Privacy Statement

1. Identity of the Data Controller

This Privacy Statement is issued by:

Garmon Entertainment, Lda
Registered in Portugal
Registered office: Rua Mário Botas 6, Bloco B2, apartamento 10E, 1990-050 Lisboa, Portugal
Company registration number (NIPC): 519193644
Contact email: legal@garmon.io

For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”),
Garmon Entertainment, Lda acts as the data controller with respect to the processing of personal data described in this Privacy Statement.

Garmon is committed to complying with all applicable laws and regulations on data protection, including the GDPR.

This Privacy Statement explains how we collect, use, store, protect, and share your personal data when you visit our platform or create a profile on it.

2. What personal data do we collect?

Depending on the purpose of processing, we may collect and process the following categories of personal data:

• Identification data: first name, last name, email address, country of residence, and other information you voluntarily provide.
• Demographic data: age and gender, where provided by you.
• Financial data: bank account details or payment-related information, where required for the provision of services.
• Commercial data: information related to subscriptions to newsletters or marketing communications (e.g. email address, name).
• Technical data: information collected through cookies or similar technologies, which may include IP address, browser type, operating system, device information, and approximate location.
  For more information, please consult our Cookies Statement.

3. How do we use your personal data?

We process your personal data for the following purposes:

• Customer support: to respond to your inquiries and manage your user profile.
• Marketing communications: to manage your subscription to newsletters and to send information about our services, features, or upcoming events (where permitted by law).
• Provision of services: to enable ticket purchases and other platform functionalities.
• Technical and analytical purposes: to operate, maintain, and improve the platform (see Cookies Statement).
• Statistical analysis: to analyze aggregated and anonymized data about platform usage in order to improve our services.

4. Legal bases for processing

We process your personal data only where permitted by law and based on one or more of the following legal grounds:

• Your freely given consent;
• The performance of a contract to which you are a party;
• Our legitimate interests, provided such interests are not overridden by your rights and freedoms;
• Compliance with legal obligations under applicable laws and regulations.

5. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Statement and to comply with applicable legal obligations.

When you delete your profile, your personal data will be deleted or anonymized within 30 days, unless retention is required by law.

You may unsubscribe from marketing communications at any time. Once unsubscribed, your data will no longer be used for marketing purposes.

6. Data sharing and international transfers

Your personal data may be shared within the Garmon group of companies, where applicable.

In exceptional cases where personal data originating from the European Union is transferred outside the EU, such transfers will only occur in compliance with applicable data protection laws, including the use of adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.

We may also share personal data with trusted third-party service providers (e.g. payment service providers) strictly for the purpose of delivering our services. All such third parties are required to comply with applicable data protection laws and to process data under appropriate contractual safeguards.

7. Data security

Garmon implements appropriate technical, organizational, and administrative measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Access to personal data is limited to authorized employees and service providers who require such access to perform their duties and who are subject to confidentiality obligations.

Personal data is stored on secure servers. Where third-party storage providers are used, they are selected based on their security standards, reliability, and compliance with data protection requirements.

In the event of a personal data breach, Garmon will comply with all applicable notification and remediation obligations under relevant data protection laws.

8. Your rights under GDPR

You have the following rights with respect to your personal data:

• Right of access – to obtain confirmation and access to your personal data.
• Right to rectification – to request correction of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) – where permitted by law.
• Right to restriction of processing – in certain circumstances.
• Right to object – to processing based on legitimate interests.
• Right to data portability – to receive or transmit your data in a machine-readable demonstrates.
• Right to withdraw consent – at any time, where processing is based on consent.

We will acknowledge receipt of your request and respond within the time limits required by law.

To exercise your rights, please contact us at: hello@garmon.io

9. Complaints

You also have the right to lodge a complaint with the competent supervisory authority.

In Portugal, this is:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1º
1200-651 Lisboa
Portugal
Email: geral@cnpd.pt