INSOMNIA.Electronic Music & Arts Festival 2026

1. Data Controller

The controller responsible for the processing of personal data is José Pedro Bento Pinto de Morais Torres, Portuguese tax identification number 224 799 614, with registered address at Rua Miguel Soares, no. 8, 4770-824 Avidos, Vila Nova de Famalicão, Portugal, and telephone number +351 912 190 254.

For privacy-related enquiries or to exercise your rights, contact info@insomniafestival.com.

2. Scope and personal data processed

This Policy applies to the official INSOMNIA.Electronic Music & Arts Festival website, the contact channels and social media pages managed by the Organisation, newsletters, ticket and access management, and participation in the festival.

Depending on how you interact with the festival, we may process:

• your first name, surname and email address
• messages, support requests, complaints and related correspondence
• communication preferences and records of consent or withdrawal
• website technical data, such as your IP address, browser, device, security logs and cookie-related identifiers
• your profile name, username, comments, reactions and messages on social media
• photographs, video footage and voice recordings captured during the festival
• information strictly necessary to manage incidents, emergencies or requests to exercise data protection rights.

Data may be obtained directly from you, from the person purchasing or transferring a ticket to you, from Shotgun, from the channels through which you contact us or from authorised teams at the festival.

3. Purposes and legal bases

We process personal data to:

• manage tickets, attendees and access to the festival, based on the performance of a contract
• respond to enquiries, provide support and handle complaints, based on steps taken before entering into a contract, performance of a contract, compliance with legal obligations or the Organisation’s legitimate interests
• comply with tax, accounting, administrative and other legal obligations
• operate and protect the website, diagnose technical problems and prevent fraud or attacks, based on legitimate interests
• send newsletters and promotional communications, exclusively with consent
• manage social media interactions, moderate content and respond to messages, based on legitimate interests or a contractual relationship
• document and communicate the festival through photographs, video and sound, as described in this Policy
• protect people and property, manage incidents and defend legal rights.

4. Tickets and communications through Shotgun

When you select the ticket purchase option on the festival website, you are redirected to the Shotgun platform, where the purchase process takes place.

Through Shotgun, the Organisation can view and export the purchaser’s first name, surname and email address. This information is used to manage orders, attendees, support and access to the festival.

Ticket purchases, payments, issuance, transfers and official resale are handled through Shotgun. The Organisation does not view or export payment or billing data through the platform. Billing enquiries should be addressed through Shotgun’s documentation or customer support.

Shotgun also processes personal data for its own purposes, in accordance with its Privacy Policy.

5. Newsletters and promotional communications

The Organisation uses Shotgun to manage and send newsletters and other promotional communications relating to INSOMNIA.Electronic Music & Arts Festival.

These communications are sent only to individuals who have expressly agreed to receive them through the consent options provided by Shotgun.

Consent may be withdrawn at any time and free of charge through the unsubscribe link included in each communication or through the options provided by Shotgun. Withdrawal does not affect the lawfulness of communications sent before consent was withdrawn.

Purchasing a ticket does not automatically subscribe the purchaser to the newsletter. Even without consent for marketing, the purchaser may receive communications strictly necessary to manage the ticket, payment, transfer, resale, relevant festival changes or delivery of the contracted service.

6. Website and cookies

We may process technical data strictly necessary to operate and protect the website.

Where non-essential analytics, advertising, personalisation or third-party content technologies are used, they will only be activated after the user has given consent. The technologies used, their purposes, providers and retention periods will be identified in the Cookie Policy and cookie preference panel.

7. Photographs, video and sound

During the festival, official teams may capture photographs, video and sound to document the atmosphere and different festival areas, inform the public, produce editorial content and preserve a record of the event.

Entry to the festival does not constitute general consent for any use of a person’s image. Wide shots of the venue, dancefloor, festival areas and general atmosphere may be processed on the basis of the Organisation’s legitimate interests, provided that the use is necessary, proportionate and compatible with attendees’ reasonable expectations.

Content may be published on the festival’s official Facebook and Instagram channels, used to communicate future editions and retained while it continues to have documentary or communication value. In exceptional circumstances, content may be provided to the press for editorial purposes directly related to the festival.

Portraits, interviews, testimonials, clearly featured individuals and images used individually in promotional campaigns or advertisements require specific permission or another appropriate legal basis.

