Privacy policy

1. Data controller

The Farm2Festival project is run by the partners of the European TASTE programme. Full identification details of the data controller (legal name, legal form, company number and registered address) are provided on request at the contact address below.

Contact for any data-related question: privacy@farm2festival.eu

Data protection requests are handled directly by the project team, at that same address.

2. Data collected through the contact form

The contact form only collects the data you enter yourself:

• Name (required)
• Email address (required)
• Stated profile: festival organiser, chef, producer or other (required)
• Message subject (optional)
• Message content (optional)
• Date and time of submission, recorded automatically

3. Purposes of processing

Your data is never used for advertising purposes and is not subject to automated decision-making or profiling.

• Answering your request and following up on our exchanges
• Connecting you with other members of the Farm2Festival network when that is the purpose of your request
• Producing aggregated, anonymous statistics about the project's audiences, as part of reporting to the European TASTE programme

4. Legal basis

Processing of contact form data is based on your explicit consent, collected through the checkbox displayed before submission (Article 6(1)(a) GDPR). You may withdraw that consent at any time, without affecting the lawfulness of processing carried out beforehand.

Publishing the professional contact details of producers and wholesalers in the directory is based on the project's legitimate interest (Article 6(1)(f) GDPR): making a local food offer visible to chefs and festivals. Only professional contact details are published, sourced from public records or provided by the businesses themselves.

5. Retention periods

• Messages sent through the contact form: 24 months from the last exchange, then deleted
• Survey responses: kept in anonymised form for the duration of the project and its reporting, up to 5 years
• Directory listings: kept for as long as the business is listed, and removed on request

6. Who has access to your data

Access to incoming messages is strictly limited to the Farm2Festival project team, through a password-protected administration area.

Data is hosted within the European Union. No data is sold, rented or passed on to third parties for commercial purposes. The only possible recipients are our technical hosting providers, acting as processors under Article 28 GDPR, and public authorities where the law requires it.

The identity of our hosting providers is available on request at the contact address above.

7. Your rights

Under the GDPR you have the following rights:

• Right of access: obtain a copy of the data we hold about you
• Right to rectification: have inaccurate or incomplete data corrected
• Right to erasure: request deletion of your data
• Right to restriction and right to object to processing
• Right to data portability in a machine-readable format
• Right to withdraw your consent at any time

8. How to exercise your rights

Send your request to privacy@farm2festival.eu, stating which right you wish to exercise. We reply within one month at most. We may ask for an element verifying your identity, solely to avoid disclosing data to a third party.

If you believe your rights are not being respected, you may lodge a complaint with the Belgian Data Protection Authority (Rue de la Presse 35, 1000 Brussels — www.dataprotectionauthority.be).

9. Cookies and audience measurement

The site uses no advertising cookies and no third-party trackers for profiling. Only cookies strictly necessary for the site to work and for the administration session are set; these do not require prior consent.

10. Changes to this policy

This policy may be updated to reflect legal or technical developments. The date of the latest update appears at the top of this page.