2. What data do we collect?

2.1 Ticks collects personal data or information relating to an identified or identifiable individual. We also process special categories of personal data ("sensitive data") that require a higher level of protection.

2.1.1 From customers, we collect, process, and store the following categories of personal data:

2.1.1.1 Your name, surname, addresses, phone numbers, personal email addresses, and information on whether you are 16 years or older. This personal data is necessary to provide the service you expect from us, e.g., ticket sales, experience, and information about new interesting events. These details help us tailor our services for your benefit.

2.1.1.2 When visiting our website (www.ticks.hr), Ticks collects your IP address, the date you visited the site, events you viewed, the device, operating system, and browser you used. This data is collected using cookies. You can choose which cookies to enable or disable on our website.

2.1.1.3 If you log in to our site through your Google profile (using the Google plug-in option on our site), we will process your data stored on Google. Please review and update your privacy settings on Google when using this login option.

2.1.1.4 Ticks does not collect, process, or store your card data. This data will be collected by the Monri WSPay card payment system to securely process your order payment.

2.1.2 From our business partners, we collect, process, and store a minimal amount of personal data (name, surname, email, and phone) to fulfill our contractual obligations to you, such as renting a ticket sales system and integrating it into our ticket sales system.

2.1.3 From job candidates, we collect, process, and store the following categories of personal data:

2.1.3.1 Name, surname, phone numbers, personal email addresses, gender, date of birth, employment history, references, and other information you provide in your resume that you wish to share with us. This information helps us establish a contractual relationship with you.

3. Special categories of personal data We process special categories of personal data in the following circumstances:

3.1 We process health-related data, including disability data, to reasonably adapt our services, for example, if the organizer or venue needs to provide or has provided special conditions.

3.2 We also process data about sensitive groups in society, such as children, to reasonably adapt our services, for example, if the organizer or venue needs to provide or has provided special conditions.

3.3 We only process special categories of data with your explicit consent, or when you purchase tickets intended for special categories of data (persons with disabilities or children).

4. How do we collect your personal data?

4.1 We collect your personal data directly from you when registering on our site, when you contact us regarding our services, or when we contact you via phone, email, or social media.

6. Legal basis for processing your data

6.1 Your personal data is processed to fulfill our contractual obligations to you, based on our legitimate interests, when you have consented to data processing by using our services, and when the law allows it. We may process your personal data as long as it does not disproportionately infringe on your privacy. Your personal data is processed: 6.1.1 when we need to fulfill our contractual obligations to you – provide you with tickets.

6.1.2 when there is a legal obligation.

6.1.3 when there is a legitimate interest:

6.1.3.1 We want to meet your expectations as our client and customer.

6.1.3.2 We do not want you to miss new events and offers.

6.1.3.3 We want to ensure the continuity of our ticket distribution business.

6.1.4 when necessary for the interests of a third party, such as organizers whose events have special packages and offers. We will process your data to meet your expectations as our client and customer.

10. With whom do we share your personal data and for what purpose do third parties use your data?

10.1 We share your personal data with the following third parties:

10.1.1 Organizers who need your personal data to provide you with a service (e.g., special packages that include offers, not just tickets – meet & greet, merchandise, early access, etc.).

10.1.2 When we are under a legal or other obligation, we will share your data with tax, audit, or other authorities.

10.2 All our third-party service providers and other entities in the Ticks group must implement appropriate security measures to protect your personal data in accordance with our policies and GDPR. We do not allow our third-party service providers to use your personal data for their own purposes.

10.3 These recipients' categories and confirmation data are not sent outside the EU.

11. Where do we process your personal data?

11.1 We process your data using several data processors for various purposes (providing services or fulfilling contracts, and cases where we have a legitimate interest in doing so):

11.1.1 Our central database is located on secure servers within the Ticks group. Companies from our group may access data in our database at our request to perform specific processing activities (e.g., delete data upon your request).

11.1.2 Providers of our websites: Plus Hosting Group d.o.o., Nobileova 20, 52100 Pula, Croatia, support@plus.hr .

11.1.3 Payment service provider: Monri Payments d.o.o., Ulica grada Vukovara 269/F, 10000 Zagreb, Croatia, tel.: +385 51 269 131.

12. Data Security Ticks

Data Security Ticks applies appropriate security measures to prevent unintentional loss, use, or unauthorized access to your data. All your personal data will be transferred using the SSL (Secure Socket Layer) method with 128-bit encryption (RSA with 1024 bits), making it inaccessible to third parties. This is currently the latest security standard on the internet. We act effectively and promptly in case of any potential or actual personal data breach, and we will notify you and the local regulatory body of such a breach when we are legally obligated to do so.

13. Retention and Deletion of Data

We retain your personal data in our main system for as long as necessary to fulfill the purpose for which we collected it, including complying with all legal requirements.

13.1 For the purpose of providing our services, we retain your personal data (name, surname, address, contact) on our main server for five years from the date of your last order. After that, we delete them.

13.2 For accounting purposes, we retain your personal data (name, surname, address, contact) on our main server for eleven years from your last order. After that, we delete them.

13.3 For marketing purposes (e.g., newsletters, information about events that interested you), we retain your information (name, surname, address, contact) with our data processors for five years from the date of your last order. After that, we delete them. However, if you have subscribed to the newsletter, your data will be stored until you unsubscribe or request the deletion of personal data.

13.4 If you have any questions regarding the retention and deletion of your personal data, please contact info@ticks.hr

14. Your Rights Regarding Our Processing of Your Personal Data

14.1 Please inform us of any changes related to your personal data. It is important that the personal data we store about you is accurate and up-to-date. If you do not update your personal data, the service may not be provided. For example, if you do not inform us of a change of address, you may not receive a ticket.

14.2 You have the right to information about what we do with your personal data. If we change our activities, we will provide you with an updated version of this statement.

14.3 You have the right to object to the processing of your personal data.

14.4 You have the right to request access to your personal data and check if we are processing it lawfully.

14.5 You have the right to request correction and completion of any incorrect or incomplete data we have about you.

14.6 You have the right to request the deletion of data we have about you. If you request the deletion of your personal data, you can still use our services as a guest. Unfortunately, we may not be able to provide you with all our services, such as sending important event notifications (changes in location or date, cancellations) or information about new and exciting events and offers.

14.7 You have the right to restrict processing in certain situations and the right to object to processing based on our legitimate interest and for direct marketing purposes. In this case, we will no longer be able to process your personal data based on legitimate interest, meaning you may miss out on new offers and events.

14.8 You have the right to receive back the data you provided in a machine-readable format and the right to transfer this data to other entities if such transfer is technically possible.

14.9 If you wish to exercise your rights, please contact info@ticks.hr.

14.10 We will request specific information from you to verify your identity and ensure your right to access data (or use any other right where we need to ensure that the request comes from you).

15. Changes to the Privacy Statement

Changes to the Privacy Statement We reserve the right to update this Privacy Statement at any time. We will provide you with a new Privacy Statement upon completing updates and inform you about it.