The Organisation does not provide this content to sponsors or partners for their independent use. It may publish photographs provided by independent photographers where the necessary rights relating to the photograph and the people shown have been secured.

If you appear in a photograph or video, you may request that the content be reviewed and, where applicable, removed from channels controlled by the Organisation. Send your request to info@insomniafestival.com, identifying, where possible, the content, date, location and place of publication.

8. Children’s data and images

We apply enhanced protection to children’s personal data and images.

Where a free ticket for a child is requested in advance, only the name associated with the ticket and the email address provided for its delivery and management are collected. Where the ticket is obtained directly at the festival ticket office, no personal data are collected for the purpose of issuing it.

Individual images focused on children will not be used for communication or promotional purposes without appropriate permission from their legal representative.

Rights relating to a child’s personal data may be exercised by the legal representative or, where legally appropriate, by the child, by contacting info@insomniafestival.com.

9. Medical assistance and incidents

In the event of an incident or emergency, medical and emergency teams may process identification and contact details, information about the incident and, where necessary, health data.

These organisations may act as independent controllers and retain their records in accordance with applicable law. The Organisation only receives identifiable medical information where there is a specific need and an appropriate legal basis, including for safety, insurance or legal claims.

10. Recipients of personal data

Personal data may be accessed or received, only where necessary, by:

• authorised members of the Organisation
• Shotgun and service providers involved in ticketing and access validation
• website hosting, maintenance, email, storage and digital communication providers
• photography, video, production, security, medical assistance and access-control teams
• accountants, insurers, advisers and other necessary service providers
• administrative, police, judicial or emergency authorities where disclosure is legally required or otherwise lawful.

Service providers processing data on behalf of the Organisation are subject to appropriate instructions, confidentiality duties and contractual obligations.

11. Domo Camp and external services

Domo Camp enquiries and bookings are completed directly on that provider’s website, accessed through an external link.

The data are collected and processed directly by Domo Camp. The Organisation does not receive or view those data, monitor bookings or use tracking technologies associated with the link.

Other websites, social media platforms and external services have their own privacy policies, which should be reviewed before providing personal data.

12. International transfers

Some providers may process personal data outside the European Economic Area. Where a transfer takes place under the Organisation’s responsibility, the applicable legal safeguards will be used, such as a European Commission adequacy decision or Standard Contractual Clauses accompanied by any necessary additional measures.

You may request information about the applicable safeguards by contacting info@insomniafestival.com.

13. Data retention

We retain personal data only for as long as necessary for each purpose:

• ticketing data viewed or exported by the Organisation are generally retained for three years after the festival
• data processed directly by Shotgun are retained in accordance with that platform’s policies and applicable law
• tax and accounting documents for which the Organisation is responsible are retained for the statutory period of ten years, unless a longer period applies
• support correspondence is retained until the matter is closed and generally for a further twelve months
• correspondence concerning purchases, complaints, incidents or disputes may be retained for three years after the matter is closed or until the relevant proceedings have been finally concluded
• newsletter data are used while the subscription remains active, and a minimal record of withdrawal may be retained
• cookie-related data follow the periods stated in the cookie preference panel or Cookie Policy
• photographs and videos are retained while they continue to have documentary or communication value and are subject to periodic review
• medical records are retained by the responsible healthcare provider in accordance with the legally applicable periods.

14. Your rights

Under the General Data Protection Regulation, you may request:

• access to your personal data
• correction of inaccurate or incomplete data
• erasure, where the legal requirements are met
• restriction of processing
• objection to processing based on legitimate interests
• objection to direct marketing at any time
• data portability, where applicable
• withdrawal of consent.

To exercise a right, contact info@insomniafestival.com and identify your request. We may request information strictly necessary to confirm your identity and protect third-party data.

Exercising your rights is generally free of charge. We will respond within one month, subject to any extensions or limitations permitted by law.

Requests concerning processing independently carried out by Shotgun, Domo Camp, social media platforms or other providers should be directed to the relevant organisation.

15. Complaints

If you believe that your personal data have been processed unlawfully, you may lodge a complaint with the Portuguese National Data Protection Commission:

Comissão Nacional de Proteção de Dados
Av. D. Carlos I, 134, 1st floor
1200-651 Lisbon, Portugal
geral@cnpd.pt

16. Security and changes

We use appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, unauthorised access or disclosure. No system can guarantee absolute security.

This Policy may be updated when relevant legal, technological or operational changes occur. The current version will be published on this page with its latest revision date.