This page is under construction.
Last updated: 7 March 2022
Responsibility for the processing of personal data at FiB
The Bergen International Festival, under the Festival director/managing director, is the data controller of the company's processing of personal data. The data controller has the responsibility that the treatment of personal data is in accordance with current General Data Protection Regulation (GDPR).
If you have questions about this statement, or our treatment of personal data in general, you may contact us:
- Phone: +47 55 21 06 30
- E-mail: firstname.lastname@example.org
- Post: Pb. 183 Sentrum N-5804 Bergen
The acting Communications and Digital Manager has the daily responsibility for the Festival's processing of personal data on our website fib.no, unless otherwise stated under each item.
It is voluntary for those who visit the website to provide personal information regarding services such as receiving newsletters and text messages, asking questions via the chat service, participating in competitions or volunteering. The basis for processing data is the consent of the individual unless otherwise specified. Today's website is developed and operated by Bouvet. Information collected in connection with the use of the website is stored in the Azure Database service. Only the Festival and Bouvet (with subcontractor) have access to the data collected.
The Festival collects de-identified information about visitors to fib.no. The purpose of this is to develop statistics that we use to improve and further develop information services on the website. The information is not used to identify the user as a person, but to create statistics that show, for example, which pages are most visited, the most popular campaigns and ticket sales.
The data is processed in a de-identified and aggregated form. De-identified means that we can not track the information we collect back to the individual user. We receive the entire IP address, but the IP address is de-identified so that only the first three groups in the address are used to generate statistics. That is, if the IP address consists of the numbers 126.96.36.199, only 195.159.103.xx. is used. Also, IP addresses are processed at an aggregated level, meaning all data is merged into a group and not processed individually. The analytics tool that we use on our website is Google Analytics, which is an open source tool (GPL).
Other uses for cookies
Facebook has its own cookies that are stored when you use their services, in addition fib.no has links to Facebook which tells something about user behavior on FIB's websites, so this can provide the basis for relevant marketing via Facebook's services.
We use the following Google cookies for web traffic statistics:
- _utmz describes how you ended up on our site. (Search, click on link, ad etc.)
- _utma describes how many times you have visited us.
- _utmb and _utmc describe how much time you spend on our pages.
The Sales and Marketing Manager in the Marketing and Communication Department has the daily responsibility for the Festival's chat service on our website.
The Festival uses LiveHelpNow and has up to four users/operators. Visitors to the site will automatically see a pop-up window asking if they want to chat. The chat is answered by employees in the Marketing and Communication Department who can among other things see the IP address, browser, country, region and previous chats on the same day from the same IP address.
When the chat has ended, all operators receive a copy of the chat. This is used for training and improvement of internal communications, and the e-mails are deleted continuously. If no operators are logged in, the visitor can leave a message. Such messages will be sent to the Sales Manager by e-mail, who will reply and then delete the inquiry. The system generates anonymous statistics.
The Communications and Digital Manager in the Marketing and Communication Department has the daily responsibility for the Festival's text newsletter service.
The user can choose to subscribe to newsletters to receive e-mails containing news, offers and information about the Festival and, in some cases, also marketing from our close partners and sponsors.
The Sales and Marketing Manager in the Marketing and Communication Department has the daily responsibility for the Festival's surveys. The Festival uses Alchemer to conduct surveys. We will always inform the user about the purpose of the survey and whether it is anonymous or not. The Festival will not share the information with others or use the information for purposes other than those specified.
If the survey is anonymous, the Festival or Alchemer will not collect any information that can be linked to the user.
If the survey is not anonymous, the Festival can identify those who have answered the survey.
In order to recruit and organise the Festival’s volunteers, FiB collects and treats the information necessary to carry out this work. Crescat supplies the system FiB uses to organise volunteers including planning and assigning shifts and sending out information to volunteers.
A data processing agreement between FiB and Crescat regulates the information FiB has access to and how it is treated. Mandatory information includes name, e-mail address and preferred work role. Non-mandatory information includes telephone number, language skills, availability and other comments. The information is stored in Crescat’s cloud service.
The personal data is treated in order to carry out an agreement, cf. GDPR article 6 number 1 b). The data is deleted within one year, unless the volunteer consents to receiving information from FiB regarding future volunteer opportunities, cf. GDPR article 6 number 1 a). With consent, the work experience and contact information will be stored until the consent is withdrawn. Volunteers who choose not to participate in volunteering at FiB will be deleted after 3 years of inactivity.
The information is stored in Luxembourg and USA. The basis of transfer is EU’s standard agreement.
The Sales and Marketing Manager in the Marketing and Communication Department has the daily responsibility for the Festival's ticketing system.
A company may process personal data if it is necessary in order to safeguard a legitimate interest which weighs heavier than the consideration of the individual's privacy. The Festival will, therefore, contact customers with information related to purchases if there are significant changes to an event. This includes information about cancellations, a change of venue, and significant programme changes.
When businesses treat personal data about you, you have the right to be informed about the treatment. FiB complies with the duty to provide information in this privacy statement and will as a main rule refer to this statement when asked to provide information.
Below, you can read more about your rights and how you can exercise your rights.
Access to own information
You can request a copy of all the information we process about you.
Correction of personal data
You may ask us to correct or supplement information that is incorrect or misleading.
Deletion of personal data
You may in some cases ask that your personal data is deleted before our regular deletion deadlines expire.
However, we inform you that we cannot delete information that is necessary for compliance with a legal obligation which requires processing, or if there is a dispute and the information is necessary for the establishment, excercise or defence of legal claims.
Restriction of processing of personal data
In some situations, you may also ask us to limit the processing of information about you.
Object to the processing of personal data
In some situations, you are entitled to object to our processing of information about you.
If the treatment of personal data happens with the basis of consent or an agreement with you, you may ask us to transfer the information about you to you or to another controller.
How to exercise your rights
You may exercise your rights by sending an e-mail to email@example.com. We will reply as soon as possible, and within 30 days at the latest.
If necessary, we will ask you to provide identification or other information in order to confirm your identity before we can fulfill your rights.
You have the right to complain to The Norwegian Data Protection Authority if you feel that we do not comply to Personal Information Act. You can find more information about how to complain at The Norwegian Data Protection Authority’s website. We do hope that you will let us know first, so that we may have the opportunity to rectify the situation. Complaints can be sent to firstname.lastname@example.org.