Privacy Policy of the “Eggifest – Dream Together” Festival
Effective Date: 01/11/2025
Organizer: Eggifest Ltd, a company legally registered in the Republic of Cyprus
Registered Address: Eleftheriou Venizelou, 24, 1st floor, Office 100, Ag. Theodoros, 8021, Paphos, Cyprus
E-mail: support@eggifest.com
1. General Provisions
1.1. This Privacy Policy (hereinafter referred to as the “Policy”) explains what personal data is collected and processed when using the website https://eggifest.com, participating in the “Eggifest – Dream Together” Festival, and making voluntary donations in support of the
project.
1.2. The Organizer (hereinafter referred to as “we”, “us”, “Eggifest Ltd”) acts as the Data Controller within the meaning of Regulation (EU) 2016/679 (GDPR).
1.3. The Festival is intended for children aged 6 to 12, who may participate only with the confirmed consent of their parents or legal guardians.
2. Categories of Personal Data Collected
2.1. Data of the Child (Festival Participant)
● age, country and city of residence;
● images of both sides of the Capsule.
2.2. Data of the Parent or Legal Guardian
● first and last name;
● contact details (e-mail, phone number);
● confirmation of consent for the child’s participation and data processing;
● payment data (if a paid capsule storage service is used).
2.3. Technical Data
● IP address, country, language, device type, browser;
● cookies and log files;
● data related to interactions on the website (date, IP, device, session).
2.4. Donor DataWhen making voluntary donations via Stripe, we process:
● first and last name, e-mail address;
● payment amount, currency, and date;
● payer’s country;
● transaction identifier.
Important: Bank card details (card number, expiration date, CVV) are processed exclusively by
Stripe Payments Europe Ltd in accordance with their Privacy Policy and the PCI DSS
standard. We do not receive or store card details.
3. Purposes of Data Processing
We process personal data for the following purposes:
● registration of Festival participants and confirmation of participation;
● receipt, moderation, and publication of creative materials (Capsule images);
● communication with parents and participants;
● issuance of participation certificates;
● processing of voluntary donations via Stripe;
● compliance with accounting and tax obligations;
● fraud prevention and website security;
● analytics, reporting, and development of the “Eggifest – Dream Together” project.
4. Legal Grounds for Processing
Personal data is processed on the following legal bases:
● Consent of the parent/legal guardian — Art. 6(1)(a), Art. 8 GDPR;
● Performance of a contract (Festival participation, donation processing) — Art. 6(1)(b) GDPR;
● Legitimate interests — security, fraud prevention, service improvement — Art. 6(1)(f) GDPR;
● Legal obligation — accounting and tax compliance — Art. 6(1)(c) GDPR.
5. Data Storage and Data Sharing
5.1. All personal data is stored on secure servers located within the European Union
(Germany/France) and is not transferred outside the EU without appropriate safeguards
(Standard Contractual Clauses – SCC).
5.2. Personal data may be transferred to third parties strictly in compliance with GDPR:
● technical service providers (IT, hosting, antifraud);
● payment processors (Stripe Payments Europe Ltd);
● logistics partners (delivery of capsules or related materials);
● public authorities — only where legally required.
5.3. All partners and contractors are bound by Data Processing Agreements (DPA).
6. Donations and Payment Information
6.1. Users may voluntarily make donations in support of the Festival and the “Dreams Without Borders” project.
6.2. All payments are processed via Stripe Payments Europe Ltd, registered in Ireland and compliant with GDPR requirements.
6.3. We receive only general transaction information (name, e-mail, amount, country, date).
6.4. Financial card details (card number, CVV , etc.) are transmitted directly to Stripe and are not stored on our servers.
6.5. Donations are used to support Festival activities, production and distribution of Capsules, and the development of the cultural and educational project “Dreams Without Borders”.
6.6. Donor and transaction data is stored for up to 5 years, in accordance with the accounting and tax laws of the Republic of Cyprus.
6.7. By making a payment, the User automatically agrees to this Policy and to Stripe’s Privacy Policy (https://stripe.com/privacy).
7. Cookies and Analytics
We use cookies for:
● proper functioning of the website and registration forms;
● fraud prevention and security;
● traffic analysis and service improvement.
Users may disable cookies in their browser settings; however, this may limit certain website
functionalities.
8. Data Retention Periods
Data Category Retention Period
Participant registration data up to 6 months after the end of the Festival Published Capsule images up to 3 years Technical logs up to 12 months
Data Category Retention Period
Donor and transaction data up to 5 years Capsule storage data (if applicable) up to 25 years (under a separate agreement)
9. Rights of Parents and Users
Parents and users have the right to:
● request access to personal data;
● request rectification or erasure;
● restrict processing;
● withdraw consent at any time;
● lodge a complaint with a national Data Protection Authority (DPA).
Requests may be sent to: support@eggifest.com.
10. Data Security
We apply appropriate technical and organizational security measures, including:
● data encryption (SSL/TLS, AES-256);
● role-based access control;
● regular backups;
● security audits and access logging.
11. International Data Transfers
Transfer of personal data outside the EU is permitted only with appropriate legal safeguards, including Standard Contractual Clauses (SCC) or adequacy decisions pursuant to Articles 45–46 GDPR.
12. Changes to This Policy
Eggifest Ltd reserves the right to amend this Privacy Policy.
The current version is always published on https://eggifest.com with the effective date indicated.
13. Contact Information Eggifest Ltd™
Registered address: 8021, Cyprus, Paphos, Ag. Theodoros, Eleftheriou Venizelou 2E-mail: support@eggifest.com
Website: https://eggifest.com
© 2026 Eggifest Ltd™. All rights reserved.
