Privacy Policy

1. Introduction

Pride The Hague, organized by the Pride Workgroup at COC Haaglanden ("we," "our," or "us"), is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, mobile application, and use our services.

We are committed to compliance with the Algemene Verordening Gegevensbescherming (AVG/GDPR) and other applicable data protection laws in the Netherlands and the European Union.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide when:

• Registering for events or Pride Week activities
• Subscribing to our newsletter or communications
• Submitting event proposals or vendor applications
• Participating in our Pride Walk or community programs
• Volunteering or joining our workgroup
• Contacting us via email, forms, or social media
• Creating an account or user profile
• Sharing your story or testimonial

This information may include:

• Full name
• Email address
• Phone number
• Postal address
• Date of birth (for age-restricted events)
• Organization name and role
• Accessibility requirements
• Pronouns and gender identity (optional, for inclusive communication)
• Profile pictures or photographs
• Any other information you choose to provide

2.2 Automatically Collected Information

When you access our services, we automatically collect certain information:

• Device Information: Device type, operating system, browser type and version, screen resolution
• Usage Data: Pages visited, time spent on pages, links clicked, referral source
• Location Data: IP address, approximate geographic location (city/country level)
• Cookies and Similar Technologies: See our Cookie Policy for details Cookie Policy

2.3 Information from Third Parties

We may receive information about you from:

• Social media platforms (if you interact with our content)
• Event partners and collaborating organizations
• Analytics providers (aggregated data only)

3. How We Use Your Information

We process your personal data only for specific, legitimate purposes:

3.1 Service Delivery and Event Management

• Processing event registrations and RSVPs
• Sending event confirmations, reminders, and updates
• Managing volunteer applications and scheduling
• Processing vendor and partner applications
• Coordinating Pride Walk participation
• Managing badge collection and achievements

3.2 Communication

• Sending newsletters and Pride Week announcements (with your consent)
• Responding to your inquiries and requests
• Providing customer support
• Sending important administrative information

3.3 Improvement and Analytics

• Analyzing website and app usage to improve our services
• Understanding audience demographics and preferences
• Testing new features and functionality
• Conducting research and surveys

3.4 Safety and Security

• Ensuring the safety of Pride events and participants
• Preventing fraud, abuse, and illegal activity
• Protecting our systems and data security
• Complying with legal obligations

3.5 Legal Basis for Processing (GDPR)

Under GDPR, we process your data based on:

• Consent: When you opt-in to newsletters or non-essential cookies
• Contract: When processing is necessary to fulfill our services (event registration)
• Legitimate Interests: For analytics, security, and service improvement
• Legal Obligation: When required by law

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

4.1 Service Providers

• Hosting and Infrastructure: Vercel, Cloudflare (data storage and delivery)
• Email Services: Email communications and newsletters
• Analytics: Google Analytics (anonymized data only)
• Maps and Location: Mapbox, Google Maps, OpenStreetMap for location features

4.2 Event Partners

We may share necessary information with:

• Venues hosting Pride events (for capacity and safety)
• Co-organizers and partner organizations (with your consent)
• Artists, hosts, and performers (for event coordination)

4.3 Legal Requirements

We may disclose information when required by law, legal process, or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent or investigate potential wrongdoing
• Protect the safety of users or the public

4.4 Data Processing Agreements

All third-party processors are bound by Data Processing Agreements ensuring GDPR compliance and appropriate security measures.

5. Data Security

We implement comprehensive security measures to protect your personal information:

• Encryption: All data transmission uses SSL/TLS encryption (HTTPS)
• Access Controls: Strict role-based access to personal data
• Secure Hosting: Data stored on secure, enterprise-grade servers
• Regular Security Audits: Periodic review of security practices
• Staff Training: Team members trained on data protection best practices
• Incident Response: Procedures for handling potential data breaches

While we take all reasonable precautions, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but maintain industry-standard protections.

6. Data Retention

We retain your personal data only as long as necessary:

• Event Registrations: 3 years after the event (for historical records and future planning)
• Newsletter Subscriptions: Until you unsubscribe
• Volunteer Records: Duration of volunteering + 2 years
• Financial Records: 7 years (legal requirement)
• Analytics Data: 26 months (Google Analytics default)
• User Accounts and Registration: Until account deletion is requested

After the retention period, we securely delete or anonymize your data.

7. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When transferring data internationally, we ensure:

• Adequate protection through EU Standard Contractual Clauses
• Compliance with EU-US Data Privacy Framework (where applicable)
• Equivalent security measures as required by GDPR

9. Children's Privacy

Our services are generally intended for individuals 16 years and older. We do not knowingly collect personal information from children under 16 without parental consent.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected].

10. Third-Party Websites and Services

Our website may contain links to third-party websites, including:

• Social media platforms
• Partner organizations
• Event venues

We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our practices or services
• Legal or regulatory requirements
• Technological developments

We will notify you of material changes by email (if you've provided one) or through a prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions, concerns, or to exercise your rights regarding this Privacy Policy or your personal data:

13. Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority: