Privacy Policy

With peace, love and communication, we guarantee the security of all your data.

We protect your privacy both day and night.

In accordance with the General Data Protection Regulation (EU 2016/679) and the Act on the Implementation of the General Data Protection Regulation, PEPERMINT d.o.o., Ulica Republike Austrije 27, Zagreb, OIB: 13120899290, as the data controller of the personal data of its users and customers, has drawn up this Privacy Policy. Its purpose is to clearly explain which personal data we collect, why we process it, how we protect it, and what rights users have in connection with the processing of their data.

The Policy has been drawn up in accordance with the applicable regulations of the Republic of Croatia and the European Union, and in accordance with best privacy protection practices, in order to ensure transparency and responsible handling of personal data.

This Privacy Policy (the “Policy”) explains how PEPERMINT collects, uses and manages your personal data found on the website and available to PEPERMINT through the use of the website: weekend.hr .

This Privacy Policy also applies to the websites hr.weekend.hr , weekend.hr/investment-weekend/ , weekend.hr/finance-weekend/ , weekend.hr/energy-weekend/ , weekend.hr/tech-weekend/ , weekend.hr/health-weekend/ , weekend.hr/education-weekend/ (hereinafter: the “weekend websites”), which you can access via the website weekend.hr , and for which PEPERMINT is the data controller of personal data.

The Privacy Policy applies to all services offered by PEPERMINT, whereby the aim of the Policy is to inform our visitors, partners and users of our services (hereinafter: data subjects) in a clear and transparent manner about the procedures for processing their personal data and about their rights.

PEPERMINT is committed to protecting and respecting your privacy. Please read this Policy carefully in order to understand why and how we collect your personal data and how it will be used. With regard to the personal data we collect, PEPERMINT is the “data controller”, that is, the one who determines the purposes for which and the means by which personal data is processed.

PEPERMINT, as the provider of the website service, is committed to protecting the privacy of personal data.

If you wish to contact us regarding this Policy or regarding your personal data, please use the following contact details:

PEPERMINT d.o.o. Ulica Republike Austrije 27 10000 Zagreb Croatia

E-mail: data.protection@weekendmediafestival.com

You may also contact our external data protection officer:

Presido d.o.o. Ulica Republike Austrije 23 10 000 Zagreb Croatia

Email: dpo@presido.hr

And now, in what follows, we will talk ˝a little˝ more about the rights, obligations and other matters relevant to the protection of your privacy and personal data! The text that follows is important and is by no means dull and dry.

We collect your personal data when it is necessary to fulfil your needs and requests, to perform services, or for the purposes of our business operations and the organisation of the Weekend Media Festival (WMF):

• when purchasing a ticket, PEPERMINT will request that you provide certain information (personal data) such as first and last name, address, e-mail address. In the case of a ticket purchase, a contractual relationship is concluded which serves as the basis for the processing of your personal data, given the necessity of performing the contract to which you, as the customer and our visitor, are a party. We also process your data in order to take steps at your request prior to entering into a contract,
• at the moment you access the weekend websites, we will also collect your IP address, which is likewise considered personal data,
• when a person registers as a user, that is, as a recipient of the newsletter or other notifications about our products and promotions. As the data controller, we will ask you to enter information about yourself (personal data) such as your e-mail address and name. The legal basis for the processing of your data is consent. Thus, a user who signs up to receive notifications about our products and promotions by entering their data on the weekend websites gives consent for the processing of their personal data. The user may withdraw consent at any time by notifying the data protection officer at their e-mail address,
• situations in which we collect other types of data such as the date and time of access to the website, information about the hardware, software or internet browser you use, as well as the operating system of your computer, the application version and your language settings. We may collect information about clicks and your access to the weekend websites that have been shown to you,
• when you contact our office and request our assistance or ask a question in order for us to exercise one of your rights guaranteed by the applicable regulations,
• when you contact us via social media, we collect the data you have made available to us when submitting an inquiry or request,
• when you wish to unilaterally terminate a concluded contract, we collect your first name, last name, personal identification number, address, account details and purchase amount, all depending on the chosen method of payment,
• when you wish to exercise the right to a refund of the amount paid for tickets (the right of admission to the event), we process the data you provided to us when purchasing the ticket
• when you participate in our prize competitions, we will process data depending on the type of prize competition, about which we will additionally inform you in the rules of the prize competition itself. The data that may be processed includes, for example, first name, last name, and the address for sending the prize,
• when you complete a satisfaction survey, we process data such as your IP address,
• when you submit any inquiry related to our offer, we will process your contact details and/or other data that you provide to us when submitting the inquiry,
• if you wish to submit an open job application, we will process data such as your first name, last name, age, qualifications, occupation, work experience, contact telephone number and other data contained in your open application,
• for the purposes of web analytics via Google Analytics, we use the application “_gat._anonymizelp”, through which the data subject’s IP address is shortened by Google and anonymised when the weekend websites are accessed by a data subject from an EU member state or another state within the jurisdiction of the European Economic Area.,
• By using the My.weekend application, we collect basic identification and contact data, information about the use of the application and technical data about the device, in order to enable access to the user account, personalise content and programme, send notifications related to the event and improve the functionality of the application.
• when photographing and recording lectures and/or short video clips or the atmosphere, we will process your photograph, movement, hair colour and the like, all on the basis of legitimate interest, and
• when you have purchased a ticket or are on the list of our visitors or are a speaker at the Weekend Media Festival or other events organised by PEPERMINT, we will inform you about the programme, news, exhibitors and other important matters that we consider essential and that form part of the organisational process. In carrying out these activities, we will process your e-mail or other contact details, on the basis of legitimate interest or in order to fulfil the contractual obligations we have towards you under the concluded contract.

