Privacy Policy for Legacy Events

‍Last Updated: 9 August 2026

This Privacy Policy explains how Legacy Events processes personal data when you visit our websites, contact us, register for an event or attend an event.

This Privacy Policy applies to:
‍
‍legacyevents.ch; and
‍legacy-events.de.


‍1. Controller
‍The controller responsible for processing personal data is:
‍Filatov Foundation
Kaminion 1
Pegeia, Pafos 8560
Cyprus
Represented by: Daniel Filatov
Email: info@danielfilatov.de

For privacy questions or requests concerning your personal data, please contact us at the email address above.

No data protection officer has been appointed.


‍2. Personal data we process
‍Depending on how you interact with us, we may process your:
- name and professional information;
- email address and telephone number;
- event registration and attendance information;
- messages and other information you send to us; and
- photographs or video recordings in which you may appear at an event.

We only ask for information that is reasonably necessary for the relevant purpose. Please do not send us sensitive personal data unless it is necessary for your participation or you are specifically asked to do so.


‍3. How we receive your data
‍We usually receive personal data directly from you when you contact us, register for an event, communicate with us or attend an event.

We may also receive limited information from event partners, venues or service providers where this is necessary to organise or operate an event.


‍4. Purposes and legal bases
‍We process personal data only where there is a lawful reason to do so. We use personal data in order to:
- respond to inquiries and communicate with you;
- process event registrations and manage attendance;
- organise and operate events;
- send necessary event information, such as confirmations, reminders, venue changes or cancellations
- protect the security of our website, events, staff and attendees;comply with legal obligations and establish or defend legal claims; and
- use event photographs or recordings for event documentation or communication, where permitted by law or based on consent.

Depending on the circumstances, we rely on one or more of the following legal bases under Article 6 GDPR:
- performance of a contract or steps taken before entering into a contract;
- compliance with a legal obligation;
- our legitimate interests in operating Legacy Events, organising events, communicating with participants and protecting our business; or
- your consent, where consent is required.

Where we rely on consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect processing that took place before withdrawal.


‍5. Cookies and website technology
‍We do not use analytics cookies, advertising cookies, marketing pixels or other non-essential tracking technologies.

Our website may use technically necessary technologies required for basic website operation, security or the delivery of a page. These technologies are not used to track you for advertising or analytics purposes.

If this changes, we will update this Privacy Policy and, where required, obtain consent before using non-essential cookies or similar technologies.


‍6. Third-party links and services
‍Our websites may contain links to third-party websites, social-media profiles, booking pages or other external services. The operators of those services may process personal data under their own privacy policies.

We are not responsible for the privacy practices of third-party websites or services that we do not control.

If you use an external booking or scheduling service linked from our website, that service may process the information you submit in order to arrange your booking or appointment. The relevant third party’s privacy policy applies to that processing.


‍7. Event photography and recordings
‍Events may be photographed or recorded for event documentation, communication and promotional purposes.

We will provide appropriate notice where recording takes place. We will seek consent or use another lawful basis where required, particularly for identifiable close-up photographs, interviews, testimonials or specific promotional materials.

If you do not wish to appear in an identifiable photograph or recording, please contact our event team or email info@danielfilatov.de as soon as possible and provide the event date and relevant details. We will review the request under applicable law.

We do not publish private messages, chat screenshots or identifiable content from other individuals without an appropriate legal basis or permission.


‍8. Sharing personal data
‍We may share personal data only where reasonably necessary with:
- event venues and service providers involved in organising an event;
- technical, hosting, communication or booking providers used by Legacy Events;
- professional advisers and legal representatives; orcourts, authorities or other public bodies where required by law.

We do not sell personal data.

We share only the information reasonably necessary for the relevant purpose. Where a service provider processes personal data on our behalf, we use appropriate contractual and legal safeguards where required.

We do not share attendee contact details with other attendees or partners unless this is clearly explained in the relevant registration process or you have otherwise agreed to it.


‍9. International transfers
‍Because some service providers may operate internationally, personal data may in some cases be processed outside the European Economic Area or Switzerland.

Where required by law, we use an adequacy decision, standard contractual clauses or another legally recognised safeguard for such transfers. Further information about a specific transfer is available by contacting us at info@danielfilatov.de.


‍10. Retention
‍We keep personal data only for as long as it is reasonably necessary for the purpose for which it was collected.

Registration and communication data is generally deleted when it is no longer needed for the relevant event or communication. We may retain certain information for longer where this is necessary to comply with legal, accounting or tax obligations, to document consent, or to establish or defend legal claims.

When personal data is no longer required, we delete or anonymise it where technically possible.


‍11. Security
‍We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

No internet transmission or storage system can be guaranteed to be completely secure. If we become aware of a personal-data breach, we will handle it in accordance with applicable law.


‍12. Your rights
‍Subject to applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request deletion of your data;
- request restriction of processing;receive your data in a portable format where applicable;
- withdraw consent where processing is based on consent; and
- object to processing based on legitimate interests or to direct marketing.
‍
To exercise your rights, email info@danielfilatov.de. We may request reasonable information to verify your identity. We will respond within the period required by applicable law.

‍Right to object to direct marketing

‍You may object to direct marketing at any time. After receiving your objection, we will stop using your personal data for direct marketing purposes.


‍13. Children
‍Our events and services are not directed at children unless expressly stated otherwise for a particular event. We do not knowingly collect children’s personal data contrary to applicable law.


‍14. Changes to this Privacy Policy
‍We may update this Privacy Policy if our services, data-processing activities or legal requirements change. The current version will always be published on this page with the applicable effective date and last-updated date.