Legal

Privacy Policy

Privacy Policy

The protection of your personal data is important to us. Therefore, we pay special attention to protecting the personal data and privacy of visitors who access the website nibiru.net, as well as of persons who interact with our services, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR").

Please read this Privacy Policy carefully to understand how your personal data is processed.

This Privacy Policy explains our practices regarding the application of the GDPR provisions, as well as the rights you benefit from in connection with the processing of your personal data through the website nibiru.net.

Through this Privacy Policy, Live Events Operations SRL wishes to inform visitors about the nature of the personal data we collect and process, the purposes of the processing and the rights enjoyed by data subjects.

 

WHO WE ARE

Live Events Operations SRL (hereinafter referred to as the "Company" or "NIBIRU") is the operator of the website nibiru.net.

 

WHAT IS PERSONAL DATA?

Personal data means any information relating to an identified or identifiable natural person. A person may be identified directly, for example by name, or indirectly, for example by an identification number, location data, an online identifier or one or more factors specific to that person.

Personal data may include, without limitation:

  • first name and last name
  • e-mail address
  • phone number
  • postal address
  • date of birth
  • billing data
  • IP address
  • online identifiers
  • browsing behavior
  • purchase history
  • preferences (including by completing questionnaires regarding desired experiences, musical preferences and interest in recreational activities within our events) and
  • interactions with the website or our communications

WHAT PERSONAL DATA WE MAY COLLECT

Depending on how you interact with us, we may collect the following categories of personal data:

  • identification data, such as first name and last name
  • contact data, such as e-mail address, phone number and address
  • technical data, such as IP address, browser type, device information and cookie-related data
  • transactional data, such as information regarding purchases, payments, billing or requested services
  • communication data, such as messages sent through forms, e-mail, chat, social networks or other contact channels
  • declarative preferences regarding users' preferences, desired experiences within events, recreational activities, as well as musical preferences;
  • marketing data, such as newsletter subscription preferences, interactions with campaigns and proof of consent
  • usage data, such as information on how you use the website, pages visited, clicks and general browsing behavior

WHAT DATA WE NEVER STORE

We do not store your full payment card details in our systems. Card data is processed exclusively by authorized payment processors or other authorized third-party entities specialized in secure payment processing.

 

PURPOSES AND LEGAL BASES OF PROCESSING

 

We may process your personal data for the following purposes and on the following legal bases:

 

1. Performance of a contract

Pursuant to Art. 6 para. 1 letter b) GDPR, we process personal data when this is necessary in order to provide the requested services or products, manage orders, respond to requests related to our services and fulfill our contractual obligations.

 

2. Compliance with legal obligations

Pursuant to Art. 6 para. 1 letter c) GDPR, we may process personal data in order to comply with legal obligations, including accounting, tax, billing, fraud prevention obligations or cooperation with the competent authorities.

 

3. Marketing and communications

Pursuant to Art. 6 para. 1 letter a) GDPR, we may process your data for marketing purposes when you have given your consent, for example for newsletters, promotional campaigns, invitations, offers and updates. You may withdraw your consent at any time by using the unsubscribe link in the communications received or by contacting us directly.

Pursuant to Art. 6 para. 1 letter a) GDPR, we may also process data concerning preferences expressed with regard to desired experiences, recreational activities or preferred musical genres, when you voluntarily choose to answer the questionnaires published on the platform, in order to improve the activities and services offered within the events, based on the analysis of general trends and preferences of the public. Expressing preferences does not lead to automated profiling, and the data will not be used for personalized direct marketing without the user's express and informed consent.  

 

4. Legitimate interests

Where applicable, pursuant to Art. 6 para. 1 letter f) GDPR, we may process data for legitimate interests such as website security, service improvement, usage analysis, internal reporting, fraud prevention and the defense of our legal rights, provided that these interests do not override your fundamental rights and freedoms. We will use the data collected by completing the optional preference questionnaires, in aggregated and anonymized form, for our legitimate interest, for the purpose of improving the activities and services offered within the events.

