0%Effective Date: 01.07.2026 Last Updated: 22.07.2026
1. Introduction
Welcome to ASTRYON Festival.
This Privacy Policy explains how Arcentia Global Marketing LLC and Badeea Infinity Line S.R.L. ("ASTRYON Festival", "we", "our", or "us") collect, use, store, protect, transfer, and otherwise process your personal information when you use:
www.astryonfestival.com;
the official ASTRYON Festival mobile application;
our online ticketing services;
our merchandise store;
customer support services;
our digital platforms;
and when you attend any event organized or promoted under the ASTRYON Festival brand.
We are committed to protecting your privacy and processing personal data transparently, fairly, and securely.
This Privacy Policy has been drafted to comply, where applicable, with:
Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
UK GDPR;
applicable United States privacy laws where relevant;
other applicable international privacy and data protection laws governing the jurisdictions in which we operate or offer our services.
Depending on your country of residence and the merchant responsible for your transaction, your personal data will be processed by the applicable data controller identified during the checkout process.
2. Data Controllers
Depending on the purchaser's country of residence, the applicable ticket sales channel, and the merchant responsible for the transaction, your personal data may be processed by one of the following data controllers:
A. Arcentia Global Marketing LLC
5830 E 2nd St, Ste 7000 #32368
Casper, Wyoming 82609
United States
Entity ID: 2026-001872832
Website:
www.astryonfestival.com
Privacy Contact:
privacy@astryonfestival.com
For international ticket sales and services provided outside the territories assigned to Badeea Infinity Line S.R.L.
B. Badeea Infinity Line S.R.L.
Constanța, Județul Constanța
Postal Code: 900124
Romania
CUI: 42471275
Trade Register No.: J13/971/2020
Website:
www.astryonfestival.com
Privacy Contact:
privacy@astryonfestival.com
For ticket sales and related services provided to customers located in Romania and any other territories specifically assigned to Badeea Infinity Line S.R.L.
The applicable data controller is determined during the checkout process and is identified on the invoice or payment confirmation issued for your purchase.
3. Scope
This Privacy Policy applies to:
visitors of our website;
users of our mobile application;
ticket purchasers;
festival attendees;
merchandise customers;
account holders;
artists;
business partners;
sponsors;
vendors;
media representatives;
and any person interacting with ASTRYON Festival through our digital or physical services.
This Privacy Policy does not apply to websites or services operated independently by third parties, including payment providers, social media platforms, sponsors, advertisers, or external ticketing platforms. Those services maintain their own privacy policies, and we encourage you to review them before providing personal information.
4. Acceptance of this Policy
By accessing our website, creating an account, purchasing tickets, purchasing merchandise, downloading our application, attending our events, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy.
Where required by applicable law, we will obtain your consent before processing personal data for specific purposes.
5. Definitions
For the purposes of this Privacy Policy:
Personal Data means any information relating to an identified or identifiable natural person.
Processing means any operation performed on personal data including collection, storage, use, disclosure, transmission, analysis, deletion, or destruction.
Data Subject means any identifiable individual whose personal data is processed.
Services means our website, mobile applications, online store, ticketing systems, merchandise platform, customer support, and festival-related services.
Account means a registered ASTRYON Festival user profile.
Festival refers to any event organized or promoted under the ASTRYON Festival brand.
6. Our Privacy Principles
We process personal data according to the following principles:
lawfulness;
fairness;
transparency;
purpose limitation;
data minimization;
accuracy;
storage limitation;
integrity and confidentiality;
accountability.
We collect only information reasonably necessary to provide our services, fulfill contractual obligations, improve user experience, maintain security, and comply with applicable laws.
7. Changes to this Privacy Policy
We may amend or update this Privacy Policy periodically to reflect changes in applicable law, technology, business operations, or our services.
Whenever significant changes are made, we will publish the updated version on our website and update the "Last Updated" date.
Where required by law, we will notify registered users of material changes through appropriate communication channels.
Continued use of our services following publication of the revised Privacy Policy constitutes acceptance of the updated terms, except where applicable law requires renewed consent.
8. Categories of Personal Data We Collect
Depending on how you interact with ASTRYON Festival, we may collect and process the following categories of personal information.
