1. Data Controller
This Privacy Policy governs the processing of personal data collected in connection with the sale of electronic tickets and the management of events organised under the ACHÉ brand.
The data controller is:
Orlando Alberto Rodriguez Franco
BCE No.: 1039.570.972
Contact address: Rue des Bougainvillées 5, 1080 Molenbeek-Saint-Jean, Brussels, Belgium
Contact email address: ache.belgium@gmail.com
ACHÉ undertakes to process personal data lawfully, transparently, securely, and limited to the purposes necessary for organising its events.
2. Personal data collected
In the context of electronic ticket sales, ACHÉ may collect the following personal data:
– Last name.
– First name.
– Email address.
– Information related to the ticket reservation or purchase.
– Order number, ticket reference, or purchase confirmation.
– Information necessary to manage access to the event.
– Billing details, only when necessary or requested.
– Minimum technical information necessary to ensure the proper functioning of the sales, payment, and communication system.
ACHÉ does not collect sensitive data such as racial origin, political opinions, religion, medical data, or biometric information in the ordinary course of ticket sales.
3. Purposes of processing
The personal data collected is used solely for specific, legitimate, and necessary purposes.
ACHÉ uses personal data to:
– Manage the purchase or reservation of tickets.
– Issue and send the electronic ticket to the buyer.
– Confirm access to the event.
– Communicate important information related to the event, such as schedule changes, venue changes, access instructions, security measures, postponement, or cancellation.
– Manage incidents related to the purchase, payment, ticket, or attendance at the event.
– Comply with applicable accounting, tax, and legal obligations in Belgium.
– Protect event security, prevent fraud, abuse, or misuse of the sales system.
– Send marketing communications about future ACHÉ events only where the user has given prior consent or there is a valid legal basis.
ACHÉ will not use personal data for purposes incompatible with those indicated above.
4. Legal basis for processing
The processing of personal data is based on one or more of the following legal bases:
a. Performance of a contract
Processing is necessary to manage the ticket purchase, issue the electronic ticket, and allow access to the event.
Without this data, ACHÉ cannot correctly process the reservation or deliver the ticket to the buyer.
b. Compliance with legal obligations
Certain data may be retained to comply with tax, accounting, or administrative obligations applicable in Belgium.
c. Legitimate interest
ACHÉ may process certain data to ensure the security of the sales system, prevent fraud, resolve incidents, protect its rights, and ensure the smooth running of the event.
d. Consent
When ACHÉ uses data to send marketing communications, newsletters, promotions, or announcements of future events that are not strictly necessary for managing a purchase, the user’s consent will be requested where appropriate.
The user may withdraw their consent at any time.
5. Disclosure of data to third parties
ACHÉ does not sell, rent, or transfer personal data to third parties for commercial purposes.
However, certain data may be processed by technical service providers strictly necessary for the provision of the service, such as:
– Web hosting providers.
– Ticketing platforms.
– Payment gateways or services.
– Email delivery tools.
– Technical maintenance, security, or website administration services.
– Accounting or tax advisors, when necessary to comply with legal obligations.
These third parties may only process the data to the extent necessary to provide their services and must comply with applicable data protection obligations.
6. Payments
When payment for a ticket is made via an external payment gateway, ACHÉ does not directly store the buyer’s full bank card details.
Payments are processed by specialized providers, who apply their own security measures and privacy policies.
The user should also consult the terms and privacy policies of the payment provider used at the time of purchase.
7. Data retention
Personal data is kept only for the time necessary to fulfill the purposes for which it was collected.
In general:
– Data related to the purchase and issuance of tickets is kept for the time necessary to manage the event, resolve incidents, and process any claims.
– Data necessary for accounting or tax obligations is kept for the period required by applicable Belgian legislation.
– Data used for marketing communications is kept until the user withdraws their consent or requests to no longer receive these communications.
– Data that is no longer necessary will be deleted, anonymized, or blocked in accordance with applicable legal obligations.
8. Data security
ACHÉ applies reasonable and appropriate measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.
These measures may include:
– Limited access to data.
– Use of secure technical tools.
– Protection of accounts with passwords.
– Restriction of processing to individuals or providers who truly need it.
– Maintenance and updating of systems used for ticket sales and communication.
Although ACHÉ applies security measures, no digital system can guarantee absolute security. In the event of a relevant incident that could affect user rights, ACHÉ will take the necessary measures in accordance with applicable regulations.
9. User rights
In accordance with the General Data Protection Regulation, the user may exercise the following rights:
– Right of access to their personal data.
– Right to rectification of incorrect or incomplete data.
– Right to erasure of data when it is no longer necessary or when there is a legal basis to request its deletion.
– Right to restriction of processing.
– Right to object to processing in certain cases.
– Right to data portability where applicable.
– Right to withdraw consent at any time, where processing is based on consent.
To exercise these rights, the user may send a request to:
info@ache-officiel.com
ACHÉ may request reasonable additional information to verify the identity of the requester before responding to the request.
10. Complaint to the competent authority
If the user believes that their personal data has not been processed correctly, they can first contact ACHÉ to attempt to resolve the situation.
The user also has the right to lodge a complaint with the competent authority in Belgium:
Data Protection Authority / Gegevensbeschermingsautoriteit
Website: www.dataprotectionauthority.be
11. Event-related communications
The buyer agrees to receive communications strictly necessary for the proper management of the event, such as purchase confirmations, ticket delivery, schedule changes, access instructions, cancellations, or security information.
These communications are not considered marketing, as they are necessary for the provision of the purchased service.
12. Marketing communications
ACHÉ may send information about future events, experiences, promotions, or brand news only when there is a valid legal basis to do so.
When processing is based on consent, the user may unsubscribe or withdraw their consent at any time.
13. Modification of the Privacy Policy
ACHÉ reserves the right to modify this Privacy Policy to adapt it to legal, technical, commercial, or organizational changes.
The applicable version will be the one published on the website or communicated to the user at the time of purchase.
14. Contact
For any questions regarding this Privacy Policy or the processing of personal data, the user can contact ACHÉ at:
info@ache-officiel.com