Privacy Policy

1. Who we are

Tribal Experience 2026 is organised by Deep House Bucharest ("we", "us", "our"). We are the data controller for personal data collected through this website and through our event registration processes. You can contact us at contact@tribalexperience.com.

2. What data we collect and why

We collect personal data only when you provide it to us voluntarily through the forms on this website:

• Contact form: name, email address, and message. Used solely to respond to your inquiry.
• Volunteer application form: name, email address, phone number (optional), preferred role, and personal statement. Used to evaluate and process your application.

We do not collect sensitive personal data. We do not use your data for automated decision-making or profiling.

3. Legal basis for processing

The legal basis for processing your personal data is your freely given, specific, and informed consent (Article 6(1)(a) GDPR), which you provide by ticking the consent checkbox before submitting a form. You may withdraw your consent at any time by contacting us at contact@tribalexperience.com. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

4. How long we keep your data

We retain your data for a maximum of 12 months from the date of submission, after which it is deleted. If you are selected as a volunteer or engaged in an ongoing correspondence, we may retain data for a longer period where necessary, after which it is also deleted.

5. Third parties

We use the following third-party services that may process your data:

• Netlify — our website host and form processor. Form submissions are stored on Netlify's servers. Netlify is GDPR-compliant and processes data under Standard Contractual Clauses. See Netlify's GDPR policy.
• Kompostor — our ticketing platform. Ticket purchases are processed directly by Kompostor and are subject to their own privacy policy. We receive only the information necessary to manage attendance.
• Google Maps — embedded on the island page to show the event location. Google Maps may set cookies and collect usage data. See Google's Privacy Policy.

We do not sell, rent, or share your personal data with any other third parties.

6. Cookies

This website does not use its own tracking or analytics cookies. The Google Maps embed may set third-party cookies when you interact with it. You can manage cookie preferences through your browser settings.

7. Your rights under GDPR

As a data subject under the General Data Protection Regulation (EU) 2016/679, you have the following rights:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate or incomplete data.
• Right to erasure — you may ask us to delete your personal data ("right to be forgotten").
• Right to restriction — you may ask us to restrict the processing of your data in certain circumstances.
• Right to data portability — you may request your data in a structured, machine-readable format.
• Right to object — you may object to the processing of your data at any time.
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at contact@tribalexperience.com. We will respond within 30 days.

8. Right to lodge a complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, www.dataprotection.ro.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. This website is served over HTTPS.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of the website after changes constitutes acceptance of the updated policy.