Privacy Policy: Tomorrowland presents Amber Broos

1.     Preamble
a.    Whoare we?
WEAREONE.worldBV, with registered offices at B – 2000 Antwerp, Korte Vlierstraat 6, VATnumber BE0867239782 (hereinafter “Tomorrowland”, “we” or “us”), organizes Tomorrowlandpresents Amber Broos (hereinafter “the event”).
In the contextof the event, Tomorrowland processes personal data. In this sense, Tomorrowlandacts as a data controller in accordance with the General Data ProtectionRegulation (GDPR). Tomorrowland attaches great importance to the protection ofprivacy and the correct processing of personal data which are the subject ofthe GDPR.  
Through thisstatement, Tomorrowland provides an overview of these processing activities andwhat safeguards Tomorrowland takes to protect personal data.b.    
Contact
WEAREONE.world BV Korte Vlierstraat 6, 2000 Antwerp, Belgium
Dpo@tomorrowland.com

1.    Why do we process your personal data?
a.    Ticketsales                                           
i.     Whatwe do with your personal data?
When youpurchase a ticket for the event or when someone else buys a ticket for you, weneed to process your personal data in order to guarantee that you receive theticket as well as all other relevant information to enjoy the event. Thisincludes that we will contact you to inform you about all relevant detailsregarding the event. For the purpose of ticket sales, we might also processyour personal data to send you transactional emails, to provide customerservice and dispute resolution, to perform reimbursements, etc.The legal basisfor the processing of your personal data for ticket sales is the necessity ofthe performance of a contract.                                             

ii.     Whatpersonal data we process?
Weprocess:·      
Identificationdata, such as your name, date of birth, gender and country of origin.·      
Contactdata, such as your email address.·      
Financialdata, such as your bank account number.·      
Yourpreferences.                                             
iii.     How we obtained your personal data?
Tomorrowland obtains your personal data from:·      
Yourself·      
The person who purchases the ticket in your name

 iv.     Howlong we keep your personal data?Tomorrowlandkeeps your personal data for as long as necessary to run the event and carryout our after-sales services.

b.    Attending the event                                           
i.     What we do with your personal data?
When you attendthe event, we make every effort to make it run smoothly. This means that incertain cases we are obliged to process your personal data.

For example, weneed to verify your identity from your ticket and do access control. We have toensure surveillance and security and do health and safety compliance. Therewill also be event interaction, which means we may take images of you with thecameras on the grounds, as well as participation in activities, surveys, or feedback forms, interactions on event apps or social media handles. Finally, we also do analytics and reporting, collecting certain statistics from event attendees.

The legal basisfor the processing of your personal data when attending the event is a legalobligation when it arises and otherwise our legitimate interest.                                         
ii.     Whatpersonal data we process?
We process:·      
Identificationdata, such as your name.·      
Contactdata, such as your email address.·      
Financialdata, such as your bank account number.·      
Yourimages and pictures.·      
Yourpreferences.                                         

iii.     How we obtained your personal data?
Tomorrowland obtains your personal data from:·      
Yourself                                         

iv.     Howlong we keep your personal data?
Tomorrowland keeps your personal data for as long as necessary to run the event and carryout our after-sales services.c.    
Visiting our website                                           

i.     What we do with your personal data?
When you visitour website, we want to guarantee that this website functions adequately. Wealso want to enable the functionalities inherent to our website and provide youwith personalized content on our communication channels. For more information,please consult our cookie policy.The legal basisfor processing your personal data when you use our website is your consentwhere required by law, and otherwise our legitimate interest.                                        

ii.     Whatpersonal data we process?
We process:·      
Identification data, such as your IP address.
Yourpreferences.                                            

i.     How we obtained your personal data?
Tomorrowland obtains your personal data from:·      
Yourself                                         

ii.     Howlong we keep your personal data?
Tomorrowland keeps your personal data up to one year after visiting the website.

b.    Newsletter                                           

i.     What we do with your personal data?
We share newsletters about all Tomorrowland-related events (such as Unite withTomorrowland), artists (such as Dimitri Vegas & Like Mike or Lost Frequencies),People of Tomorrow (social platform), Tomorrowland surveys, Tomorrowland theme and videos and TML by Tomorrowland.
The legal basis for processing your personal data in order to send newsletters is your consent.                                         

ii.     Whatpersonal data we process?
Weprocess:·      
Identificationdata, such as your name.·      
Contactdata, such as your email address.·      
Yourpreferences.                                         

iii.     Howwe obtained your personal data?Tomorrowlandobtains your personal data from:·      Yourself                                         

iv.     Howlong we keep your personal data?Tomorrowland keeps your personal data until you withdraw your consent.

