Privacy statement

1. Who is responsible

Solidarity Lab B.V., Rotterdam, the Netherlands — the organisation behind Festival of Trust and a partner of soul.com — is the controller for the data described here. For what a festival’s team writes about its own festival, that team decides the content; we hold it for them.

2. What we hold

A field exists here because the planner needs it. In practice:

• Organiser accounts — your name, email address, and the application you wrote to host a festival.
• Festivals — everything a festival’s team enters: its name, place, date, description, cover image, settings, agenda, planning tasks and notes, budget calculator content, and who is invited to help.
• Technical — server logs needed to keep the site running and secure. No advertising identifiers, no profiling, no third-party trackers.

Registering to attend a festival happens on The Thread, not here — what is held about attendees is described in The Fibre’s privacy statement.

3. Why we are allowed to hold it

• Contract — to give organisers the planner they signed up for, and the emails that make sign-in and invitations work.
• Legitimate interest — keeping the site secure and working, and defending legal claims.

4. Who else touches it

These are our sub-processors. There is nobody else.

• Supabase — database, sign-in, and cover image storage.
• Vercel — serving the site. It is stateless; no personal data is stored there.
• Resend — delivering the sign-in and invitation emails.
• The Fibre — the platform, operated by Solidarity Lab B.V., where a published festival’s public page and its registrations live.

5. How long we keep it

For as long as your account exists, or as long as the festival a record belongs to has a reason to keep it. On an erasure request we remove your personal content within 30 days.

6. Your rights

You have the full set under the GDPR: to see what we hold, to correct it, to have it erased, to restrict or object to how it is used, and to take it elsewhere. Write to hello@festivaloftrust.com with “privacy” in the subject; we answer within one month. If you are unhappy with how we handle it you can complain to your national data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

7. Cookies

Only the strictly necessary kind, which is why you are not being asked to dismiss a banner — the details are in the cookie policy.

8. Changes

We will update this page when what we do changes, and move the date at the top.

9. Contact

Solidarity Lab B.V., Rotterdam, the Netherlands. hello@festivaloftrust.com. The rules of use are in the general terms.