Privacy Policy for SYSTM


The event organiser, SYSTM, has the legal responsibility to tell ticket buyers and event attendees how their personal information will be collected and used. You can find their Privacy Policy below or contact them to request it.


The event organisers, SYSTM and Turing Festival Limited, have the legal responsibility to tell ticket buyers and event attendees how their personal information will be collected and used. You can find their Privacy Policy below or contact them to request it.

SYSTM

SYSTM (Startup Core Strengths) is committed to protecting your privacy. This Privacy Policy explains how we collect and use your personal data and which rights and options you have in this respect. Please also refer to our Cookie Policy below which explains the use of cookies and other web tracking devices via this website.

Who is responsible for your personal data?

SYSTM (Startup Core Strengths) is responsible for your personal data.

Which personal data do we collect?

The personal data we collect may include:

● Contact information, such as your name, job title, address, telephone number and email address;

● Payment data, such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information;

● Further business information necessarily processed in a project or client contractual relationship with Heretix or voluntarily provided by you, such as payments made, requests and projects;

● Information collected from publicly available resources, integrity data bases and credit agencies;

● Special categories of personal data. In connection with the registration for and provision of access to an event, we may ask for information about your health for the purpose of identifying and being considerate of any disabilities or special dietary requirements you may have. Any use of such information is based on your consent. If you do not provide any such information about disabilities or special dietary requirements, we will not be able to take any respective precautions; and/or

● Other personal data regarding your preferences where it is relevant to the services that we provide.

From time to time, it may include personal data about your membership of a professional or trade association or union, health personal data and details of dietary preferences when relevant to events to which we invite you.

How do we collect your personal data?

We may collect personal data about you in a number of circumstances, including

● When you or your organisation seek advice from us;

● When you or your organisation browse, make an enquiry or otherwise interact on this website;

● When you attend an event or sign up to receive training from us; or

● When you or your organisation offer to provide or provide services to us.

In some circumstances, we collect personal data about you from a third party source. For example, we may collect personal data from your organisation, other organisations with whom you have dealings, government agencies, a credit reporting agency, an information or service provider or from a publicly available record.

Are you required to provide personal data?

As a general principle, you will provide us with your personal data entirely voluntarily; there are generally no detrimental effects for you if you choose not to consent or to provide personal data. However, there are circumstances in which Heretix cannot take action without certain of your personal data, for example because this personal data is required to process your instructions or orders, provide you with access to a web offering or newsletter or to carry out a legally required compliance screening. In these cases, it will unfortunately not be possible for us to provide you with what you request without the relevant personal data and we will notify you accordingly.

For which purposes will we use your personal data?

We may use your personal data for the following purposes only (Permitted Purposes):

● Providing services or things you may have requested;

● Managing and administering your or your organisation’s business relationship with Heretix, including processing payments, billing and collection, and support services;

● Compliance with our legal obligations (such as record keeping obligations), compliance screening or recording obligations (e.g. for financial and credit check);

● To analyse and improve our services and communications to you;

● Protecting the security of and managing access to our IT and communication systems, online platforms, websites and other systems, preventing and detecting security threats, fraud or other criminal or malicious activities;

● For insurance purposes;

● For monitoring and assessing compliance with our policies and standards;

● To comply with our legal and regulatory obligations and requests;

● To comply with court orders and exercises and/or defend our legal rights; and

● For any purpose related and/or ancillary to any of the above or any other purpose for which your personal data was provided to us.

Where you have expressly given us your consent, we may process your personal data also for the following purposes:

● Communicating with you through the channels you have approved to keep you up to date on the latest developments, announcements, and other information about Heretix services and products as well as Heretix events and projects;

● Customer surveys, marketing campaigns, market analysis or other promotional activities or events; or

● Collecting information about your preferences to create a user profile to personalise and foster the quality of our communication and interaction with you (for example, by way of newsletter tracking or website analytics).

With regard to marketing-related communication, we will – where legally required – only provide you with such information after you have opted in and provide you the opportunity to opt out anytime if you do not want to receive further marketing-related communication from us. We will not use your personal data for taking any automated decisions affecting you or creating profiles other than described above.

