The short version: we ask only for what we need in order to reply to you or to have you take part as an exhibitor. We do not sell data and we do not give it to third parties for advertising.
1. Data controller
The organisers of the Athens Halloween Festival. Contact for personal data matters: [email protected].
2. What data we collect
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Exhibitor application form | Full name, brand, email, phone, tax status, product category, Instagram, photos, comments | Assessing the application, contact, organising the market | Steps taken before entering into a contract |
| Contact form | Full name, email, subject, message | Replying to your request | Legitimate interest / consent |
| Newsletter | Updates about the programme and the festival | Consent | |
| Photos at the venue | Your image in general shots | Documenting and promoting the festival | Legitimate interest |
3. How long we keep it
- Exhibitor applications: two years from submission, so that we can invite you again. You can ask for deletion sooner.
- Contact messages: one year after the last reply.
- Newsletter: until you unsubscribe. Every email has an unsubscribe link.
- Exhibitors' tax details: for as long as Greek tax law requires.
4. Who we share it with
With no one for advertising purposes. Access is limited to the members of the team who need it, and to our infrastructure providers (website hosting, email service) under a data processing agreement.
5. Cookies and third-party services
Nothing loads from third parties unless you ask for it. The fonts are stored on this website — no request is made to Google in order to read this page.
- Map (Google Maps) — the location page shows an “Open the map” button. The map loads only if you press it; Google then receives your IP address.
- Analytics and advertising pixels — if these are switched on, you will be asked for consent first. Before you press “Accept” no such script loads and no cookie is set. You can change your mind at any time through “Cookie preferences” in the footer.
- Ticket pre-sales — tickets are sold on more.com. When you press “Tickets” you leave this website and their privacy policy applies.
Your cookie choice is stored locally in your browser. It never reaches us and is not linked to anything about you.
6. Your rights
Under the General Data Protection Regulation you have the right to:
- Access the data we hold about you
- Have inaccurate details corrected
- Erasure (the “right to be forgotten”)
- Restrict or object to the processing
- Portability of your data
- Withdraw your consent at any time
Send your request to [email protected] and we reply within one month. If you believe we have not dealt with it properly, you can lodge a complaint with the Hellenic Data Protection Authority.
7. Security
The website runs over HTTPS only. The forms are protected against automated submissions and the data is stored on infrastructure with restricted access.