Privacy Policy

Source of Data

EventCart processes two types of information relating to the Users: (i) User Data; and (ii) Technical Data. User Data is usually information that is associable with a specific User of the Site and is therefore usually considered personal data under applicable laws. Although Technical Data is usually non-personally identifiable information, a User can sometimes be recognized from it. In such situations, Technical Data can also be considered personal data under applicable laws.

User Data is collected from the Users for example when Users visit our Site, register on the Site, place an order, subscribe to our newsletter, fill out a form, and in connection with other activities, services, features or resources we make available on our Site. "User Data" may be the User’s name, email address, mailing address, phone number and credit card information. We also collect details of any transactions and other actions Users carry out through the Site. Users may, however, visit our Site without providing User Data to us. We will collect User Data from Users only if they voluntarily submit such information to us e.g. by using features of the Site requiring the processing of the User’s personal data.

We may collect Technical Data about Users whenever they interact with our Site. "Technical Data" may include the browser name, the type of computer and technical information about Users means of connection to our Site, such as the operating system and the Internet service providers utilized, and other similar information.

Web browser cookies and user analytics

Our Site may use "cookies" to enhance User experience. We may also allow third-parties, such as advertisers, to place separate cookies on a User’s computer (so-called third-party cookies) when a User browses the Site. We have no access to or control over such third-party cookies. This Privacy Policy covers the use of cookies by EventCart only and does not cover the use of third party cookies by any advertiser or other third party. A User may choose to set their web browser to refuse cookies, or to alert the User when cookies are being sent. If cookies are being refused, some parts of the Site may not function properly. The Network Advertising Iniative provides opt-out mechanisms from some behavioral online advertising: www.networkadvertising.org/choices/. Users located in the European Union can learn of their rights relating to online advertising on www.youronlinechoices.eu.

The Site may use Google Analytics, a web analytics and advertising service provided by Google, Inc. to compile reports on visitor usage and to help us improve the Site as well as for advertising purposes. For these purposes, Google Analytics uses cookies allowing the User’s computer to be recognized when the User returns to or browse through the Site. For an overview of Google Analytics, please visit http://www.google.com/analytics/. An opt-out for Google Analytics Advertising features available at https://tools.google.com/dlpage/gaoptout/.

How we use collected information

EventCart may collect and use personal data of its Users for the following purposes:

• To provide the Services and carry out our contractual obligations

EventCart processes your personal data to be able to offer the Site to you under the contract between you and EventCart.

We use the data for example to handle your payments or any refunds (where applicable). If you contact our customer service, we will use the information provided by you to answer your questions or solve your complaint.

• For our legal obligations

EventCart processes data to enable us to administer and fulfil our obligations under law. This includes data processed for complying with our bookkeeping obligations and providing information to relevant authorities such as tax authorities.

• For claims handling and legal processes

EventCart may process personal data in relation to claims handling and legal processes. We may also process data for the prevention of fraud, misuse of our Site and for data, system and network security.

• For customer communication and marketing

EventCart processes your personal data to contact you regarding the Site and to inform you of changes relating to them. Your personal data are also used for the purposes of marketing the Site to you.

• For quality improvement and analytics and statistics purposes

We may also process information about your use of the Site to improve the quality of the Services e.g. by analyzing any trends in the use of the Site. In order to ensure that our services are in line with your needs, personal data can be used for things like customer satisfaction surveys. When possible, we will do this using only aggregated, non-personally identifiable data.

Legal grounds for processing

EventCart processes your personal data to perform our contractual obligations towards you and to comply with legal obligations. Furthermore, we process your personal data to pursue our legitimate interest to run, maintain and develop our business and to create and maintain customer relationships. When choosing to use your data on the basis of our legitimate interests, we weigh our own interests against your right to privacy and e.g. provide you with easy to use opt-out from our marketing communications.

In some parts of the Site, you may be requested to grant your consent for the processing of personal data. In this event, you may withdraw your consent at any time.

We store personal data only as long as such processing is required by law or is necessary for the purposes set out in this Privacy Policy. Once the data is no longer necessary, we delete it as soon as possible.

