Privacy policy
Template wording, written to reflect the GDPR. Have this reviewed by a qualified lawyer or your data protection officer before you rely on it.
Who controls your data
The platform operator is the controller of your account data. Each event organiser is a separate controller for the data relating to their own events and attendees. The platform operator acts as a processor on their behalf under a written data processing agreement.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Name, email, password | To operate your account | Contract |
| Booking and ticket records | To sell and validate entry | Contract |
| Identity document number | Only where an event restricts attendance | Legal obligation or legitimate interest of the organiser |
| Profile or attendee photograph | Only where an event requires photo verification | Consent |
| Payment records | To confirm and reconcile your payment | Contract |
| Access logs, IP address | Security and fraud prevention | Legitimate interest |
Identity numbers and photographs are collected only when the specific event you are booking requires them, never at registration. Identity numbers are encrypted at rest and shown masked. Photographs are stored privately and are never publicly addressable.
How long we keep it
Identity documents and verification photographs are deleted automatically after the event, following the retention period the organiser has configured. Booking and payment records are retained for as long as accounting law requires. Account data is kept until you delete your account.
Sharing
Your data is shared with the organiser of any event you book, and with the payment provider you choose. It is not sold, and it is not used for advertising.
Your rights
You may request access, correction, erasure, restriction, portability, or object to processing. Account holders can export their data and request erasure directly from account settings. Erasure anonymises past bookings rather than destroying the organiser's accounting records.
You also have the right to complain to your national supervisory authority.
Cookies
This platform sets only cookies that are strictly necessary: your session, your language choice, and a security token. No advertising or third-party tracking cookies are set.