Data Protection Policy
(Version: November 2025)
1. Introduction
This policy explains how Ingrid Firmhofer Photojournalist processes data collected through the Community Building Workshop registration form. We are committed to protecting your personal information and your right to privacy.
2. Responsible Entity
The entity responsible for the processing of your data is:
Responsible Entity: Ingrid Firmhofer Photojournalist
Contact Email: mail@ingridfirmhofer.com
3. Data Collection and Purpose
We collect and process personal data only for the purpose of organizing and executing the workshop. We rely on your explicit consent and contractual necessity to process the following categories of data:
Identity and Contact Data
Data Collected: Name, Email Address, Phone Number (if applicable).
Purpose: Communication regarding the event, schedule changes, and logistical information.
Registration and Contract Data
Data Collected: Ticket Choice, Meal Choices, Accommodation Preference.
Purpose: Fulfillment of the service contract (workshop participation), organizational planning, and facility management.
Payment Data
Data Collected: Transaction Details, Total Amount Due.
Purpose: Processing of payments via Wise and internal financial record keeping (Legal Basis: Contractual Necessity and Legal Obligation).
4. Data Recipients and Third-Party Processors
Your personal data is transferred to the following trusted partners solely for the necessary processing tasks:
JotForm: Used to host the registration form and securely collect data.
Google Sheets: Used for internal administrative organization and managing participant lists.
Wise: Used to process payments to the specified European bank account.
We do not sell your personal data to third parties.
5. Data Storage Duration
We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, including legal retention periods. Data irrelevant to accounting will be deleted shortly after the completion of the workshop.
6. Your Rights (DSGVO/GDPR)
Under the GDPR, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at [YOUR EMAIL FOR DATA PROTECTION INQUIRIES].
Right of Access (Art. 15): The right to request copies of your personal data.
Right to Rectification (Art. 16): The right to request that we correct any information you believe is inaccurate or incomplete.
Right to Erasure ('Right to be Forgotten,' Art. 17): The right to request that we delete your personal data under certain conditions.
Right to Withdraw Consent (Art. 7): If processing is based on your consent, you have the right to withdraw it at any time.