This is the privacy statement of 013 Poppodium (version January 6, 2025), located at Veemarktstraat 44, 5038 CV Tilburg, registered in the Trade Register of the Chamber of Commerce under number 18026213.
1. General
Stichting Popcluster 013, operating under the name 013 Poppodium (hereinafter: 013 Poppodium), is the venue for pop and dance culture in the broadest sense of the word. We organize live concerts, dance and club nights, festivals, and non-musical programming. 013 Poppodium is and feels responsible for the personal data that has been provided to us in confidence and with a sense of security. We emphasize the importance of good privacy protection. We are also aware that everyone has the right to careful handling of their personal data. Therefore, we process personal data in an honest, transparent, careful manner, and in accordance with applicable legislation (including the General Data Protection Regulation (GDPR) hereinafter: GDPR).
This privacy statement outlines how 013 Poppodium processes the personal data of the following data subjects: visitors to the website (013.nl), attendees of 013 Poppodium events, (potential) customers, job applicants, as well as contact persons representing business partners, suppliers, and intermediaries (hereinafter referred to as the Data Subject(s)).
2. Personal Data
2.1 Personal data refers to information about an identified or identifiable natural person, either directly or indirectly, such as a visitor to an event hosted by 013 Poppodium. 013 Poppodium may process the following (categories of) personal data of data subjects:
i. Identification and contact details: for example, your name, (email) address, date of birth, phone number, data linked to your 013 account;
ii. Bank and payment details: bank, bank account number, invoice number;
iii. Data required for the recruitment process: for example, a CV and cover letter;
iv. Data related to the device of the data subject and/or their online activity (whether obtained via cookies or not): such as an IP address and cookie ID, browsing behavior, and search history;
v. Communication preferences; and
vi. Visual material in which the data subject is visibly depicted.
2.2 013 Poppodium collects personal data from an data subject in the following ways, among others:
i. When the data subject provides this personal data to 013 Poppodium (via the website), for example, when creating a 013 account;
ii. When the data subject contacts 013 Poppodium with a request for information about its services or products;
iii. When the data subject places an order (online or offline) for themselves and/or others with 013 Poppodium;
iv. When personal data is generated based on the data subject's use of 013 Poppodium's services or website, including through cookies;
v. 013 Poppodium may receive personal data from third parties, such as recruitment agencies, in the context of recruitment and selection; and
vi. Through visual recordings (photos and videos) made during events hosted by 013 Poppodium.
2.3 A data subject is never obligated to provide personal data to 013 Poppodium. However, if you refuse to provide personal data in certain cases, it may be that we are unable to offer you our services.
3. Purposes and Legal Grounds for Processing Personal Data
3.1 013 Poppodium may process the personal data of a data subject based on one of the following legal grounds from the GDPR:
i. Consent of the data subject;
ii. The processing is necessary for the performance of a contract with the data subject, or at the request of the data subject prior to entering into a contract;
iii. The processing is necessary to comply with a legal obligation of 013 Poppodium;
iv. The processing is necessary for the pursuit of legitimate interests of 013 Poppodium or a third party.
3.2 013 Poppodium processes certain personal data for the pursuit of its legitimate interests. The legitimate interests of 013 Poppodium may include, among other things: marketing (promotion of shows/events), advertising, research into its own products or services, IT management and security, sharing with affiliated parties of 013 Poppodium.
3.3 013 Poppodium processes personal data for the following purposes, based on the legal grounds mentioned:
4. Minors
4.1 In certain cases, 013 Poppodium requests consent to use specific personal data. If the data subject concerned is younger than 16 years old, they require the consent of their parent(s) or guardian to provide their personal data to 013 Poppodium. In such cases, the parent(s) or guardian may also withdraw the given consent at any time or modify or delete the data provided to 013 Poppodium.
5. Third-Party Recipients of Personal Data
5.1 When legally required or otherwise permitted, 013 Poppodium may share personal data with third parties. The sharing of personal data with third parties will only occur for the purpose of processing the data to achieve the objectives outlined in this privacy statement. For example, personal data may be shared with (co-)organizers of an event who may or may not qualify as (independent) data controllers for the personal data. This is done to execute the agreement made with the data subjects, because you have given us your consent for this, or to safeguard our legitimate interest or that of the (co-)organizer.
5.2 013 Poppodium may also be legally obligated to provide personal data to authorized authorities (such as regulators or other public authorities).
If necessary, your personal data may also be shared with our accountant, lawyer, or other external advisors.