Depending on for which of the above Permitted Purposes we use your personal data, we may process your personal data on one or more of the following legal grounds:

● Because processing is necessary for the performance of a contract with you or your organisation;

● To comply with our legal obligations (e.g. to keep records for tax purposes); or

● Because processing is necessary for purposes of our legitimate interest or those of any third party recipients that receive your personal data, provided that such interests are not overridden by your interests or fundamental rights and freedoms.

In addition, the processing may be based on your consent where you have expressly given that to us.

With whom will we share your personal data?

We may share your personal data in the following circumstances:

● We may disclose your contact details on a confidential basis to third parties for the purposes of collecting your feedback on our service provision, to help us measure our performance and to improve and promote our services;

● We may share your personal data with companies providing services for credit risk reduction and other fraud and crime prevention purposes and companies providing similar services, including financial institutions, credit reference agencies and regulatory bodies with whom such personal data is shared;

● We may share your personal data with any third party to whom we assign or novate any of our rights or obligations;

● We may share your personal data with courts, law enforcement authorities, regulators or attorneys or other parties where it is reasonably necessary for the establishment, exercise or defence of a legal or equitable claim, or for the purposes of a confidential alternative dispute resolution process;

● We may also instruct service providers within or outside of Heretix, domestically or abroad, e.g. shared service centres, to process personal data for the Permitted Purposes on our behalf and in accordance with our instructions only. Heretix will retain control over and will remain fully responsible for your personal data and will use appropriate safeguards as required by applicable law to ensure the integrity and security of your personal data when engaging such service providers;

● We may also use aggregated personal data and statistics for the purpose of monitoring website usage in order to help us develop our website and our services.

Otherwise, we will only disclose your personal data when you direct us or give us permission, when we are required by applicable law or regulations or judicial or official request to do so, or as required to investigate actual or suspected fraudulent or criminal activities.

Personal data about other people which you provide to us

If you provide personal data to us about someone else (such as one of your directors or employees, or someone with whom you have business dealings) you must ensure that you are entitled to disclose that personal data to us and that, without our taking any further steps, we may collect, use and disclose that personal data as described in this Privacy Policy. In particular, you must ensure the individual concerned is aware of the various matters detailed in this Privacy Policy, as those matters relate to that individual, including our identity, how to contact us, our purposes of collection, our personal data disclosure practices (including disclosure to overseas recipients), the individual’s right to obtain access to the personal data and make complaints about the handling of the personal data, and the consequences if the personal data is not provided (such as our inability to provide services).

Keeping personal data about you secure

We will take appropriate technical and organisational measures to keep your personal data confidential and secure in accordance with our internal procedures covering the storage, disclosure of and access to personal data. Personal data may be kept on our personal data technology systems, those of our contractors or in paper files.

Transferring your personal data abroad

We may transfer your personal data abroad if required for the Permitted Purposes as described above. We will ensure that any such international transfers are made subject to appropriate or suitable safeguards as required by the General Data Protection Regulation (EU) 2016/679 or other relevant laws. This includes entering into the EU Standard Contractual Clauses which are available here. You may contact us anytime using the contact details below if you would like further information on such safeguards.

We will also require our agents, consultants and sub-contractors and others who are outside the European Economic Area and to whom we transfer your personal data to ensure a similar level of data protection.

When doing so we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of your personal data.

Updating personal data about you

If any of the personal data that you have provided to us changes, for example if you change your email address or if you wish to cancel any request you have made of us, or if you become aware we have any inaccurate personal data about you, please let us know by sending an email to hello@heretix.co. We will not be responsible for any losses arising from any inaccurate, inauthentic, deficient or incomplete Personal Data that you provide to us.

For how long do we retain your personal data?

Your personal data will be deleted when it is no longer reasonably required for the Permitted Purposes or you withdraw your consent (where applicable) and we are not legally required or otherwise permitted to continue storing such data. We will, in particular, retain your personal data where required for Heretix to assert or defend against legal claims until the end of the relevant retention period or until the claims in question have been settled.

