Privacy Policy & Data Protection (GDPR)

1. Data Controller

The data controller responsible for your personal data is Another Level Events Oslo, operating in Oslo, Norway.

Contact & DPO: connection.another.level@gmail.com | Sognsveien 220, 0863 Oslo, Norway.

2. Categories of Data Collected

• Contact Information: Full name, email address, telephone number.
• Event Participation: Ticket tier selected, registration dates, guest attendee information.
• Payment Metadata: Stripe checkout session IDs, amount paid in NOK, tax breakdown. Credit card data is processed directly by Stripe and never stored on our servers.
• Technical Logs: IP address, device telemetry, and essential session cookies for fraud prevention.

3. Legal Basis for Processing

We process your data strictly under recognized GDPR legal grounds:

• Performance of a Contract (Art. 6(1)(b)): To manage event registrations, venue access, and workshop logistics.
• Compliance with Legal Obligations (Art. 6(1)(c)): To maintain financial transaction records in compliance with the Norwegian Accounting Act (Bokføringsloven § 13).
• Consent (Art. 6(1)(a)): For optional performance cookies and event email newsletters, revocable at any time.

4. Data Retention & Bokføringsloven

In accordance with Norwegian financial law (Bokføringsloven), transaction and invoicing records are retained for a statutory period of 5 years. Personal identification data unrelated to financial audits is promptly erased or anonymized upon attendee request.

5. Your GDPR Rights

Under Chapter III of the GDPR, you have the right to:

• Access your data and request a copy in machine-readable JSON format (Art. 20 Portability).
• Request rectification of inaccurate personal records (Art. 16).
• Request erasure and anonymization of your personal data ("Right to be Forgotten", Art. 17).
• Withdraw consent for cookies or marketing communications.