okoncert.live

Privacy Policy

event.okoncert.live

Last updated: 22 October 2026

1. Scope and controller

This policy explains how we process personal data when you use event.okoncert.live, buy tickets and attend our concerts. The controller is:

SIA "VIVALDI ENTERTAINMENT"
Registration No.: 40203495404
VAT No.: LV40203495404
Registered office: Kaivas iela 50 k-2 - 80C, Rīga, LV-1021, Latvia
Registered operating unit: Augusta Deglava iela 10, Rīga, LV-1009, Latvia
Email: [email protected]
Phone: +371 27 27 27 35

Send privacy requests to [email protected] or [email protected]; these are contact addresses, not an appointed data protection officer. We apply the GDPR, Latvian data-protection law and applicable national rules on electronic communications and privacy, including the German TDDDG where applicable. A shared brand or ticketing software does not give other OKONCERT entities access to your data.

2. Data and sources

We receive data from you, from your use of the shop, from payment and delivery providers and from admission scans. If someone buys a ticket for you, we may receive your name or contact details from that person.

  • Contact and order data: name, email, phone or WhatsApp number, event, seats, order and ticket numbers, prices, discounts and language; for business purchases, company name, address and VAT or tax number.
  • Payment data from Stripe: status, transaction references and limited card information such as brand and last four digits; we never receive full card numbers or security codes.
  • Admission and wallet data: ticket validation status and time and, if you add a ticket to a mobile wallet, pass and device identifiers for updates.
  • Account and service data: “My Tickets” sign-in, guest-list invitations, tickets forwarded to another person, reminders and your correspondence with us.
  • Technical data: IP address, device and browser information and checkout-session data.
  • Measurement and marketing data: pages visited, campaign and advertising click identifiers, your newsletter choices and consent records.

Required fields are needed to process the order; without them we cannot issue a ticket. Marketing, statistics, WhatsApp and wallet features are not conditions of purchase.

3. Purposes and legal bases

  • Concluding and performing the ticket contract, delivering tickets, admission and handling your requests: Article 6(1)(b) GDPR; for attendees who did not buy the ticket themselves, our legitimate interest in delivering the purchased service, Article 6(1)(f).
  • Accounting and tax records: Article 6(1)(c).
  • Security, fraud prevention, troubleshooting and legal claims: our legitimate interests, Article 6(1)(f).
  • Statistics and advertising cookies in your browser and individual measurement of email engagement: your consent, Article 6(1)(a).
  • Newsletters, “My Tickets” communication and reminders about unpaid orders: see section 4.

Independently of the cookie settings, our server reports page views, checkout steps and purchases to Meta, with IP address, browser information, advertising click identifiers and, for purchases, hashed email, phone number and name, and reports purchases to Google with a pseudonymous identifier, order value and tickets. We do this on the basis of our legitimate interest in measuring the effectiveness of our advertising, Article 6(1)(f). You may object at any time by writing to [email protected]; we then stop sending your data for this purpose.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

4. Marketing choices

At checkout, the box for emails about our concerts, discounts and special offers and the box for ticket delivery by WhatsApp are ticked by default. You can untick either before paying; while WhatsApp delivery stays selected, a phone number is required. For customers who bought from us, emails about our own similar concerts also rely on the existing-customer exception (Article 6(1)(f) GDPR, § 7(3) UWG in Germany).

When you first sign in to “My Tickets” and have no customer account yet, we create one with email and WhatsApp communication switched on; we need this for the service and use it to inform you about your tickets and our concerts.

If you start an order and do not pay, we may send you a reminder email, possibly with a discount code, based on our legitimate interest in completing sales (Article 6(1)(f)), regardless of your newsletter choice.

You can unsubscribe from any of these messages at any time through the link in each email, by replying, or by writing to [email protected] or [email protected], free of charge and without affecting your tickets. Service messages such as tickets and cancellation notices are sent regardless. Receiving email does not itself authorise opening or click tracking.

5. Recipients

We share data only as far as needed for each task. Processors act on our documented instructions; some providers also act as independent controllers.

  • hosting and IT service providers in the EU;
  • payment processing: Stripe (Stripe Payments Europe Ltd., Ireland), which also acts as a controller for certain payment and compliance activities, https://stripe.com/privacy;
  • an email delivery service for tickets and other messages;
  • WhatsApp (WhatsApp Ireland Ltd., Meta) for ticket delivery and support when you use this channel, https://www.whatsapp.com/legal/privacy-policy-eea;
  • mobile wallet providers when you add a ticket to their wallet;
  • advertising and analytics partners, in particular Meta Platforms Ireland Ltd. and Google Ireland Ltd. (sections 3 and 8); for event data collected through Meta's business tools, we and Meta are jointly responsible for collection and transmission, and Meta is responsible for its further processing, https://www.facebook.com/privacy/policy/ and https://policies.google.com/privacy;
  • error monitoring, website security and content-delivery providers;
  • companies of the OKONCERT group acting as our processors under a data processing agreement;
  • admission and venue staff, accountants, professional advisers and authorities where necessary or required by law.

We do not sell customer data.

6. International transfers

Some providers, including Stripe, Meta, Google and some IT and security providers, may process data in the USA or other countries outside the EEA. Such transfers rely on the EU–US Data Privacy Framework where the recipient is certified and/or on the European Commission's Standard Contractual Clauses. You can request a copy of the safeguards from [email protected].

7. Retention

We keep personal data only as long as needed to provide the service, deal with requests and claims, and meet legal obligations such as keeping accounting records; afterwards we delete or anonymise it. You can ask us at any time to delete your data by writing to [email protected]; we delete or anonymise it unless we must keep it by law or need it for legal claims.

8. Cookies and measurement

We use necessary cookies for your shopping session, your language and your cookie choice. Statistics and advertising cookies and similar browser technologies, including Google Analytics and the Meta Pixel, as well as linking a purchase to your visit, are used only with your consent. On your first visit you can choose “Accept all”, “Reject all” or individual categories (statistics, advertising); the names, purposes, providers and lifetimes of all cookies are listed in “Cookie settings”, which you can reopen at any time through the link at the bottom of every page to change or withdraw your choice. You can buy tickets without consenting. If you clicked “OK” on our earlier cookie banner, we treat this as consent to statistics and advertising and do not ask again. The server-side measurement in section 3 is not controlled by the cookie settings; you can object to it as described there.

9. Photography and video

When we record a concert, notices explain the purpose and how to contact us. Overview images documenting the event may rely on our legitimate interest in reporting on our activities; you may object. For posed portraits, identifiable close-ups used in advertising and identifiable children in publicity we obtain separate consent, from a legal representative where required. Tell staff if you do not want to be photographed, or contact us about an existing image.

10. Security and rights

Under the GDPR you can request access, correction, erasure, restriction and portability, object to processing based on legitimate interests, object to direct marketing at any time and withdraw consent at any time without affecting earlier processing. Records the law requires us to keep are retained. Write to [email protected] or [email protected]; we respond within one month, extendable by up to two months for complex requests, and check your identity only where necessary. We protect data with appropriate technical and organisational measures.

You can complain to a supervisory authority, in particular where you live or work: in Latvia Datu valsts inspekcija, https://www.dvi.gov.lv; German authorities are listed at https://www.bfdi.bund.de; in Estonia https://www.aki.ee; in Finland https://tietosuoja.fi.

11. Updates

The date above identifies this version. We inform you of material changes and ask for new consent where required.

← Back to homepage