This privacy policy is applicable to the Requiem of the Impossible project, which is produced and created by the affect lab foundation. affect lab respects the privacy of its clients, users, collaborators and partners. We want to make sure that the users can exercise their rights in the best possible way. That’s why we have formulated and implemented this policy with transparency regarding the processing of personal data. If you have any questions regarding the data processing carried out by affect lab in general and Requiem for the Impossible in particular, you can contact us via juliette@affectlab.org

Through the Requiem for the Impossible project, we enable users to use an app during the performance. Affect lab does not collect any personal data through the Requiem of the Impossible app. The app can be downloaded by the link that is provided by affect lab to participate in the interactive performance. 

In all its projects affect lab takes into account its users in its data processing activities and endeavors to keep all data secure and private at all times. affect lab does this in line with the international and regional laws related to privacy, as well as the national laws and regulations where applicable. We take responsibility when collecting, saving, and using your personal data. We comply with the national authority that is responsible for overseeing our compliance regarding data processing. This is the Data Protection Authority of the Netherlands (‘Autoriteit Persoonsgegevens”) who can be reached through https://autoriteitpersoonsgegevens.nl. And we comply with the Data Protection laws that are applicable to our processing activities. The rules in these laws are the rules we need to abide by to ensure that your information is kept safe and private. 

When we say ‘Personal Data’ or ‘Personal Information’, we mean any information that relates to an individual person. This person needs to be identifiable through the data that is collected. An identifiable natural person is someone who can be identified, directly or indirectly, in particular by referring to an identifier like a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

Any data we collect from participants in our projects is end-to-end encrypted, which means that nobody can read the data (on the server, nor in transit, nor on the device). The participants themselves can choose to make use of the app during the performance or not. When attending the Requiem for the Impossible performance, photos may be taken. Sharing these images on social media is part of affect lab’s publishing activities. The participants are always asked whether they feel comfortable being visible and recognisable on social media. If a participant recognises themselves on one of affect lab’s social media channels and does not wish to be featured in a post, description or otherwise (anymore), the participant can make this known to the affect lab team and the image and/or description of the individual in question will be removed as soon as possible.

Sharing data with third parties

Where affect lab uses third-party providers, we rely on contracts called processing agreements. In accordance with the law, these processing agreements include EU model clauses for international data transfers. We ensure that the third-party provider uses the following methods of protection, ensuring that your information is always kept safe and private:

• Encryption; 

• Anonymisation; 

• Pseudonymisation.

Protection of data

Your data is protected by affect lab and our partners. We have taken security measures to protect your data and require our partners to meet the same requirements. 

Organizational security measures

Staff

Affect lab staff members are required to act responsibly when it comes to data processing.  They are asked to follow affect lab’s guidelines regarding confidentiality, business ethics, appropriate use and professional standards. We train staff members on best security practices, including how to identify social hacks, phishing scams, and hackers to minimize the risk associated with outside threats.

Access controls

Affect lab maintains your data privacy by allowing only appropriate and authorized individuals access to information when it is critical to complete tasks for you. We do not collect any data for the Requiem for the Impossible app. affect lab staff members will not process customer data without prior authorisation. affect lab takes user protection very seriously.

Data hosting

As a rule, data is hosted within the Netherlands, but it is possible that we might transfer data to countries within the EEA, to the UK or in exceptional circumstances outside of those areas. We ensure that we comply with the relevant data protection laws when sending data overseas. We rely on data processing agreements containing EU standard contractual clauses and take additional measures to secure this data transfer, such as anonymisation. 

Physical security 

The data centers in which data is stored are secured and monitored 24/7 and physical access to facilities is strictly limited to select staff.

Technical security measures

All devices which are used to access data for which we are responsible are secured with antivirus software, firewalls, encryption and access management. We regularly update operating systems and software to ensure vulnerabilities cannot be exploited by malicious outsiders.

 Your rights regarding information

You always have the right to information, access, rectification, deletion and restriction of your data. You also have the right to object to the processing and the right to data portability, meaning that your information must be transferable to another media of your choosing.

You can exercise these rights by contacting us at the email address below. We might ask you to provide a form of proof of identification to ensure that we are really talking to you.  Within one month of your email, you will receive an answer from us. You may always file a complaint with the Dutch Data Protection Authority (‘Autoriteit Persoonsgegevens’) if you fear that your data may not be handled responsibly by us. You may do this by visiting the website of the Autoriteit Persoonsgegevens.

Applicable law

These conditions are governed by Dutch legislation. The court in Amsterdam has the sole jurisdiction if any dispute regarding these conditions may arise, save when a legal exception applies. 

 Contact

Stichting affect lab has a registered address at Studio 0.74 on Wibautstraat 150, 1091 GR Amsterdam, in The Netherlands. Our company registration number is 54507669. 

For questions you can reach us via juliette@affectlab.org.