We collect the aforementioned specific categories of your personal data either on the basis of consent presented to you upon arrival at the weekend websites via a pop-up window, or on the basis of legitimate interest (for example, in cases involving cookies that are necessary for the functioning of the weekend websites), or in order to fulfil our obligations arising from the applicable regulations of the Republic of Croatia.

If the processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent must be notified to the data controller by e-mail at: data.protection@weekendmediafestival.com or dpo@presido.hr, or at the address Ulica Republike Austrije 27, 10 000 Zagreb, marked ˜for the attention of the data protection officer˝. Such withdrawal shall not affect the lawfulness of the processing based on consent before its withdrawal.

Please pay attention to the mandatory scope of data we request from you, because if you do not provide the requested information designated as mandatory in order to carry out the activity you requested or expected, unfortunately, you will not be permitted to take part in it; without the requested data, the activity will not be technically feasible.

Processing of personal data in the payment process

PEPERMINT enables payment for products and services by credit and debit cards, whereby certain data must be entered in order to initiate the payment process. During payment via the contracted providers of card processing and collection services, who act as data processors or independent data controllers, certain data will be shared with these partners.

The processing of personal data is necessary in order to enable the execution of the payment and the conclusion of a contract with PEPERMINT. Depending on the chosen method of payment and the service provider, data such as first name, last name, amount, account number, code or other transaction identifiers may be shared with the card company, bank or third party through which the payment is carried out. The sharing of data is carried out exclusively at the request of the user, who independently chooses the method of payment.

PEPERMINT warns customers, that is, visitors, to take care of the data stated on the card so that this data does not become available to third parties and is not misused.

So, to summarise all of the above, we mostly collect your personal data directly from you, whether to conclude a contract with us, to take an action at your request, when you engage us to perform certain services provided by us or our contractual partners, or when you complete a certain form or when you wish to receive our newsletter.

We do not use your personal data for marketing purposes unless you tell us that you agree to it. If you would like us to send you details about our products, the organisation of our events, services, offers and promotions, please subscribe to this by giving us your consent when subscribing to the newsletter.

PEPERMINT may send you notifications and information that are necessary for participation in the event for which you have purchased a ticket, including organisational details, schedule changes, safety instructions and other relevant notifications. Such communication is based on our legitimate interest in ensuring the proper performance of the purchased service and the timely information of participants.

We treat your personal data as confidential data, and it is duly protected by PEPERMINT and/or our trusted partners.

The typical categories of data we collect from users are as follows: name, billing address, address for delivery of the invoice, financial information including information about credit cards, debit cards or other payment information that you provide when completing forms on the websites or when you communicate with us by telephone or e-mail.

We collect your personal data for the purpose of:

• performing the service, fulfilling the contract or otherwise ensuring the provision of the requested service
• using all services on the weekend websites
• responding to your inquiry and processing your requests as efficiently as possible
• statistical data processing
• sending materials and offers and making contact
• improving the quality of content, functionality and services.

Please note that at any time you have the right to request the following from PEPERMINT:

In order to exercise any of the above rights, please use the contact details stated at the beginning of the Privacy Policy.

