Last updated: 2026-11-06
Privacy policy
This notice explains how we use information on the Ritual Gatherings festival registration website. A registration ticket confirms an email signup; it is not an admission ticket or proof of identity.
Who is responsible
Ritual Gatherings Ltd., VAT BG175809390, 11 Professor Fridtjof Nansen Street, Sofia 1142, Bulgaria is the controller. Contact info@ritualgatherings.com about your information or privacy rights.
Festival emails and registration
When you sign up, we collect your email address and name. If you choose to suggest artists, we also collect that text to help plan the festival. We send these details to Brevo, our email service provider, together with the time, source, language and version of your email consent notice.
Submitting the dedicated pre-registration form using “Pre-register for 2027” authorises Ritual Gatherings Ltd. to send ongoing Ritual Gatherings festival news and ticket announcements by email, and lets you buy tickets before the public sale. This choice is independent of cookie preferences and does not purchase a ticket or reserve admission. The legal basis is your consent (GDPR Article 6(1)(a)). Optional artist suggestions are used for festival planning with your consent through submission of that optional field. You can withdraw consent at any time. Email and name are required for this signup; artist suggestions and optional cookies are not.
The “Join the waitlist” forms for The Ritual Dinner and All-in Experience are separate subscriptions for news and invitations about the selected experience. Each sends your name and email to its own Brevo list. These forms do not subscribe you to festival emails or create a personalised festival ticket.
Your personalised ticket
After a successful signup, we show your first name on the confirmation ticket for the current visit. With functional consent, we also remember your first name and registration display state in this browser for up to 365 days. The cookie contains no email address, surname or artist suggestions. This optional storage and personalisation rely on your consent.
We renew cookie choices after 180 days. An existing saved ticket remains hidden until you renew functional consent and keeps its original one-year expiry. Rejecting or withdrawing functional consent deletes the saved ticket and removes its name from the current confirmation. Deleting a ticket does not unsubscribe you from emails.
The paragliding game
The paragliding game at /fly works without signing up. If you pre-register from it to join the leaderboard and the draw for 2 free tickets, we keep your email, your leaderboard name (first name and last initial) and your flights: the date, the recorded controls, the outcome and the score. The server replays every flight to calculate its score. Your email is used only to contact winners and is never shown; leaderboards show only your name.
This data is stored with Cloudflare. We keep it until the draw has closed and prizes are delivered, then delete the game's flights and email; your email subscription stays separate until you unsubscribe. The draw rules describe who can enter and how winners are chosen.
Analytics, only if you allow it
When enabled, Google Analytics 4 measures page visits, marketing campaigns, signup steps and outcomes, FAQ questions opened, visible gallery photos, full-screen photo views, save/download/share actions, section engagement and link clicks only after analytics consent. Public album identifiers, photo content hashes and positions distinguish content; original filenames are excluded. It receives technical information such as browser/device information, a cookie identifier and the public page visited. We do not send names, email addresses, suggested artists, ticket contents or arbitrary URL query strings.
The legal basis is consent. Analytics cookies last up to 180 days without being extended on ordinary visits. The configured user/event-data retention period is 14 months; aggregated standard reports may remain longer. Advertising features, Google Signals, user-provided data collection and automatic form tracking are disabled. Refusing analytics does not affect registration.
Hosting and security
Cloudflare hosts the site and provides Turnstile to protect the form against automated abuse. It processes technical request information and security signals, including IP address and browser information. Our legitimate interest in running a secure, reliable website is the legal basis (Article 6(1)(f)). Necessary security functions do not depend on analytics or functional consent.
We do not write registration payloads or ticket names to application logs. Cloudflare's processing and retention of technical security information are described in its privacy terms. Security cookies, when issued by the deployed Cloudflare protection, are separate from our optional ticket and analytics cookies.
Providers and international transfers
Brevo processes signup data for festival email delivery. Cloudflare processes hosting and security information; Google processes consented analytics when enabled. Cloudflare may also act as a controller for improving Turnstile security under its own privacy notice. The Instagram link opens Instagram only when you follow it; we do not embed an Instagram tracker.
Providers may process information outside the EEA. Where required, transfers rely on an applicable adequacy decision or EU Standard Contractual Clauses and supplementary safeguards under the provider agreements. Contact us for information about safeguards applicable to your data. We do not send your signup details to Google or sell your personal data.
How long we keep information
We keep festival mailing-list information while you remain subscribed and review the list annually. After withdrawal, we remove festival-only profile information and retain only the minimal suppression record needed to honour your opt-out. Information needed for another subscription you independently authorised is not removed by leaving the festival list.
Consent choices last 180 days and saved tickets at most 365 days. We keep the relevant email-consent evidence for as long as needed to demonstrate the permission relied upon or handle a specific legal claim. Contact us to request deletion or details of applicable retention; we assess any legal need to retain a limited record separately.
Your rights and choices
You may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. You may withdraw consent without affecting processing that was lawful before withdrawal. We may need proportionate information to verify your request. There is no automated decision-making producing legal or similarly significant effects on this site.
Use Cookie settings to change optional storage and analytics choices. Use the unsubscribe link in any festival email to stop those emails, or contact info@ritualgatherings.com. You can complain to the Bulgarian Commission for Personal Data Protection (CPDP), or another competent supervisory authority. We update this notice when the site's processing changes and request fresh consent for material changes where needed.