2.    Who do we share your data with?
a.     Receiversof your personal data Tomorrowland does not share your personal data with third parties, unless:·      
Yourselfor when necessary, your relatives.·      
Ourlegal successors and affiliates (such as subsidiaries and sister companies) forthe same purposes as mentioned in this privacy policy.·      
Thirdparties or subcontractors for the same purposes as mentioned in this privacypolicy, such as the provision of our products and services, tax and accountancyobligations, police investigations, local and federal government requirements,hospitality services, etc. b.     Transferof your personal data outside the EUThe information that you provide to us will be heldin the systems located at the registered office in Antwerp or in those of anappointed third party (mentioned above) or our cloud service provider Zendesk.
We may also allow access to your information by other third parties who act forus for some of the purposes described in this privacy policy or for otherpurposes explicitly approved by you.
To the extent that personal data is processed outside the European Union, wewill ensure through contractual or other measures that such data enjoy an adequatelevel of protection there, comparable to that which they would enjoy in theEuropean Union, in accordance with the European regulations.

3.    What safeguards do we put in place to protect yourpersonal data?Appropriate technical and organizational measuresare taken to protect your personal data against unauthorized or unlawfulprocessing and against accidental loss, destruction or damage. When you provideyour personal data through our websites or mobile apps, this information istransmitted across the internet securely using high-grade encryption.
As described in this privacy policy, in some instances your personal data willbe shared with third parties, in which case that third party is required tohave appropriate technical and organizational measures in place to protect yourpersonal data.
However, in some instances, we may be compelled by law to disclose yourpersonal data to a third party, such as a government body, and has limitedcontrol over how that data is protected by that party.

4.    What are your rights?
Data protection legislation provides various rightsfor the data subject with regard to the processing of personal data to ensure the data subject has sufficient control over the processing of their personal data.
If you wish to exercise your rights, you may send a request to this effect to our Data Protection Officer at the following email address: dpo@tomorrowland.com.
This request should be formulated clearly and as concretely as possible, in order to give us the opportunity to respond as specifically as possible.
If there is any doubt about the identity of theperson concerned, we may ask to verify it, in order to prevent an unauthorised person from exercising your rights. In that case we will contact the person concerned and together with him/her seek the most appropriate way to establish his/her identity.

We aim to comply with a request within one month.
If this is not possible, we will inform the person concerned as soon as possible of its option to extend this period by two months. If we are unable to comply with your request, we will inform the person concerned, giving reasons, within an appropriate period.
Please be aware that exercising certain rights may affect the performance of our services.

a)    Right of information
You are entitled to be informed about the processing of your personal data. This information must be provided in an accurate, transparent, comprehensible and easily accessible manner, in clear and simple language. In concrete terms, one can exercise this right by consulting this privacy notice.
For more information, one can contact our data protection officer using the a fore mentioned details.

b)    Right of access
You are entitled to receive confirmation from us whether your personal data is processed by us, at your request. If we do process your personal data, you are entitled to request to view your personal data.
We will produce a copy of the personal data relating to you in our records upon request.
Should you make repeated and disproportionate requests for copies of the said data, we reserve the right to charge you a reasonable fee.

c)     Rightto rectification
You have the right to obtain the rectification ofyour inaccurate or incomplete personal data.

d)    Right to be forgotten
You are entitled to request we delete your personal data should the processing not be in accordance with the data protection legislation or should the said processing not fall within the limitations laiddown by law.

e)    Right to restriction of processing
You are entitled to request we limit the processing of your personal data if:
the accuracy of the personal data has been called into question during the period required to check the accuracy there of;
the processing is unlawful and you do not wish the data to be deleted ;  
we no longer require the data but you do not request we delete the data because the data is required for the pursuance or defence of legal claims;
an objection is made to the processing pending an explanation of the legitimate interests that outweigh your interests. 

f)      Right to data portability
You are entitled to receive the data you have provided to us in a structured, standard and machine-readable format. You are entitled to request we transfer the personal data to another data controller(directly from us). This is an option when the processing is based on your consent or on the necessity of the performance of a contract and processing happens via an automated procedure.

g)    Rightto object
Where your personal data is processed for direct marketing purposes (including profiling), you remain entitled to object to the said processing. You are entitled to object to the processing based on a specific situation related to the data subject. The organisation will no longer process the personal data unless the organisation demonstrates compelling legitimate grounds for the processing which outweigh your interests or the interests of the pursuance or defence of legal claims.

h)    Automated individual decision-making
You are entitled not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

i)      Right to withdraw consent
If you have consented to the processing of your personal data for a specific purpose of processing, you are entitled to withdraw your consent at any time by sending an email or via your account. The withdrawal of consent only operates for the future and does not affect processing operations prior to the withdrawal.

j)     Procedure to exercise rights and other provisions
You are entitled to lodge a complaint with the DataProtection Authority (DPA). If you are dissatisfied with the way we process your personal data or if you intend to lodge a complaint, we encourage you to first get in touch with our data protection officer using the a fore mentioned details, in order to reach a quick solution to this problem together.      

 
www.gegevensbeschermingsautoriteit.be            Contact@apd-gba.be            
Drukpersstraat35, 1000 Brussel             Telephonenumber: +32 (0)2 274 48 00

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.