We only collect information that is necessary for the purposes described in this Privacy Policy and in accordance with applicable data protection laws.
8.1 Identity Information
We may collect information that identifies you directly, including:
First name
Last name
Date of birth
Gender (where voluntarily provided)
Nationality
Username
Account identification number
Customer identification number
Verification information where legally required
Identity information is primarily collected when you:
create an account;
purchase festival tickets;
purchase merchandise;
contact customer support;
participate in promotions;
attend events where identification may be required.
8.2 Contact Information
We may collect:
Email address
Telephone number
Residential address
Shipping address
Billing address
Country
City
Postal code
This information allows us to:
communicate with you;
deliver merchandise;
provide customer support;
verify purchases;
process refunds where applicable.
8.3 Account Information
When you create an ASTRYON Festival account, we may collect:
Login credentials
Encrypted password
Authentication tokens
Google Account identifier (if you choose Google Sign-In)
Account preferences
Language settings
Time zone
Account activity
Security settings
Passwords are never stored in plain text and are protected using industry-standard encryption and hashing technologies.
8.4 Ticketing Information
When purchasing tickets we may collect:
Ticket type
Ticket number
Order number
Purchase history
Ticket status
QR code identifier
Event registration information
Attendance records
Refund history
Transfer requests
Customer support interactions relating to tickets
8.5 Payment Information
Payments are securely processed by Stripe and, where applicable, authorized payment partners.
ASTRYON Festival does not store complete payment card numbers.
Depending on the payment method used, payment providers may process:
Cardholder name
Billing address
Payment method
Transaction identifier
Payment confirmation
Currency
Payment status
Fraud prevention information
Payment processing is governed by Stripe's own Privacy Policy and security standards, including PCI DSS compliance.
8.6 Merchandise Purchases
When purchasing merchandise, we may collect:
Order history
Purchased products
Delivery address
Shipping method
Tracking information
Returns
Exchanges
Warranty claims
Customer communications
8.7 Device Information
When using our website or application, we automatically collect technical information, including:
Device type
Operating system
Browser type
Browser version
Screen resolution
Language settings
Device identifiers
Mobile device model
Application version
Crash reports
Diagnostic information
This information helps us maintain service quality and improve compatibility.
8.8 Technical Information
Our servers may automatically collect:
IP address
Connection logs
Date and time of access
Requested pages
Referring website
Session identifiers
Cookies
Push notification token
Error logs
Security logs
Technical information is primarily used to:
protect our systems;
prevent fraud;
improve performance;
ensure platform security.
8.9 Analytics Data
We use Plausible Analytics, a privacy-focused analytics platform, to better understand how visitors use our website.
Plausible Analytics is designed to operate without invasive tracking and does not rely on cross-site advertising profiles. It helps us analyze aggregated website usage, improve performance, and optimize the user experience while respecting user privacy.
Analytics information may include:
Page views
Referring websites
Device type
Browser type
Operating system
Country (derived from IP address)
Session duration
Popular pages
Website performance metrics
Where required by applicable law, analytics technologies will only be activated after obtaining the appropriate user consent.
8.10 Mobile Application Data
When using the ASTRYON Festival mobile application we may collect:
App version
Device identifier
Push notification token
Login status
Saved favourite artists
Personal festival schedule
Wallet information
Digital tickets
QR ticket validation
Merchandise purchases
Map preferences
Notification preferences
8.11 Festival Attendance
During our events we may process:
Ticket validation records
Entry time
Exit time (where applicable)
Security screening information
Customer assistance requests
Accessibility requests
Lost and found reports
Incident reports
8.12 Photographs, Video Recordings and Livestreams
ASTRYON Festival is a large public event where professional photography and audiovisual recording take place continuously.
During the festival we may capture:
Photographs
Video recordings
Drone footage
Livestream broadcasts
Promotional recordings
Documentary footage
Crowd shots
Audience reactions
These recordings may include identifiable individuals.
Where required by applicable law, processing is based on the appropriate legal basis, including consent where necessary or our legitimate interests in documenting, promoting, securing, and archiving our events.
Individuals who are the primary subject of a close-up recording intended for specific promotional use may be asked for additional consent where legally required.
