Privacy Notice

DEVCON 8 PRIVACY NOTICE

1. We may process your name, contact data, and other personal data relating to your ticket purchase and attendance at Devcon 8 (“Devcon”) (together, “Data”) for the purposes and in the course of Devcon.
2. You have to purchase tickets to Devcon on the Pretix platform. The operator of the Pretix platform, rami.io GmbH, Berthold-Mogel-Straße 1, 69126 Heidelberg, Germany, is our data processor. Your Data will be stored by the data processor in Germany. Your Data may in addition be stored on our servers in the EU. We, as your data controller, apply appropriate technical and organisational measures designed to protect your Data.
3. In some cases, you may have the option to verify your eligibility for a particular ticket category or discount through the SELF app or other similar third-party verification services operated by independent providers (“Verification Providers”). Where you do so, the relevant Verification Provider may process your Data as an independent controller in connection with that verification process. That verification process takes place outside our systems and we do not control the Verification Provider’s processing of your Data. For more information about how the relevant Verification Provider may process your Data, please review that provider’s privacy notice.
4. Where you use a Verification Provider for verification, we may receive from that Verification Provider a cryptographic proof or verification result confirming that specified eligibility criteria have been met in relation to the relevant email address, ticket purchase, or ticket holder. We do not receive or store the underlying identity document, identity document number, or other underlying document data used by the Verification Provider to generate that proof or verification result.
5. If you have purchased a ticket to Devcon, you may request a ticket purchase confirmation letter from us. If you do so, we may ask you to provide additional Data, including your full name, contact details, identity document, proof of address, ticket purchase information, and other information reasonably required to verify your identity, confirm your ticket purchase, conduct appropriate checks, and prepare the letter. Where you do so, we may use third-party service providers to conduct identity verification, sanctions screening, or similar checks in connection with your request. Such providers may process your Data as our processors or as independent controllers, depending on the relevant service and provider. Where a provider acts as an independent controller, its processing of your Data will be subject to its own privacy notice.
6. We process your Data for the following purposes: (a) ticket purchase; (b) verification that you are the holder of the ticket; (c) administration of ticket categories, discounts, and eligibility criteria; (d) fraud prevention and protection against misuse of tickets or discounts; (e) processing ticket purchase confirmation letter requests; and (f) Devcon registration, check-in, admittance, participation, safety, security, and administration.
7. You are under no obligation to provide us with your Data. However, if you do not do so, you may not be able to purchase a ticket, attend or otherwise participate in Devcon, access particular ticket types or discounts, or receive a ticket purchase confirmation letter. Should the provision of your Data be mandatory by law, we will inform you separately thereof.
8. We process your Data for the performance of our contract with you insofar as such processing is necessary for ticket purchase, ticket administration, and attendance at Devcon, and otherwise on the basis of our overriding legitimate interest in achieving the purposes set out above, in accordance with Article 6(1)(b), Article 6(1)(f), and, where applicable, Article 6(1)(c) of the General Data Protection Regulation (“GDPR”).
9. To achieve the purposes set out above, some of your Data may be transferred to the following categories of recipients:
   1. IT service providers that we may use, such as Pretix;
   2. Third-party Verification Providers, such as SELF or other similar services, which may process personal data as independent controllers;
   3. Identity verification, sanctions screening, or similar service providers; and
   4. Courts, regulators, law enforcement authorities, or other third parties where such disclosure is required by applicable law, regulation, or legal process, or is necessary for the establishment, exercise, or defence of legal claims.
10. Some of the recipients referred to above may be located in and/or process personal data outside of your home country. The level of data protection in another country may not be equivalent to that in your home country. However, we only transfer your Data to countries which the EU Commission has determined to have an adequate level of data protection, or we may take measures to ensure that all recipients provide an adequate level of data protection. We may do this, for example, by entering into appropriate data transfer agreements based on Standard Contractual Clauses (2021/914/EC).
11. We may retain your Data for as long as: (a) required under statutory retention obligations; and/or (b) for potential legal claims, where personal data is needed to raise or defend a claim, and such claims are not yet time-barred.
12. Under the applicable law, you have the right to (under the conditions set out in applicable law):
    1. Obtain confirmation as to whether and what kind of personal data we store about you and to request copies of such data;
    2. Request rectification or erasure of your personal data;
    3. Request us to restrict the processing of your personal data;
    4. Object to the processing of your personal data;
    5. Request data portability; and
    6. Lodge a complaint with the competent supervisory authority.
13. Please address your requests or questions concerning the processing of your personal data to:

    Stiftung Ethereum (Foundation Ethereum)
    Zeughausgasse 7a, 6300 Zug, Switzerland
    Email: notices@ethereum.org

14. Our representative in the EU according to Article 27 GDPR is:

    Ethereum Dev GmbH
    Oranienstrasse 6, 10997 Berlin, Germany
    Email: notices@ethereum.org

15. We may amend this privacy notice from time to time. Any updated version of this privacy notice will be made available through the relevant Devcon or event channels.