Information obligation (pursuant to Article 13 GDPR)

We inform you that the controller of personal data contained in the service is FINCERTO sp. z o.o., with its registered office at ul. Bernardyńska 1, 41-902 Bytom, entered into the National Court Register under number KRS 0000159398, NIP 6411921650, REGON 273358980, share capital PLN 60,000.00, hereinafter referred to as the “Company”, the operator of websites available within the domain tickeventum.com or other domains administered by the Company.

Your personal data were obtained during the creation of your account, as well as in connection with transactions carried out by you on tickeventum.com.

To obtain more information about the processing of your personal data, please contact our designated Data Protection Officer at: iod@tickeventum.com or by post to the Company’s address.

Purpose and legal basis for processing

We process your personal data because it is necessary for the performance of the contract concluded with you, including:

• enabling the provision of electronic services and full use of tickeventum.com, including making transactions and payments,
• creating and managing your account(s) and ensuring the handling of your account and transactions,
• handling complaints submitted via tickeventum.com,
• handling requests addressed to us (e.g. via contact form),
• contacting you, including for purposes related to the provision of services.

Additionally, legal provisions require us to process your data for tax and accounting purposes.

We also process your personal data for the following purposes, based on the Company’s legitimate interest:

• monitoring your activity and the activity of other users, including keyword searches, posting offers, and managing activity on tickeventum.com,
• conducting marketing activities, including direct marketing of our own services or third-party goods/services,
• contacting you in connection with permitted marketing activities via available communication channels, in particular (with separate consent) via email and telephone,
• ensuring the operation of payment services,
• ensuring the security of electronic services, including enforcing internal rules and preventing fraud and abuse,
• conducting research and analysis to improve service functionality and user experience,
• handling user requests not directly related to contract performance,
• organising loyalty programs, contests, and promotional campaigns,
• debt collection and conducting legal proceedings,
• statistical analysis,
• archiving and ensuring accountability (demonstrating compliance with legal obligations).

After obtaining separate consent, we may also process your personal data for:

• storing data in cookies and collecting data from websites and mobile applications,
• organising contests and promotional campaigns,
• sending newsletters or “Web Push” notifications.

Consent may be withdrawn at any time in the same manner in which it was given. Data will be processed until consent is withdrawn.

Requirement to provide data

Providing personal data is necessary to conclude and perform the contract. The scope includes:

• name and surname – necessary to issue sales documents,
• email – necessary for login and communication,
• phone number – necessary for communication related to the service.

Failure to provide this data will prevent the conclusion of the contract and use of tickeventum.com.

In cases required by law, we may request additional data for accounting or tax purposes. Otherwise, providing data is voluntary.

Your rights

We guarantee all rights arising from GDPR, including:

• right of access,
• right to rectification,
• right to erasure,
• right to restriction of processing,
• right to data portability,
• right not to be subject to automated decision-making (including profiling),
• right to object to processing.

You may exercise these rights when:

• data is incorrect or incomplete,
• data is no longer necessary,
• consent has been withdrawn,
• processing is unlawful,
• data must be deleted due to legal obligations,
• or data was collected in connection with services offered to a child.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority responsible for data protection.

Right to object

You may object when:

• processing is based on legitimate interest and your situation justifies objection,
• data is processed for direct marketing purposes (including profiling).

Data recipients

Your personal data may be shared with entities supporting us in providing services, including:

• payment service providers,
• consulting and audit firms,
• customer service providers,
• marketing partners.

We may also provide data to public authorities combating fraud and abuse.

Data retention

We store your personal data:

• for the duration of the service,
• after its completion for:
  • claims handling,
  • legal obligations (tax/accounting),
  • fraud prevention,
  • statistical and archival purposes,

for a maximum period of 5 years (until the end of the 5th calendar year from last activity).

Marketing data is stored until you object.

Transfers outside EEA

Your personal data may be transferred outside the European Economic Area to Google LLC based on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

Automated processing and profiling

Your data may be processed in an automated manner (including profiling), however this will not produce legal effects or significantly affect your situation.

Profiling consists of analysing your preferences and interests based on your activity.