S.C. Dettra Organization SRL (hereinafter referred to as the "Operator") is a Romanian company based in Str. General Eremia Grigorescu, no. 122A, Cluj-Napoca, registered in the Trade Register under no. J12 / 1595/2010. Dettra Organization acts as an operator of personal data collected through the https://in-town.ro website (hereinafter referred to as "The website") for or in connection with the sale of tickets /passes for the music festivals Neversea (organizer: Neversea SRL) and Untold (organizer: Untold SRL) and other related products/services or for other public events.
We have the obligation to safely and solely for the specified purposes manage personal data that you provide to us as a user of the Site and hereby inform you of the processing carried out (1) .
Through the Site, we process the following personal data categories: identification data (name, surname) and contact data (e-mail address, phone number). In addition, through the Website you can provide us with other information about you, such as biographical and profile data (profile photo, date of birth, gender, address of origin), for which Dettra Organization acts as an authorized person for Nevers and Untold organizers, and the data is needed by them, as specified below.
Thus, we process your personal data for the following purposes:
a) For your registration and authentication on the Website for the purpose of selling tickets/passes to the Neversea and Untold music festivals and/or their associated products/services. Legal basis for processing: Concluding and executing a contract
b) To e-mail you commercial communications about our products and services, similar to those you have purchased, unless you have expressed the wish not to receive such commercial communications. The legal basis for processing: our legitimate interest in making commercial communications about similar products or services, if and as long as the customer does not oppose such processing,
c) In order to facilitate the check-in of tickets / passes managed by Neversea and Untold organizers, we send them your personal data to be used for the purposes stated in [https://neversea.com/static /terms-and-conditions-en.pdf] and [https://untold.com/static/terms-and-conditions-en.pdf], respectively.
d) To ensure access to the Festival premises only to the rightful persons and to avoid frauds. For example, if a ticket/pass is printed by two different people, we can give the organizers of Neversea/Untold information about the person who bought that ticket/pass. The legal basis for processing: our legitimate interest and of the organizers of Neversea, Untold to ensure legitimate access to festivals and to avoid fraud.
We store your personal data on our servers in Romania, but we will be able to store them on cloud platforms operated by cloud providers in the European Union. The operator will also be able to transmit the data to the contractual partners for the purposes described above but only based on a confidentiality agreement from them to ensure that these data are kept secure and that their delivery is made according to present legislation (marketing, courier, payment services, banking, or other services). The operator will be able to transmit your personal data to public authorities under the law. The data could also be forwarded to accountants, auditors, lawyers or other such external counselors of the Operator. The Operator may disclose such data whenever the law requires it, or where such action is necessary to enable the exercise of the rights prescribed by law to start legal proceedings against any unlawful activity.
We will keep personal data as long as your account on the Website is active, plus a reasonable period of time to exercise or defend some of our rights in relation to the use of the Website, the products/services offered and the personal data processed. We will cease to send you commercial communications about our products and services, similar to those you have purchased, as soon as you express your desire not to receive such commercial communications.
The site contains cookies (very small files that the Operator sends to the users of the Website). There are two types of cookies:
As part of the target population, you have the following rights:
a) Access to data: You have the right to obtain confirmation that your personal data is processed and information on the specific nature of such processing, such as the purpose, the categories of personal data processed, the recipients of the data / third parties who have access to your data, the period for which data it is kept, your specific rights. You can also request a free copy of the data we process.
b) Correction: You may request us to modify your personal data that is incorrect or, if necessary, complete the data, including by providing us with the relevant additional data.
c) Withdrawal of consent: if there are consent-based processing, you will be able to withdraw your consent at any time;
d) Erasing: You can ask us to delete your data when:
e) Opposition: You may oppose the processing of your personal data at any time for reasons related to your personal situation, except where there are legitimate and compelling reasons justifying the processing and prevailing over the interests, rights and freedoms of the data subject or data are necessary for the establishment, exercise or defense of a right in court;
f) The right to data portability – you are entitled to receive the personal data you have provided by filling in the structured form, currently used and readable automatically, as well as the right to transfer those data to another operator, if the processing is based on your consent or on a contract and is done by automatic means;
g) Restriction: You may require certain personal data to be marked as restricted while solving any complain about the accuracy, actuality of your data, and the lawfulness of processing it, and when, even if we no longer need your data, we must retain it to establish, exercise or uphold a right in court upon your request.
In order to exercise the aforementioned rights and to obtain any clarifications/further information regarding the processing of your data, please contact the Operator at the following address: Eremia Grigorescu Street, no. 122A, Cluj-Napoca, Cluj County, Romania.
h) Submitting a Complaint: you may file a complaint related to the processing of your data to the National Authority for Personal Data Processing and Surveillance (28-30 Gheorghe Magheru Blvd., Sector 1, postal code 010336, Bucharest, Romania, www.dataprotection.ro, [email protected]); You can also exercise any rights related to processing that you have at other competent authorities.
(1) In accordance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free circulation of such data and repealing Directive 95/46 /EC (”the Regulation”).