Effective date: March 15, 2026
1. Who we are
Emaly VOF ("Emaly", "we", "us") is the data controller for your personal data when you use our ticketing platform. We are registered with the Dutch Chamber of Commerce under number 93788843 and based in Leeuwarden, the Netherlands.
For any privacy-related questions, contact us at support@emaly.co.
2. What data we collect
When you purchase tickets, we collect the following personal data:
- Name — your first and last name, used to identify your order and personalise your tickets.
- Email address — used to send your ticket confirmation and any event-related communications.
- Payment data — processed securely by our payment provider Mollie. We do not store your card details or bank account information.
- Form responses — answers to any additional questions set by the event organiser (e.g. dietary preferences, accessibility needs).
- Order details — ticket types, quantities, prices, discount codes, and transaction identifiers.
3. Why we process your data
We process your personal data for the following purposes and legal bases:
- Contract performance — to process your ticket order, send confirmations, and facilitate entry to the event.
- Legitimate interest — to prevent fraud, maintain platform security, and improve our services.
- Legal obligation — to comply with tax, accounting, and other regulatory requirements.
4. Who receives your data
- Event organiser — receives your name, email, order details, and form responses to manage the event and attendee list.
- Mollie — our payment service provider, processes your payment securely under their own privacy policy.
- Supabase — our infrastructure provider, hosts the database where your order data is stored. Servers are located in the EU.
We do not sell your personal data to third parties. We do not share your data with advertisers.
5. Data transfers
Your data is stored and processed within the European Economic Area (EEA). If any data transfer outside the EEA is required in the future, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
6. How long we keep your data
- Order data — retained for 7 years after the transaction date, as required by Dutch tax law.
- Account data — retained as long as your order exists in our system, then deleted within 30 days of a deletion request.
- Payment data — retained by Mollie according to their data retention policy. Emaly does not store payment credentials.
7. Your rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate or incomplete data.
- Erasure — request deletion of your data, subject to legal retention obligations.
- Restriction — request that we limit processing of your data in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest.
To exercise any of these rights, contact us at support@emaly.co. We will respond within 30 days.
8. Cookies
The Emaly ticket shop uses only essential cookies required for the platform to function (e.g. session management, theme preference). We do not use tracking cookies, analytics cookies, or advertising cookies.
9. Security
We take appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure database hosting within the EU, and access controls limiting data access to authorised personnel only.
10. Complaints
If you believe your privacy rights have been violated, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
11. Changes to this policy
We may update this Privacy Policy from time to time. The most current version will always be available on the platform. We encourage you to review this policy periodically.