Privacy Policy (GDPR Compliant)

1. Data Controller

The data controller responsible for your personal data:

Not for profit organization International Bath Academy and Sauna Heritage initiatives

2. Purpose of processing

Your personal data is processed for the following purposes:

• Participation in the World Bathmasters Day panorama
• Creation and delivery of a personalized poster
• Public presentation of submitted content (photo, location, text)
• Communication related to the project
• Informing about related initiatives, events, and educational opportunities

3. Legal basis (GDPR Article 6)

Your data is processed based on:

• Consent (Art. 6(1)(a)) – when you submit your data and agree to this policy
• Legitimate interest (Art. 6(1)(f)) – maintaining and developing sauna culture initiatives

You may withdraw your consent at any time.

4. Data collected

We may collect:

• Email address
• Uploaded photo
• Location (as provided)
• Text content (slogan, message)

We do not collect sensitive personal data.

5. Public data

By participating, you acknowledge that the following data may be publicly visible:

• Photo
• Location
• Submitted text

Your email address will never be publicly displayed.

6. Email and communication

Your email address will be stored in the saunaheritage.org contact list.

It may be used to:

• Send your poster
• Provide important updates
• Share relevant news, events, or educational opportunities

You will not receive excessive or unrelated communication.

7. Data retention

Your data is stored only as long as necessary for the purposes described.

You may request deletion at any time.

8. Data deletion rights

You have the right to:

• Access your data
• Correct your data
• Request deletion
• Withdraw consent

After processing:

• Your email will be removed from contact lists
• Your data will be deleted
• Your photo will be removed where technically feasible

9. Data processors

We use trusted third-party services for infrastructure:

• Email delivery via Resend

These services process data only as necessary to operate the system.

10. Data security

We implement appropriate technical and organizational measures:

• Secure storage
• Limited access
• Minimal data collection

11. International data transfer

If data is processed outside the EU, appropriate safeguards are applied in accordance with GDPR.

12. Your responsibilities

By submitting content, you confirm:

• You have the right to share the photo
• The content does not violate others' rights
• You consent to its use in this project

13. Changes to this policy

This policy may be updated.

The latest version will always be available online.

14. Contact

For any questions or requests:

Not for profit organization International Bath Academy
contact@saunaheritage.org