Privacy policy

Funky Fun Productions vzw, the organizer of the Reggae Geel festival, attaches great importance to the protection of your personal data. In this privacy statement, we explain what data we process when you visit our website www.reggaegeel.com (and its associated domain names), buy a ticket, subscribe to our newsletter, or visit the festival. We describe why and on what legal basis we do this, how long we keep your data, with whom we share it, and what rights you have.

We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter “GDPR”) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

1. Who is responsible for the processing?

The data controller is:

Funky Fun Productions vzw

Vleeshouwer 33, 2440 Geel, Belgium

Enterprise number: 0423.494.278

Email: info@reggaegeel.com

For the technical operation of our website, ticket sales, newsletter, and analysis, we rely on external service providers (processors). We enter into a data processing agreement with each of them as required by Article 28 GDPR, which stipulates, among other things, that they process your data solely on our instructions and secure it appropriately. As the data controller, we remain accountable for the processing of your data, even when it is carried out by a processor.

2. What data do we process, why, and on what legal basis?

2.1 Website Visit

When you visit our website, only strictly necessary cookies are automatically placed. We only place analytical and marketing cookies after you have given your consent via the cookie banner. We use Google Analytics to measure how our website is used (such as shortened IP address, browser type, device type, and pages visited) so that we can improve it. We use the Meta pixel to measure the reach of our advertisements on Facebook and Instagram. More information about the cookies used, their retention period, and how you can adjust your choice can be found in our cookie policy on the website.

Legal basis: Your consent (Art. 6.1.a GDPR) for non-essential cookies; our legitimate interest (Art. 6.1.f GDPR) for strictly necessary cookies and for website security.

2.2 Ticket Sales

When you buy a ticket, we (or our ticketing partner Eventim on our behalf) process your first and last name, address, email address, phone number, and your order and payment details. We need this data to process your order, deliver your ticket, and inform you about practical matters directly concerning your festival visit (e.g., changed opening hours or safety information).

Legal basis: The performance of a contract (Art. 6.1.b GDPR). In addition, we retain invoicing and accounting data because fiscal and accounting legislation obliges us to do so (Art. 6.1.c GDPR), up to ten years after the end of the financial year concerned.

2.3 Newsletter

If you subscribe to our newsletter, we process your name and email address to send you news about the festival, the line-up, and our other activities.

Legal basis: Your consent (Art. 6.1.a GDPR). You can withdraw this consent at any time via the unsubscribe link at the bottom of each newsletter, or by emailing us. We retain your data until you unsubscribe.

2.4 Communication to Previous Ticket Buyers

If you have previously purchased a ticket from us, we may use your email address to inform you about future editions and similar activities of our own. We do this based on our legitimate interest to promote our festival to existing customers.

Legal basis: Our legitimate interest (Art. 6.1.f GDPR). You can object to this at any time, free of charge, via the unsubscribe link in each email or by contacting us; after that, you will no longer receive these messages.

2.5 At the Festival

Access control: At the entrance and at the info desk, the data linked to your ticket is used to validate your ticket and prevent fraud (such as copied tickets).
- Legal basis: The performance of a contract (Art. 6.1.b GDPR) and our legitimate interest in fraud prevention (Art. 6.1.f GDPR).
Atmospheric imagery: During the festival, photos and videos are taken of the crowd and the festival grounds. These atmospheric images may be used on our website, social media, and in other promotional material, and television or streaming recordings may take place. We do this to report on and promote the festival. If you are recognizably featured in an atmospheric image and want it removed or not used further, please let us know via info@reggaegeel.com with a description of the image; we will handle your request as quickly as possible.
- Legal basis: Our legitimate interest (Art. 6.1.f GDPR).
Targeted imagery: For photos or videos where you as an individual are the main subject (e.g., an interview or portrait), we will ask for your consent in advance. You can withdraw this consent afterwards by contacting us.
- Legal basis: Your consent (Art. 6.1.a GDPR).
CCTV / Camera surveillance: Surveillance cameras are placed on and around the festival grounds to guarantee the safety of visitors, employees, and artists. This camera surveillance is carried out in consultation with and at the request of the police services and complies with the Camera Act of 21 March 2007; the cameras are indicated by the legally required pictograms. The images are stored for a maximum of one month, unless they can contribute to proving a crime, damage, or a nuisance; in that case, they are provided exclusively to the police or judicial authorities.
- Legal basis: Our legitimate interest in festival security (Art. 6.1.f GDPR).

2.6 Contacting Us

If you send us an email or contact us in any other way, we process your contact details and the content of your message to answer your question.

