Privacy policy

What personal data do we collect?

To provide our services, we collect personal data as follows:

Data you provide to us

For example, when you buy tickets you provide various data about yourself:

• Email address
• Phone number
• Types, prices and quantities of tickets purchased
• Discount code used for the purchase
• Any additional fields we have added to the registration form

Why do we collect and process personal data?

Buying tickets to our events requires processing your personal data. Without it we cannot provide you with tickets or fulfil the related obligations. We use the data collected through all our services to provide, manage, protect and improve our services and to develop new ones. We collect and process personal data for the following purposes:

• Issuing tickets.
• Accepting payment for tickets.
• Preventing tickets from being reused.
• Business analytics and improving our services.
• Providing customer support.
• Fulfilling obligations required by law.

Before using your data for any purpose other than those set out in this privacy policy, we will ask for your explicit consent.

Who do we share data with?

We treat the personal data we process as confidential and share it with other persons or companies (recipients) only to the extent necessary to provide the service. We do not share personal data with companies, organisations or individuals outside Itijero OÜ, except in the following cases:

• When you pay for a ticket by credit card or bank link, access to your card and bank details is given only to Montonio Finance. You can read Montonio Finance’s privacy policy on their website montonio.com.
• Without a person’s consent, their personal data may be shared with an authority or person that has a direct legal right to it in accordance with data protection legislation.
• In the event of a merger or acquisition involving Itijero OÜ, personal data may be shared with third parties involved in the merger or acquisition.
• If we use external service providers for certain services, such as website or hosting providers, marketing service providers and IT support providers, these providers may have access to and/or process your personal data while providing those services. We require these external providers to implement and apply security measures to ensure the integrity and security of your personal data.
• If you have given your explicit consent to share your personal data with a specific recipient.

Transfer of personal data outside the EU

We do not transfer personal data outside the European Union or the European Economic Area (EEA).

Data security

We work to protect your data against unauthorised access and against unauthorised alteration, disclosure or breach. To keep your data secure, we:

• Treat all personal data as confidential.
• Encrypt our services with SSL wherever possible.
• Restrict access to personal data to employees and contractors who need it for processing, who are bound by strict contractual confidentiality obligations and who may be disciplined or have their contract terminated if they fail to meet these obligations.
• Keep personal data mainly in digital rather than paper form, to ensure safer access control.

Although we apply strict security rules to the personal data that reaches us, please note that the internet is never completely secure and we cannot guarantee the secure transmission of data you send to us. Sending data is always at your own risk.

What are your rights and how can you exercise them?

If you have given consent for your personal data to be collected, processed and used in a certain way, you may withdraw that consent at any time in the future. In accordance with applicable data protection legislation, you have the right to:

• Request access to your personal data.
• Request correction of your personal data.
• Request deletion of your personal data.
• Request restriction of the processing of your personal data.
• Request the transfer of your personal data.
• Withdraw your consent to the processing of your personal data.
• Object to automated decision-making (including profiling).

To exercise your rights and submit a request, please contact us by email: info@irenekaljuste.com. The request must allow us to identify you unambiguously. Please note that you can request deletion of your personal data, restriction of processing and similar only where this is consistent with a legal basis and data protection legislation. If you request restriction, suspension of processing or deletion of your data, this may partly or fully suspend the services we provide to you. If you have a complaint, you have the right to lodge it with the competent data protection authority. We cooperate with the relevant regulators, including local data protection authorities, to resolve complaints relating to the transfer of personal data.

How long do we keep your personal data?

Your personal data is kept for as long as necessary to provide the services you have requested and, in addition, in accordance with the requirements of applicable law. Anonymised data is kept indefinitely.

Terms of and changes to this privacy policy

By using the services of Itijero OÜ, you confirm that you have read and agree to these principles and terms. Our privacy policy may change from time to time. We will not reduce your rights under this privacy policy without your explicit consent. We will post notice of any changes on this page and, for significant changes, send a more detailed notice.

Contact us

If you have any concerns or questions about our privacy policy, please contact us: Itijero OÜ, Koolimaja, Kiuma, Põlvamaa 63208, Estonia, +372 5810 4600 info@irenekaljuste.com