Privacy Policy

Effective Date: May 17, 2026
This Privacy Policy explains how Ears and Eyes EOOD ("we", "our", or "us") collects, uses, and protects your personal data when you purchase tickets for our events through Ticket Tailor.
We act as the Data Controller under the EU General Data Protection Regulation (GDPR).

1. Data Controller Information
- Company Name: Ears and Eyes EOOD
- Registered Address: BULGARIA, 8150, Burgas Region, Sozopol Municipality, Rosen Village, ul. Vasil Levski, 17A
- Company Registration Number (ЕИК): 207614191
- Contact Email: earsandeyestickets@gmail.com

2. What Personal Data We Collect
When you purchase a ticket, we collect the information necessary to process your order and deliver your tickets. This includes:
- Identity Data: First name, last name.
- Contact Data: Email address, phone number.
- Transaction Data: Details about the tickets you purchased, date, and amount paid.

Note: We do not collect or store your financial details (such as credit card numbers). All payments are securely processed directly by our third-party payment provider, Stripe.

3. Legal Basis and How We Use Your Data
We process your personal data under the following legal bases allowed by the GDPR:
- Performance of a Contract: To process your payment, issue your electronic tickets, and send you essential updates about the event (e.g., time changes or cancellation).
- Legal Obligation: To comply with Bulgarian tax and accounting laws regarding business transactions.
- Legitimate Interest: To protect against fraud, manage security at our events, and handle customer service inquiries.

4. Data Sharing and Third-Party Processors
We do not sell your personal data. To provide our services, we share your information only with trusted third-party services that comply with GDPR:
- Ticket Tailor: Our ticketing platform used to manage registrations.
- Stripe: Our payment processor. Stripe processes your payment details in accordance with their own Privacy Policy and strict PCI-DSS security standards.

5. Data Retention
We keep your personal data only for as long as necessary to fulfill the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements under Bulgarian law (typically up to 5-10 years for financial records).

6. Your Rights Under GDPR
As a resident of the European Union, you have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can ask us to correct incomplete or inaccurate data.
- Right to Erasure ("Right to be Forgotten"): You can request that we delete your data, provided we do not have a legal obligation to keep it.
- Right to Restrict or Object to Processing: You can object to us processing your data under certain conditions.

To exercise any of these rights, please contact us at earsandeyestickets@gmail.com.

7. Security
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of protecting your personal data against unauthorized access, loss, or alteration.

8. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Effective Date".