Legal basis: Our legitimate interest (Art. 6.1.f GDPR) to respond to questions. We do not keep this correspondence longer than necessary for handling and any follow-up.

2.7 Volunteers, Employees, and Artists

A separate, internal privacy statement applies to volunteers, employees, and artists, which they receive upon registration or agreement. Where that internal statement refers to this privacy statement, the provisions of this text—including security, retention periods, your rights, and contact—also apply to them.

Overview Table

Purpose	Data	Legal Basis	Retention Period
Website visit and analysis	Cookie and browsing data, shortened IP address	Consent; Legitimate interest (necessary cookies)	See cookie policy
Ticket sales and access control	Name, address, email, phone, order and payment details	Performance of contract; Legal obligation (accounting)	Up to 10 years after the financial year (legal retention obligation)
Newsletter	Name, email address	Consent	Until unsubscription
Communication to previous buyers	Email address	Legitimate interest	Until objection/unsubscription
Atmospheric imagery festival	Visual material	Legitimate interest	As long as relevant for promotion; removal upon request
Targeted imagery	Visual material	Consent	Until withdrawal of consent
CCTV surveillance festival grounds	Camera footage	Legitimate interest (security)	Max. 1 month, unless evidence
Contact/questions	Contact details, content of message	Legitimate interest	As long as necessary for handling

3. With whom do we share your data?

We never sell your personal data to third parties. We only share it with:

Processors who support us, such as our ticketing partner Eventim, the website hosting provider, the platform we use to send newsletters, and providers of analysis services—in each case under a data processing agreement;
Authorities, police, or judicial bodies, when we are legally obliged to do so;
Other third parties, but only after we have informed you and, where required, obtained your prior consent.

4. Transfer outside the European Economic Area

In principle, we process your data within the European Economic Area (EEA). When a service provider processes data outside the EEA (e.g., an American provider of analysis services), this only happens with appropriate safeguards such as an adequacy decision by the European Commission (e.g., the EU-U.S. Data Privacy Framework) or the standard contractual clauses of the European Commission.

5. How do we secure your data?

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access. This includes encrypted connections (HTTPS), secure storage, and limiting access to your data to employees who need it for their tasks. Our processors are also contractually obliged to secure your data appropriately. Should a data breach nevertheless occur involving a risk to your rights and freedoms, we will report this to the Data Protection Authority and, where necessary, to you as well.

6. What are your rights?

Under the GDPR, you have the following rights:

Right of access: You have the right to know what personal data we process about you and to request a copy of it.
Right to rectification: You can have incorrect or incomplete data adjusted.
Right to erasure (“right to be forgotten”): You can ask to delete your data, for example when it is no longer necessary for the purpose for which it was collected.
Right to restriction of processing: You can ask to temporarily restrict the processing of your data, for example while we are investigating a complaint from you.
Right to object: You can object to processing based on our legitimate interest, including direct marketing. You can always object to direct marketing without giving reasons.
Right to data portability: You can receive the data you provided to us yourself in a structured, commonly used digital format or have it transferred to another organization.
Right to withdraw consent: If you gave us consent (e.g., for the newsletter or cookies), you can withdraw it at any time. This does not affect the lawfulness of the processing prior to the withdrawal.

You can exercise these rights by sending an email to info@reggaegeel.com or a letter to Funky Fun Productions vzw, Vleeshouwer 33, 2440 Geel. To verify your identity, we may request additional information. We will reply as quickly as possible and at the latest within one month; for complex or numerous requests, this period may be extended by two months, of which we will inform you.

If you are not satisfied with the way we handle your data or your request, you can lodge a complaint with the Belgian supervisory authority:

Data Protection Authority (Gegevensbeschermingsautoriteit)

Drukpersstraat 35, 1000 Brussels

www.gegevensbeschermingsautoriteit.be

We do not make decisions about you based solely on automated processing (such as profiling) that produce legal effects concerning you.

7. Minors

Our website, ticket sales, and newsletter are not directed at children. We do not knowingly collect personal data from children under 13 years of age without the consent of a parent or guardian. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at info@reggaegeel.com; we will delete that data as quickly as possible.

8. Changes to this privacy statement

We may adjust this privacy statement, for example, when our operations or legislation changes. The most recent version is always available on our website, with the date of the last update at the top. In the event of significant changes, we will inform you via the website or the newsletter.

This version was last updated on 9 July 2026.

This privacy statement exists in Dutch and English. In the event of discrepancies between the two versions, the Dutch text shall prevail.