← Back to homepage

Privacy Policy

Version v1 · Last updated 18 May 2026

This policy explains how we collect and use your personal data when you sign up at badhabitz.be. It is written to comply with the EU General Data Protection Regulation (GDPR), the Belgian Data Protection Act of 30 July 2018, and the Belgian Electronic Communications Act of 13 June 2005 (ePrivacy).

1. Who we are

The data controller is Up Till Dawn BV, the legal entity organising Bad Habitz Festival. Registered office, BTW/VAT number and KBO/BCE number available on request via info@uptilldawn.be.

2. What we collect

When you sign up to the presale list, we collect:

  • First name and last name
  • Email address
  • Phone number and selected country code
  • The version of this policy you consented to (e.g. v1)

We also automatically collect, when you visit the site:

  • IP address
  • Browser, device and operating system (user agent)
  • Approximate location (country, region, city) derived from your IP by our hosting provider
  • Referring website and any UTM / click-ID parameters in the URL
  • Time you arrived and time you submitted the form

3. Why we process this data (purposes and legal basis)

  • Sending you festival announcements, presale links, on-sale alerts and event-day communications by email (and SMS once that channel is enabled, with separate consent). Legal basis: your explicit consent (GDPR Art. 6(1)(a)) given by submitting the form.
  • Measuring the effectiveness of our ads and signup campaigns by sending a hashed version of your identifiers (email, phone, name, IP, user agent) to Meta Platforms Ireland Ltd. for ad attribution (the Meta Conversions API and Pixel). Legal basis: your explicit consent, given by submitting the form. You can withdraw consent at any time (see section 8).
  • Storing first-party attribution cookies (a visitor ID, first-touch and last-touch UTM data, visit count) so we know which ad or referral first introduced you to the festival. Legal basis: legitimate interest in measuring the performance of our own marketing (GDPR Art. 6(1)(f)). You can clear these via your browser at any time.
  • Proving you consented by retaining your IP, timestamp and the policy version. Legal basis: legal obligation (GDPR Art. 7(1)) to demonstrate consent.

4. Who receives your data (processors and recipients)

  • Intuit Mailchimp (The Rocket Science Group, LLC, USA) hosts our mailing list and sends our emails. Transfer to the US relies on the EU-US Data Privacy Framework and Mailchimp's Standard Contractual Clauses.
  • Meta Platforms Ireland Ltd. receives hashed personal identifiers for ad attribution via the Conversions API and Pixel. Transfer to the US relies on Meta's Data Privacy Framework certification and Standard Contractual Clauses.
  • Vercel Inc. (USA) hosts this website and processes request logs (IP, user agent, geo headers) to serve pages. Transfer relies on the EU-US Data Privacy Framework and Vercel's Standard Contractual Clauses.
  • One.com Group AB (Denmark) hosts our DNS and email infrastructure.

We never sell your data. We never share it with third parties for their own marketing.

5. Cookies

This site uses first-party cookies only. No third-party tracking cookies are set on page load.

  • Strictly necessary: none beyond what your browser sets by default.
  • Attribution (first-party): bh_visitor (2 years, a random ID), bh_first_touch (30 days, your first-visit referral), bh_visit_count (2 years, a counter). Used to measure how our marketing performs. Legal basis: legitimate interest. Clear them anytime via your browser settings.
  • Marketing pixels: Meta's Pixel only loads after you submit the signup form. No Meta cookies (_fbp, _fbc) are set before that.

6. How long we keep it

  • Mailing-list profile: until you unsubscribe, or 24 months after the festival, whichever is later.
  • Consent log (IP + timestamp + version): 5 years, in line with the limitation period for GDPR claims.
  • Attribution cookies: 30 days (first-touch) or 2 years (visitor ID), or until you clear them.
  • Server access logs at Vercel: 30 days.

7. Where your data is processed

Your data is processed in the European Union and in the United States (Mailchimp, Meta, Vercel). All US transfers are protected by the EU-US Data Privacy Framework and Standard Contractual Clauses. You can request a copy of the safeguards via info@uptilldawn.be.

8. Your rights

Under GDPR you have the right to:

  • Access the personal data we hold about you (Art. 15)
  • Rectify data that is inaccurate or incomplete (Art. 16)
  • Erasure of your data, the right to be forgotten (Art. 17)
  • Restrict processing in certain cases (Art. 18)
  • Portability, a machine-readable copy of your data (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time, without affecting prior processing (Art. 7(3))
  • Not be subject to fully automated decisions (Art. 22). We do not make such decisions.

To exercise any right, email info@uptilldawn.be. We respond within one month.

9. Your right to lodge a complaint

If you believe we have handled your data unlawfully you can lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit):

10. Updates to this policy

We may update this policy. Each version is dated and given a version number (current: v1, 18 May 2026). When we send a substantive update we re-confirm consent. Your consent version is stored alongside your profile so we know which version you agreed to.

11. Contact

Up Till Dawn BV
Email: info@uptilldawn.be