Effective Date: 01/11/2025
Organizer: Eggifest Ltd, a company legally registered in the Republic of Cyprus
Registered Address: Eleftheriou Venizelou, 24, 1st floor, Office 100, Ag. Theodoros, 8021, Paphos, Cyprus
E-mail: support@eggifest.com
1. General Provisions
1.1. This Privacy Policy (hereinafter referred to as the “Policy”) explains what personal data is collected and processed when using the website https://eggifest.com, participating in the “Eggifest – Dream Together” Festival, and making voluntary donations in support of the
project.
1.2. The Organizer (hereinafter referred to as “we”, “us”, “Eggifest Ltd”) acts as the Data Controller within the meaning of Regulation (EU) 2016/679 (GDPR).
1.3. The Festival is intended for children aged 6 to 12, who may participate only with the confirmed consent of their parents or legal guardians.
2. Categories of Personal Data Collected
2.1. Data of the Child (Festival Participant)
● age, country and city of residence;
● images of both sides of the Capsule.
2.2. Data of the Parent or Legal Guardian
● first and last name;
● contact details (e-mail, phone number);
● confirmation of consent for the child’s participation and data processing;
● payment data (if a paid capsule storage service is used).
2.3. Technical Data
● IP address, country, language, device type, browser;
● cookies and log files;
● data related to interactions on the website (date, IP, device, session).
2.4. Donor DataWhen making voluntary donations via Stripe, we process:
● first and last name, e-mail address;
● payment amount, currency, and date;
● payer’s country;
● transaction identifier.
Important: Bank card details (card number, expiration date, CVV) are processed exclusively by
Stripe Payments Europe Ltd in accordance with their Privacy Policy and the PCI DSS
standard. We do not receive or store card details.
3. Purposes of Data Processing
We process personal data for the following purposes:
● registration of Festival participants and confirmation of participation;
● receipt, moderation, and publication of creative materials (Capsule images);
● communication with parents and participants;
● issuance of participation certificates;
● processing of voluntary donations via Stripe;
● compliance with accounting and tax obligations;
● fraud prevention and website security;
● analytics, reporting, and development of the “Eggifest – Dream Together” project.
4. Legal Grounds for Processing
Personal data is processed on the following legal bases:
● Consent of the parent/legal guardian — Art. 6(1)(a), Art. 8 GDPR;
● Performance of a contract (Festival participation, donation processing) — Art. 6(1)(b) GDPR;
● Legitimate interests — security, fraud prevention, service improvement — Art. 6(1)(f) GDPR;
● Legal obligation — accounting and tax compliance — Art. 6(1)(c) GDPR.
5. Data Storage and Data Sharing
5.1. All personal data is stored on secure servers located within the European Union
(Germany/France) and is not transferred outside the EU without appropriate safeguards
(Standard Contractual Clauses – SCC).
5.2. Personal data may be transferred to third parties strictly in compliance with GDPR:
● technical service providers (IT, hosting, antifraud);
● payment processors (Stripe Payments Europe Ltd);
● logistics partners (delivery of capsules or related materials);
● public authorities — only where legally required.
5.3. All partners and contractors are bound by Data Processing Agreements (DPA).
6. Donations and Payment Information
6.1. Users may voluntarily make donations in support of the Festival and the “Dreams Without Borders” project.
6.2. All payments are processed via Stripe Payments Europe Ltd, registered in Ireland and compliant with GDPR requirements.
6.3. We receive only general transaction information (name, e-mail, amount, country, date).
6.4. Financial card details (card number, CVV , etc.) are transmitted directly to Stripe and are not stored on our servers.
6.5. Donations are used to support Festival activities, production and distribution of Capsules, and the development of the cultural and educational project “Dreams Without Borders”.
6.6. Donor and transaction data is stored for up to 5 years, in accordance with the accounting and tax laws of the Republic of Cyprus.
6.7. By making a payment, the User automatically agrees to this Policy and to Stripe’s Privacy Policy (https://stripe.com/privacy).
7. Cookies and Analytics
We use cookies for:
● proper functioning of the website and registration forms;
● fraud prevention and security;
● traffic analysis and service improvement.
Users may disable cookies in their browser settings; however, this may limit certain website
functionalities.
8. Data Retention Periods
Data Category Retention Period
Participant registration data up to 6 months after the end of the Festival Published Capsule images up to 3 years Technical logs up to 12 months
Data Category Retention Period
Donor and transaction data up to 5 years Capsule storage data (if applicable) up to 25 years (under a separate agreement)
9. Rights of Parents and Users
Parents and users have the right to:
● request access to personal data;
● request rectification or erasure;
● restrict processing;
● withdraw consent at any time;
● lodge a complaint with a national Data Protection Authority (DPA).
Requests may be sent to: support@eggifest.com.
10. Data Security
We apply appropriate technical and organizational security measures, including:
● data encryption (SSL/TLS, AES-256);
● role-based access control;
● regular backups;
● security audits and access logging.
11. International Data Transfers
Transfer of personal data outside the EU is permitted only with appropriate legal safeguards, including Standard Contractual Clauses (SCC) or adequacy decisions pursuant to Articles 45–46 GDPR.
12. Changes to This Policy
Eggifest Ltd reserves the right to amend this Privacy Policy.
The current version is always published on https://eggifest.com with the effective date indicated.
13. Contact Information Eggifest Ltd™
Registered address: 8021, Cyprus, Paphos, Ag. Theodoros, Eleftheriou Venizelou 2E-mail: support@eggifest.com
Website: https://eggifest.com
© 2026 Eggifest Ltd™. All rights reserved.