Privacy Policy

The controller of your personal data within the meaning of the EU General Data Protection Regulation (GDPR) is:

Piknik Elektronik ASBL / NPO Avenue Louise, 500 bte 164 1050 Brussels, Belgium BCE / Enterprise number: 0895.784.805 Email: info@piknikelektronik.com

For privacy requests, use info@piknikelektronik.com or Contact form and mention “privacy” in the subject.

This Privacy Policy explains how we process personal data when you visit piknikelektronik.com, create an account, buy merch or event tickets, contact us, or otherwise interact with our services.

Our Terms and Conditions also apply to purchases. If you do not agree with this policy, please do not use our services or place an order.

Identity and contact

Name, email address, phone number (if provided), billing and/or shipping address, and account credentials if you register.

Orders, tickets and access

Data needed to process your purchase and deliver your ticket or products (for example identification and contact details, billing information, and other relevant order details). At the event we may use data linked to your ticket to confirm authenticity and help prevent fraud or misuse.

Payments

Payment status and payment reference from our payment provider. We do not store full card numbers or banking secrets on our servers; card data is handled by the payment provider.

Communications

Messages you send via forms or email, and transactional emails we send (order or ticket confirmation, support replies).

Technical data

Technical data automatically collected when you use the website (such as IP address, device/browser type, cookies or similar technologies, and logs needed to operate and secure the site), processed in a proportionate way.

We process personal data to:

• take and fulfil shop and ticket orders; • issue tickets and manage event access, including fraud prevention; • process payments and handle refunds where applicable under our Terms and Conditions; • send transactional communications about your order or event; • answer support and contact requests; • meet legal, tax and accounting obligations; • protect the website against fraud, abuse and security incidents; • improve reliability and user experience (in a limited, proportionate way); • send marketing emails only where permitted by law — you can unsubscribe at any time.

Depending on the processing, we rely on:

• Article 6(1)(b) — performance of a contract (orders, tickets, delivery of digital tickets, customer support related to a purchase); • Article 6(1)(c) — legal obligation (bookkeeping, tax, consumer information where required); • Article 6(1)(f) — legitimate interests (security, fraud prevention, service improvement, defending legal claims), balanced against your rights; • Article 6(1)(a) — consent (e.g. non-essential cookies/analytics if used, or certain marketing), which you may withdraw at any time without affecting prior lawful processing.

We do not sell your personal data. We share data only with service providers acting on our instructions or as independent controllers where the law requires, and only as needed for the purposes above.

Typical categories

• payment service providers; • email / messaging providers (order confirmations and, where applicable, marketing); • website hosting, infrastructure and database providers; • file / media storage providers where used; • professional advisers (accountant, lawyer) under confidentiality where needed; • public authorities if legally required.

Processors are bound by data-processing agreements where GDPR requires them. Where a provider acts as an independent controller (for example for payment methods), its own privacy notice also applies.

Some providers may process data outside the European Economic Area (EEA). Where that happens, we take steps required by GDPR, such as using providers under an adequacy decision and/or Standard Contractual Clauses (SCCs), plus supplementary measures where appropriate.

We keep personal data only as long as needed for the purposes collected, then delete or anonymise it, subject to longer legal retention:

• order and invoicing data: generally up to 7 years (Belgian accounting/tax rules); • ticket and access-related data: for the event lifecycle and a reasonable period after for disputes, fraud prevention and accounting links; • account data: while the account is active, then deleted or anonymised after inactivity or on request where legally possible; • contact/support messages: typically up to 24 months after the last exchange, unless linked to an order or claim; • technical / security logs: short periods unless needed to investigate an incident; • marketing lists: until you unsubscribe or we purge inactive contacts.

Under the GDPR you may have the right to:

• access your personal data; • rectify inaccurate data; • erase data (“right to be forgotten”) where applicable; • restrict processing; • data portability; • object to processing based on legitimate interests; • withdraw consent at any time where processing is consent-based; • lodge a complaint with a supervisory authority.

In Belgium, the supervisory authority is the Autorité de protection des données / Gegevensbeschermingsautoriteit: https://www.autoriteprotectiondonnees.be You may also contact the authority of your habitual residence in the EU.

To exercise rights, email info@piknikelektronik.com or use Contact form. We may need to verify your identity. We respond within one month (extendable by two months for complex requests, with notice). Some rights are limited where we must keep data for legal reasons (e.g. invoices) or for the establishment, exercise or defence of legal claims.

We use strictly necessary cookies and similar technologies required for the website to function. These do not require consent under ePrivacy rules as implemented in Belgium.

If we use non-essential cookies (for example analytics or marketing), we will request consent where required and let you refuse or withdraw it. You can also control cookies via your browser settings; blocking necessary cookies may limit some features.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration. No online system is 100% secure; please keep your account credentials confidential where applicable.

Our online shop and ticket services are aimed at adults or purchasers with legal capacity. Event age rules (if any) are stated on the event page. We do not knowingly collect personal data from children for online sales without parental authority where required by law. Contact us if you believe a minor provided data without authorisation.

We may update this Privacy Policy to reflect legal, technical or organisational changes. The “Last updated” date at the top will change. Material changes may be highlighted on the site or by email where appropriate. Continued use after the update constitutes acknowledgment of the revised policy, without prejudice to rights that require fresh consent.

Privacy questions or requests: info@piknikelektronik.com or Contact form. Postal: Avenue Louise, 500 bte 164, 1050 Brussels, Belgium.