Organizer official information

MOYCHAY NEDERLAND B.V.

VAT Number: NL 860749101B01

KVK Number: 76687449

NETHERLANDS, 1016NG AMSTERDAM, ROZENGRACHT 92H

GDPR

Privacy Policy & Data Protection Acknowledgement

Amsterdam Tea Festival respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679, also known as the GDPR or AVG, and applicable Dutch data protection laws.

This Privacy Policy explains how Amsterdam Tea Festival collects, uses, stores, shares, and protects personal data in connection with Amsterdam Tea Festival 2027, including our website, ticket sales, vendor registration, workshop host registration, sponsorships, partnerships, newsletters, communications, and event organisation.

By using our website, buying a ticket, applying as a vendor, registering as a workshop host, subscribing to our newsletter, contacting us, or ticking the acceptance box connected to this Privacy Policy, you confirm that you have read and understood how Amsterdam Tea Festival processes personal data.

1. Who We Are

Amsterdam Tea Festival 2027 is organised by Moychay Nederland B.V., operating as Amsterdam Tea Festival.

For the purposes of the GDPR, Amsterdam Tea Festival acts as the data controller for the personal data it collects and processes in connection with the festival, unless stated otherwise.

For privacy questions or GDPR requests, you can contact us at: amsterdamteafestival@gmail.com

2. Who This Policy Applies To

This Privacy Policy applies to personal data relating to:

  • visitors and attendees;
  • ticket buyers;
  • vendors and exhibitors;
  • workshop hosts, speakers, teachers, performers, and presenters;
  • partners, sponsors, collaborators, press contacts, and professional contacts;
  • newsletter subscribers;
  • website users;
  • volunteers, staff, contractors, and other persons involved in the organisation of the festival;
  • persons who contact us by email, social media, contact form, registration form, or other communication channels.

3. What Personal Data We Collect

Depending on your relationship with the festival, we may collect and process the following categories of personal data.

A. Visitors and Ticket Buyers

We may collect your name, email address, ticket details, order number, payment status, payment-related information, invoice information where applicable, communication preferences, accessibility information if voluntarily provided, and any information you provide when contacting us.

Payment information is usually processed by our payment, ticketing, and registration providers, such as Pretix or other service providers used for ticketing and payment processing.

B. Vendors, Exhibitors, Workshop Hosts, and Professional Participants

We may collect your name, company name, brand name, trading name, business registration details, VAT or tax details where applicable, billing details, contact details, website, social media handles, product or service information, staff/helper names, workshop information, submitted photos, logos, brand materials, descriptions, contracts, invoices, payment information, dietary or accessibility information if voluntarily provided, and correspondence with us.

C. Partners and Sponsors

We may collect contact names, job titles, company details, brand information, billing details, contract information, sponsorship materials, logos, marketing assets, communication records, payment information, and information needed to perform the partnership or sponsorship arrangement.

D. Newsletter Subscribers

We may collect your email address, name if provided, subscription preferences, consent records, and newsletter engagement data where available.

E. Website Users

We may collect technical and usage information such as IP address, browser type, device type, operating system, approximate location, pages visited, time spent on the website, referral links, and cookie preferences.

Analytics data may be anonymised or aggregated where possible.

F. Event Safety, Security, and Incident Information

Where necessary, we may process information related to incidents, complaints, safety reports, access control, emergency situations, disputes, lost property, damage, injuries, misconduct, or communications with authorities, emergency services, insurers, legal advisers, or the venue.

4. How We Use Personal Data

We process personal data for the following purposes:

  • to sell, manage, and deliver tickets;
  • to send e-tickets, confirmations, reminders, updates, and practical event information;
  • to manage visitor access, registration, check-in, capacity, and event safety;
  • to review, approve, and manage vendor, exhibitor, workshop host, partner, and sponsor participation;
  • to allocate tables, booths, workshop rooms, add-ons, electricity, kitchen access, water services, signage, and other event facilities;
  • to issue invoices, process payments, manage accounts, and comply with tax and accounting obligations;
  • to communicate with participants before, during, and after the festival;
  • to promote the festival and participating vendors, sponsors, partners, and workshop hosts;
  • to publish public-facing event information such as exhibitor lists, workshop schedules, speaker names, brand names, logos, product descriptions, social media handles, and promotional materials;
  • to operate and improve our website, ticketing, registration, communications, and event services;
  • to send newsletters and marketing communications where permitted;
  • to respond to questions, complaints, requests, disputes, and incidents;
  • to protect the safety, security, reputation, and lawful operation of the festival;
  • to comply with legal obligations, venue requirements, permit conditions, insurance requirements, and requests from competent authorities;
  • to establish, exercise, or defend legal claims.

5. Legal Basis for Processing

We process personal data only where we have a lawful basis under the GDPR.

Depending on the situation, we rely on one or more of the following legal bases:

Performance of a contract

For example, when we process personal data to sell tickets, register vendors, manage workshop participation, perform sponsorship agreements, or provide agreed event services.

Consent

For example, when you subscribe to our newsletter, accept optional cookies, or agree to certain optional promotional uses. You may withdraw consent at any time.

Legal obligation

For example, when we keep invoices, accounting records, tax records, or information required by law.

Legitimate interests

For example, when we organise and secure the festival, communicate with participants, prevent misuse, manage incidents, promote the festival, handle disputes, improve our services, and protect our legal position.

Vital interests

In exceptional cases, we may process data where necessary to protect someone’s life or physical safety, for example during a medical or emergency situation.

6. Public-Facing Event Information

If you are a vendor, exhibitor, workshop host, sponsor, partner, speaker, performer, collaborator, or other public-facing participant, we may publish certain information that you provide to us for event promotion and organisation.

