragraph 2 is necessary to allow you to register on the platform and for the conclusion of the contract. Therefore, without them we will not be able to provide you with our services.
The Consent for the purposes c) and d) is optional and does not involve any negative consequences for your user experience. We remind you however that consenting to these purposes allows us to grow and provide better and less expensive services.
- Who are the recipients of your personal data?
On the ground of our legitimate interest and as better specified in point 2 of this notice, we communicate your personal data to other companies belonging to our group for a better organizational efficiency, adopting all the necessary technical and legal precautions.
Furthermore, we communicate the data to our suppliers for the need to provide the service on the ground of a company legitimate interest, as indicated in Article 2.
Our service providers could include: delivery services, IT companies, legal advisors, payment processing companies, marketing companies. If the service providers process personal data on behalf of the Data Controller, they will be appointed as data controllers according to art. 28 GDPR
- Transfer to third countries
Some of your personal data could be shared with subjects outside the European Economic Area; we ensure that this is done in compliance with Regulation 679/2016, adopting precautions allowing for transfer only to countries subject to an adequacy decision, or legitimated by standard contractual clauses approved by the European Commission, by Consent or by another appropriate legal basis.
- Storage of your data
Personal data will be stored solely for needs related to each of the purposes referred to in paragraph 2 and in compliance with the principle of data minimisation.
In particular, we will keep data related to your users and your events up to 6 months after the expiry of the contractual relationship, including the “free trial”, in order to give you the possibility to quickly re-activate your account and/or to export your personal data before its deactivation. More information on the data processed as data processor by Eventboost is contained in the Addendum on the processing of personal data.
We may require your data to defend our rights or yours, and to comply with the obligations to maintain the accounting records.
Therefore, we keep this data for as long as necessary and in any case no more than 10 years.
We also keep your personal data whenever required by law or by an order of public authorities. We keep your personal data for marketing purposes for two years from the last commercial contact. You have the right to revoke the Consent at any time by making a request to the Data Controller.
Further information about the data retention period and the criteria used to determine such periods can be obtained by writing to: privacy@eventboost.com.
- Your privacy rights
You have the right to access data concerning you at any time according to articles 15-22 of the Regulation. In particular, you can ask for access (Article 15 of the Regulation), the correction (Article 16 of the Regulation), the cancellation (Article 17 of the Regulation), the limitation of the processing of the data in the cases described by art. 18 of the Regulation, the portability of your data as described by art. 20 of the Regulation, as well as proposing a complaint to the competent supervisory authority. You also have the right to revoke your consent at any time. Revocation of the Consent is without prejudice for all previous processing activities based on a valid Consent.
You can make a request for opposition to the processing of your data pursuant to art. 21 of the Regulation providing evidence of the reasons justifying the opposition: Eventboost reserves the right to evaluate your request, which would not be accepted if there are legitimate reasons to proceed to the treatment that prevail over your interests, rights and freedom.
- How to exercise your rights or request information
For all information and needs, as well as for the exercise of the rights referred to, we are at your disposal at privacy@eventboost.com.
- Modifications
This privacy policy is effective from 25 October 2018. Eventboost reserves the right to modify or update its content, even partially, also due to changes in the applicable legislation. Eventboost will inform you of such changes and the same will be binding as soon as published on the Site. Eventboost invites you to regularly visit this section to check possible updates.
