Recording at our events: privacy notice

Controller: Laav Unit ry / HUG Oulu, hug@oulu.ug

What and why: Only the organiser's media team records: photos, video and sound, with discretion, to remember the event and its art, and for theses and research. No recording of recognisable faces without asking permission. In this notice, recognisable means recognisable by face.

Basis: Legitimate interest (GDPR Art. 6(1)(f)): archiving, research and publication of the community's culture. Recognisable material is published only with your consent (Art. 6(1)(a)). Recording performers rests on consent altogether; see *Performers*.

Recipients: The media team and the organisers. We keep the material on our own encrypted servers. For study, research and cultural use only material in which no one is recognisable, or with your permission.

Performers: The sound and picture of a performance are recorded only with the performer's permission (Art. 6(1)(a)). We ask for it on the RSVP form, and it does not affect the performance; without permission the performance is not recorded. The performer is recognisable in the recording. We publish recordings on our own channels and, at our discretion, on social media or other external services, which process them on their own terms, including outside the EU. The permission is kept with the recording, and retention is reviewed every five years. When you withdraw the permission, we remove the recording from our channels and our archive. Withdrawal does not undo an earlier publication or copies held by others. A performer's other rights in the recording are agreed separately. Withdrawal: hug@oulu.ug

Retention: Unselected raw material is deleted once the selection is made, and at the latest one year after the event. Selected material is kept as the community's archive, and its retention is reviewed every five years. For performers' permissions and recordings, see *Performers*.

Publication: Material in which no one is recognisable, or whose publication everyone recognisable has permitted, we publish on our own channels and, at our discretion, on social media or other external services, which process it on their own terms, including outside the EU.

Right to object: You may object to being recorded at any time: tell the person recording or the event organiser on site or write to hug@oulu.ug

Your other rights: You may ask to see material of you, restrict its processing, withdraw your permission to publish, or ask for removal. Withdrawal does not undo an earlier publication. Requests: hug@oulu.ug

Complaints: Data Protection Ombudsman.