Privacy Policy

1. General Provisions

1.1. This Privacy Policy describes how MTÜ Pärnu Music Festival (hereinafter referred to as the Data Controller) collects, uses, stores, and protects personal data of natural persons.

1.2. This Privacy Policy applies to all individuals who use the Data Controller’s website, fill in forms on the website, subscribe to newsletters, purchase tickets, or otherwise interact with the Data Controller.

1.3. The Data Controller processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Estonian Personal Data Protection Act, and other applicable legislation.

2. Collection of Personal Data

2.1. The Data Controller may collect the following personal data:

  • first and last name;
  • email address;
  • phone number;
  • data provided in registration forms;
  • data provided in contact forms;
  • data provided when subscribing to newsletters;
  • accounting and payment-related data (if necessary for fulfilling legal accounting obligations);
  • technical data related to website usage.

2.2. Personal data is collected only to the extent necessary to achieve the purposes described in this Privacy Policy.

3. Purposes and Legal Bases for Processing Personal Data

3.1.1. Responding to inquiries

To respond to inquiries submitted via contact forms or email.

Legal basis: legitimate interest or data subject request.

3.1.2. Managing registrations

To organize and manage registrations for concerts, educational programs, competitions, events, or other activities.

Legal basis: performance of a contract or data subject request.

3.1.3. Sending newsletters

To send newsletters, event notifications, and other relevant information.

Legal basis: consent of the data subject.

The data subject has the right to withdraw consent at any time.

3.1.4. Accounting and legal obligations

To comply with accounting requirements and legal obligations.

Legal basis: compliance with a legal obligation.

3.1.5. Website operation and development

To collect website usage statistics, improve user experience, and measure the effectiveness of advertising campaigns.

Legal basis: legitimate interest or user consent where required by applicable law.

4. Cookies and Web Analytics

4.1. The website uses cookies to ensure proper functionality, improve user experience, collect usage statistics, and measure marketing effectiveness.

4.2. The website uses the following types of cookies:

  • strictly necessary cookies for the operation of the website;
  • analytical cookies to understand website usage and improve user experience;
  • marketing cookies used to measure advertising performance and display more relevant content to users.

4.3. For analytics and marketing purposes, the Data Controller may use the following services:

  • Google Analytics – for collecting website usage statistics;
  • Google Ads – for measuring advertising campaigns, tracking conversions, and remarketing purposes;
  • Meta Pixel (Facebook Pixel) – for measuring advertising effectiveness, creating audiences, and remarketing on Meta platforms.

These services may process the following data:

  • IP address;
  • device type;
  • operating system and browser type;
  • time of visit;
  • visited pages;
  • actions performed on the website;
  • other technical usage data collected via cookies.

4.4. Analytical and marketing cookies are used only with the user’s prior consent, except where otherwise required by applicable law.

4.5. Users can manage or withdraw cookie consent at any time via the website’s cookie settings or adjust browser settings. Disabling cookies may affect website functionality.

5. Disclosure of Personal Data and Third Parties

5.1. The Data Controller may share personal data only to the extent necessary for providing services or complying with legal obligations.

5.2. Personal data may be disclosed to the following service providers:

  • website technical maintenance service providers;
  • Google Ireland Limited (for Google Analytics and Google Ads services);
  • Meta Platforms Ireland Limited (for Meta Pixel and Meta advertising services);
  • newsletter service providers;
  • accounting service providers;
  • public authorities, where required by law.

5.3. All processors handle personal data in accordance with applicable data protection laws and only to the extent necessary to provide their services.

5.4. Third-party services and links

The website may contain links and redirects to third-party services, including the ticketing platform Piletikeskus (Sviby AS). Ticket purchases are processed in the Piletikeskus environment, and all personal data processing related to ticket sales is carried out by Piletikeskus as an independent data controller in accordance with its own privacy policy.

The Data Controller is not responsible for the data processing practices of third-party websites or services and recommends reviewing their privacy policies before providing any personal data.

6. Data Retention

6.1. Personal data is retained only for as long as necessary to fulfil the purpose of processing or to comply with legal obligations.

6.2. Retention periods:

  • contact form data – up to 3 years;
  • registration form data – up to 3 years;
  • newsletter subscriber data – until consent is withdrawn;
  • accounting records – according to statutory requirements;
  • web analytics data – according to the settings of the respective service providers.

7. Rights of the Data Subject

The data subject has the right to:

  • receive information about the processing of their personal data;
  • access their personal data;
  • request correction of inaccurate data;
  • request deletion of personal data where legally applicable;
  • restrict processing of personal data;
  • object to the processing of personal data;
  • withdraw consent at any time;
  • receive their data in a machine-readable format, where applicable;
  • lodge a complaint with the Estonian Data Protection Inspectorate.

8. Contact Information

For matters related to personal data processing:

MTÜ Pärnu Music Festival
Vambola 5
80026 Pärnu
Pärnu County
Estonia

Email: info@parnumusicfestival.ee

Website: www.parnumusicfestival.ee

9. Changes to the Privacy Policy

9.1. The Data Controller reserves the right to update this Privacy Policy when necessary to ensure compliance with legal requirements or changes in operations.

9.2. The current version of the Privacy Policy is always available on the website www.parnumusicfestival.ee.