MARYLAND DEMOCRATIC PARTY
Fight Back & Win Summit
Privacy Policy
Powered by EventMobi
Any collection, use, storage, deletion, or other use (hereinafter referred to as “processing”) of data serves exclusively to provide our services. Our services have been designed with the aim of using as little personal data as possible. In this context, “personal data” (hereinafter also referred to as “data”) is understood to mean all individual details about personal or factual circumstances of an identified or identifiable natural person (so-called “data subject”).
The following information on data protection describes which types of personal data are processed when you use our event app for the Fight Back & Win Summit, what happens to this personal data, and how you can object to data processing if necessary.
1. General Information on Data Processing
1.1 Controller
The controller within the meaning of the EU General Data Protection Regulation (GDPR) is:
Maryland Democratic Party
275 West Street, Suite 70, Annapolis, MD 21401
Phone: (410) 269-8818
Email: [email protected]
1.2 Protection of Your Data
We have taken technical and organizational measures to ensure that the provisions of applicable data protection law are observed both by us and by external service providers who work for us. Where we work with other companies to provide our services, each service provider is carefully selected for its suitability and technical and organizational competence in data protection. Your data is stored on specially protected servers and access is restricted to a limited number of authorized individuals.
Our service uses SSL/TLS encryption, which you can recognize by the “https://” at the beginning of the URL.
1.3 Deletion of Personal Data
We only process personal data for as long as is necessary. Once the purpose of data processing has been fulfilled, the data is blocked and erased in accordance with our data retention standards, unless statutory provisions prevent erasure.
1.4 EventMobi
The technical functions of the event app are provided by EventMobi GmbH, Warschauer Platz 11-13, Germany; telephone: 030 / 5557 343 0; email: [email protected]
The app uses cookies to enable push notifications, organize event content, support registration and session following, provide real-time updates, and ensure correct display. Depending on cookie type, storage duration ranges from 70 to 730 days.
For data protection questions related to EventMobi, you may contact EventMobi’s data protection officer: Kemal Webersohn, WS Datenschutz GmbH, Dircksenstraße 51, D-10178 Berlin; email: [email protected]
For further information: https://www.eventmobi.com/de/datenschutzbestimmungen/
2. Data Processing and Log Files
2.1 Description and Scope
When you access our service, our web servers temporarily store each access in a log file. The following personal data is recorded:
IP address of the requesting device
Date and time of access
Name and URL of the retrieved file
Amount of data transferred
Success or failure of the retrieval
Browser and operating system identification
App or platform from which access is made
Name of your internet access provider
Name
Email address
Photo
Biographical data (as provided during registration)
Our app is hosted by AWS (Amazon.com Inc., 410 Terry Avenue North, Seattle, WA 98109, USA). For more information: https://aws.amazon.com/privacy/
2.2 Legal Basis
Data is processed pursuant to Art. 6(1)(f) GDPR. Our legitimate interest is to make our service accessible to you.
2.3 Purpose of Data Processing
Data processing enables the use of the service (connection establishment), supports system security, network administration, and service optimization. IP addresses are analyzed only in the event of attacks on our infrastructure.
2.4 Duration of Storage
Personal data is deleted as soon as it is no longer needed for the above purposes, typically when you close the service. Our hosting provider may use anonymized data for statistical purposes. Raw log data is deleted by our hosting provider after 12 months.
2.5 Right to Object
Collection of log data is technically necessary for operation of the service. Users are therefore unable to opt out of this data collection.
3. Use of Cookies
3.1 Description and Scope
Our service uses cookies — small text files stored on your device that provide us with certain information. Cookies cannot execute programs or transmit viruses. They are used to enable login functionality and to analyze service usage in anonymized or pseudonymized form. Data transmitted may include:
Frequency of app visits
Which features of the service you use
Search terms used
Your cookie and language settings
3.2 Legal Basis
Cookies necessary solely for the functionality of our service are processed pursuant to Art. 6(1)(f) GDPR. Other cookies are processed based on your consent pursuant to Art. 6(1)(a) GDPR.
3.3 Duration of Storage
Transient (session) cookies are deleted when you close your browser. Persistent cookies are deleted automatically after a defined period, which varies by cookie type.
3.4 Right to Withdraw
You may withdraw consent to non-essential cookies at any time. You may also delete cookies via your browser’s security settings at any time, though this may limit certain service functionality.
4. Registration in the App
4.1 Description and Scope
Registration in the app requires entry of personal data, including at minimum:
First name
Surname
Email address
Password
Data entered in the registration form is used solely for processing your registration and will not be passed to third parties.
