Privacy Policy
At 3CKET we value the protection of your personal data and are committed to respecting your privacy.
In this Privacy Policy, we tell you how we collect and process the personal data of all those who purchase our services, as well as those who access, browse and register on our website.
We have tried to make this policy as clear as possible, but if anything is unclear, please contact us using the contact details below.
IDENTIFICATION OF THE CONTROLLER AND CONTACT DETAILS
3CKET is a technological solution owned by the company (hereinafter referred to as "3CKET"):
- 3CKET, S.A.
- Registered office: Avenida do Brasil 33, escritório B, 1700-062 Lisboa, Portugal
- NIPC: PT515366285
- E-mail: privacy@3cket.com
- Also represented through its branches
LEGAL FRAMEWORK
Your personal data will be processed in such a way as to ensure compliance with the applicable legislation, namely the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, hereinafter "GDPR"), Law no. 58/2019, of August 8, which guarantees the implementation of the GDPR in the Portuguese legal system (hereinafter "LPDP"), Law no. 41/2004, of August 18, as amended, on the protection of personal data and privacy in electronic communications and other applicable sector legislation.
According to the law, personal data is any "information relating to an identified or identifiable natural person ("the data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person".
3CKET keeps a database of its customers' records made up of the personal data (provided by the holder or by an authorized third party) made available at the time of account creation, which is collected and processed automatically by 3CKET .
3CKET only processes the data it considers essential to navigate the platform or website, to provide and manage the services it provides, to register and invoice your orders, to ensure that they are provided to you and, if you show interest, to inform you of its news. To consult the purposes and grounds for processing your data, please consult the section "GROUNDS AND PURPOSES OF THE PROCESSING OF PERSONAL DATA" (below).
CATEGORIES OF PERSONAL DATA
3CKET collects the following personal data:
- Identification data: first name, surname and date of birth;
- Contact details: email address, telephone contact;
- Purchasing and billing data: billing address, payment methods and amounts, tax identification number;
- Connection and location data*: IP address, type of device and country through which you access our website.
* For Users who only access the Website, without creating an account, only connection and location data will be collected.
GROUNDS AND PURPOSES FOR PROCESSING PERSONAL DATA
3CKET processes your personal data on the following legal grounds, in accordance with Article 6 of the GDPR:
i. Fulfillment of contractual obligations or pre-contractual due diligence;
ii. Compliance with applicable legal obligations;
iii. Consent;
iv. Legitimate interests, ensuring that the need to process personal data is balanced with the interests, rights and fundamental freedoms of Users.
3CKET processes your personal data for the following purposes:
i. Account creation;
ii. Communication and clarification;
iii. Processing requests for information and customer support;
iv. Processing your request (ticket purchase or similar)
v. Complaints processing;
vi. Statistical analysis activities;
vii. Checking, maintaining and developing statistical systems and analyses;
viii. Promotional communication and direct marketing.
The following table identifies the legal bases and the categories of data processed for each purpose:
Purpose |
Data categories |
Legal basis |
New user registration | Identification and contact details | Performance of contract; Consent |
Service management | Identification data, contact data, location data | Contract execution |
Buying tickets or credits | Identification data, contact data, purchase and billing data | Contract execution |
Payment processing | Identification data, purchase and billing data | Performance of contract; Legitimate interests. |
Management of our relationship with you (contacts, notification of changes to our terms and conditions) | Identification data, contact details | Performance of contract; Compliance with legal obligations; Legitimate interests of the controller (for example, to understand how we can offer better services and products to our customers). |
Ensure the full operation of our website | Identification data, contact data and connection and location data | Legitimate interests of the controller (e.g. to keep online services fully operational and secure); Compliance with legal obligations |
Sending newsletters and other marketing communications | Identification and contact details | Consent of the data subject |
3CKET guarantees the confidentiality of all data provided. Although 3CKET collects and processes data in a secure manner that prevents its loss or manipulation, using the most appropriate techniques for this purpose, it should be borne in mind that the collection of data on open networks allows personal data to circulate without security conditions, with the risk of being seen and used by unauthorized third parties.
Failure to respond to the data marked as mandatory means that it is impossible to respond to the data subject's request.
RELATIONSHIP WITH EVENT PROMOTERS OR ORGANIZERS
3CKET may process your personal data on behalf of the service provided to the Promoters or Organizers of the event in which you want or will participate. 3CKET scrupulously complies with the rules and guidelines of these entities when processing personal data.
SHARING DATA WITH THIRD PARTIES
3CKET may also use service providers and intermediaries, such as companies that provide technological support and payment processing and billing companies, which must have access to part of your personal data.
These communications are, however, made solely and exclusively for the fulfillment of the purposes for which the data is collected and in accordance with 3CKET's instructions, in strict compliance with the rules on the processing of personal data and information security.
3CKET may also communicate your personal data to third parties when:
- has expressly consented thereto; or
- the communication is made in compliance with a legal obligation or court order.