8.13 CCTV and Security
For safety and security purposes, certain festival areas may be monitored through CCTV systems.
Security recordings may capture:
Images
Time of entry
Time of exit
Security incidents
Emergency situations
Criminal investigations
Public safety events
Unless required for legal proceedings or investigations, CCTV recordings are retained for a maximum period of 30 days.
8.14 Information You Voluntarily Provide
You may voluntarily provide additional information when:
contacting customer support;
submitting inquiries;
reporting problems;
participating in surveys;
requesting accessibility assistance;
communicating with our staff.
We process such information only to the extent necessary to respond to your request or fulfill the relevant purpose.
8.15 Information We Do Not Intentionally Collect
We do not intentionally collect:
biometric data for identification purposes;
precise GPS location data (unless you explicitly enable location services in the mobile application);
political opinions;
religious beliefs;
trade union membership;
genetic data;
health information, except where voluntarily provided for accessibility or emergency assistance;
data relating to criminal convictions or offences, except where required by law or processed by competent authorities.
9. Purposes and Legal Bases for Processing Personal Data
ASTRYON Festival processes personal data only where there is a lawful basis for doing so. Depending on the circumstances, we rely on one or more of the following legal bases:
Performance of a contract;
Compliance with legal obligations;
Legitimate interests;
Your consent;
Protection of vital interests;
Establishment, exercise or defense of legal claims.
The purposes for which we process personal data are described below.
9.1 Account Registration
When you create an ASTRYON Festival account, we process your personal data to:
create and maintain your account;
authenticate your identity;
allow secure login;
manage your profile;
provide access to purchased tickets;
synchronize your account across our website and mobile application;
protect your account against unauthorized access.
Legal Basis
Performance of a contract.
9.2 Ticket Purchases
We process personal data to:
process ticket purchases;
verify transactions;
issue electronic tickets;
generate QR codes;
prevent duplicate tickets;
validate ticket ownership;
provide customer assistance;
process refunds where applicable.
The entity acting as the seller and data controller depends on the purchaser's country and the applicable checkout flow. The applicable merchant will always be identified before payment is completed and on the invoice issued for the transaction.
Legal Basis
Performance of a contract.
9.3 Payment Processing
Payments are processed through Stripe and authorized payment providers.
Payments are processed on behalf of either Arcentia Global Marketing LLC or Badeea Infinity Line S.R.L., depending on the merchant responsible for the transaction.
Your personal data is processed in order to:
authorize payments;
detect fraud;
comply with financial regulations;
prevent unauthorized transactions;
complete purchases.
ASTRYON Festival does not store complete payment card details.
Legal Basis
Performance of a contract.
Compliance with legal obligations.
9.4 Merchandise Orders
We process personal data in order to:
confirm orders;
prepare shipments;
deliver merchandise;
process returns;
process exchanges;
provide customer support.
Legal Basis
Performance of a contract.
9.5 Customer Support
Whenever you contact us, we process personal data to:
answer your questions;
investigate technical problems;
resolve complaints;
improve customer experience;
document communications.
Legal Basis
Legitimate interests.
Where required, performance of a contract.
9.6 Festival Operations
We process information to organize and operate ASTRYON Festival safely and efficiently.
This includes:
managing admissions;
ticket validation;
crowd management;
emergency response;
accessibility requests;
lost property;
operational planning.
Legal Basis
Performance of a contract.
Legitimate interests.
9.7 Security and Safety
We process personal data to:
ensure visitor safety;
prevent fraud;
detect abuse;
investigate incidents;
prevent unauthorized access;
protect employees, contractors and visitors;
comply with security obligations.
This may include CCTV recordings and security logs.
Legal Basis
Legitimate interests.
Compliance with legal obligations where applicable.
9.8 Fraud Prevention
We process information to:
detect suspicious activity;
identify fraudulent transactions;
prevent ticket scalping;
investigate payment abuse;
identify duplicate purchases;
enforce our Terms and Conditions.
Legal Basis
Legitimate interests.
Compliance with legal obligations.
9.9 Website Operation
Technical information is processed to:
maintain website functionality;
improve loading speed;
identify software errors;
protect against cyber attacks;
optimize performance.
