Privacy Policy

Who We Are

Odyssey Origins is organized by Candy Cane Event PC (“Candy Cane”, “we”, “us”), a Greek company located at 2 Delfon St, Chalandri 15233, Attiki, Greece. Candy Cane is the data controller for the personal data described in this policy.

For any privacy question or request, contact us at contact@odysseyorigins.com.

What We Collect

• Mailing list: your email address, your country, and the date you gave consent.
• Applications (ambassadors, crew, artists, vendors): the details you enter in the form, which may include your name, email, phone number, age, country, city, social media links, skills, availability and project information.
• Contact form: your name, email, optional country, and your message.
• Technical data: our hosting provider processes basic technical information such as IP address and approximate country to deliver the website securely.

Please do not include sensitive information (such as health data) in free-text fields unless it is necessary for your request, for example an accessibility requirement.

Why We Use It and Our Legal Basis

• Sending festival updates, based on your consent. You can withdraw consent at any time.
• Reviewing and answering applications and messages, based on the steps you ask us to take before any agreement, and our legitimate interest in organizing the festival.
• Running and securing the website, based on our legitimate interest.

We do not sell your personal data and we do not use it for automated decision-making.

Who We Share It With

We use trusted service providers who process data on our behalf: Cloudflare (website hosting and data storage), Resend (sending emails), and Google (email and spreadsheets used by our team). Some of these providers may process data outside the European Economic Area. Where this happens, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Ticket purchases are handled by our ticketing partner, Go-Out, under its own privacy policy.

How Long We Keep It

We keep mailing list data until you unsubscribe. We keep applications and messages for as long as needed to handle them and to organize the current festival edition, and delete them no later than 12 months after the festival, unless we need to keep them longer to meet a legal obligation.

Your Rights

Under the GDPR you have the right to access, correct or delete your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email contact@odysseyorigins.com.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr) or with the data protection authority in your country.

Unsubscribing

To stop receiving festival updates, reply to any of our emails or write to contact@odysseyorigins.com and we will remove you from the list.

Age

Our forms are intended for adults. Please do not submit an application or join the mailing list if you are under 18.

Changes to This Policy

We may update this policy as the festival develops. The date at the top shows when it was last updated.