Flutter & FriendsPrivacy Policy
Last updated: 1 March 2026
This Privacy Policy explains how SIA Flutter&Friends ("we", "us", "the organizers") collect, use, and protect your personal data when you visit our website (flutterfriends.dev) or purchase a ticket for Flutter & Friends 2026 (the "Event").
We are committed to GDPR compliance as required by EU Regulation 2016/679.
1. Data Controller
Organization: FLUTTER & FRIENDS SIA Registration number: 50203716061 (Latvia) Swedish organization number: 502101-4021 Swedish VAT number: SE502101402101 Contact: [email protected] Address: Žagatu iela 20 - 102, Rīga, LV-1084, Latvia
2. What Data We Collect
2.1 When You Buy a Ticket
- Full name
- Email address
- Payment information (processed by Stripe — we do not store card data)
- Ticket type and order reference
2.2 When You Use Our Website
- IP address and browser information (collected by Firebase Hosting / Google Analytics, if enabled)
- Pages visited and time spent (anonymized analytics)
- Cookie preferences
2.3 When You Contact Us
- Name and email address included in your message
3. Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Processing your ticket purchase | Performance of a contract (GDPR Art. 6(1)(b)) |
| Sending booking confirmations and event updates | Performance of a contract (GDPR Art. 6(1)(b)) |
| Complying with Swedish accounting law | Legal obligation (GDPR Art. 6(1)(c)) |
| Website analytics (if enabled) | Legitimate interest / Consent (GDPR Art. 6(1)(a/f)) |
4. How We Use Your Data
- To issue and manage your ticket.
- To send confirmation emails and important event updates.
- To comply with legal obligations (e.g., invoice records).
- To improve our website and future events (anonymized analytics).
We do not sell, rent, or share your personal data with third parties for marketing purposes.
5. Data Sharing
We share data only with:
- Stripe Payments Europe, Ltd. (Dublin, Ireland) — our payment processor. Your payment data is governed by Stripe's privacy policy. We receive only the order reference, payment status, and the last four digits of the card for reconciliation.
- Email service provider — to send transactional emails (booking confirmation, event updates).
- Firebase / Google — for website hosting and optional analytics. Data is processed in accordance with Google's privacy policy.
All processors are contractually bound to handle your data according to GDPR requirements.
6. Data Retention
| Data | Retention Period |
|---|---|
| Ticket purchase records | 7 years (Swedish accounting law) |
| Email address for event communications | Deleted 90 days after the Event |
| Website analytics | 14 months (anonymized after 26 months) |
7. Your Rights
Under GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data (subject to legal obligations).
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): https://www.imy.se
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Payments are handled entirely by Stripe's PCI-DSS Level 1 certified infrastructure — we never see or store card numbers.
9. Cookies
See our separate Cookie Policy for details on the cookies used by this website.
10. Changes to This Policy
We may update this policy from time to time. We will notify registered attendees of material changes by email. The current version is always available at flutterfriends.dev/privacy.
11. Contact
For privacy-related questions, contact: [email protected]