If you believe that your rights are not being respected, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

The personal data we collect about you is stored in a secure environment. Your personal data is protected from unauthorised access, disclosure, use, alteration or destruction by any organisation or individual.

The processed data is stored on our premises and in secure IT systems, but sometimes we store data on the servers of our trusted service providers located within the EU.

PEPERMINT will ensure that personal data is kept in a secure location (which includes reasonable administrative, technical and physical protection to prevent the unauthorised use, access, disclosure, copying or alteration of personal data), which can be accessed only by authorised persons. All authorised persons sign a confidentiality statement.

The data collected for the purposes stated in this Policy will be stored only for as long as is necessary to fulfil the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than PEPERMINT reasonably considers necessary to achieve the purpose for which it was collected or processed. PEPERMINT will keep certain personal data for the period prescribed by the law or regulation that obliges PEPERMINT to retain data (more under ˜How long will PEPERMINT retain your personal data?˝).

In the event that you have given us your consent (for example, you have subscribed to our newsletter, or selected a certain category of cookies to be used), we will process your personal data until the consent is withdrawn. If you lodge a justified objection to the processing of personal data on the basis of legitimate interest, we will not process your personal data in the future.

In addition to all of the above, it is important to point out the following: if court, administrative or extrajudicial proceedings have been initiated, personal data may be stored until the end of such proceedings, including any period for lodging legal remedies.

PEPERMINT will not retain your personal data longer than the period for which the data is necessary in order to fulfil the purpose of its use, and for a maximum period of 3 years, except in exceptional cases where a longer data retention period is prescribed by law (for example, data related to the unilateral termination of a contract and objections will be kept for 1 year, data related to the exercise of your privacy protection rights will be kept permanently, data related to prize competitions will be kept for 5 years, data on speakers for 5 years, photographs from lectures and other events organised at the Weekend Media Festival and other events until your objection to the processing is upheld, e-mail addresses for the purpose of sending the newsletter until consent is withdrawn, while data on invoices will be kept for 11 years).

You can find out more about the data retention periods by contacting our data protection officer.

We may use your personal data in various ways, primarily in order to fulfil our legal obligations and obligations towards you, but sometimes also in order to improve your user experience on the weekend websites and for security reasons.

The purposes for which we process your data are described in this Policy. If your data is to be used for a new, additional purpose, you will be notified of this before such processing begins.

Newsletter

PEPERMINT would like to send you information about our activities and news that may be of interest to you. Please note that you can opt out of receiving them at any time by exercising your rights set out in this Policy. To subscribe to the newsletter, PEPERMINT collects and processes: e-mail addresses.

The newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic element embedded in an email sent in HTML format in order to enable storage and analysis via log files. This allows for the statistical analysis of the success of marketing campaigns. By means of the tracking pixel, PEPERMINT can see when and if an email has been opened by you as the data subject and which links you have followed. The personal data collected via the tracking pixel in the newsletter is stored and analysed by PEPERMINT as the data controller of personal data in order to optimise the process of sending the newsletter, and also to tailor the content of future newsletters to the interests of the data subject.

Video surveillance and photography

We are aware that you too come to the Weekend Media Festival venue to be photographed, filmed and seen. Because of your expectations, but also for promotional campaigns, all material will be used globally for the promotional purposes of the Weekend Media Festival and other events.

At the Weekend Media Festival venue, numerous television crews and photographers will be filming, and we particularly emphasise that drones will also be present to record the entire event. At the entrance to the area where the Weekend Media Festival is held, there will also be a special notice about filming and photography. By the very act of entering the festival venue, you should expect that you will be filmed and photographed. All material from the Weekend Media Festival may be used globally for the promotional purposes of the Weekend Media Festival.

When photographing and recording, and when using a drone to record lectures and/or short video clips or the atmosphere, data such as your physiognomy, movement, hair colour and eye colour is processed. The video surveillance system is also used to protect property and ensure safety. The legal basis for processing in relation to visitors is legitimate interest, while in relation to our employees and our valued students and volunteers it is the fulfilment of obligations arising from occupational safety regulations.

My.Weekend application

By using the My.Weekend application, we collect basic identification and contact data, information about the use of the application and technical data about the device, in order to enable access to the QR code ticket and the user account, personalise content and programme, send notifications related to the event and improve the functionality of the application. The application may send push notifications, which the user can disable in the device settings, and the data may be shared with technical partners and organisers solely in order to ensure the operation of the application, subject to the application of the applicable data protection regulations; users have the right to access, rectify and erase their data at any time.

