Last updated: June 8th, 2022
Protecting and securing your Data is especially important to TAME. This Data Protection Policy formsan integral part of the Terms of Use and is intended to govern the collection, use of and accessto your Data within the framework of use of the Website and/or the Tame Service, particularly duringthe organisation, management and participating in online events. All terms in capital are defined in theGeneral Terms of Use.
1.1.
The purpose of this Data Protection Policy on personal data protection is to define how TAME processes personal data. Personal data processing covers any use of personal data such as collection, registration, curation, storing, transmission, grouping or pooling, containment, deletion or destruction. Personal data is to be perceived as any information that may be used to verify the identity of a person including (but not limited to) first-name, surname, address, email address or other contact information regardless of said information relating to the private residence or workplace of the individual in question.
1.2.
The processing of personal data must be in accordance with existing laws regarding the protection of personal data, among these the joint EU regulation in the EU General Data Protection Regulation and such as the regulations described in this Data Protection Policy.
1.3.
Violation of this Data Protection Policy on personal data protection may have serious consequences for TAME and failure to comply with this policy is considered a violation of the terms of employment.
2.1.
This Data Protection Policy shall apply to any User who accesses the Website and/or Tame Services. Each User is responsible to read and understand the Data Protection Policy, notably each time the Data Protection Policy is modified.
3.1.
The Data Controller of the tame.events website is: TAME, a limited liability company incorporated and registered under the laws of Denmark, with capital of 79.553 DKK and with registered office is at Tame ApS, Vestergade 18E, 3rd floor, 1456 Copenhagen, registered in the commercial and company register of Denmark under the number 37655562.
4.1.
This Data Protection Policy applies equally to all our units processing personal data. The rules for processing personal data apply both to electronic and the physical handling of such information.
4.2.
When handling personal data, we are obligated to comply with the following basic principles:
4.2.1.
Qualification of use:
Personal data is solely collected for the lawful purpose explicitly stated.
Be aware that personal data may only be employed for the same purpose to which they have been collected and which has been stated in advance.
It is prohibited to reuse personal data for any other purpose.
4.2.2.
Legality, reasonableness and transparency:
Personal data must be processed legally, reasonably and in a transparent manner in relation to the registered party.
4.2.3.
Minimization of data:
No more personal data may be collected than what is deemed appropriate and necessary in correlation with the purpose to which it is collected.
4.2.4.
Accuracy:
Personal data collected must be accurate and kept up to date if necessary.
4.2.5.
Storage limitation:
Personal data must not be stored for a longer period of time than what is necessary to serve the purpose to which the data has been collected for.
4.2.6.
Integrity and confidentiality:
Personal data must be processed in a manner to secure adequate data security using appropriate technical and organisational precautionary measures so as to avoid unauthorized or illegal processing, accidental loss of data or any destruction or damage.
4.2.7.
Responsibility:
TAME may at any time be required to demonstrate documentation that the above set of rules are being observed and complied with.
5.1.
TAME may collect and process the following personal data about User’s of the Website:
5.2.
Data collected by TAME as Data controller about the Administrators and Managers
5.3.
Data collected by TAME as Data processor about the Participants
6.1.
The purposes of processing the Users personal information are the following:
7.1.
As a general rule, personal data may not be processed unless there are valid reasons to do so.
7.2.
The most commonly applied grounds for data processing are:
7.2.1.
The individual in question has given consent to TAME's handling of the personal data.
7.2.2.
TAME’s processing of the personal data is necessary to complete an agreement the individual in question is a part of, or has requested that be done prior to entering into an agreement.
7.2.3.
Processing the data is a necessity to comply with a legal obligation.
7.3.
Further requirements of the law apply when processing sensitive information. Such include information about race or ethnicity, political persuasion, religious or philosophical persuasion, union membership and information regarding health or sexual preference.
As a rule, processing sensitive information requires consent.
8.1.
TAME has an obligation to inform User and/or Customer that TAME keeps and processes personal data.
8.2.
When personal data is collected this must be evident unless the registered party is already familiar with the data collection or if a legal reason exists that allows us to refrain from
informing about the data collection.
8.3.
As a rule, TAME’s duty of information is met in the following ways:
8.3.1.
TAME actively informs customers, business associates and other company stakeholders in writing that we process personal data. Terms and conditions relating to our processing of personal data can be found in the privacy policy stated in greater detail on our website.
8.3.2.
TAME actively and in writing informs employees that TAME processes their personal data. For more detailed terms and conditions for the processing of personal data we refer to the employee manual and our privacy policy, both of which are available for employees on TAME’s website.
9.1.
Personal data collected may be stored only as long as it serves the stated purpose.
Specifically, this means that personal data may be stored as long as a relation to the registered customer or the business partner still exists. Personal data must be deleted within reasonable time from the termination of this relation.
9.2.
TAME is obligated to ensure that TAME’s personal data is correct and continuously brought up to date. Incorrect, inadequate or antiquated personal data must be corrected.
10.1.
TAME uses third-party solutions for marketing, statistical and functional purposes. All of TAME’s service providers comply with applicable data protection regulations in accordance with personal data protection agreements that TAME’s has signed with them.
10.2.
TAME uses data processors for these purposes:
10.3.
Access to personal data is given to third parties only if guaranteed that the information is handled legally and following the necessary precautions.
