Privacy and cookies

Privacy statement

This statement explains how Sam Anderson handles your personal data when you visit the website, send an enquiry or book a performance. We process your data in accordance with the General Data Protection Regulation (GDPR) and Belgian data protection law. Version of [DATUM VAN PUBLICATIE].

This statement is available in Dutch, French and English. In the event of any difference in interpretation, the Dutch text prevails.

1. Who is responsible for your data?

The data controller is [JURIDISCHE NAAM], trading under the stage name Sam Anderson, [ADRES], company number [ONDERNEMINGSNUMMER].

For any privacy questions and to exercise your rights: bookings@sam-anderson.be, with "Privacy" as the subject.

2. What data do we process?

• Enquiry data: your name, email address, phone number, type of event, date, venue, start time, expected number of guests, the DJ you have in mind if any, and your message.
• Contact data: the emails and messages we exchange.
• Billing data: name, address, for a business the company name and VAT number, and the details of invoices and payments.
• Event data: the practical information needed for the performance, such as the schedule, the contact person on site and the details of the DJ or technical supplier.
• Signature data: your electronic signature, the date and time, a masked IP address (the last part of the address is removed) and a verification code of the contract.
• Payment data: when you pay a deposit online, Mollie sends us the payment status and a reference. We do not receive your full card or account details.
• Technical data: to secure the website and forms, we record limited technical data, such as an IP address and the time of a request, in our security logs.
• Reviews: if you write a review, your name or initials, the type of event and your text.
• Statistics: only with your consent, data about your use of the website (see the cookie statement below).

3. For what purposes and on what legal basis?

We do not use your data for advertising and do not sell it to third parties. We do not send a newsletter. Should that change, it will only be with your prior consent.

4. Who do we share your data with?

We work with the following service providers (processors). They only process your data on our behalf and in line with our instructions:

• Hosting: [HOSTINGPROVIDER], for hosting the website and the portal.
• Email provider: [MAILPROVIDER], for sending and receiving emails.
• Mollie B.V. (the Netherlands), for online payment of deposits.
• Google (Google Ireland Limited), for the calendar and, only with your consent, for Google Analytics.
• Cloudflare (Cloudflare, Inc.), for Turnstile, which protects forms against spam and bots.
• Vandelanotte accountancy firm, for accounting and invoicing.

To deliver the performance, we share the necessary practical details, such as the contact person's name, the schedule and the venue, with the DJ, the venue or the technical supplier of your event. We also share data where the law requires us to.

Some providers, such as Google and Cloudflare, may process data outside the European Economic Area, including in the United States. This only happens with appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

5. How long do we keep your data?

At the end of the retention period, the data are deleted or anonymised.

6. How do we protect your data?

We take appropriate technical and organisational measures. Sensitive data are stored in encrypted form, the connection to the website is encrypted (HTTPS), the portal is only accessible to authorised persons through a secure login, and access and attacks are logged and monitored. Should a data breach nevertheless occur that poses a risk to your rights, we will report it to the Belgian Data Protection Authority and, where necessary, to you.

7. Your rights

You have the right to:

• access your data;
• have inaccurate data corrected;
• have your data erased, unless we are legally required to keep it;
• have the processing restricted;
• receive your data in a common format or have it transferred (data portability);
• object to processing based on legitimate interest;
• withdraw any consent given at any time, without affecting the lawfulness of processing carried out before the withdrawal.

Send your request to bookings@sam-anderson.be. We will respond within one month. To prevent misuse, we may ask you to confirm your identity.

8. Complaints

If you are not satisfied with how we handle your data, please let us know first. You also always have the right to lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

Cookie statement

9. What are cookies and local storage?

Cookies are small text files that a website places on your device. Local storage works in a similar way, but the data stay on your device and are not sent to the server automatically.

10. Which cookies do we use?

By default, the public website only places what is strictly necessary. We do not use session cookies on the public website. On the secure portal, a functional session cookie is used to keep you logged in.

Google Analytics cookies are only placed after you give consent through the cookie banner. Embedded YouTube videos are loaded via youtube-nocookie.com and only after you click the video.

In Google Analytics, IP addresses are not stored and the advertising and data sharing features are switched off. [TE BEVESTIGEN in the Google Analytics settings.]

11. Managing your choice

You can change your choice at any time via the "Cookie settings" link at the bottom of every page. You can also clear or block cookies and local storage through your browser settings. If you block strictly necessary cookies, some features, such as the forms or the portal, may not work properly.

12. Changes

We may update this statement, for example when we start using a new service. The date of the latest version is shown at the top. In the event of any difference in interpretation, the Dutch text prevails.