In order to maintain the website and ensure that its functionalities are at the expected level, PEPERMINT uses a technology known as “cookies”.

Cookies are small files that we send to your computer and can later access. They may be temporary or permanent. Thanks to cookies, you can browse our websites without difficulty. Cookies show us what interests you and other visitors to our website, which helps us to improve it.

We regularly update the tables of cookies found on the weekend websites. However, given that cookies are a highly variable category, from time to time there may be changes in the tables contained in the Cookie Policy; therefore, the authoritative list is primarily the one found in the pop-up window that appears immediately when you visit a particular weekend website, or in the place designated for cookie settings on the platform or website, as well as in the browser you use.

Read more about cookies in the Cookie Policy on the weekend websites.

The protection of privacy is important to us, and therefore we will never share your personal data with third parties except for the purposes described in this Policy. We will always inform you about the sharing and transfer of data.

PEPERMINT cooperates with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that ensures an adequate level of protection in accordance with EU legislation.

We will share your data in order to perform the cooperation agreement with our partners who work on the promotion of the Weekend Media Festival:

• Millenium promocija d.o.o., Ulica grada Vukovara 23, 10000 Zagreb
• Prime Time Komunikacije d.o.o., Prilaz Gjure Dezelica 76, 10000 Zagreb
• Demode d.o.o., Varsavska 1, 10000 Zagreb
• GOODTOGO mobile application: EX-ALTO d.o.o., Zavrtnica 17, 10000 Zagreb
• MeetME – Meeting and Event Management: ME ET ME d.o.o. Ul. Antuna Bauera 13, 10000 Zagreb, Zagreb

We will also share your data with our partners and associates with whom we cooperate in organising certain events within the Weekend Media Festival, such as InterCapital ETF , Masarykova ulica 1, 10000 Zagreb (Investment.Weekend), Farseer , Bosanska 3, 10000 Zagreb (Finance.Weekend), Degordian , Slavonska avenija 6, 10000 Zagreb (HR.Weekend, Tech.Weekend), E.ON Croatia , Capraska 6, 10000 Zagreb (Energy.Weekend), Millenium promocija , Ulica grada Vukovara 23, 10000 Zagreb (Education.Weekend, MEDIKOR, Jaruscica 9 E, 10000 Zagreb (Health.Weekend).

In the event that you have an inquiry concerning the protection of personal data, particularly when you send us a request by which you wish to exercise one of your rights, we will share the request and/or other inquiry with our external data protection officer: the company Presido, Ulica Republike Austrije 23, 10000 Zagreb, dpo@presido.hr

In some cases, our partners who provide services on behalf of or for PEPERMINT may process your data outside the European Union. However, the contracts we conclude with such entities oblige them to handle your data with special security measures in accordance with the regulations in force in the member states of the European Union.

• in July 2023, the European Commission adopted a new adequacy decision on the basis of which personal data may be freely transferred from the European Union to companies in the USA that participate in the Data Privacy Framework.

The adequacy decision is based on Article 45 of the General Data Protection Regulation and constitutes a mechanism that ensures the safe and lawful transfer of data to third countries. Companies in the USA that wish to participate in the Data Privacy Framework must undergo a self-certification procedure and be entered on the list of companies that have acceded to the Data Privacy Framework.

Also, if our contractual partner is headquartered in the USA, we will review the existing contracts and verify the security standards that our partner guarantees in order to ensure the protection of all our data subjects in accordance with the latest standards approved and recommended by the competent institutions.

The purposes for which we share data with our trusted partners are, for example, marketing needs, maintenance of the weekend websites, advertising, deliveries and other services within and outside PEPERMINT. Under the relevant contracts, these service providers are obliged to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. We also oblige them to adequately protect your data and to treat it as a business secret.

Once a year, we conduct a review of all our partners so that we know that the protection of your personal data remains at the required level and is in accordance with the applicable regulations.

Other websites that can be accessed via the weekend websites have their own confidentiality and data collection statements and their own ways in which data is used and disclosed.

PEPERMINT is not responsible for the practices and terms of operation of third parties.

When you access other websites via the weekend websites, the data controller of the website you have accessed is responsible for the processing of personal data via cookies on those websites.

