1. Data Controller
At Tall Timbers Group LLC, we are committed to protecting your privacy and the security of your personal data. This statement explains how we handle personal data under the General Data Protection Regulation (GDPR) when you use AnyRegistration (anyregistration.com, also reached at tableregistration.com and teamregistration.com) (the “Services”). It adds to our Privacy Policy.
Tall Timbers Group LLC, 21784 Tall Timbers Rd, Nisswa, MN 56468, USA, is the data controller for organizer accounts and for visitors to our own website.
When you register for, buy from, sponsor or give to an event, the organization running the event is the controller of the information you give it, and we process that information on its behalf as its processor. Requests about that information are best sent to the organizer; we will help them answer.
You can contact us at [email protected].
2. Personal Data We Collect
- Account Information: name, email address, phone number and organization details when you create an account.
- Event and Guest Data: information organizers and their guests enter into the Services, such as registrations, answers to event questions, purchases, gifts, check-ins and survey responses.
- Payment Data: payment amounts and status, and the last digits and type of a card. Full card numbers are handled by our payment processors and not stored by us.
- Usage Data: IP address, browser type, device information, pages requested and errors.
- Cookies: the cookies listed in our Cookie Policy.
3. Legal Basis for Processing
We process your personal data under the following legal bases as per GDPR:
- Contractual Necessity (Art. 6(1)(b)): To provide and manage your account and deliver our Services, including the registrations and purchases you make.
- Consent (Art. 6(1)(a)): For optional features like marketing communications (you may withdraw consent at any time).
- Legitimate Interests (Art. 6(1)(f)): To improve our Services, prevent fraud, and ensure security, provided your rights are not overridden.
- Legal Obligation (Art. 6(1)(c)): To comply with applicable laws and regulations, such as tax and accounting records.
4. How We Use Your Data
- Provide, maintain, and improve our Services.
- Process payments, refunds and payouts.
- Communicate with you about your account, your registrations, updates, or support inquiries.
- Send marketing communications to organizers (with the option to opt out at any time).
- Analyze usage to enhance functionality and user experience.
- Ensure the security of our Services and prevent fraud.
5. Data Sharing
We may share your personal data with:
- Service Providers: trusted third parties who process data on our behalf, such as hosting, payment, email, text message, security and AI service providers. Our Privacy Policy lists them.
- Event Organizers: the organization running an event receives the information you give when you register for, buy from, sponsor or give to it.
- Legal Authorities: when required by law or to protect our rights, safety, or property.
- Business Transfers: in the event of a merger, acquisition, or sale of assets, with safeguards to protect your data.
We do not sell your personal data to third parties, and we do not use guests’ data to market other organizers’ events.
6. International Data Transfers
As a U.S.-based company, we store and process data in the United States. Where GDPR applies, we rely on appropriate safeguards for these transfers, such as Standard Contractual Clauses (SCCs) with our service providers, or on adequacy decisions where applicable.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, including:
- Account data: for the duration of your account and up to 1 year after account closure, unless required by law.
- Server logs and error records: about 30 and 90 days respectively.
- Legal obligations: as required by applicable laws (e.g., tax or accounting requirements).
8. Your GDPR Rights
If you are located in the European Economic Area (EEA) or other regions covered by GDPR, you have the following rights:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data (subject to legal obligations).
- Restriction: Restrict processing of your data under certain conditions.
- Portability: Receive your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests, including marketing.
- Withdraw Consent: Withdraw consent at any time where processing relies on consent.
To exercise these rights, contact us at [email protected]. We will respond within one month, as required by GDPR.
9. Cookies and Tracking Technologies
Our Services set only the cookies they need to work, such as keeping you signed in and protecting forms. Some pages use third-party services that may set their own cookies, namely bot checks and payment forms. We do not use advertising or tracking cookies. Our Cookie Policy lists them and explains how to control them in your browser.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit, access controls, and sign-in by emailed link or code. However, no system is completely secure, and we cannot guarantee absolute security.
11. Third-Party Links
Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these websites. Please review their privacy policies before providing personal data.
12. Children’s Privacy
Our Services are not intended for individuals under the age of 16 to use on their own. A parent or guardian may register a child for an event. We do not knowingly collect personal data directly from children. If we become aware of such data, we will take steps to delete it.
13. Changes to This Policy
We may update this statement to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or a notice on our websites. The updated statement will be effective as of the “Last updated” date above.
14. Complaints
If you have concerns about our data practices, please contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority in your country of residence, such as the Information Commissioner’s Office (ICO) in the UK or the Data Protection Commission (DPC) in Ireland.