Privacy policy

Who is responsible

For the sale itself, the event organiser is the controller of the buyer data, because they are the seller. We process it as an intermediary and as the party delivering the ticket. For accounts on the site, we are the controller.

What Data Do We Store

If you purchase a ticket without creating an account: first name and email address, and optionally a phone number—but only if you choose to receive SMS notifications. When you create an account on the website, the information we collect includes: first and last name, email address, and optionally a phone number for verification.

Legal basis

Performance of a contract — without an e-mail address there is no way to deliver the ticket. A phone number is processed solely to send the SMS that was ordered.

How long

Order data is retained for as long as required by accounting regulations. The link to a ticket purchased without an account expires 90 days after the event ends; the ticket itself remains in the records, and only access to the website expires.

Your rights

You have the right to access your data, to have it corrected, deleted, or its processing restricted, and to have it transferred, as well as the right to file a complaint with the President of the Personal Data Protection Office. Deletion does not apply to data that must be retained for accounting purposes.

Who else processes the data

The service uses external providers who process data solely on its instructions and only as far as the task entrusted to them requires. They are listed below together with the purpose of that entrustment.

Payment processor — handles payments, refunds, and chargebacks; processes the buyer’s identification and payment information. Outgoing email provider — sends tickets, confirmations, and notifications; processes email addresses and message content. SMS gateway — sends notifications requested by the buyer; processes the phone number. Map provider and geocoding service — displays maps and converts addresses to coordinates; the event address is processed, not participant data. Server infrastructure provider — stores website data.

All providers process data within the European Economic Area. Data of organisers and participants is neither sold nor shared for marketing purposes with any party.

Still missing

Still to be filled in: the controller’s details together with a postal address, and the data-processing agreement between the service and the event organiser. Until they are, this document describes the facts but does not amount to the complete information required by article 13 of regulation 2016/679.