Privacy Policy
This Privacy Policy describes how qydeqao.com ("we," "us," or "our") collects, uses, and shares your personal information when you visit our website or purchase tickets for sporting events in Bucharest through our services.
1. Information We Collect
When you visit qydeqao.com or use our services, we may collect the following types of personal information:
- Personal Identification Information: Name, email address, phone number, postal address, and other contact details necessary for ticket purchases and delivery.
- Payment Information: Credit card details, billing address, and other financial information required to process your transactions. Note that payment processing is handled through secure third-party payment processors.
- Account Information: Username, password, and preferences if you create an account on our platform.
- Usage Data: Information about how you interact with our website, including pages visited, time spent on each page, links clicked, and purchase history.
- Device Information: IP address, browser type, operating system, device identifiers, and other technical information about your device.
- Location Data: General location information based on your IP address or more precise location data if you grant permission.
2. How We Use Your Information
We use the collected information for the following purposes:
- Processing and fulfilling your ticket orders
- Providing customer support and responding to inquiries
- Sending transactional emails and purchase confirmations
- Sending promotional communications about upcoming sporting events, special offers, and other information we think may interest you (you can opt out at any time)
- Improving our website functionality and user experience
- Analyzing usage patterns and trends to enhance our services
- Preventing fraudulent transactions and ensuring secure payment processing
- Complying with legal obligations and enforcing our terms of service
3. Legal Basis for Processing (GDPR Compliance)
Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:
- Contractual Necessity: Processing necessary for the performance of our contract with you (e.g., processing your ticket purchase).
- Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security, and improving our services.
- Legal Obligation: Processing necessary to comply with our legal obligations.
- Consent: Processing based on your specific consent, such as for marketing communications.
4. Data Sharing and Disclosure
We may share your personal information with the following categories of recipients:
- Service Providers: Third-party vendors who assist us in providing services, such as payment processors, email service providers, and customer support tools.
- Event Organizers: Relevant information may be shared with sporting event organizers to facilitate your attendance.
- Legal Authorities: We may disclose information if required by law, regulation, or legal process.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.
We do not sell your personal information to third parties for their marketing purposes.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of sensitive data in transit and at rest
- Regular security assessments and vulnerability testing
- Access controls and authentication procedures
- Staff training on data protection and security practices
- Secure data storage and backup systems
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
6. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: You can request a copy of the personal information we hold about you.
- Rectification: You can request correction of inaccurate or incomplete information.
- Erasure: You can request deletion of your personal information in certain circumstances.
- Restriction: You can request that we limit how we use your data in certain circumstances.
- Data Portability: You can request a machine-readable copy of your information to transfer to another service.
- Objection: You can object to our processing of your information in certain circumstances.
- Withdraw Consent: You can withdraw consent for processing based on consent at any time.
To exercise these rights, please contact us through the methods provided in the "Contact Us" section. We will respond to your request within the timeframe required by applicable law.
7. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect information about your browsing activities on our website. These technologies help us analyze website traffic, customize content, and provide a better user experience.
You can control cookies through your browser settings and other tools. However, disabling cookies may limit your ability to use certain features of our website.
8. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include:
- The duration of our ongoing relationship with you
- Legal obligations to retain data for certain periods
- Statute of limitations under applicable law
- Our legitimate business needs
9. International Data Transfers
Your personal information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.
When we transfer your information internationally, we implement appropriate safeguards in accordance with applicable data protection laws to ensure your information receives adequate protection.
10. Children's Privacy
Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to delete that information.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last updated" date. We encourage you to review this Privacy Policy periodically.
Last updated: May 15, 2023