"You have to put yourself in a position to be lucky." (Roelof Botha)

Lucky Consequences, November 22–26, 2018, Naish Holiday Village, Christchurch, Dorset

Consequences Data Handling Policy

Why does Consequences need a data handling policy?

The Consequences database stores some of your personal information, so European and British regulations for handling of personal data apply.

In general our data handling policy is informed by GDPR (from 25 May 2018), and the UK Data Protection Act.

What does agreeing to this data handling policy mean?

By providing information to Consequences you are agreeing that we may hold the provided information, and retain it for the purposes outlined below.

Why do we need information about you?

We use information provided to allow us to communicate with you, to authenticate your account on our system, to identify which games have characters which are suitable for you to sign up to, and to administer the event.

Examples of information we hold: Name, e-mail address, birth year, gender, additional contact details (e.g. phone numbers), con specific scheduling information. (e.g. which games you have signed up to and when, when you are available, which previous conventions you have attended etc.), any provided feedback on games played.

Data Retention

Information about recent Consequences attendees is retained from one year to the next to avoid attendees needing to resupply information annually, and to allow historic checks such as whether attendees have played a game previously.

If a person has not attended Consequences for three events in a row then their information will no longer be considered current, and their details will be removed from our databases. Their information will be replaced with 'anonymised' information lacking e-mail address, telephone number etc.

The 'right to be forgotten' and other rights:

Under GDPR, you have a number of rights relating to your personal data. These include the right of access to data, the right to rectify data, the right to object to its ongoing processing, the right to object to direct marketing, the right to compensation for damage or distress, and the right to be forgotten.

If you wish to exercise any of these rights, please contact the Consequences data controller in the first instance.

Where is this data held?

Information provided will be stored in a database which will be hosted within the EEA.