How we protect your information

We use technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction of personal information, username, password, transaction information and data stored on our Site. Sensitive and private data exchange between the Site and its Users happens over an SSL secured communication channel and is encrypted and protected with digital signatures.

Should despite of the security measures, a security breach occur that is likely to have negative effects to the privacy of the Users, we will inform the relevant Users as well as relevant authorities when required by applicable data protection laws, about the breach as soon as possible.

Data Disclosures and Transfers

We share your personal data primarily only within the organization of EventCart as far as reasonably necessary for the purposes of this Privacy Policy. We do not share personal data with outside parties except to the extent necessary for the purposes of providing the Site as set out in this Privacy Policy. Third parties may be used in processing personal data on behalf of the controller EventCart. Such third parties may be payment service providers that enable us to provide the Site to its Users.

However, in the following situations your personal data may be shared with third parties.

When a User purchases tickets to Events through the Site, the registration information to such Event submitted by the User in connection with such purchase will be disclosed to the Event Organizer set out on the Site. EventCart is not responsible for any processing of personal data carried out by the Event Organizers.

We may share generic aggregated demographic information not linked to any personal data regarding the Site with our business partners, trusted affiliates and advertisers for the purposes outlined above.

We may disclose personal data to public authorities if we are legally required to do so or if we need to protect our rights. We may also disclose or transfer personal data to our group companies, subsidiaries and affiliates or to a subsequent or new owner/operator of the Site in case the Site, we, our stock and/or assets are acquired or in case of merger, restructuring, bankruptcy, or other corporate reorganization.

Personal data is not regularly transferred outside the European Union or the European Economic Area (EEA).

Changes to this privacy policy

EventCart may update this Privacy Policy at any time. When we do, we will revise the updated date at the bottom of this page and send our registered Users an email. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the personal information we collect. The continued use of the Site following the posting of changes to this policy will be deemed as an acceptance of those changes.

Your Rights

• Righ to access data

Users have the right to know what personal data we have stored about them. We may refuse to provide you with a copy of your data in case doing so would adversely affect the rights and freedoms of others. We may charge a processing fee in case less than 12 months have passed since the User’s previous data request.

• Right to withdraw consent

In case the processing is based on a consent granted by the User, the User may withdraw the consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

• Right to rectify

Users also have the right to have incorrect, incomplete or outdated personal data we have stored about such User corrected or completed.

• Right to erasure

You may also ask us to delete your personal data from our systems. We will comply with such request unless we have a legitimate ground to not delete the data.

• Right to object

You may have the right to object on grounds relating to your particular situation to the processing of your personal data based on our legitimate interest. We will comply with such objection unless we have a legitimate ground not to. If you object to the further processing of your personal data, this may lead to fewer possibilities to use the Site.

• Right to restriction of processing

You may request us to restrict processing of personal data for example when your data erasure, rectification or objection requests are pending and/or when we do not have legitimate grounds to process your data. This may however lead to fewer possibilities to use the Site.

• Right to data portability

You have the right to receive the personal data you have provided to us yourself in a structured and commonly used format and to independently transmit those data to a third party.

• How to use your rights

The abovementioned rights may be used by sending a letter or an e-mail to us on the addresses set out above, including the following information: the full name, address, e-mail address and a phone number. We may request the provision of additional information necessary to confirm the identity of the User. We may reject requests that are unreasonably repetitive, excessive or manifestly unfounded.

Direct marketing

Users have the right to opt out of receiving electronic direct marketing communications from us by clicking on the opt-out link we provide in all marketing communications we send our Users and choosing not to receive marketing communications from us in the future. The Users also have the right to prohibit us from using their personal data for direct marketing purposes or market research by contacting us on the addresses indicated below.

Lodging a Complaint

In case the User considers our processing of personal data to be inconsistent with the applicable data protection laws, a complaint may be lodged with the local supervisory authority for data protection. In Finland, the local supervisory authority is the Data Protection Ombudsman (https://www.tietosuoja.fi).