Who we are

Our website address is: http://ineffable.org.uk.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

Cookies

If you submit information on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.

Analytics

Who we share your data with

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.

For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.

The protection of your personal data along with security when processing your personal data are very important to us. When you visit our website, we collect the request made by your browser to the server hosting the web site, including your IP address, the date and time of connection, and the page you ask for. We use this information to ensure the security of our web site and we delete it after a maximum of 3 months. We also collect anonymised usage data but do not otherwise collect information from you as a visitor to this site.

RESPONSIBLE BODY

The collection and processing of personal data on this website is carried out by the organisers of this convention (Rachael Livermore and Bethany Windsor).

Our event hosting partners Accelevents are responsible for the registration system and will collect and store the data required to process your order and facilitate your access to the convention. Their Privacy Policy applies to data held on their systems.

PURPOSE OF DATA PROCESSING

Here we will inform you of what data is collected and for what purpose.

  1. AUTOMATED DATA PROCESSING/ SHARING DATAWhen you visit our website, data is processed automatically – for technical reasons – but this does not allow the data subject – you – to be personally identified. This data is stored on the server in log files and processed purely for anonymous statistical purposes. This data contains, among other things, information about the time of access, the browser used, the referring URL (previously visited website) and other purely technical information about your hardware, operating system and browser information. This data will not be shared with third parties.
  2. COLLECTION OF PERSONAL DATARegistration for the convention is handled by our hosting partners Accelevents and is subject to their Privacy Policy
    Personal data and information is downloaded by The Ineffable Con and processed exclusively for the performance of registration-related processes and for the completion of contractually-related procedures. The processing of personal data only takes place in the course of inquiries or contractual transactions with the data subject themselves.
    If you have provided us with your personal data, we assure you that no data will be shared with third parties, unless this is necessary for the fulfilment of your registration or a legal basis prescribes such sharing.

SECURITY WARNING FOR TRANSMITTING DATA ON THE INTERNET

Despite all technical and organisational measures, no guarantee can be given for 100% security in the processing of your personal data via our website.

LEGAL BASIS FOR PROCESSING PERSONAL DATA

Personal data is primarily processed on the basis of Article 6(1)(b) GDPR – for the performance of a contract or the performance of pre-contractual actions. Alternatively, in non-contractual situations, data is processed on the express consent of the data subject pursuant to Article 6(1)(a) of the General Data Protection Regulation.

DURATION OF DATA STORAGE

Personal data is stored by us in connection with contractual processing in accordance with the statutory retention periods. In the case of exclusively pre-contractual processing, personal data will be erased with a period of 3 months after the last transaction-related correspondence. An exception to this is a request for erasure by the data subject; this will be complied with immediately insofar as this is not contrary to any legal regulation or in the event that a state authority has made a request for information.

SHARING PERSONAL DATA – CATEGORIES OF RECIPIENTS, YOUR RIGHTS

Personal data will only be shared with third parties if this is absolutely necessary for the fulfilment of our contractual tasks in relation to the data subject. When you enter personal data into forms on this site, e.g. to register for the convention, it is entered into a secure database accessible only to the convention organisers. Your data will only be used for the specified purpose, to enable us to run the convention.

YOUR RIGHTS AS A DATA SUBJECT

Below, we will inform you about your rights as a data subject according to the applicable data protection rules set out in the GDPR and the BDSG.

We will honour your legal rights in any event but note that the convention is run by volunteers and ask that you be aware of the fact that any request you make for information, for erasure or correction may take some time depending on the circumstances – however, we will endeavour to process your request as soon as possible and within the legally permissible time frame of 4 weeks.

As a data subject, you have the right to obtain information about the data we have stored about you at any time and free of charge. When providing this information, we will inform you of the purpose of data storage, the type and scope of all personal data as well as the possible recipients and the reason for sharing your data.

Furthermore, as the data subject, you can request us to correct or erase your personal data. We comply with any of these requests insofar as this is legally possible.

You can object to the processing of your personal data for the future or withdraw any consent you have given. The ability to object to processing or to withdraw consent are based on the provisions of the GDPR.

In the event that you wish to receive your data stored with us in accordance with the right of portability, we will provide this data to you.

We do not use automated decision-making or profiling.

RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY

If you believe that, despite all due care, we have not acted correctly and/or processed your personal data inappropriately or without authorization, we ask that you send a complaint by email.

Regardless of this, you have the right to lodge a complaint with the competent supervisory authority.

SSL ENCRYPTION

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as a site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock symbol in the address bar on your browser.

If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

SECURITY

We use technical and organisational security measures to protect your data maintained by us against accidental or intentional manipulation, loss, destruction and against access by unauthorised persons. Access to this data is only possible for a few authorised persons and persons who are obliged to provide special data protection and who are involved with the technical, administrative or editorial management of data.

COLLECTIONS, CREDIT CARD DETAILS

We do not save any credit cards details ourselves on this website, nor does any of the organisers have access to your credit card details.

All payments via credit card will be handled directly by Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. Stripe has been certified as a Level 1 Service Provider of Payment Card Industry (PCI) Data Security Standards (DSS). You can find their privacy policy here.

INFORMATION, ERASURE, RESTRICTION OF PROCESSING

According to section 34 and section 6b BDSG you have the unlimited right to free information about your data stored by us and according to section 35 BDSG the right to delete or block prohibited data or the right to correct incorrect data. This can be done by sending an e-mail to [email protected].

Right of revocation: You can revoke permission for the storage of your personal data at any time with effect for the future. This can be done by sending an e-mail to [email protected].

Third-party use of contact data published within the scope of legal notice regulations for sending unsolicited advertising and informational materials is hereby expressly forbidden. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising information, such as spam e-mails.