3CKET does not plan to transfer your data outside the European Union or the European Economic Area, i.e. to a third country. However, if it does so, it will ensure strict compliance with European legislation on the transfer of data to third countries and we will provide all the necessary information, namely an indication of the guarantees for such transfer, such as:
- Adequacy decisions: when the European Commission determines that a third country offers an adequate level of data protection, personal data may be sent to that country without implementing any other measures mentioned above;
- Standard contractual clauses: we use standard contractual clauses for the transfer of personal data to organizations outside the EEA. These contractual commitments have been adopted by the European Commission and guarantee the adequate protection of personal data transferred to countries outside the EEA, binding the recipients of the personal data to certain data protection standards, including the obligation to apply appropriate technical and security measures.
SHELF LIFE
Your personal data will be kept by 3CKET only for the period necessary for the purposes for which it was collected or for the periods required by law.
SECURITY MEASURES
3CKET declares that it has implemented and will continue to implement the security measures of a technical and organizational nature necessary to guarantee the security of the personal data provided to it in order to prevent its alteration, loss, processing and/or unauthorized access, taking into account the current state of technology, the nature of the data stored and the risks to which they are exposed.
3CKET guarantees the confidentiality of the data provided through this website. Data is collected and processed in a secure manner that prevents its loss or manipulation. All data is entered into a secure server (128-bit SSL) which encrypts it (turns it into a code). You can check that your browser is secure if the padlock symbol appears or if the address starts with https instead of http.
Personal data is treated with the level of protection legally required to guarantee its security and prevent its alteration, loss, processing or unauthorized access, taking into account the state of technology, the user being aware and accepting that Internet security measures are not impregnable.
Whenever it accesses personal data, 3CKET undertakes to:
- Use the data exclusively for the purposes previously defined;
- Ensure that the data is only processed by employees whose intervention is necessary to satisfy the request of the data subject, who are bound by the duty of secrecy and confidentiality.
- If the information may be disclosed to third parties for these purposes, they shall be obliged to keep it confidential in accordance with the provisions of this document.
COMMERCIAL AND PROMOTIONAL COMMUNICATIONS
One of the purposes for which personal data provided by users is processed is to send electronic communications with commercial and promotional information, both from 3CKET (to inform you of other events in which its technology is used) and from the Promoter of the event in which you register (to advertise its own events).
All communications of this type will be directed exclusively to the Users who have given their specific consent for each of them.
If the user wishes to stop receiving commercial or promotional communications from 3CKET, he/she may object at any time by sending an e-mail to the following e-mail address privacy@3cket.com or by accessing https://app.3cket.com.
If you wish to object to the sending of commercial or promotional communications from the event promoters, you should contact them directly.
EXERCISING THEIR RIGHTS
You may exercise your rights to information, access, rectification, erasure, limitation, portability and objection at any time by writing to 3CKET at the contact details identified in Section "1. IDENTIFICATION OF THE PROCESSOR AND CONTACTS" above.
The following table summarizes your rights:
RIGHT TO BE INFORMED |
You have the right to obtain clear, transparent and easily understandable information about how we use your personal data. |
RIGHT OF ACCESS |
You can request a copy of the data we hold on you. |
RIGHT TO RECTIFICATION |
You have the right to rectify your personal data if it is incorrect or out of date and/or to complete it if it is incomplete. |
RIGHT TO ERASURE |
You can request that we delete the information we process about you. This right is not absolute, however, as we may have legal grounds to retain your personal data. If this is the case, we will provide you with all the necessary information. |
RIGHT TO OBJECT |
You have the right to object at any time to the processing of your personal data for reasons relating to your particular situation. 3CKET will not be able to continue processing your data in these circumstances, unless we have compelling legitimate reasons that override your interests, or in the case of legal proceedings. |
PORTABILITY RIGHTS |
You have the right to receive personal data concerning you in a structured, commonly used and machine-readable format and the right to transmit this data to another organization. This applies only to the data you have provided whose processing is based on your consent or the performance of the contract and if the processing is carried out by automated means. |
RIGHT TO RESTRICTION OF TREATMENT |
You can request that, for a certain period, the processing of your data be limited in its use, and that it not be communicated to third parties, transferred or deleted. You can also ask us to restrict the use of your data to storage only, to stop using it for all other purposes or to retain data that should be deleted. |
RIGHT TO WITHDRAW CONSENT |
You have the right, at any time, to withdraw the consent previously given for the processing of personal data, without this action compromising the lawfulness of the processing carried out on the basis of the consent previously given. |
THE RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY |
You also have the right to lodge a complaint with the supervisory authority of the country where the services are provided when your rights have been violated or your personal information is or is being used in a way that you believe does not comply with applicable law. |
AUTOMATED DECISIONS
3CKET does not anticipate that any decisions that have legal or other effects on you will be made using purely automated means; however, it will update this policy if this position changes and will notify you of such changes.
HOW CAN I BE INFORMED OF ANY CHANGES TO OUR PRIVACY POLICY?
Bearing in mind that practices regarding the processing of personal data may change from time to time, this Policy should also be updated accordingly and with the same regularity, so we advise you to consult it at regular intervals. If there is a significant change, we will inform you directly.