This Privacy Policy explains how FULL TIME DEV SRL, a company established in Romania and operating the Biletin.ro platform, collects, uses, stores, and protects your personal data when you use the Biletin application and platform. We comply with the provisions of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and are committed to protecting your privacy.
1. What Data We Collect
We collect the following categories of personal data:
Identification Data
First and last name
Email address
Phone number
Country, county/state, and city
Transaction Data
Purchase history of tickets
Payment methods used (we do not store payment card details)
Technical Data
IP address
Device and browser information
Cookies and similar identifiers
Technical Data (Mobile Application)
Device model and operating system version
Screen resolution, device language, and time zone
Installed application version
Push notification token (used solely to deliver push notifications)
Location Data
Country, county/state, and city (used to personalize the events displayed)
Data Entered by Event Organizers
In certain cases, event organizers may create additional custom fields that may contain personal information (e.g. attendee name, custom options, etc.).
2. How We Collect Data
We collect personal data through:
Forms completed on the platform (account registration, ticket purchases, contact forms)
Cookies and similar technologies
Event organizers who enter data into the system (custom order fields)
3. Purpose of Data Collection
We use your personal data for the following purposes:
Creating and managing your Biletin account
Processing ticket orders
Delivering tickets via email or SMS
Providing customer support and technical assistance
Sending notifications related to your orders or events
Preventing fraud and ensuring account security
Internal analytics and improving the application's functionality
Measuring the effectiveness of our advertising campaigns (only with your consent)
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
Performance of a contract (e.g. ticket purchases)
Compliance with legal obligations (e.g. invoicing and accounting requirements)
Our legitimate interests (e.g. security and service improvement)
Your consent (e.g. newsletters and advertising campaign measurement). You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
5. Who We Share Your Data With
Your personal data may be shared with the following partners:
Payment processor: Netopia Payments
Email and SMS providers: Mailjet (email) and Vonage (SMS)
Event organizers: They may access the data associated with ticket orders to manage event attendance and validate tickets.
Meta Platforms Ireland Ltd. (Facebook and Instagram): Only if you have given your consent within the application. We transmit the following data:
Email address and phone number in irreversibly hashed form (SHA-256)
IP address
Device and application type
Events viewed
Products added to the shopping cart
Completed purchases
The sole purpose of this processing is to measure the performance of our own advertising campaigns. We do not transmit your name, postal address, or payment information.
All of our partners comply with GDPR requirements and are contractually obligated to protect your personal data.
6. International Data Transfers
We store personal data within Hetzner's infrastructure in Germany, a Member State of the European Union that provides an adequate level of protection under the GDPR.
Data shared with Meta Platforms Ireland Ltd. may also be processed outside the European Economic Area (EEA) based on the European Commission's Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework.
7. Data Retention
Order-related data is retained for a minimum of 5 years, in accordance with applicable tax and accounting obligations.
Other personal data is retained only for as long as necessary to fulfill the purposes described above or until you withdraw your consent, where applicable.
8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access
Right to rectification
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to object
Right to data portability
Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP)
Right to withdraw your consent at any time
To exercise any of these rights, please contact us using the contact details provided below.
9. Security Measures
We implement modern technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. All communications are encrypted, and access to our systems is strictly controlled.
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy from time to time. Any changes will be published on this page together with the updated revision date.
11. Contact
If you have any questions or requests regarding your personal data, please contact us using the contact form from the contact page.