Mock'n'Roll – Privacy Notice

V0.1 · Effective August 18, 2026. This notice summarises the processing of personal data in the Mock'n'Roll event web application and at the event.

1. Who controls the data?

The data controller is WestieWaves, the organiser of Mock'n'Roll. Privacy questions or requests may be sent to westiewaveswcs@gmail.com, raised through the Facebook event, or made in person to the event organisers.

2. What data do we process?

account data: name, email address and encrypted password;
event registration: participation type, competition role, optional social role and switch information;
on-site data: check-in status, competition number, Open/Spotlight grouping and finalist status;
judging data: Give a Roll nominations, badges, Final Roll ballots and placement rankings;
operational and security data: action timestamps, IP address, browser identifier and audit log;
results and personal anonymous feedback generated during the event;
photo and video recordings: image, movement and, in the case of video, voice.

3. Why do we process it?

Data is processed to:

manage accounts and event registrations;
run check-in, the Social Roll and the Final Roll;
verify permissions, nomination limits and valid voting;
calculate and publish results and display private feedback;
investigate technical errors, abuse and disputed actions;
produce anonymous event statistics;
document the event and present the WestieWaves community and future events.

4. What is the legal basis?

Account, registration and competition data is necessary to provide the event service requested by the participant.
Security, abuse-prevention and audit data is processed on the organiser's legitimate interest in a fair game and a secure service.
Providing a social role and switch information is voluntary and can be changed in the profile.
Crowd and atmosphere recordings are processed on the organiser's legitimate interest in documenting and presenting the event.
Separate consent is requested for recordings that feature an individual participant as their principal subject and do not fall under a statutory exception.
Where required by law or a legal claim, necessary data may be retained for the applicable period.

5. Is providing data mandatory?

An event registration cannot be created without a name, email address, password and participation type. Competitors must also provide a competition role. Primary social role and switch information are optional. Party guests generate less competition data; judge and competitor permissions activate only after on-site check-in.

6. Who can access the data?

participants can access their own account and feedback data;
event operators and administrators can access data required for event operations;
the chief judge can access grouping and tie-break data defined by the rules;
a photographer or videographer commissioned by WestieWaves can access the recordings to the extent required for their work;
the hosting and server provider only to the extent needed to provide the technical service.

Votes linked to individual judges are not public. The application does not sell personal data or use it for advertising.

7. What may be public?

After the event, finalist names and numbers, the pair podium, badge-category recognitions, non-personal event statistics and selected photo or video recordings may be published. Rankings of non-finalists, exact Give a Roll or badge counts, and individual judges' decisions are not published.

8. Photo and video recordings

At the Mock'n'Roll event, WestieWaves or a photographer or videographer commissioned by it may take photo and video recordings. The purpose of the recordings is to document and present the atmosphere of the event and to promote WestieWaves events and community activities.

Recordings may include participants' image, movement and, in the case of video, voice. Crowd and atmosphere recordings are processed on the basis of WestieWaves' legitimate interest in documenting and presenting the event. Separate consent is requested for recordings that feature an individual participant as their principal subject and do not qualify as a crowd recording or another statutory exception. Refusing consent does not affect participation in the event.

Selected recordings may appear on the WestieWaves website, Facebook and Instagram pages, in event-related communications and in the presentation of future WestieWaves events. Recordings published on social media may become available to an unlimited audience and may be shared by others.

If you do not wish to appear recognisably in recordings, you may tell the organisers before or at the event. We will take reasonable organisational measures to avoid making a highlighted recording of you. For an already published recording, you may request information or action at westiewaveswcs@gmail.com; including the link to the post or a screenshot helps us identify it.

9. How long do we retain data?

account, name, email and personal feedback: until account deletion or 24 months of inactivity;
identifiable raw votes and audit data: 90 days after the event;
custom badge texts awaiting moderation: no longer than 90 days after review;
anonymised event statistics: without a time limit;
rotating database backups: generally 14 days.

Deleted data disappears from technical backups when their retention period expires.

10. Network operation and local storage

During a short network outage, the judging interface may keep unsent actions in the browser's local storage and retry them after the connection returns. This queue remains in that browser and can be removed after successful processing. The site uses session and security cookies required for operation; it does not use advertising or tracking cookies.

11. Automated result calculation

Rankings are calculated automatically using the nomination, scoring and tie-break rules published in advance. Defined ties are resolved by the chief judge, and an authorised operator approves publication. The detailed logic is available in the participant rules.

12. What are your rights?

You may request information and a copy of your data, correction, deletion or restriction of processing; object to processing based on legitimate interests; and, where applicable, request data portability. Voluntary information can be changed or deleted at any time. Identity verification may be required before fulfilling a request.

If you believe processing is unlawful, you may complain to the Hungarian National Authority for Data Protection and Freedom of Information or seek a judicial remedy.

13. Changes to this notice

Registration records the accepted rules and privacy notice versions with a timestamp. If a material change is made, the controller will provide new information and request renewed acceptance where necessary.