Privacy Policy
This Privacy Policy describes how Complement Software SRL ("we", "us", or "our") collects, uses, and protects your personal data when you use ticketlist.co (the "Service"). We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and applicable Romanian law.
1. Data Controller
The data controller responsible for your personal data is:
- Complement Software SRL
- Registration number: RO35962660
- Address: Calea Victoriei 142-148, Sector 1, Bucharest, Romania
- Email: [email protected]
2. Data We Collect
We collect the following categories of personal data:
a. Account Registration
- Name and email address provided when creating an account.
- Password (stored in hashed, non-readable form).
b. Early Access and Newsletter Subscriptions
- Name (optional) and email address when you join early access, subscribe to our newsletter, or request account launch updates.
- The page or interaction that led to the subscription request, so we can understand which parts of Ticket List are useful to visitors.
c. Usage Data and Cookies
- Browser type, IP address, pages visited, and time spent on the site, collected via analytics tools (e.g. Google Analytics).
- Cookies and similar tracking technologies — see Section 7 for details.
3. How We Use Your Data
We use your personal data for the following purposes and on the following legal bases:
- To provide the Service — including account creation, login, and displaying personalised event listings (Legal basis: contract performance, Art. 6(1)(b) GDPR).
- To send early access, newsletter, and event alert emails — only if you have opted in and confirmed your email address (Legal basis: consent, Art. 6(1)(a) GDPR).
- To analyse usage and improve the Service — through aggregated analytics data (Legal basis: legitimate interest, Art. 6(1)(f) GDPR).
- To comply with legal obligations — such as accounting or regulatory requirements (Legal basis: legal obligation, Art. 6(1)(c) GDPR).
4. Data Sharing
We do not sell your personal data. We may share data with:
- Analytics providers (e.g. Google Analytics) — to understand how the Service is used, subject to their privacy policies.
- Email service providers — to send newsletters and transactional emails.
- Legal authorities — when required by law or court order.
We ensure that any third-party processors provide adequate data protection guarantees.
5. Data Retention
- Account data: retained for as long as your account is active, and up to 2 years after account deletion.
- Early access and newsletter subscription data: retained until you unsubscribe, withdraw consent, or request deletion.
- Analytics data: retained according to the analytics provider's retention settings (typically 14–26 months).
6. Your Rights Under GDPR
As a data subject under GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure ("right to be forgotten") — request deletion of your data where there is no legitimate reason to continue processing it.
- Restriction — request that we restrict processing of your data in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests.
- Withdraw consent — at any time, for processing based on consent (e.g. newsletter).
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) at www.dataprotection.ro.
7. Cookies
We use the following types of cookies:
- Essential cookies — required for the Service to function (e.g. session cookies, login state). No consent required.
- Analytics cookies — used to understand how visitors interact with the site (e.g. Google Analytics). These are only set with your consent.
You can manage or disable cookies through your browser settings at any time.
8. Third-Party Links
ticketlist.co links to external event pages and ticketing platforms. We are not responsible for the privacy practices of those third-party websites. We encourage you to review their privacy policies before providing any personal data.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the site. The "Last updated" date at the top indicates when the policy was last revised.
11. Contact
For any questions or requests regarding this Privacy Policy or your personal data, please contact us: