Use only the data needed to deliver and protect the event journey.

Accounts and email signups through organizer profiles

When you request a free Entriza account through an organizer profile, we process your email address, optional name and language to create the account (GDPR Article 6(1)(b)). A new account is created only after you confirm your email address and set a password. An existing account remains unchanged.

Organizer emails are optional and require separate consent (GDPR Article 6(1)(a)). You can create an account without this consent. The organizer identified beside the choice is responsible for its mailing list; its contact details and privacy notice appear in the form. Entriza provides the signup and delivery technology. After consent is confirmed, your email address, optional name and related consent records are assigned to this organizer’s mailing list.

We record the selected purposes, notice version and confirmation to demonstrate consent and prevent misuse. Unconfirmed requests expire after 24 hours; temporarily stored signup data is then deleted during the next regular cleanup. Confirmed records are kept separately from temporary signup data under the applicable evidence and deletion rules.

You can stop organizer emails at any time using the unsubscribe link or your account’s email settings. Your Entriza account remains active, and withdrawal does not affect the lawfulness of earlier processing. Signing up with one organizer does not enable other organizers’ lists or general Entriza advertising.

Controller and scope

The configured platform operator is responsible for platform accounts, security, technical ticket delivery, support and platform administration. Organizers are responsible for their own event and seller processing where applicable.

Data we process

Depending on how you use the service, this may include:

• account identifiers, email address, display name and locale;
• orders, ticket entitlements, invoices, refunds and payment-provider references;
• ticket scans, transfers, waitlist, rewards and event notifications;
• support messages, approved attachments and privacy requests;
• security, audit and consent records, including short-lived abuse-prevention signals.

Purposes and legal bases

Data is processed to perform contracts and requested pre-contract steps, meet legal obligations, protect the service and users through legitimate interests, and—where required—on the basis of consent. Optional advertising or third-party analytics is not loaded before the relevant consent.

Recipients and service providers

Data is shared only as needed with the relevant organizer and vetted providers for identity, payments, email delivery, hosting, security and support. Stripe processes payment details; the platform stores only provider references and transaction records. Provider roles and international-transfer safeguards must be finalized in the production subprocessor register.

Retention and deletion

Optional profile and marketing data is removed when no longer needed. Order, accounting, fraud, dispute and audit records may be retained or pseudonymized for the applicable legal period. Backups expire through controlled rotation rather than ad-hoc editing.

Your rights

Subject to the GDPR conditions, you may request information, access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. Requests are available in the dashboard and may require identity verification.

Complaints and security

You may complain to the Cyprus Commissioner for Personal Data Protection or another competent supervisory authority. Technical and organizational safeguards include role-based access, encrypted credentials, audit records and data minimization; no internet service can promise absolute security.