Your rights

Subject to certain legal conditions, you have the right to request a copy of the personal data about you which we hold, to have any inaccurate personal data corrected and to object to or restrict our using your personal data. You may also make a complaint if you have a concern about our handling of your personal data.

If you wish to do any of the above please send an email to hello@heretix.co. We may request that you prove your identity by providing us with a copy of a valid means of identification in order for us to comply with our security obligations and to prevent unauthorised disclosure of data. We reserve the right to charge you a reasonable administrative fee for any manifestly unfounded or excessive requests concerning your access to your data, and for any additional copies of the personal data you request from us.

We will consider any requests or complaints which we receive and provide you with a response in a timely manner. If you are not satisfied with our response, you may take your complaint to the relevant privacy regulator. We will provide you with details of your relevant regulator upon request.

Updates to this Privacy Policy

This Privacy Policy was last updated in September 2018. We reserve the right to update and change this Privacy Policy from time to time in order to reflect any changes to the way in which we process your personal data or changing legal requirements. In case of any such changes, we will post the changed Privacy Policy on our website or publish it otherwise. The changes will take effect as soon as they are posted on this website.

Our use of cookies and other information-gathering technologies

A ‘cookie’ is a small text file which is stored on the user’s hard drive or mobile device. Cookies perform a number of functions associated with browsing websites and are used for a variety of different purposes, such as tracing users from page to page on an internet site, thereby enhancing a user’s browsing experience. They are generated by web servers when the user enters an internet page, and are passed to the user’s computer or mobile device and stored for subsequent future access.

We only use cookies in certain areas of this website and the purposes for which they are used are detailed below. You are not obliged to accept a cookie and you can modify your browser so that it will not accept cookies. However, if you do so this may affect your browsing experience and certain functions within this website may not work.

This website uses the following cookies:

Session cookies

Session cookies are used to temporarily store information about logged in users. These cookies do not collect information from the user’s computer, and do not identify the user.

Permanent cookies

Permanent cookies are used to enhance a user’s browsing experience by ‘remembering’ that user on subsequent visits.

Acceptance of cookies

We record whether a user has accepted the cookie policy. The cookies expire one year after the last page was requested.

Generic Google Analytics cookies

These cookies are used by Google Analytics, which monitors traffic levels, search queries and visits to this website. Google Analytics stores internet protocol (IP) addresses on its servers in the US. An IP address is a unique number assigned to each device (such as your computer) that allows it to communicate with other devices on a computer network (such as modems, printers or other computers). Neither Heretix nor Google associate your IP address with any information that can identify the user personally.

These cookies enable Google to determine whether you are a return visitor to the site, and to track the pages that you visit during your session.

Turing Festival Ltd.

The data that is collected will be used by Turing Festival Ltd. to plan, manage and promote our events, and to communicate with you about the event for which you registered and future events.

We collect information from Turing Fest attendees and website visitors in order to plan and deliver our events, and to promote future events. Turing Festival Ltd. processes your data with due care, in accordance with all applicable laws and regulations.

Our Privacy Policy
Turing Festival Limited (“Turing Fest”) collects personal data of its customers and visitors of its websites whilst providing its services.

Turing Fest processes your data with due care, in accordance with all applicable laws and regulations.

Our Privacy Policy explains what data we process, how we do that and how you may use your rights as a data subject (e.g. right to object, right of access). This Privacy Policy may be updated from time to time. This Privacy Policy applies to all personal data that Turing Fest processes during the execution of our services, including the personal data of visitors of the Turing Fest websites.

This Privacy Policy only covers data processing carried out by Turing Fest. The Privacy Policy does not address and we are not responsible for the privacy practices of any third parties.

Identity of the controller of the processing of your personal data
The controller of the processing of the personal information is:
Turing Festival Limited
Company number: SC533170
Registered address: 5 Tower Buildings, Station Road, Birnam, Dunkeld PH8 0DS, Scotland.
Contact email address: tannya@turingfest.com
Website: www.turingfest.com

Personal data processed and sources of data
Turing Fest collects two types of information from our Users: (i) User Data; and (ii) Technical Data. Although we do not normally use Technical Data to identify you as an individual, you can sometimes be recognized from it. In such situations, Technical Data can also be considered personal data.

