Privacy Policy

1. Data controller

Besa Illyrica is the data controller for personal data processed on besafestival.dk, in contact forms, ticket and merchandise enquiries, festival administration and ordinary communication with guests, suppliers, volunteers, press and partners.

You can contact us at Rexhep.aka.reggie@gmail.com or by phone on +45 40 58 25 68 if you have questions about this policy or want to exercise your rights.

2. Data we process

• Contact details such as name, email address, phone number, company, role and message content when you contact us.
• Purchase and ticket information such as order, ticket type, quantity, price, payment status, ticket code and practical information needed to provide admission or merchandise.
• Delivery and collection information for merchandise if we need to send, reserve or hand over products.
• Technical information such as IP address, browser, device type, time, referring page and website usage when needed for operations, security, statistics and debugging.
• Volunteer, supplier, press and sponsor information if you apply for or enter into a collaboration with the festival.

3. Purposes and legal basis

We process personal data to answer enquiries, administer the festival, sell or manage tickets and merchandise, send practical information, fulfil agreements, keep required accounts, secure the website and improve our communication.

The legal basis may be performance of a contract, our legitimate interest in running the festival and answering enquiries, compliance with legal obligations such as accounting rules, and consent where the law requires it, for example for certain newsletters or non-essential cookies.

4. Payment, tickets and third parties

If the website uses external payment or ticketing solutions, relevant information may be processed by providers such as Stripe, hosting providers, email providers and technical service partners. Payment card details are normally processed directly by the payment provider and not by Besa Illyrica.

We enter into data processing agreements where required, and we only share information when necessary to provide the service, comply with legal requirements or protect the festival's guests, operations and rights.

5. Cookies and statistics

The website may use necessary technical cookies and privacy-conscious statistics for operations, security, performance and understanding how the site is used. Non-essential cookies are only used where lawful and when the required consent has been obtained.

You can normally delete or block cookies in your browser. Some functions may stop working if necessary cookies are blocked.

6. Retention

We only keep personal data for as long as necessary for the purpose. Enquiries are deleted or anonymised when they are no longer relevant. Purchase, payment and accounting information is kept to the extent required by bookkeeping and documentation rules.

Information about volunteers, suppliers, press and partners is kept while the relationship is active and afterwards only if there is a legitimate need.

7. Your rights

• You can request access to the information we process about you.
• You can ask us to correct inaccurate or incomplete information.
• In certain cases, you can ask for deletion or restriction of processing.
• You can object to processing based on legitimate interest.
• You can withdraw consent where processing is based on consent.
• You can complain to the Danish Data Protection Agency if you believe the processing does not comply with data protection rules.

8. Security

We use appropriate technical and organisational security measures, including access limits, trusted providers, updated systems and access to personal data only where needed.