PEPERMINT collects and processes personal data through user interactions on social media such as Facebook, Instagram, X Corp. (Twitter) and YouTube. PEPERMINT, that is, the persons designated by PEPERMINT as responsible, have access to the messages and/or posts on the aforementioned social media; however, the personal data collected via them, particularly that contained in messages, is not stored by PEPERMINT and is not further processed except for the purposes stated in this Policy.

PEPERMINT uses a business profile utilising the services of Facebook, YouTube, Twitter, Instagram and LinkedIn, and you can view their Privacy Policies, that is, confidentiality statements, as well as the manner in which they use your personal data, at:

In the event that you have questions regarding the collection and processing of data by Facebook, YouTube, Twitter, Instagram and/or LinkedIn, or wish to exercise one of your rights guaranteed by the General Data Protection Regulation, contact:

FOR FACEBOOK:

META PLATFORMS IRELAND Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland

Contact of the data protection officer:

https://hr-hr.facebook.com/policy.php

https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with the manner in which your personal data is collected and processed, you may contact Facebook’s lead supervisory authority, the Irish Data Protection Commissioner, or the Croatian Personal Data Protection Agency (AZOP).

On the weekend websites we use Facebook plugins provided by Meta Platforms. When you visit our websites, your browser automatically loads these components, and Facebook may thereby receive information about the subpage you have opened. A list of Facebook plugins is available at https://developers.facebook.com/docs/plugins/.

If you are logged in to your Facebook account, Facebook may associate your visit to our websites with your user account. The same applies when you use integrated Facebook buttons, such as “Like” or leaving a comment.

Facebook is operated by Meta Platforms Inc. (USA) or Meta Platforms Ireland Ltd. for users outside the USA and Canada. If you do not want Facebook to associate your activities on the weekend websites with your account, log out of Facebook before visiting our websites.

FOR YOUTUBE:

Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Ireland

Contact of the data protection officer:

https://support.google.com/policies/contact/general_privacy_form

If you are not satisfied with the manner in which your personal data is collected and processed, you may contact the lead supervisory authority for YouTube, the Irish Data Protection Commissioner, or the Croatian Personal Data Protection Agency (AZOP).

On the weekend websites we use YouTube components enabled by YouTube LLC, a subsidiary of Google. When you open a subpage that contains a YouTube video, your browser automatically loads the YouTube content, and YouTube and Google may receive information about the page you have visited.

If you are logged in to your YouTube account, YouTube may associate your visit to our websites with your user account, regardless of whether you have played the video or not.

YouTube is operated by YouTube LLC (USA), that is, Google Inc. If you do not want YouTube to associate your activities on the weekend websites with your account, log out of YouTube before visiting our websites.

FOR INSTAGRAM:

META PLATFORMS IRELAND Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland

Contact of the data protection officer:

https://hr-hr.facebook.com/policy.php

https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with the manner in which your personal data is collected and processed, you may contact the lead supervisory authority for Instagram, the Irish Data Protection Commissioner, or the Croatian Personal Data Protection Agency (AZOP).

FOR X Corp. (Twitter):

X Corp., 1 Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland

Contact of the data protection officer:

https://x.com/en/privacy

If you are not satisfied with the manner in which your personal data is collected and processed, you may contact Twitter’s lead supervisory authority, the Irish Data Protection Commissioner, or the Croatian Personal Data Protection Agency (AZOP).

On the weekend websites we use components of the X service (formerly Twitter), provided by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

When you visit a page that contains an X component (e.g. an X button), your browser automatically loads that content, whereby X may receive information about the subpage you have opened. The integration of these components enables the sharing of content and increases the visibility of our pages.

If you are logged in to your X account, X may associate your visit to our websites with your user account, including information about which subpages you have visited. The same applies if you click on integrated X buttons, and this information may be transferred to and stored on your X account.

X may receive this data each time you are logged in to your account during a visit to the weekend websites, regardless of whether you have clicked on the X button or not. If you do not want such a transfer of information, log out of your X account before visiting our websites.

FOR LINKEDIN:

LINKEDIN IRELAND UNLIMITED COMPANY, Wilton Plaza, Wilton Place, Dublin 2, Ireland

Contact of the data protection officer:

https://www.linkedin.com/help/linkedin/ask/TSO-DPO

If you are not satisfied with the manner in which your personal data is collected and processed, you may contact the lead supervisory authority for LinkedIn Ireland, the Irish Data Protection Commissioner, or the Croatian Personal Data Protection Agency (AZOP).

This Policy enters into force upon publication on the website.

PEPERMINT reserves the right to amend and supplement the Privacy Policy, and any such changes will be published on the website.