Privacy Policy
& GDPR

1. What data do we collect?

We process personal data necessary for the operational functioning of event management:

• Account and Contact Data: Name, business email address, phone number, and job title of administrators and contacts at the Customer.
• Operational Staff: Names of volunteers, traffic controllers, or staff uploaded into the system by the organizer for task assignment.
• Telemetry and Location Data: If activated, we process real-time GPS data from vehicles or mobile devices to monitor the safety and flow of the event.
• Technical Logging: IP addresses, browser type, and login times for security monitoring and technical support.

2. Purpose and Legal Basis of Processing

We process this data exclusively for the following purposes:

• Execution of the Agreement: To provide the software functionalities (such as digital roadbooks and dispatching) to the organizer.
• Safety and Logistics: Increasing response speed to incidents via live-tracking and communication modules.
• Legitimate Interest: Securing our platform and informing users about crucial updates or system changes.

3. Noribel's Role as Processor

In most cases, the organizer (the Customer) acts as the 'Data Controller' and Noribel as the 'Processor.' This means the Customer determines which data enters the system and how long it is retained. Noribel processes this data strictly according to the Customer's instructions, our Data Processing Agreement (DPA), and applicable legislation.

4. Retention Periods and Deletion

Data is not stored longer than necessary for the purpose for which it was collected. In practice, event-specific data (such as the locations of traffic controllers) are archived or permanently deleted after the operational season ends, unless the Customer explicitly requests retention for future editions or if a legal retention obligation applies to the invoicing data.

5. Security and Sharing of Data

Security

We implement robust technical measures, including SSL/TLS encryption for data at rest and data in transit, as well as strict access controls on our servers.

Third Parties & Sub-processors

We never sell or rent personal data. Data is only shared with sub-processors (such as hosting providers or map/infrastructure providers) who are strictly necessary for the service provision. Noribel ensures these parties meet comparable privacy requirements. A full list of current sub-processors is available to the Customer upon request.

6. Cookies and Tracking Technologies

The Noribel platform utilizes essential technical cookies that are strictly necessary for session management, user authentication, and the secure functioning of the software. We do not use third-party tracking or advertising cookies on the operational platform without explicit consent.

7. Your Rights and Contact

Data subjects have the right to access, correct, or delete their data. Since Noribel often acts as the processor, such requests should initially be directed to the event organizer (the Data Controller).

For general questions about our privacy policy, or to contact our privacy representative/DPO, you can reach us via info@noribel.com.