1. Data Controller
This Privacy Policy governs the processing of personal data collected in connection with the sale of electronic tickets and event management organized under the ACHÉ brand.
The data controller is:
Orlando Alberto Rodriguez Franco
BCE No.: 1039.570.972
Contact address: Rue des Bougainvillées 5, 1080 Molenbeek-Saint-Jean, Brussels, Belgium
Contact email address: ache.belgium@gmail.com
ACHÉ commits to processing personal data lawfully, transparently, securely, and limited to the purposes necessary for organizing its events.
2. Personal Data Collected
In connection with the sale of electronic tickets, ACHÉ may collect the following personal data:
– Last Name.
– First Name.
– Email address.
– Information related to the reservation or purchase of the ticket.
– Order number, ticket reference, or purchase confirmation.
– Information necessary for managing event access.
– Billing data, only when necessary or requested.
– Minimal technical information required to ensure the proper functioning of the sales, payment, and communication system.
ACHÉ does not collect sensitive data such as racial origin, political opinions, religion, medical data, or biometric information in the ordinary course of ticket sales.
3. Purposes of Processing
Personal data collected is used only for specific, legitimate, and necessary purposes.
ACHÉ uses personal data to:
– Manage ticket purchases or reservations.
– Issue and send the electronic ticket to the buyer.
– Confirm event access.
– Communicate important event-related information, such as schedule changes, venue changes, access instructions, security measures, postponement, or cancellation.
– Manage incidents related to purchase, payment, ticket, or event participation.
– Comply with accounting, tax, and legal obligations applicable in Belgium.
– Protect event security, prevent fraud, abuse, or misuse of the sales system.
– Send commercial communications regarding future ACHÉ events only when there is prior user consent or a valid legal basis.
ACHÉ will not use personal data for purposes incompatible with those listed above.
4. Legal Basis for Processing
The processing of personal data is based on one or more of the following legal bases:
a. Contract Performance
Processing is necessary to manage ticket purchases, issue electronic tickets, and allow event access.
Without this data, ACHÉ cannot properly process the reservation or deliver the ticket to the buyer.
b. Compliance with Legal Obligations
Certain data may be retained to comply with tax, accounting, or administrative obligations applicable in Belgium.
c. Legitimate Interest
ACHÉ may process certain data to ensure the security of the sales system, prevent fraud, resolve incidents, protect its rights, and ensure the smooth running of the event.
d. Consent
When ACHÉ uses data to send commercial communications, newsletters, promotions, or announcements of future events that are not strictly necessary for managing a purchase, user consent will be requested where appropriate.
The user may withdraw their consent at any time.
5. Disclosure of Data to Third Parties
ACHÉ does not sell, rent, or transfer personal data to third parties for commercial purposes.
However, certain data may be processed by technical service providers strictly necessary for the provision of the service, such as:
– Web hosting providers.
– Ticket sales platforms.
– Payment gateways or services.
– Email sending tools.
– Technical maintenance, security, or website administration services.
– Accounting or tax advisors, when necessary to comply with legal obligations.
These third parties may only process data to the extent necessary to provide their services and must comply with applicable data protection obligations.
6. Payments
When payment for a ticket is made via an external payment gateway, ACHÉ does not directly retain the buyer’s full credit card data.
Payments are processed by specialized providers, who apply their own security measures and privacy policies.
The user must also consult the terms and privacy policies of the payment provider used at the time of purchase.
7. Data Retention
Personal data is retained only for the period necessary to fulfill the purposes for which it was collected.
Generally:
– Data related to the purchase and issuance of tickets is retained for the period necessary to manage the event, resolve incidents, and handle any claims.
– Data necessary for accounting or tax obligations is retained for the period required by applicable Belgian legislation.
– Data used for commercial communications is retained until the user withdraws their consent or requests not to receive these communications anymore.
– Data that is no longer necessary will be deleted, anonymized, or blocked in accordance with applicable legal obligations.
8. Data Security
ACHÉ implements reasonable and appropriate measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.
These measures may include:
– Limited data access.
– Use of secure technical tools.
– Account protection with passwords.
– Restriction of processing to individuals or providers who genuinely need it.
– Maintenance and updating of systems used for ticket sales and communication.
Although ACHÉ implements security measures, no digital system can guarantee absolute security. In the event of a relevant incident likely to affect user rights, ACHÉ will take the necessary measures in accordance with applicable regulations.
9. User Rights
In accordance with the General Data Protection Regulation, the user may exercise the following rights:
– Right to access their personal data.
– Right to rectification of inaccurate or incomplete data.
– Right to erasure of data when it is no longer necessary or when there is a legal basis to request its deletion.
– Right to restriction of processing.
– Right to object to processing in certain cases.
– Right to data portability where applicable.
– Right to withdraw consent at any time, when processing is based on consent.
To exercise these rights, the user can send a request to:
info@ache-officiel.com
ACHÉ may request reasonable additional information to verify the applicant’s identity before responding to the request.
10. Complaint to the Competent Authority
If the user believes their personal data has not been processed correctly, they can first contact ACHÉ to try to resolve the situation.
The user also has the right to file a complaint with the competent authority in Belgium:
Data Protection Authority / Gegevensbeschermingsautoriteit
Website: www.autoriteprotectiondonnees.be
11. Event Communications
The buyer agrees to receive communications strictly necessary for the proper management of the event, such as purchase confirmations, ticket delivery, schedule changes, access instructions, cancellations, or security information.
These communications are not considered marketing, as they are necessary for the provision of the purchased service.
12. Commercial Communications
ACHÉ may send information about future events, experiences, promotions, or brand news only when there is a valid legal basis to do so.
When processing is based on consent, the user may unsubscribe or withdraw their consent at any time.
13. Changes to the Privacy Policy
ACHÉ reserves the right to modify this Privacy Policy to adapt it to legal, technical, commercial, or organizational changes.
The applicable version will be the one published on the website or communicated to the user at the time of purchase.
14. Contact
For any questions regarding this Privacy Policy or the processing of personal data, the user can contact ACHÉ at:
info@ache-officiel.com