5.3 Furthermore, third parties may process personal data on behalf of and under the responsibility of 013 Poppodium. In such cases, the third party acts as a (sub-)processor of the personal data. For example, Ternair processes personal data on behalf of and under the responsibility of 013 Poppodium to allow 013 Poppodium to fulfill agreements with visitors for tickets sold for events. If we engage a (sub-)processor to process personal data, we ensure that a (sub-)processing agreement is established.
5.4 Your personal data will, in principle, be processed in countries within the European Economic Area (EEA). However, it may happen that personal data is shared with or stored by organizations in countries outside the EEA. In the event of such an international transfer of personal data, we take the necessary measures to provide your personal data with a comparable level of protection and ensure that third parties implement the necessary measures in this regard. As such, any international transfers of personal data will take place in accordance with Chapter V of the GDPR.
6. Cookies and Similar Technologies
6.1 013 Poppodium uses cookies and similar technologies. Depending on the preferences specified by the data subject, these cookies allow 013 Poppodium to automatically collect certain data about the data subject’s history and activities on the website of 013 Poppodium and possibly third-party apps. For example, personal data may be collected while the data subject is using the website or apps, or when these are running in the background on the data subject’s device. This data can be combined by 013 Poppodium with other data about the data subject’s device, such as an IP address. If the data subject’s consent is required for this, 013 Poppodium will request it in advance.
6.2 The cookie policy of 013 Poppodium, which can be found here, provides further information about the use of cookies, including the purposes for which 013 Poppodium uses cookies.
7. Security Measures
7.1 013 Poppodium implements appropriate technical and organizational security measures to protect personal data against, among other things, loss, destruction or damage, unauthorized access, or any other form of unlawful processing. These measures include, for example, physical and organizational access control measures, securing every desktop with a username and password, and authorization management to ensure that your data is not accessible to all employees of 013 Poppodium. Keeping software up-to-date and regularly testing our security measures are also part of these efforts.
8. Rights of Data Subjects
8.1 Under the GDPR, data subjects have various rights regarding the processing of their personal data. As a data subject, you have the right, in accordance with the provisions of the GDPR, to access, rectify, and delete the personal data we process about you. Additionally, you may be entitled to object to the processing of your personal data, request the restriction of data processing, and you may have the right to data portability.
8.2 Have you given us consent to process your personal data for specific purposes? You can withdraw your consent at any time. Withdrawing consent at any point does not affect the processing of personal data prior to the withdrawal of your consent.
Please note: Except for the right to withdraw consent, the aforementioned rights are not absolute. We are not obligated to comply with every request to exercise one of these rights in all cases. In certain circumstances, 013 Poppodium may refuse to cooperate with a request to exercise the aforementioned rights. If this is the case, we will inform you of the reasons for our decision.
8.3 If you, as a data subject, wish to exercise any of your rights under the GDPR or if you have questions about this privacy statement, you can contact 013 Poppodium using the contact details provided in Section 11. If you have a complaint about the way we process your personal data, you can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). For more information, please visit the website of the Autoriteit Persoonsgegevens.
9. Retention Periods
9.1 We only retain your personal data for as long as necessary to provide the products and services offered/requested by 013 Poppodium, for the purposes outlined in this privacy statement, and for as long as we are legally required to retain certain personal data.
9.2 The retention periods applied by 013 depend on the situation, whether the information is necessary to provide the product or service, the consents granted regarding the use of personal information, and any legal, contractual, or other statutory obligations to retain personal information.
For example, personal data required for financial administration is retained for at least 7 years.
9.3 The personal data of applicants is retained for a maximum of 4 weeks after the end of the application process, or longer if we have obtained your consent to do so. After the expiration of the retention periods, your personal data will be anonymized or deleted.
10. Changes to This Privacy Statement
10.1 013 Poppodium may modify this Privacy Statement, in whole or in part, on a regular basis and without prior notice. 013 Poppodium will announce any changes in accordance with the law. In the case of a significant change to the processing of personal data by 013 Poppodium, and consequently to this Privacy Statement, a clear notification will be provided on the website. 013 Poppodium therefore advises data subjects to regularly check the website for any updates or adjustments.
11. Contact
11.1 For questions or comments regarding this Privacy Statement and/or the processing of personal data, you can contact 013 Poppodium in the following ways:
- By phone: via 013-4609500. 013 Poppodium is available by phone Monday through Friday from 9:30 AM to 12:00 PM and from 1:00 PM to 5:00 PM; or
- By email: at [email protected] or [email protected].