4.2 Legal Basis
Mandatory registration data is processed pursuant to Art. 6(1)(b) GDPR. Optional data fields are processed based on your consent pursuant to Art. 6(1)(a) GDPR.
4.3 Duration of Storage
Data is deleted when your account is closed, unless legal or official retention obligations prevent deletion.
4.4 Right to Rectification or Deletion
You may update, correct, or delete your personal data at any time during or after registration.
5. Contact
5.1 Description and Scope
You may contact us via the in-app contact form or by email. The following data is required at minimum:
First name
Last name
Email address
Contact data will not be passed on to third parties.
5.2 Legal Basis and Purpose
Data is processed pursuant to Art. 6(1)(b) GDPR exclusively to respond to your inquiry.
5.3 Duration of Storage
Your data will be deleted once your inquiry has been answered. In limited cases, longer retention may result from legal, official, or contractual obligations.
5.4 Right to Object
You may object to further processing of your contact data at any time. All data processed in connection with your inquiry will be deleted, subject to any applicable legal retention obligations.
6. Analysis Tools
6.1 Tinybird
We use Tinybird (Calle del Dr. Fourquet, 27, 28012 Madrid, Spain) to analyze event streams. Tinybird processes IP addresses and visit data via cookies. Legal basis: your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw consent at any time by contacting us or Tinybird directly at [email protected]. More information: https://www.tinybird.co/privacy
6.2 New Relic
We use New Relic (101 Second Street, 15th Floor, San Francisco, CA 94105, USA) to monitor app performance. Legal basis: your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw consent at any time. More information: https://newrelic.com/privacy
7. Google Maps
This app uses Google Maps, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) for the European Economic Area.
When you open map features in the app, your browser loads geographic data into its cache to correctly render the map. This requires a connection to Google’s servers, providing Google with your IP address and information about which map was accessed.
Legal basis: your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw consent at any time; however, withdrawal may limit certain app features. Terms of use for Google Maps: https://www.google.com/intl/en/help/terms_maps.html
8. Email Communications via Sendgrid
For sending event confirmation and transactional emails, we use Sendgrid, operated by Twilio Inc. (101 Spear Street, 1st Floor, San Francisco, CA 94105, USA).
The following data is processed: name, email address, and email content. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable email delivery). Data is retained by Twilio for as long as needed to provide the service and no longer than 60 days after account closure.
For questions: [email protected]. More information: https://www.twilio.com/legal/privacy
9. Error Monitoring via Sentry
EventMobi uses Sentry (Functional Software, Inc. dba Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA) for real-time error tracking to maintain technical stability. In the event of errors, IP address, operating system, and timestamp are logged. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in app stability). More information: https://sentry.io/privacy
10. Data Transfers to Third Countries
Some service providers are located outside the European Economic Area. We ensure adequate protection through standard contractual clauses and other safeguards recognized under Art. 45–49 GDPR. More information on EU adequacy decisions: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu
11. Your Rights
You have the following rights regarding your personal data:
11.1 Right to Withdraw Consent (Art. 7 GDPR)
You may withdraw consent to data processing at any time by contacting us verbally or in writing. Withdrawal affects future processing only.
11.2 Right of Access (Art. 15 GDPR)
You have the right to request information about the personal data we hold about you, including the purposes of processing, categories of data, recipients, and storage duration.
11.3 Right to Rectification or Erasure (Arts. 16–17 GDPR)
You have the right to request correction of inaccurate data and, in certain circumstances, deletion of your personal data.
11.4 Right to Restriction of Processing (Art. 18 GDPR)
Under certain conditions, you may request that we restrict processing of your data.
11.5 Right to Data Portability (Art. 20 GDPR)
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your data in a machine-readable format.
11.6 Right to Object (Art. 21 GDPR)
Where we process your data based on legitimate interests, you may object to that processing. We will review the objection and either discontinue, adapt, or justify continued processing.
11.7 Right to Lodge a Complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a supervisory authority in your place of residence, place of work, or where an alleged infringement occurred.
11.8 How to Exercise These Rights
To exercise any of these rights, please contact:
Maryland Democratic Party
Attn: Marklyn Bailey, Operations Director
275 West Street, Suite 70, Annapolis, MD 21401
Email: [email protected]
Paid for by the Maryland Democratic Party, www.mddems.org, and not authorized by any candidate or candidate’s committee. By authority of Devang Shah, Treasurer.