GDPR and data subject rights

Lawful basis

We process personal data on lawful grounds, including contract (ticket purchases), consent (optional communications), and legitimate interests (site analytics and service improvement), balanced against your rights.

Data minimisation

We collect only what we need for the stated purpose and avoid keeping unnecessary data.

Purpose limitation

We use personal data solely for the purposes communicated at collection or as required by law.

Accountability

We maintain records of processing activities, implement safeguards, and respond to requests in line with legal timelines.

• Access: request a copy of your personal data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion where applicable
• Restriction: limit processing under certain conditions
• Portability: receive data in a portable format where feasible
• Objection: object to processing based on legitimate interests or direct marketing

Request process

Email us with your request and proof of identity. We will confirm receipt and guide you through the verification steps.

Verification & timelines

We may ask for limited information to verify identity. We aim to respond within one month, or inform you if an extension is needed for complex requests.