Legal Basis
Legitimate interests.
9.10 Analytics
We use Plausible Analytics to better understand how visitors interact with our website.
Analytics help us:
improve navigation;
optimize performance;
understand visitor behavior in aggregated form;
identify technical issues;
improve user experience.
Plausible Analytics is designed with privacy in mind and minimizes the collection of personal information.
Where applicable, analytics technologies are used only after obtaining the legally required consent.
Legal Basis
Consent where required.
Legitimate interests where permitted by law.
9.11 Mobile Application
Within the ASTRYON Festival mobile application we process personal data to:
synchronize user accounts;
provide QR tickets;
store digital wallets;
display personalized schedules;
save favourite artists;
manage push notification preferences;
improve application stability.
Legal Basis
Performance of a contract.
Legitimate interests.
9.12 Push Notifications
If enabled by you, we may send push notifications regarding:
festival announcements;
schedule updates;
artist changes;
emergency notifications;
important service messages.
You may disable push notifications at any time through your device settings.
Legal Basis
Consent.
9.13 Photography, Video Recording and Livestreams
Professional photography, filming, drone recording and livestreaming are integral parts of ASTRYON Festival.
These recordings may be used for:
promotional campaigns;
documentaries;
aftermovies;
media publications;
livestream broadcasts;
historical archives;
press releases;
social media.
Where legally required, consent will be obtained before using close-up images of identifiable individuals for specific promotional purposes.
General crowd footage may be processed where permitted by applicable law and based on our legitimate interests.
Legal Basis
Legitimate interests.
Consent where required.
9.14 Legal Compliance
We process personal data where necessary to:
comply with tax obligations;
comply with accounting regulations;
respond to lawful requests;
comply with court orders;
cooperate with competent authorities;
enforce contractual rights.
Legal Basis
Compliance with legal obligations.
9.15 Protection of Rights
We may process personal data to:
establish legal claims;
investigate disputes;
defend legal proceedings;
protect intellectual property;
enforce contractual obligations.
Legal Basis
Legitimate interests.
Legal claims.
9.16 Business Operations
We process limited personal data to:
maintain internal administration;
conduct audits;
manage business operations;
improve internal processes;
evaluate risks;
develop new services.
Legal Basis
Legitimate interests.
9.17 International Festival Services
As ASTRYON Festival serves visitors from multiple countries, personal data may be processed to:
facilitate international ticket sales;
verify international payments;
provide multilingual customer support;
comply with international legal obligations;
coordinate international business partners and service providers.
Legal Basis
Performance of a contract.
Compliance with legal obligations.
Legitimate interests.
9.18 We Will Never Sell Your Personal Data
ASTRYON Festival does not sell personal data to third parties.
We do not monetize personal information through the sale of customer databases or personal profiles.
Where third-party service providers process personal data on our behalf, they do so only under contractual obligations requiring confidentiality, appropriate security measures, and compliance with applicable data protection laws.
10. How We Collect Personal Data
ASTRYON Festival collects personal data through various channels depending on how you interact with our services.
We strive to collect personal information fairly, transparently, and only where necessary for the purposes described in this Privacy Policy.
10.1 Information You Provide Directly
Most of the personal data we process is provided directly by you.
You may provide information when you:
create an ASTRYON Festival account;
purchase festival tickets;
purchase merchandise;
complete checkout;
contact customer support;
submit inquiries;
request accessibility assistance;
report technical issues;
participate in promotions or competitions;
communicate with our representatives.
The information you provide may include identification details, contact information, payment-related information, shipping details, and any other information you voluntarily choose to share with us.
10.2 Account Registration
When you register for an account, we collect information required to create and secure your profile.
Depending on the registration method, this may include:
name;
email address;
encrypted password;
Google Account information (if you choose Google Sign-In);
account preferences;
authentication credentials;
security information.
10.3 Ticket Purchases
When purchasing tickets through our website or authorized ticketing partners, we collect information necessary to complete your order.
This may include:
purchaser information;
attendee information;
billing details;
ticket selections;
payment confirmations;
order history;
QR ticket identifiers.
