Collection of personal data
RIFF collects personal information in connection to the purchase of tickets or products, e.g. when a Partner uses the Platform or a customer contacts RIFF via e-mail or social media.
Usage of personal data
RIFF stores personal data on behalf of the Partner and processes it in accordance with applicable legislation. This means that RIFF protects the personal data stored in the Platform database and that the Partner retains the right to contact RIFF for information on the type and amount of personal data stored. The policy explains how RIFF processes customers’ personal information when they use the Platform via riff.is or the Partner’s own website.
Different Partners are responsible for different events, which means that different Partners are responsible for customers’ personal information, depending on which event tickets and products the customer buys.
RIFF processes the personal information that customers provide in connection with the use of the Platform or when customers contact RIFF. The information processed includes customer’s name, e-mail address, telephone number, address, date of birth, social security number, credit card details or other information that a customer provides when buying a ticket or engaging in communication with RIFF.
Who is responsible for your personal data?
Alþjóðleg kvikmyndahá Rvk ehf. (kt. 6807042870, Tryggvagötu 17, 101 Reykjavík) is a personal data assistant and is responsible on behalf of the Partner (the data controller) to perform the processing of personal data in accordance with applicable legislation.
Why does RIFF process personal data?
Customers’ personal data is processed by RIFF in order to be able to:
- fulfill our obligations to the customers as agreed, e.g. for the customers to be able to collect their tickets, for the customers to be able to retrieve their tickets if for some reason they cannot find them etc.,
- fulfill our obligations to our Partners in accordance with previous agreements,
- manage card and app payments,
- improve the purchasing process and other services,
- maintain good customer contact in communication between the customers and RIFF,
- manage purchase refunds.
Who has access to your personal data?
Personal data is processed by RIFF staff members and by personal data assistants of RIFF Partners. As long as there is no legal obligation to disclose personal data, it will not be disclosed to third parties. RIFF never discloses or sells personal data for marketing purposes to third parties. Everyone who has access to the data is obliged to only process the data in accordance with the GDPR nr. 90/2018.
How long is the personal data stored?
RIFF stores customers’ personal data for as long as it is required to fulfill the obligations that exist in each individual case.
RIFF takes appropriate technical and organizational measures to protect the personal data being processed. The measures provide a level of security that is consistent with the applicable data protection legislation and is appropriate taking into account:
- the technical possibilities that exist,
- the cost of implementing the measures,
- the specific risks associated with the processing of personal data,
- how sensitive the personal data is.
Alþjóðleg kvikmyndahá Rvk ehf.
Tryggvagata 17, 101 Reykjavík