Privacy Policy
1. Data Controller
ORAM (Ondernemersvereniging Regio Amsterdam)
De Ruijterkade 7, 1013 AA Amsterdam
KVK: 34169371
nextgenfestival@oram.nl
2. What data we collect and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Process your registration and payment | Name, email, company, role, payment info | Performance of contract (Art. 6.1.b) | 2 years after the event |
| Send updates about the festival | Name, email | Legitimate interest (Art. 6.1.f) | Until you unsubscribe |
| Improve future editions | Aggregated feedback data | Legitimate interest (Art. 6.1.f) | 3 years |
| Financial administration | Name, payment data | Legal obligation (Art. 6.1.c) | 7 years (Dutch tax law) |
3. Sub-processors
We share your data with the following parties, strictly for the purposes above:
- Mollie — payment processing. Mollie acts as an independent data controller for payment transactions. See mollie.com/privacy for their privacy policy.
- Mailcamp — festival email communications
- UP Events Amsterdam — as venue partner, for operational logistics only
With each sub-processor we have a data processing agreement in place.
4. Photography and video
During ORAM Next Gen Festival, an external photographer captures photos and video for publication on our website, social media channels, and future communications. This processing is based on legitimate interest (Art. 6.1.f). The photographer is bound by a processing agreement and may not use your image for any other purpose.
If you do not wish to appear in published material, please notify us at nextgenfestival@oram.nl before or on the day of the event. We will make reasonable efforts to honour your request.
5. Your rights
Under the GDPR you have the right to:
- Access — request an overview of the data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Restriction — limit how we process your data
- Data portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
Contact us at nextgenfestival@oram.nl. We will respond within 30 days.
You also have the right to lodge a complaint with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl
6. Data security
Your data is processed in accordance with applicable security standards. Payment information is handled exclusively by Mollie and is never stored by ORAM directly.
7. Changes to this policy
We may update this policy. The current version is always available at nextgenfestival.oram.nl/privacy.html.
Last updated: March 2026