Legal

Privacy Policy

Last updated: 6 July 2026

Version 1.0 – 6 July 2026. This Privacy Policy explains how we process your personal data in connection with Chronosphere Festival 2026 and its website.

1. Data controller

The data controller is João Camilo & Joana Ribeiro, Lda., NIPC 519189574, with registered office at Rua Luciano Assunção Antunes, 7, Mestras, Cadafaz, 3330-018 Góis. For any data-protection question or to exercise your rights, contact info@chronospherefestival.com.

2. What data we collect

We may process the following categories of data:

  • identification and contact data (name, email, phone);
  • purchase and transaction data (tickets, orders, add-ons, billing details, payment history);
  • access and cashless data (RFID wristband identifier, entries/exits, top-ups and consumption);
  • CCTV footage at the Venue;
  • image and sound captured for coverage and promotion;
  • accessibility-needs data you voluntarily provide;
  • website browsing data (see Clause 8, Cookies), including IP address, device/browser information, and pages viewed;
  • communication preferences when you register on this website (whether you consent to email, SMS and/or WhatsApp updates).

Payment data is processed directly by certified payment service providers; we do not store your full card details.

3. Purposes and legal bases

We process your data for the following purposes and on the following bases:

  • (a) Ticketing, access and cashless management – performance of the contract (Art. 6(1)(b) GDPR);
  • (b) Invoicing and compliance with tax and accounting obligations – legal obligation (Art. 6(1)(c));
  • (c) Safety of persons and property, CCTV and fraud prevention – legitimate interest (Art. 6(1)(f));
  • (d) Marketing communications and newsletter – consent (Art. 6(1)(a)), which you may withdraw at any time;
  • (e) Capture and use of image for coverage and promotion of the event – legitimate interest in documenting a public event and/or consent (see also our Terms & Conditions);
  • (f) Responding to accessibility requests – consent and/or legitimate interest in ensuring inclusion.
  • (g) Measuring and improving this website, and running and measuring advertising – as described in our Cookie Policy (Art. 6(1)(a), read with the ePrivacy rules).

4. Processors and recipients

We share data, only to the extent necessary, with providers acting as processors on our behalf, namely: the ticketing operator (WeeZTix), the authorised resale platforms (TicketSwap and Tixel), the access-control and cashless provider (IDASFEST), payment service providers, our accountant, and web hosting and communication tool providers. We may also disclose data to public authorities where legally required.

On this website those hosting and communication tools include:

  • evnt.ad – registration platform (name, email, phone and consent).
  • Klaviyo (Klaviyo, Inc., USA) – email and SMS delivery of the updates you opted into.
  • Meta Platforms, Inc. (USA) – Meta (Facebook) Pixel and Conversions API for advertising measurement, and WhatsApp where you consented. Meta may receive a hashed (pseudonymised) version of your email/phone and technical identifiers.
  • Google Analytics 4 (Google Ireland Ltd / Google LLC, USA) – website analytics.
  • MapTiler (MapTiler AG, Switzerland) – the interactive festival location map.
  • Vercel (Vercel, Inc., USA) – website hosting (server logs, including IP address).

We never sell your personal data.

5. International transfers

Where any processor processes data outside the European Economic Area, we ensure appropriate safeguards under the GDPR, in particular standard contractual clauses approved by the European Commission, and/or the EU–US Data Privacy Framework, together with additional safeguards as required.

6. Retention periods

We keep data only for as long as necessary for the purposes above. As a rule: ticketing and transaction data are kept for the legal retention periods applicable to tax and accounting documents; CCTV footage is kept for a short period (as a rule up to 30 days), unless needed for investigation or legal proceedings; data processed on the basis of consent is kept until you withdraw it. Once the periods expire, data is deleted or anonymised.

On this website, in addition:

  • Registration details are kept while you remain subscribed, and in any case for no longer than 24 months after your last interaction with us, or sooner if you ask us to delete your data or withdraw consent.
  • Festival images and recordings may be kept for coverage, archive and promotional use for as long as they remain relevant to the Festival.
  • Analytics, advertising and server-log data are kept for limited periods for measurement, security and troubleshooting.

7. Your rights

As a data subject, you have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to withdraw consent at any time (without affecting the lawfulness of prior processing). To exercise these rights, contact info@chronospherefestival.com.

You also have the right to lodge a complaint with the supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) – www.cnpd.pt.

As a consumer in Portugal you may also submit a complaint through the official Livro de Reclamações Eletrónico.

8. Cookies

Our website uses cookies and similar technologies for its operation, for analytics and, with your consent, for marketing. You can manage your preferences through the cookie banner and your browser settings. More information in our Cookie Policy.

Strictly necessary cookies keep the site working and remember your cookie choices. Google Analytics is only loaded if you accept analytics cookies. The Meta Pixel loads when you visit the site to measure advertising performance and conversions, including before you make a cookie choice. Marketing messages can be stopped using the unsubscribe link in any email or by replying STOP to an SMS.

9. Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure, including encryption in transit and pseudonymisation of identifiers shared for advertising measurement.

10. Minors

The Festival is for persons aged 18 and over. We do not knowingly collect data from persons under 18.

11. Changes

We may update this Privacy Policy; the version in force is the one published on our website, identified by the version date above.

← Back to Chronosphere