Last Updated 6 March 2023
Article 1 – General Terms
Article 2 – Data that we collect about you
Personal data means any information that can identify a natural person or any information that can link to an identifiable natural person. Personal data does not include information that is anonymized and where no natural person can be identified.
Personal data that we collect about you can fit into the following broad categories:
Category 1: Technical data: IP address and browser type when you use our Website;
Category 2: Identification information: when you sign up for a service or to attend an event;
Category 3: Contact information: email address when you sign up for the newsletter, request a service, or register to an event, and when you contact us through a contact form;
Category 4: Financial data: when you enter your payment details to purchase from us;
Category 5: Business data: when you provide us with business information in our order form;
Category 6: Social media data: when you choose to interact with us on social media platforms;
Category 7: Photos: when you attend an event or request a service;
Category 8: Videos: when you attend an event or request a service.
Article 3 – How do we collect data about you
MAD can obtain personal data through different means: direct interaction by you when you provide us with your personal data when communicating with us; by placing cookies (see below); during your use of the Website; request to be sent information to you; create an account on our Website; order a product or service from us; during your visit to us or an event.
Article 4 – Purposes of processing your data
In general, we rely on the following basis for the legal processing of your personal data: Where we need to perform the contract we enter into with you i.e. contractual obligations; Where it is necessary for MAD’s legitimate interests; Where it is necessary for the safety and security of MAD, our employees, and guests; Where we need to comply with a legal or regulatory obligation; Where you have provided us with explicit consent. MAD shall only use the data collected about you solely for the following purposes:
Category 1: Technical data: IP address and browser type when you use our Website to improve your user experience and maintain the performance of our Website;
Category 2: Identification information: when you sign up for an account in order to deliver our services that you ordered;
Category 3: Contact information: email address when you register to receive our newsletter, request a service or event, and when you contact us through the contact form in order to respond to your inquiry and deliver our services that you ordered;
Category 4: Financial data: when you enter your payment details to purchase from us so that we can collect payment and deliver services or products that you ordered;
Category 5: Business data: when you provide us with business information in our order form in order to perform the services you ordered;
Category 6: Social media data: when you choose to interact with us on social media platforms and so that our employees can identify and connect with you;
Category 7: Photos: when you attend an event or request a service for marketing purposes;
Category 8: Videos: when you attend an event or request a service for marketing purposes.
You are not required to provide MAD with your personal data, however, we may not be able to deliver services to you if you refuse to provide personal data. Where you provide us with consent to process your personal data, you have the right to withdraw this consent at any time. If you wish to withdraw consent please see Article 9 for more information.
Automated decisions and profiling
We do not process your personal data to create a profile of you and you shall not be subjected to automated decisions.
Article 5 – Data Retention
We will store and process your personal data for the period necessary depending on the purposes of processing and the contractual relationship you may have with MAD.
Category 1: Technical data: IP address and browser type for the duration of your visit on our Website;
Category 2: Identification information for as long as your contractual relationship with MAD;
Category 3: Contact information: email address for as long as your contractual relationship with MAD and to deliver a service that you have ordered;
Category 4: Financial data: see Article 6 ;
Category 5: Business data: when you provide us with business information in our order form for as long as your contractual relationship with MAD;
Category 6: Social media data: when you choose to interact with us on social media platforms for as long as your contractual relationship with MAD;
Category 7: Photos: when you attend an event or request a service during your contractual relationship with MAD;
Category 8: Videos: when you attend an event or request a service during your contractual relationship with MAD.
Article 6 – Payment services
Article 7 – Transfer of data
We may share your data with the following categories of third parties: Employees, Freelancers, Partners, Contractors of MAD; Service providers of MAD; Government authorities such as tax regulators or law enforcement to comply with legal obligations; Professional advisers such as accountants and legal advisers; Payment processors: see Article 6.
We share data with the following specific third parties:
MailerLite and HubSpot are our CRM and email communication tools used for our marketing and promotional activities, please refer to their privacy policies.
MAD shall not be liable in any way for direct or indirect damages caused by a wrongful or improper use of the personal data by a third party.
Third-party external links
Due to the global nature of our operations, we may transfer your personal data outside the European Economic Area. We ensure that there is an adequate level of protection for personal data in the receiving entity. We may use the following methods to safeguard the transfer of data internationally: Transfer of personal data to a country that has officially been deemed to provide an adequate level of protection for personal data by the European Commission (‘adequacy decisions’); We may use Standard Contractual Clauses approved by the European Commission; We may transfer data to the US if they are part of the Privacy Shield. If the receiving third party is not a part of the Privacy Shield then we may use the Standard Contractual Clauses.
Article 8 – Cookies
Article 9 – Security measures
We have implemented appropriate technical and organizational measures, procedures and safeguards are in place to prevent the destruction, loss, adjustment, accidental notification to a third party, removal and unauthorized access of personal data. We only allow access to your personal data to those employees, contractors and other third parties who have a business need to know. They only process your personal data on our instructions and are subject to a duty of confidentiality.
Article 10 – Your rights
Under the General Data Protection Regulation, data subjects within the European Economic Area are entitled to the following rights:
Right of access – you have the right to be informed on how we use your personal data and you have the right to request access to the personal data that we have collected about you;
Right of rectification – you have the right to correct inaccurate information that we may have about you;
Right to object – you have the right to object to us processing your personal data;
Right to restrict processing – you have the right to request us to suspend processing under certain circumstances;
Right to data portability – you have the right to obtain a copy of your personal data in an easily readable format in order to transfer to another service;
Right to erasure – otherwise known as the ‘right to be forgotten’ meaning that you have the right to request that we delete all the personal data that we have on you (with certain legal exceptions);
Right to withdraw consent – where the processing is based on consent, you have the right to, at all times, withdraw your consent.
If you wish to exercise any of your rights under the General Data Protection Regulation please contact us by sending an email to: firstname.lastname@example.org
Please note that you will be requested to provide specific identification information in order to verify your identity before your request can be processed. This is a security measure that we have implemented to ensure that there is no unauthorized access to personal data by third parties.
We are committed to providing you with a response to your request within 30 days. However if there are delays in providing you with your request, we will notify you of the delay, the reason for the delay and extend our response time.
Right to make a complaint