GDPR Compliance& Your Rights
Your personal data protection rights under the General Data Protection Regulation (GDPR).
Last updated: January 1, 2024
The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to all companies processing personal data of individuals in the European Union, regardless of where the company is located.
When GDPR Applies to You
- • You are located in the European Union
- • You are an EU citizen living abroad
- • Your event involves EU-based guests or suppliers
- • You use our services while visiting the EU
Even though Jamboree Curations is based in India, we are committed to GDPR compliance for all our international clients and their data protection rights.
Right to be Informed
You have the right to know how your personal data is being used.
- • What personal data we collect and why
- • How long we keep your data
- • Who we share your data with
- • Your rights regarding your data
Right of Access
You can request a copy of all personal data we hold about you.
- • Free of charge for the first request
- • Delivered within 30 days
- • Includes all data and its sources
- • Provided in a commonly used format
Right to Rectification
You can request correction of inaccurate or incomplete data.
- • Correction of factual errors
- • Completion of incomplete data
- • Updates to outdated information
- • Notification to third parties when applicable
Right to Erasure ("Right to be Forgotten")
You can request deletion of your personal data in certain circumstances.
- • Data no longer needed for original purpose
- • Withdrawal of consent
- • Data processed unlawfully
- • Legal obligation to delete
Right to Restrict Processing
You can request that we limit how we use your data.
- • When accuracy is being verified
- • Processing is unlawful but deletion not wanted
- • Data needed for legal claims
- • During objection assessment
Right to Data Portability
You can request your data in a portable format.
- • Machine-readable format (JSON, CSV, XML)
- • Transfer to another service provider
- • Only for data you provided
- • When processing is automated
Under GDPR, we must have a legal basis for processing your personal data. Here are the legal bases we rely on:
Contract Performance
Processing necessary to fulfill our event management services contract with you.
Consent
When you explicitly agree to specific processing activities (marketing, photos, etc.).
Legitimate Interest
For business operations, fraud prevention, and improving our services.
Legal Obligation
When required by Indian or international law (tax records, compliance).
Vital Interests
In rare cases where processing is necessary to protect life or safety.
Public Task
When performing tasks in the public interest (charity events, community programs).
As we are based in India and may work with suppliers globally, your data may be transferred outside the EU. We ensure appropriate safeguards are in place:
Adequacy Decisions
We prioritize transfers to countries with EU adequacy decisions where possible.
Standard Contractual Clauses
We use EU-approved Standard Contractual Clauses for transfers to third countries.
Certification Schemes
We work with suppliers who have appropriate certifications and security measures.
We retain personal data only as long as necessary for the purposes for which it was collected:
Data may be retained longer if required by law or for the establishment, exercise, or defense of legal claims.
Making a Request
To exercise any of your GDPR rights, please contact us using the methods below:
gdpr@jamboreecurations.com
Phone
+91 93563 91331
Post
Pune, Maharashtra, India
What to Include
- • Your full name and contact information
- • Proof of identity (copy of ID document)
- • Clear description of your request
- • Specific data or processing you’re concerned about
- • Preferred method of response
Response Timeline
- • Standard response: Within 30 days
- • Complex requests: May be extended by 60 days
- • Acknowledgment: Within 72 hours
- • Free of charge: First request is always free
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority.
EU Residents
Contact your local Data Protection Authority in your EU member state. You can find a list of authorities at: edpb.europa.eu
Before Filing a Complaint
We encourage you to contact us first so we can try to resolve any concerns directly and promptly.
We have appointed a Data Protection Officer (DPO) to oversee our GDPR compliance and handle data protection matters.
Contact Our DPO
Email: dpo@jamboreecurations.com
Phone: +91 93563 91331 (ext. 101)
Address: Data Protection Officer, Jamboree Curations, Pune, Maharashtra, India
You can contact our DPO directly for any data protection concerns, questions about this policy, or to exercise your GDPR rights.