Privacy policy
What we collect, what for, and how long we keep it. The service runs no analytics and uses no third-party tracking tools.
Working draft. This text describes what the service actually does, but it has not been through legal review and is not binding yet.
Who is responsible
For the sale itself, the event organiser is the controller of the buyer data, because they are the seller. We process it as an intermediary and as the party delivering the ticket. For accounts on the site, we are the controller.
What we collect
Buying without an account: a name and an e-mail address, plus a phone number only if the buyer chooses the SMS notification. With an account: whatever was given at registration. Organisers receive the details of their own event attendees — they need them to admit people and to settle the sale.
Legal basis
Performance of a contract — without an e-mail address there is no way to deliver the ticket. A phone number is processed solely to send the SMS that was ordered.
How long
Order data is kept as long as accounting rules require. The link to a ticket bought without an account stops working 90 days after the event ends — the ticket itself stays in our records; only access to the page expires.
Your rights
You have the right to access your data, correct it, erase it, restrict its processing and port it, and to lodge a complaint with the Polish data protection authority. Erasure does not cover what we must keep for accounting.
Still missing
To be filled in: the controller details and postal address, a data-protection contact, the list of processors (payment provider, mail, SMS gateway, map supplier), and the processing agreement between us and organisers.