1.        Who are we?

S.C. Dettra Organization SRL (hereinafter referred to as the "Operator") is a Romanian company based in Str. General Eremia Grigorescu, no. 122A, Cluj-Napoca, registered in the Trade Register under no. J12 / 1595/2010. Dettra Organization acts as an operator of personal data collected through the https://in-town.ro website (hereinafter referred to as "The website") for or in connection with the sale of tickets /passes for the music festivals Neversea (organizer: Neversea SRL) and Untold (organizer: Untold SRL) and other related products/services or for other public events.

We have the obligation to safely and solely for the specified purposes manage personal data that you provide to us as a user of the Site and hereby inform you of the processing carried out (1) .


  1.        What data do we process and for what purpose?

Through the Site, we process the following personal data categories: identification data (name, surname) and contact data (e-mail address, phone number). In addition, through the Website you can provide us with other information about you, such as biographical and profile data (profile photo, date of birth, gender, address of origin), for which Dettra Organization acts as an authorized person for Nevers and Untold organizers, and the data is needed by them, as specified below.

Thus, we process your personal data for the following purposes:

a)       For your registration and authentication on the Website for the purpose of selling tickets/passes to the Neversea and Untold music festivals and/or their associated products/services. Legal basis for processing: Concluding and executing a contract

b)      To e-mail you commercial communications about our products and services, similar to those you have purchased, unless you have expressed the wish not to receive such commercial communications. The legal basis for processing: our legitimate interest in making commercial communications about similar products or services, if and as long as the customer does not oppose such processing,

c)       In order to facilitate the check-in of tickets / passes managed by Neversea and Untold organizers, we send them your personal data to be used for the purposes stated in [https://neversea.com/static /terms-and-conditions-en.pdf] and [https://untold.com/static/terms-and-conditions-en.pdf], respectively.

d)      To ensure access to the Festival premises only to the rightful persons and to avoid frauds. For example, if a ticket/pass is printed by two different people, we can give the organizers of Neversea/Untold information about the person who bought that ticket/pass. The legal basis for processing: our legitimate interest and of the organizers of Neversea, Untold to ensure legitimate access to festivals and to avoid fraud.

  1.        Who do we disclose your personal data to?

We store your personal data on our servers in Romania, but we will be able to store them on cloud platforms operated by cloud providers in the European Union. The operator will also be able to transmit the data to the contractual partners for the purposes described above but only based on a confidentiality agreement from them to ensure that these data are kept secure and that their delivery is made according to present legislation (marketing, courier, payment services, banking, or other services). The operator will be able to transmit your personal data to public authorities under the law. The data could also be forwarded to accountants, auditors, lawyers or other such external counselors of the Operator. The Operator may disclose such data whenever the law requires it, or where such action is necessary to enable the exercise of the rights prescribed by law to start legal proceedings against any unlawful activity.

  1.        For how long do we keep personal data?

We will keep personal data as long as your account on the Website is active, plus a reasonable period of time to exercise or defend some of our rights in relation to the use of the Website, the products/services offered and the personal data processed. We will cease to send you commercial communications about our products and services, similar to those you have purchased, as soon as you express your desire not to receive such commercial communications.


  1.        Cookies

The site contains cookies (very small files that the Operator sends to the users of the Website). There are two types of cookies:

  •   Function Cookies > These cookies improve the experience of users of the Website Navigation on the Website and allow them to benefit from features such as preference lists;
  •   Performance Cookies: These cookies are used to measure and analyze how the Operator's customers use the Website. These cookies can continually improve the way the Website works and its users’ experience. Use of the Website implies the consent of Website users to place these types of cookies on their device and to access them on the next visit to the site. Information on deleting and controlling cookies is available at www.aboutcookies.org Clearing cookies or blocking any cookies may prevent certain areas or features from being accessed on the website.
  1.      Your rights

As part of the target population, you have the following rights:

a)       Access to data: You have the right to obtain confirmation that your personal data is processed and information on the specific nature of such processing, such as the purpose, the categories of personal data processed, the recipients of the data / third parties who have access to your data, the period for which data it is kept, your specific rights. You can also request a free copy of the data we process.

b)      Correction: You may request us to modify your personal data that is incorrect or, if necessary, complete the data, including by providing us with the relevant additional data.

c)       Withdrawal of consent: if there are consent-based processing, you will be able to withdraw your consent at any time;

d)      Erasing: You can ask us to delete your data when:

  •   these are no longer necessary for the purposes for which they were collected and processed;
  •   you have withdrawn your consent (if applicable) and the Operator has no other basis for data processing;
  •   your data is processed against the law;
  •   you opposed the processing of your data and there are no other legitimate reasons why it should be processed;
  •   your data must be deleted according to the law.

e)       Opposition: You may oppose the processing of your personal data at any time for reasons related to your personal situation, except where there are legitimate and compelling reasons justifying the processing and prevailing over the interests, rights and freedoms of the data subject or data are necessary for the establishment, exercise or defense of a right in court;

f)        The right to data portability – you are entitled to receive the personal data you have provided by filling in the structured form, currently used and readable automatically, as well as the right to transfer those data to another operator, if the processing is based on your consent or on a contract and is done by automatic means;

g)      Restriction: You may require certain personal data to be marked as restricted while solving any complain about the accuracy, actuality of your data, and the lawfulness of processing it, and when, even if we no longer need your data, we must retain it to establish, exercise or uphold a right in court upon your request.

In order to exercise the aforementioned rights and to obtain any clarifications/further information regarding the processing of your data, please contact the Operator at the following address: Eremia Grigorescu Street, no. 122A, Cluj-Napoca, Cluj County, Romania.

h)      Submitting a Complaint: you may file a complaint related to the processing of your data to the National Authority for Personal Data Processing and Surveillance (28-30 Gheorghe Magheru Blvd., Sector 1, postal code 010336, Bucharest, Romania, www.dataprotection.ro, [email protected]); You can also exercise any rights related to processing  that you have at other competent authorities.


(1) In accordance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free circulation of such data and repealing Directive 95/46 /EC (”the Regulation”).