Privacy policy

Template text for the demo platform — to be reviewed by a lawyer before launch.

Organizers do not receive your personal data

When you buy a ticket through Santor Events, the organizer does not receive your name, email address, phone number, address or payment details. Organizers see only anonymous information: how many tickets were sold, when, which ticket type, and coarse statistics such as country and device type. A returning buyer appears to an organizer only as a pseudonymous number that cannot be traced back to you. If an organizer wants to reach ticket holders, Santor Events delivers the message for them without revealing your address.

The exception is tickets an organizer creates themselves (guest-list or complimentary tickets): the organizer entered those details and can see them.

What we collect

• Your name, email address and optional phone number, to deliver your tickets and answer questions about your order.
• Payment information, which is handled by our payment provider; we do not store card numbers.
• Anonymous usage statistics about the pages visited, and — only if you accept analytics cookies — traffic measurement.

Why we process it

To perform the ticket purchase contract, to prevent fraud, to meet legal obligations such as accounting, and, with your consent, to measure and improve the site.

Who receives it

Our payment provider, email delivery provider and hosting providers, as processors for us. Platform administrators can access orders to support you; every such access is logged.

Your rights

You can export your data and delete your account from your account settings at any time. You may also contact us to rectify data or object to processing, and you may complain to your data protection authority.

Retention

Order records are kept for the period required by accounting law. When you delete your account your personal details are erased and orders are kept only in anonymised form.

Visitor statistics and view counters

To count how many people look at an event and where they come from, Santor Events measures page views without cookies and without storing your IP address. For each visit we compute a one-way hash from your IP address and browser, mixed with a secret that is replaced every day and deleted after two days, so a visitor cannot be recognised from one day to the next. We store only the page, the source of the visit (for example “Instagram” or “Google”), your country and city as reported by our hosting provider, and device, browser and language. Organizers see these statistics only as numbers and never learn who you are. Raw events are deleted after 13 months and the daily hashes after two days. The “views” number under an event banner counts unique visitors per day. If you accept analytics cookies we also remember for 30 days which source brought you to the site, so that a purchase can be credited to it.

Optional questions after purchase

After you buy a ticket we may ask — optionally — for your gender and year of birth, to help organizers plan better events. We never guess these. Organizers only receive percentages for groups of at least ten people who answered; they never see an answer next to an order or a name. You can change or delete your answers at any time in your account.

E-mail news about events

We send news about events by e-mail only to people who said yes. You say yes by ticking the box at checkout (“Email me about new events in …”), by confirming a newsletter sign-up through the link in a confirmation e-mail, or in your account settings. In countries where the law allows it and an administrator has switched it on, existing customers may receive e-mails about similar events unless they tick “No thanks” at checkout; this is always shown at checkout. Customers from before this feature existed receive no marketing e-mails at all. The legal basis is your consent (or, where soft opt-in applies, our legitimate interest). We use your e-mail address, first name, language, the countries and cities of the events you bought tickets for and the countries you choose. Every e-mail contains a one-click unsubscribe link and a link to your preferences; unsubscribing takes effect immediately. We keep a log of when and how you subscribed or unsubscribed (including the IP address and browser used) as proof of consent, and after you delete your account only a one-way hash of your address stays on a suppression list so that it is not added again by mistake. Organizers never receive these e-mail addresses. Clicks are measured through the web address of the link and our own cookie-free statistics; we do not use tracking pixels.