10.4.
A third party may not be labelled data processor or given access to personal data until a Data Processing Agreement is signed. A data processor may be a physical person or a legal entity, a public authority, an institution or other type of public body processing personal data on TAME’s direction.
10.5.
The Data Processing Agreement imposes the data processor with appropriate technical and organisational precautionary measures to protect TAME’s personal data as well as the conditions condition that the processing of personal data may only be done on TAME’s direction.
11.1.
Whether the recipient is in-house or external, TAME’s personal data may only be transferred to recipients outside of the EU if all conditions for such a transfer are met.
11.2.
All personal data that the User provides is stored on secure ISO/IEC servers located within the EU/EEA. Personal data may be transferred to a destination outside the EU/EEA if all the conditions for such transfer are met.
11.3.
TAME will take all steps reasonably necessary to ensure that the User’s personal data is treated securely and in accordance with the GDPR.
11.4.
TAME may be required by law, to hold User’s personal information in a specific location dependent upon the location from which User will access Tame Services. Regardless of the location in which User’s personal information is stored, TAME will take adequate measures to protect the security of User’s personal information. These countries may have different and/or less stringent privacy/data protection and data security rules than those of User’s own country. As a result, User’s personal information may be subject to access requests from governments, courts, or law enforcement in those countries according to the laws in those countries.
12.1.
TAME have introduced a number of physical, technical and organisational precautionary measures to ensure TAME’s personal data from loss or damage, unauthorised alterations and unauthorised access and misuse.
12.2.
In order for TAME to best protect any personal data, TAME will on an ongoing basis evaluate the risks of any breakdowns.
12.3.
TAME limits access to personal information about User to employees who we believe have a legitimate need to come into contact with that information to provide Services to User or in order to do their jobs. TAME will take reasonable technical and organisational precautions to prevent the loss, misuse, alteration, unauthorised access or disclosure of your personal information. While no website or app can guarantee full security, TAME has implemented appropriate administrative, technical, and physical security procedures to help protect User’s personal information. TAME also uses encryption when transmitting personal information that is sensitive to User between User’s system and TAME’s systems.
12.4.
TAME ensures that the transfer of personal data through the internet cannot be read, copied, modified or deleted without authorization.
12.4.1.
TAME ensures appropriate logging of user access and attempted access into IT-systems.
12.4.2.
TAME ensures that data processors are used only in accordance with the directions stated by us.
12.4.3.
TAMe ensures that personal data is protected from unwanted destruction or loss.
12.4.4.
TAME ensures that personal data is not stored any longer than necessary.
13.1
The User has the following rights of the personal data that TAME process:
13.1.1.
Right to access: User has the right to obtain information of which personal data TAME possesses and process about User, where the personal information originates from, and what TAME uses it for. Furthermore, User is entitled to be informed of for how long we will possess the personal information, and information of who gets User’s personal information to the extent that we share the information with others. However, Users rights may be restricted to the extent required for the protection of other individual’s personal information, protection of any business secrets or protection of any intellectual property rights;.
13.1.2.
Right to rectify: User has the right to request the rectification of your Data which are inaccurate, and also add to it. You can also change your personal information in your Account at any time;
13.1.3.
Right to delete: User has the right to have any incorrect personal information that TAME holds corrected or deleted;
13.1.4.
Right to object: User has the right to object to TAME’s use of personal information about User, including our sharing of personal information for marketing purposes;
13.1.5.
Right to portability: User has the right to receive a copy of any personal information that TAME possesses about User in a structured, commonly used and machine-readable format. User is furthermore entitled to request that TAME transfers the personal information that TAME holds to another data processing provider;
13.1.6.
Right to withdraw consent: User has the right to withdraw their consent at any time. Exercising this right does not affect the lawfulness of the processing based on the consent given before the withdrawal of the latter;
The User can modify, delete and access your Data directly via your Tame Account. Any deletion carried out via your Tame Account will lead to your Data being delegated generally within one month. Should TAME not be able to delete your Data within one month, TAME shall alert you and delete your Data within a maximum of two (2) more months. To exercise any of the aforementioned rights or for any question you may have, you may contact TAME.
In accordance with the application legislation, requests to exercise rights must provide sufficient information so that TAME can check the identity of the persons concerned, to ensure that the ones making the requests are the persons concerned or those who are authorised by them. Upon receipt of a request TAME shall determine its admissibility in accordance with the application regulations.
14.1
When using the website, the website sets and accesses cookies on your computer. For further details, see our cookie policy, which is available on the website.
15.1
If breach of personal data is suspected, the Data Protection Officer (CPO) must be alerted and briefed of the incident immediately. The DPO is in charge of training and raising the awareness of TAME’s internal teams to maintain the standards required by the GDPR as regards security and confidentiality. The DPO is also required to report any activity which does not comply with application regulations to relevant persons. The incident can be reported by email to [privacy@tame.events], or by telephone at [+45 29240482].
16.1
To exercise one of the rights laid down in Section 13 in this Data Protection Policy, or for any questions they have, people may contact TAME’s DPO at the following addresses:
Surface mail: Tame ApS, Vestergade 18E, 3rd floor, 1456 Copenhagen, Denmark
Email: privacy@tame.events
Tel: +45 29240482