We may collect and process the following User Data about our customers and visitors: (i) first and last name; (ii) address details, (iii) telephone number, (iv) e-mail address, (v) your location when you use our services, (vi) payment details, (vii) other personal data you provide yourself, including pictures, for example when creating a profile, in correspondence and by phone.

We may collect User Data from our customers and visitors in a variety of ways, including, when they register to our services, subscribe to a newsletter, buy a ticket to one of our events or fill out a form. Further, please note that we also collect details of any transactions and payments you carry out through our services. We will collect User Data from customers and visitors only if they voluntarily submit such information to us or carry out transactions or payments through our services or sites.

We and/or our authorised third party service providers, may automatically collect Technical Data when you visit or interact with our services or sites. Technical Data may include the browser name, the type of computer or device, time spent on website, interaction with the Services, URL of the website you visited before and after visiting the Services, the time and date of user visits, surfing habits, IP address, operating system and the Internet service providers utilised and other similar technical information.

Cookies
We use various technologies to collect and store information when you visit a Turing Fest website, including cookies. Cookies allow us to calculate the aggregate number of people visiting our websites and monitor the use of the websites. This helps us to improve our websites and better serve our users. We also use cookies that make the use of the website easier for you, for example by remembering usernames, passwords and (language) preferences. We also use tracking and analytics cookies to see how well our services are being received by our users.

You may choose to set your web browser to refuse cookies, or to alert you when cookies are being sent. If you do so, note that some parts of our sites and services may not function properly. For more information about cookies and how to delete them, visit allaboutcookies.org.

Our sites use Google Analytics and other web analytics services to compile reports on visitor usage and to help us improve our sites and services. For an overview of Google Analytics, please visit google.com/analytics. You can opt-out of Google Analytics with this browser add- on tool: tools.google.com/dlpage/gaoptout.

Purposes and legitimate grounds for the processing of your data
PURPOSES
There are several purposes of the processing of your personal data by Turing Fest:

To provide our services and carry out our agreement with you
Turing Fest processes your personal data in the first place to be able to deliver our services to you and to run, maintain and develop our businesses. We use the data for example to handle your payments, provide services or contact you regarding your registration to one of our events. If you contact our staff, we will use the information provided by you to answer your questions or solve your complaint. In order to ensure that our services are in line with your needs, these data can be used for things like customer satisfaction surveys. We might also request another party to do this for us.

For customer communication (including marketing)
Turing Fest processes your personal data to contact you regarding our services and to inform you of changes to our services and products. Your data are also used for research and analysis to improve our services and our websites. We may also use your data entered on our websites in certain cases to send information by email about other services of Turing Fest to you, provided that you have given us consent to that.

For quality improvement and trend analysis
We may also process information about your use of the services to improve the quality of our services e.g. by analysing any trends in the use of our services. When possible, we will do this using only aggregated, non-personally identifiable data.

Legitimate grounds for processing
Turing Fest processes your personal data to perform our contractual obligations towards you and to comply with legal obligations. Furthermore, we process your personal data to pursue our legitimate interest to maintain and develop our businesses.

Transfer to countries outside Europe
Turing Fest may transfer your personal data to countries outside the European Union and the European Economic Area subject to the decision of the European Commission that such countries offer an adequate level of data protection, whether by their domestic legislation or of the international commitments they have entered into. If you wish to know more about international transfers of your personal data, you may contact us via the contact details above.

Recipients
We only share your personal data within the organisation of Turing Fest if and as far as reasonably necessary to perform and develop our services.

We do not share your personal data with third parties outside of Turing Festival Limited unless one of the following circumstances applies:

It is necessary for the purposes of this Privacy Policy

To the extent that third parties need access to personal data to perform such services, Turing Fest has taken the appropriate contractual and organisational measures to ensure that your data are processed exclusively for the purposes specified in this Privacy Policy and in accordance with all applicable laws and regulations. Furthermore, we may provide your personal data to our affiliates or other trusted businesses or persons to process it for us, based on our instructions and in accordance with our Privacy Policy and any other appropriate obligations of confidentiality and security measures.