This may include:

  • brand name;
  • company name;
  • personal name, where relevant to your role;
  • logo;
  • photos;
  • product or service descriptions;
  • workshop title and description;
  • biography or professional profile;
  • website and social media handles;
  • sponsor or partner information;
  • stand, table, or workshop schedule information.

This information may be used on our website, ticketing pages, social media, newsletters, printed materials, event signage, floor plans, press materials, sponsor materials, partner communications, and archived festival materials.

You are responsible for ensuring that any logos, photos, text, trademarks, names, or other materials you provide to us may lawfully be used for these purposes.

7. Newsletter and Marketing Communications

If you subscribe to our newsletter, we may use your email address to send you updates about Amsterdam Tea Festival, future editions, programme announcements, ticket information, vendor announcements, workshops, partners, sponsors, and related festival news.

You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us at: amsterdamteafestival@gmail.com

If we send marketing communications based on consent, you may withdraw your consent at any time.

8. Cookies and Website Analytics

Our website may use cookies and similar technologies.

We may use:

  • necessary cookies, which are required for the website or ticketing functions to work;
  • analytics cookies, which help us understand how visitors use the website;
  • marketing or social media cookies, only where used and where legally permitted.

Where required, we ask for your consent before placing non-essential cookies. You can change or withdraw your cookie consent through the cookie settings available on our website, where applicable.

Analytics data may be anonymised or aggregated where possible.

9. Data Sharing

We do not sell personal data.

We may share personal data only where necessary with:

  • ticketing and registration providers;
  • payment providers;
  • newsletter and email service providers;
  • website, hosting, IT, analytics, and cloud service providers;
  • the event venue;
  • event staff, volunteers, contractors, and operational service providers;
  • designers, printers, marketing service providers, and communication partners, where needed for event promotion;
  • sponsors or partners, only where relevant and lawful;
  • insurance providers, legal advisers, accountants, bookkeepers, and professional advisers;
  • police, ambulance, fire brigade, municipality, NVWA, tax authorities, courts, regulators, or other competent public authorities where required by law or necessary for safety, compliance, or legal protection.

Where we use external service providers to process personal data on our behalf, we take appropriate steps to ensure that they process personal data in accordance with GDPR requirements.

10. International Transfers

Where possible, we use service providers located in the European Economic Area.

If personal data is transferred outside the European Economic Area, we will take appropriate safeguards where required by the GDPR, such as using service providers with recognised transfer mechanisms, adequacy decisions, standard contractual clauses, or other lawful safeguards.

11. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, tax, accounting, insurance, safety, dispute-resolution, and event administration purposes.

In general:

  • ticket, invoice, payment, accounting, and tax-related records may be kept for the legally required retention period;
  • in the Netherlands, business records must generally be kept for at least 7 years;
  • newsletter data is kept until you unsubscribe or until we no longer need it;
  • vendor, workshop host, sponsor, partner, and participant data is kept for the duration of the collaboration and thereafter where needed for administration, accounting, legal, insurance, or dispute purposes;
  • correspondence may be kept for as long as needed to deal with the relevant request, relationship, dispute, or legal obligation;
  • analytics data is kept for a limited period and may be anonymised or aggregated;
  • public promotional materials may remain visible in archived social media posts, websites, printed materials, press materials, and historical festival records unless removal is legally required and reasonably possible.

12. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These measures may include secure service providers, access controls, password protection, SSL encryption, limited internal access, secure payment processing, and appropriate administrative procedures.

No system is completely secure.

If we become aware of a personal data breach that creates a legal notification obligation, we will take appropriate steps in accordance with the GDPR.

13. Your GDPR Rights

Subject to the conditions and limits under the GDPR, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to certain processing activities;
  • request data portability;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with a data protection authority.

To exercise your rights, contact us at: amsterdamteafestival@gmail.com

We may ask you to verify your identity before responding to a request. We will respond within the period required by law.

We may not always be able to fully comply with a request, for example where we must keep certain data for legal, tax, accounting, safety, insurance, dispute-resolution, or freedom of expression reasons. If this applies, we will explain why.

14. Personal Data Collected by Vendors, Sponsors, Partners, or Workshop Hosts

Vendors, sponsors, partners, workshop hosts, and other participants may independently collect personal data from visitors or other participants, for example through:

  • sales transactions;
  • mailing list sign-ups;
  • QR codes;
  • competitions or giveaways;
  • booking forms;
  • surveys;
  • customer accounts;
  • payment systems;
  • social media interactions;
  • product orders or service requests.

Where they do so, they act as independent data controllers for that data and are responsible for complying with the GDPR, including providing their own privacy notice, obtaining valid consent where required, securing the data, and handling GDPR requests.

Amsterdam Tea Festival is not responsible for the independent data processing activities of vendors, sponsors, partners, workshop hosts, or other third parties.

15. Misuse of Personal Data

Visitors, vendors, sponsors, partners, workshop hosts, volunteers, staff, and other participants must not misuse personal data obtained through or in connection with the festival.

Personal data must not be used to harass, shame, threaten, spam, defame, publicly expose, discriminate against, or otherwise harm any person.

Any misuse of personal data may result in removal from the festival, refusal of future participation, reporting to competent authorities, or legal action.

16. Children

Amsterdam Tea Festival is not intended to collect personal data directly from children without appropriate parental or guardian involvement where required.

If we become aware that we have collected personal data from a child without the required consent or legal basis, we will take appropriate steps to delete or limit that data.

17. Complaints

If you are dissatisfied with how we process your personal data, please contact us first at: amsterdamteafestival@gmail.com

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, for example if our event organisation, service providers, legal obligations, or data processing activities change.

The latest version will be made available on our website or otherwise communicated where appropriate.