Privacy

1. Who controls your data

The controller of personal data processed through BileteLive.ro is the entity identified above, to the extent that it determines the purposes and means of processing. For events organized by third parties, the organizer may also have its own role and obligations under data protection law.

2. Data we may process

• first and last name;
• email address and phone number;
• BileteLive.ro account data;
• information about orders, tickets and events;
• table or seat reservation information;
• ticket category, where relevant;
• ticket status and check-in time;
• payment identifiers and payment status received from the payment processor;
• IP address, technical information and logs required for security and platform operation.

BileteLive.ro does not store the full card number or CVV/CVC code. Card payments are processed by Stripe.

3. Purposes of processing

• processing orders and reservations;
• issuing and delivering tickets;
• confirming payments;
• validating tickets at the entrance;
• managing accounts and recovering orders linked to a verified email address;
• necessary communications regarding an order or event;
• platform security and fraud prevention;
• compliance with applicable legal, accounting and tax obligations;
• handling requests and complaints.

4. Legal bases

Depending on the circumstances, data may be processed to perform a contract or take requested pre-contractual steps, to comply with legal obligations, on the basis of legitimate interests, or on the basis of consent where consent is required.

5. Recipients of data

Where necessary, data may be shared with the event organizer, payment service providers, hosting and IT infrastructure providers, email services, technical providers and public authorities where disclosure is legally required.

6. International transfers

Some providers may process data outside the European Economic Area. Where applicable, safeguards required by the GDPR and applicable law are used.

7. Retention period

Data is retained only for as long as necessary for the purposes for which it was collected and for periods required by applicable legal obligations. Account data may be retained until the account is deleted, except for information the controller must retain under a legal obligation or for the establishment, exercise or defence of legal claims.

8. Your rights

Subject to the GDPR, you may have rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. More details are available on the GDPR rights page.

9. Contact

For questions about personal data or to exercise your rights, email support@biletelive.ro.