For legal reasons
We may share your personal data with third parties outside Turing Fest if we have a good-faith belief that access to and use of the personal data is reasonably necessary to: (i) meet any applicable law, regulation, and/or court order; (ii) detect, prevent, or otherwise address fraud, security or technical issues; and/or (iii) protect the interests, properties or safety of Turing Fest, our users or the public as far as in accordance with the law. When possible, we will inform you about such processing.

With your explicit consent
We may share your personal data with third parties outside Turing Fest for other reasons than the ones mentioned above when we have your explicit consent to do so, unless such is necessary for the provisions of our services. You have the right to withdraw this consent at all times.

To provide services to you as part of an event
Turing Fest works with hotel partners and conference planning partners to offer discounted room rates to conference attendees. It is a standard practice in the conference planning industry to share lists of conference attendees (names only) with hotel and conference planning partners in order to audit the reservations at hotels and to ensure that all attendees with a hotel registration are identified as conference attendees.

Turing Fest may share your name only (no company information or contact information) with our hotel partners and conference planning partners for the purposes of hotel reservation auditing.

Storage period
Turing Fest does not store your personal data longer than is legally permitted and necessary for the purposes for which the data were collected. The storage period depends on the nature of the information and the purposes of processing. The maximum period may therefore vary per use. In general, we store data for the provision of services for a maximum of five years after our relation ended.

Your rights
RIGHT TO ACCESS
Turing Fest offers you access to the personal data we process. This means you can contact us asking us to inform you about your personal data that we have collected and processed and the purposes such data are used for.

RIGHT TO CORRECT
You have the right to have incorrect/unprecise, incomplete, outdated, or unnecessary personal data we have stored about you corrected or completed by contacting us.

RIGHT TO DELETION
You may also ask us to delete your personal data from our systems. We will comply with such requests unless we have a legitimate ground to not delete the data. After the data have been deleted, we may not immediately be able to delete all residual copies from our active servers and backup systems.

RIGHT TO OBJECT
You may object to certain use of your personal data if such data are processed for other purposes than necessary for the performance of our services or for compliance with a legal obligation. You may also object to any further processing of your personal data after prior given consent. If you object to the further processing of your personal data, this may lead to fewer possibilities to use our websites and other services.

You have the right to opt out of receiving electronic direct marketing communications from us by clicking on the opt-out link provided in all marketing communications we send you and choosing not to receive marketing communications from us in the future. You also have the right to prohibit us from using your personal data for direct marketing purposes, market research and profiling by contacting us on the addresses indicated above.

RIGHT TO RESTRICTION OF PROCESSING
You may request us to restrict certain processing of your personal data. If you restrict certain processing of your personal data, this may lead to fewer possibilities to use our websites and other services.

RIGHT TO DATA PORTABILITY
You have the right to receive your personal data from us in a structured, commonly used format in order to transmit the data to another controller.

HOW TO USE YOUR RIGHTS
You may use these rights by sending a letter or e-mail, including your name, address, phone number and a copy of a valid ID to us on the addresses set out above. If your request regards personal data in a cookie, you have to enclose a copy of the said cookie. We may request the provision of additional information necessary to confirm your identity. We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded. In case you consider our processing activities of your personal data to be inconsistent with the applicable data protection laws, you may lodge a complaint with the local supervisory authority for data protection.

Information security
We will take all reasonable, appropriate security measures to protect Turing Fest and our customers from unauthorised access to or unauthorised alteration, disclosure or destruction of personal data we hold. Measures include, where appropriate, encryption, firewalls, secure facilities and access rights systems. Should, despite the security measures, a security breach occur that is likely to have negative effects to your privacy, we will inform you about the breach as soon as reasonably possible.

Applicability and changes
Our Privacy Policy applies worldwide, to all of the services offered by Turing Fest. This Privacy Policy is published in English. Our Privacy Policy may change from time to time. You can find the current version on our website. We will not make substantial changes to this Privacy Policy or reduce your rights under this Privacy Policy without providing you with notice.