Event Privacy Notice
Summary of how we use your data
- We use your personal data to administer our event, allow you to access MozFest and our various workshops, sessions and activities, ensure the safety and security of attendees, carry out interviews and surveys during the event and collect images and footage of our event to promote future MozFests, Mozilla Foundation activities, and the activities of our subsidiaries.
- We receive and share data from and with our suppliers, including our event management platform provider, to help carry out this processing, as well as with the media and promoters as necessary to promote MozFest and the Mozilla Foundation. This involves transfers of your data to the Mozilla Foundation in the United States.
- We may seek your consent to send you updates about future MozFests, other Mozilla Foundation activities and events or to ask you to join our MozFest research cohort and be included in our report participants list. Where we rely on your consent, you can withdraw this consent at any time.
- This Privacy Notice sets out more details of this processing, including details of your data protection rights.
What does this notice cover?
References in this Notice to the Mozilla Foundation shall mean the Mozilla Foundation, a nonprofit corporation. References to “we”, “us”, or “our” shall mean the Mozilla Foundation and the event organizer, Giant Cookie. This Notice describes our use of your data as a result of your registration and attendance at MozFest.
It also describes your data protection rights, including a right to object to some of the processing which we carry out. More information about your rights, , and how to exercise them, is set out in the “What rights do I have?” section below.
What information do we collect?
We collect and process data you provide us when you (or your parent or guardian) register for the festival or when you interact with our workshops and sessions at MozFest. This can include the collection of photography and footage of our MozFest events, which the Mozilla Foundation uses for promotional purposes. We also interview attendees during our events, and may collect your information during MozFest during these interviews. We also collect personal data about you when you communicate with us before and after the event. We also receive information from our processors, such as our event management and ticketing platform where you purchase a ticket. We do not receive any of your credit card or related payment information, which is processed by Stripe or PayPal.
How do we use this information, and what is the legal basis for this use?
We process this personal data for the following purposes:
- Where you have bought a ticket for MozFest or for a workshop or session, we process your data to provide your ticket, process your payment and to provide you with the services you have purchased, in order to perform our contract with you;
- We also process your personal data to protect our legitimate business interests and legal rights, in particular:
- we use data collected about attendees to administer our events, in particular to manage our events, admit ticketed guests, and ensure the safety and security of our attendees, volunteers and staff;
- we collect photography and footage of our events, including our workshops, sessions and other event areas, which the Mozilla Foundation will use to create news content of our events, to provide recordings of our events and to further promote MozFests, Mozilla Foundation activities and events, and the activities of Mozilla Foundation subsidiaries;
- we carry out interviews and surveys during our events, for use in our content and to carry out market research; and
- we use your data in connection with legal claims, compliance, audits and investigations as necessary in connection with our events. This may, in some circumstances, lead to our sharing of information with third parties requesting access to details of attendees for these purposes,
- Compliance with applicable laws; and
- Where you have given your consent:
- we will add you to join our MozFest research cohort and be included in our list of participants thanked in our cohort report;
- we will send you personalized recommendations for MozFest experiences that may interest you;
- The Mozilla Foundation will add you to its mailing lists; and
- The Mozilla Foundation will process data as described in any future consent you give.
Withdrawing consent
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. If you choose to join a marketing list, you can withdraw your consent to this at any time. You can do this by contacting us using the details set out below or unsubscribing directly in the email you received. Any circumstances in which we seek your consent will be truly voluntary, and there will be no detriment to you if you refuse consent.
Who will we share this data with, and where?
Personal data will be collected by Giant Cookie in Spain, who organize this event.
Information about our events, including news content, footage and photography of our events, may be published on our sites and shared with media partners to record, report on and promote our events.
We follow the law whenever we receive requests about you from a government or related to a lawsuit. We'll notify you when we're asked to hand over your personal information in this way unless we're legally prohibited from doing so. When we receive requests like this, we'll only release your personal information if we have a good faith belief that the law requires us to do so. Nothing in this Notice is intended to limit any legal defenses or objections that you may have to a third party's request to disclose your information.
Personal data will also be shared with the following third party service providers, who will process it on behalf of the Mozilla Foundation for the purposes above:
- Tito, our registration platform
- Badgy, our onsite badging system
- Digital Ocean, our cloud service provider
- PreTalx, our proposal management platform
- Stripe and PayPal, our payment processors
- Google, our calendar integration provider
All of our service providers are contractually obligated to solely handle your data in ways that are approved by us.
In the event that the Mozilla Foundation or Giant Cookie is integrated with another business, your details will be disclosed to its advisers and will be passed to the new owners of the business.
Where information is transferred outside the EEA and where this transfer is not as a result of contractual necessity or to a third party in a country subject to an adequacy decision by the EU Commission, your data is adequately protected by EU Commission approved standard contractual clauses, an appropriate Data Privacy Framework certification or a vendor's Processor Binding Corporate Rules. A copy of the relevant mechanism can be provided for your review on request to compliance@mozilla.com.
What rights do I have?
You are entitled to ask us for a copy of your information, to correct it, erase it or restrict (stop any active) processing of your personal data, or to ask us to transfer some of this information to other organizations in a structured, machine readable format.
You also have rights to object to some processing. These rights may be limited in some situations – for example if fulfilling the request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in both the GDPR and in local laws such as the Data Protection Act 2018. We will inform you of relevant exemptions we rely upon when responding to any request you make. In some instances, this may mean that we are able to retain data even if you withdraw your consent.
Where we require personal data to comply with legal or contractual obligations, the provision of such data is mandatory: if such data is not provided, then we will not be able to manage our relationship with you or to meet obligations placed on us. In all other cases, provision of requested personal data is optional.
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, you can get in touch at compliance@mozilla.com or by writing to the Mozilla Foundation, Attn: Legal Notices - Privacy, 149 New Montgomery Street, 4th Floor, San Francisco, CA 94105, USA. If you have unresolved concerns you also have the right to complain to a relevant data protection authority. The relevant data protection authority may be the supervisory authority where you live, work or where processing takes place.
How long will you hold my data?
We will hold details relating to your purchase of a ticket for at least 2 years following your purchase. If you wish to have your data deleted, you can send us an email at compliance@mozilla.com or you can complete this form. Please reference your MozFest participation in your request.
We may also hold other information about you where required by law, such as for health and safety or accounting records. In these cases, we will hold information for as long as necessary for these purposes or as required by law, and will ensure your data is reviewed over time to ensure it is not held where no longer necessary.
The Mozilla Foundation will retain footage and photography obtained at our events, and any interview input you have provided, for an indefinite period to retain a record of the events and to promote its future events.
Last updated: April 7, 2025