 

HOW WE USE YOUR DATA

We may use your data to:

  • provide and administer our services
  • process requests, reservations, registrations and purchases, including by transmitting the necessary data to the Ticketing Services Operator, payment processors and financial service providers, for the purpose of processing orders, issuing tickets and making payments
  • communicate with you in connection with the requested services
  • send operational, administrative or transactional messages
  • improve the website, services and user experience
  • carry out statistical analyses and reporting
  • detect, prevent and investigate fraud, abuse or security incidents
  • comply with legal obligations
  • send marketing communications, where consent exists
  • perform aggregated analysis of the preferences of users who choose to complete preference questionnaires, in order to improve the experience and services offered within the events
  • manage the relationship with users and respond to requests or complaints

PRINCIPLES OF DATA PROCESSING

We undertake to ensure that personal data is:

  • processed lawfully, fairly and transparently
  • collected for specified, explicit and legitimate purposes
  • adequate, relevant and limited to what is necessary
  • accurate and updated, where necessary
  • kept only for as long as necessary
  • processed in a manner that ensures appropriate security, confidentiality and integrity

RETENTION PERIOD

We retain personal data only for the period necessary to fulfill the purposes for which it was collected, including in order to comply with legal, accounting, reporting or contractual obligations.

Retention periods may vary depending on the nature of the data and the purpose of the processing. As a general rule:

  • data related to contractual relationships is kept for the duration of the contract and for any additional period imposed by law
  • data used to respond to requests may be kept for up to 5 years from the last relevant interaction
  • data processed for marketing purposes is kept until consent is withdrawn or deletion is requested, or for a limited period of inactivity, according to the applicable rules
  • data associated with cookies is kept according to the lifetime of the respective cookies and the applicable legal requirements
  • data regarding preferences is anonymized or aggregated within a maximum period of 12 months from collection

When the data is no longer necessary, it will be securely deleted, anonymized or destroyed.

 

SECURITY OF PROCESSING

We implement appropriate technical and organizational measures to protect your data against unauthorized access, misuse, loss, destruction or alteration.

These measures may include secure storage, access control, internal confidentiality obligations and technical safeguards appropriate to the nature of the processed data.

 

FORMS, COMMUNICATIONS AND REQUESTS

If you contact us through the forms available on nibiru.net, by e-mail or through other communication channels, we will use the data provided exclusively for processing and resolving your request, unless another applicable legal basis exists.

By transmitting personal data through our website, you acknowledge that it may be processed in accordance with this Privacy Policy.

Where necessary for providing the requested services, including for purchasing tickets and processing orders, your data may be transmitted to the Ticketing Services Operator, payment processors, financial service providers, as well as other carefully selected partners or service providers, exclusively for the purpose of processing orders, issuing tickets, making payments and providing the contracted services, in compliance with appropriate data protection safeguards.

 

DISCLOSURE OF PERSONAL DATA

We may disclose your data to:

  • IT, hosting, maintenance and website administration service providers
  • the Ticketing Services Operator, payment processors and financial service providers, to the extent necessary for processing orders, issuing tickets, collecting payments and providing the requested services
  • accounting, legal, audit or consulting service providers
  • communication, CRM, analytics or marketing service providers
  • business partners involved in providing the requested services
  • competent public authorities, courts or law enforcement bodies, when required by law or where there is a legitimate request

We make reasonable efforts to ensure that third parties processing data on our behalf provide adequate safeguards regarding confidentiality and security.

 

INTERNATIONAL TRANSFERS

As a general rule, we aim for personal data to be processed and stored in the European Economic Area.

If data is transferred outside the European Economic Area, we will ensure that the transfer is lawful and protected by appropriate safeguards, such as:

  • an adequacy decision issued by the European Commission
  • standard contractual clauses or other accepted legal mechanisms
  • any other safeguards provided by applicable legislation


THIRD-PARTY WEBSITES

Our website may contain links to websites or services belonging to third parties. We are not responsible for the practices, policies or content of these external websites. We recommend that you consult their privacy policies separately.

 

YOUR RIGHTS

In accordance with the GDPR, you benefit from the following rights:

  • the right to information
  • the right of access to your data
  • the right to rectification
  • the right to erasure
  • the right to restriction of processing
  • the right to data portability
  • the right to object
  • the right not to be subject to a decision based solely on automated processing, including profiling, where applicable
  • the right to withdraw your consent at any time, when the processing is based on consent
  • the right to lodge a complaint with the competent supervisory authority. Where the processing of data is based on consent (including for preference questionnaires), you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

 

MINORS

When consent is required for the processing of data, it may be validly given only by persons who have reached the minimum age provided by law. Where necessary, the consent of minors must be given or authorized by the holder of parental responsibility.

 

POLICY UPDATE

We may periodically update this Privacy Policy to reflect changes in our practices, legal obligations or website functionalities. The updated version will be published on nibiru.net.

We recommend that you consult this page periodically.

 

CONTACT

For questions or requests regarding this Privacy Policy or the way in which we process your data, you may contact us using the contact details available on nibiru.net.

You also have the right to lodge a complaint with the competent data protection authority if you believe that your rights have been infringed.

 

 

Privacy Policy | Nibiru