Privacy Notice
Last updated: September 29, 2026
This Privacy Notice explains how personal data is collected and processed in connection with the Swedish Fika in Mexico City – Cinnamon Bun Day 2026 event and the website fika.tilo.studio.
1. Data Controller
Jonas Christoffer Lindblad, operating under the brand TILO Studios, is responsible for the processing of personal data collected through this website and in connection with the event.
Jonas Christoffer Lindblad / TILO Studios
Tonalá 36
Roma Norte, C.P. 06700
Cuauhtémoc, Ciudad de México, Mexico
Email: hello@tilo.studio
2. Personal Data We Collect
When you register for the event, we may collect:
- First name
- Last name
- Email address
- Number of people included in your reservation
- Selected arrival time
- Language preference
- Registration status
- Date and time of registration
We may also process limited technical information necessary for the security and operation of the website and registration system.
We do not request sensitive personal data through the RSVP form.
3. How We Use Your Personal Data
Your personal data is processed for the following primary purposes:
- To process and manage your event registration
- To manage event capacity and attendance
- To confirm your reservation
- To communicate important information, changes or updates concerning the event
- To respond to questions regarding your reservation
- To process cancellations or changes to reservations
- To maintain the security and proper operation of the website and registration system
We do not use your event registration to automatically subscribe you to newsletters, advertising or other marketing communications.
TILO Studios currently has no secondary marketing purpose for the personal data collected through this RSVP form.
If we later offer an option to receive marketing or news from TILO Studios, this will be presented separately and will require a separate, optional choice.
4. Additional Guests and Children
You may register more than one person as part of your reservation. We only ask for the total number of people in your party.
We do not require names, email addresses or other personal information relating to additional guests or children attending with you.
Please do not provide personal information concerning other members of your party unless we specifically request it.
5. Limiting the Use or Disclosure of Your Data
You may request that we limit the use or disclosure of your personal data by contacting:
Please include your full name and the email address used for your reservation so that we can identify your registration.
6. Event Partners
The event is:
Hosted at: Joe & The Juice
With support from: Oatly
Initiated and produced by: TILO Studios
TILO Studios is responsible for managing the RSVP database.
We do not provide your registration information to Joe & The Juice or Oatly for their own advertising or marketing purposes.
If information ever needs to be shared with an event partner for an operational reason, we will limit this to the information reasonably necessary for that purpose and handle it in accordance with applicable data-protection requirements.
7. Technology and Service Providers
We may use third-party service providers to operate the website, registration database, hosting, email delivery and other necessary technical infrastructure.
These providers may process personal data on our behalf only to the extent necessary to provide their services to us.
The event website and RSVP system may use services including Lovable and Supabase, depending on the final technical configuration.
Some service providers or their infrastructure may be located outside Mexico. Where this occurs, personal data may be processed outside Mexico in connection with the provision of these services.
We take reasonable steps to ensure that service providers handling personal data on our behalf apply appropriate confidentiality and security safeguards.
8. Data Retention
We retain identifiable RSVP information only for as long as reasonably necessary to administer the event, communicate with attendees and handle any relevant follow-up.
Unless continued retention is required for legal, security or legitimate administrative purposes, identifiable event registration data will be deleted or anonymized within 90 days after the event.
Cancelled registrations may be retained during the same period for operational and record-keeping purposes.
9. Your ARCO Rights
You may exercise your rights of:
Access — request access to personal data we hold about you.
Rectification — request correction of inaccurate or incomplete personal data.
Cancellation — request cancellation of your personal data where applicable.
Opposition — object to certain processing of your personal data where applicable.
These are commonly known in Mexico as ARCO rights.
You may also request the revocation of your consent or limitation of the use or disclosure of your data where applicable.
To submit a request, email:
Please use the subject line “ARCO Request” and include:
- Your full name
- The email address used for your event registration
- A description of the right you wish to exercise or the action you are requesting
- The personal data concerned, where applicable
- A means by which we may communicate our response to you
Where reasonably necessary to protect your information, we may request documentation sufficient to verify your identity or the authority of a representative acting on your behalf.
We will respond to requests within the periods established by applicable Mexican data-protection law.
10. Security
We maintain reasonable administrative, technical and organizational safeguards designed to protect personal data against unauthorized access, loss, alteration, disclosure, destruction or misuse.
Access to the RSVP database and event administration system is restricted to authorized persons who require access in order to manage the event.
No method of transmitting or storing information electronically can be guaranteed to be completely secure.
11. Cookies and Similar Technologies
The event website may use cookies or similar technologies that are strictly necessary for the operation, security and functionality of the website and registration system.
If non-essential analytics, advertising or tracking technologies are introduced, this Privacy Notice and the website's consent mechanisms will be updated as appropriate before such technologies are used.
12. Changes to this Privacy Notice
We may update this Privacy Notice if our processing practices, technology or applicable legal requirements change.
The current version of the Privacy Notice will always be available at:
fika.tilo.studio/privacy
Any material changes will be communicated through this page and, where appropriate, through the email address provided in connection with your registration.
The date of the latest update appears at the top of this notice.
13. Contact
For questions concerning this Privacy Notice, your personal data or the exercise of your privacy rights, contact:
Jonas Christoffer Lindblad / TILO Studios
Tonalá 36
Roma Norte, C.P. 06700
Cuauhtémoc, Ciudad de México, Mexico