Security and data protection
The same level of protection for everyone, wherever you live: Canopy Festy applies the strictest rules it is subject to, those of the European General Data Protection Regulation (GDPR), to all its users.
Payments
You pay on the secure page of our payment provider. Your card number never passes through Canopy Festy and is never stored by us.
Your account
- Your password is stored only as an irreversible fingerprint: nobody, not even us, can read it.
- Repeated failed login attempts are blocked for a while.
- When you sign in from a new device, a code sent by e-mail confirms that it is really you.
- Exchanges with the site are encrypted (HTTPS).
Your data
- We collect only what is needed for the booking and the welcome.
- The address of the host is given to the visitor only once the booking is fully paid.
- The location data hidden in photos (GPS position) is removed when they are uploaded.
- Our visit statistics use no cookie, and IP addresses are not recorded.
- The details of the people accompanying a visitor are erased after the event. Your account and its data are erased at your request; only the documents that the law requires us to keep (invoices) are kept, for the required period.
In the event of an incident
If a security incident affects personal data, we notify the competent authorities within 72 hours where required, and we inform the people concerned without undue delay when there is a high risk for them, whatever their country. Every incident is recorded, with the measures taken.
Report a vulnerability
Have you found a security flaw? Write to us at service-infos@canopyfesty.com, with "Security" in the subject. Please do not access the data of other users, and give us time to fix the flaw before speaking about it. We answer every report.