10.4 Merchandise Purchases
When purchasing merchandise, we collect information required to process your order, including:
shipping address;
billing address;
purchased products;
delivery information;
returns and exchanges;
customer support requests related to your purchase.
10.5 Payment Providers
Payments are processed by trusted third-party payment providers, including Stripe.
Depending on the purchaser's country and the applicable checkout process, Stripe processes payments on behalf of either Arcentia Global Marketing LLC or Badeea Infinity Line S.R.L.
Payment providers may share with us information necessary to:
confirm payment;
identify completed transactions;
process refunds;
investigate fraud;
comply with financial regulations.
We do not receive or store your complete payment card information.
10.6 Google Sign-In
If you choose to log in using your Google Account, Google may share limited profile information necessary to authenticate your identity.
Depending on your Google account settings, this may include:
your name;
email address;
Google Account identifier;
profile picture (if you choose to share it).
We do not access your Google password.
10.7 Website Usage
When you visit our website, certain technical information is collected automatically.
This may include:
IP address;
browser type;
operating system;
device type;
pages visited;
date and time of access;
referring websites;
language settings;
session information.
This information helps us improve website performance, security, and user experience.
10.8 Mobile Application
When using the ASTRYON Festival mobile application, we automatically collect technical information necessary to provide the requested services.
This may include:
application version;
device model;
operating system;
device language;
crash diagnostics;
push notification token;
authentication status;
application settings.
10.9 Cookies and Similar Technologies
Our website uses cookies and similar technologies to improve functionality, enhance security, remember user preferences, and analyze website performance.
Some cookies are essential for the operation of our services, while others are only used after obtaining your consent where required by applicable law.
Additional information is available in our separate Cookie Policy.
10.10 Analytics Technologies
We use Plausible Analytics to understand how visitors use our website.
Plausible Analytics provides aggregated statistical information without building advertising profiles of individual users and is designed to minimize the collection of personal information.
Analytics data helps us:
improve navigation;
optimize website performance;
understand visitor behavior;
identify technical issues;
enhance the overall user experience.
10.11 Festival Attendance
When attending ASTRYON Festival, certain information may be collected during operational activities, including:
ticket validation;
access control;
security screening;
customer assistance;
accessibility services;
emergency response.
10.12 Photography, Video Recording and Livestreams
During ASTRYON Festival, professional photographers, videographers, drone operators, media partners, and authorized production teams may capture photographs and audiovisual recordings throughout the festival grounds.
These recordings may include:
crowd footage;
stage recordings;
livestream broadcasts;
aftermovies;
promotional content;
media coverage;
social media publications.
Where required by applicable law, consent will be obtained before using close-up recordings of identifiable individuals for specific promotional purposes.
10.13 CCTV Systems
Certain festival areas are monitored through CCTV systems for security and public safety purposes.
CCTV systems may record:
entrances and exits;
public areas;
queues;
security checkpoints;
emergency situations;
incidents requiring investigation.
Visitors will be informed of CCTV monitoring through appropriate signage where required by law.
10.14 Customer Communications
When you communicate with us by email or through customer support, we may collect:
your contact information;
the contents of your communication;
attachments you provide;
support history;
technical information necessary to resolve your request.
10.15 Information From Business Partners
In certain circumstances, we may receive limited personal information from trusted business partners involved in delivering our services.
This may include:
authorized ticketing partners;
payment processors;
logistics providers;
merchandise fulfillment partners;
fraud prevention providers;
customer support providers.
Such information is processed only where necessary and in accordance with applicable contractual and legal requirements.
10.16 Information Required by Law
We may receive personal information from competent authorities where required by applicable law or where necessary for the prevention, investigation, or prosecution of unlawful activities.
Such disclosures are handled in accordance with applicable legal obligations and due process requirements.
10.17 Accuracy of Information
You are responsible for ensuring that the personal information you provide is accurate, complete, and up to date.
If any of your personal information changes, we encourage you to update your account promptly or contact us so that we can maintain accurate records.
11. How We Share Personal Data
ASTRYON Festival respects the confidentiality of your personal information.
We do not sell, rent, or trade personal data to third parties for commercial purposes.
However, in order to operate our services, organize the festival, comply with legal obligations, and protect our legitimate interests, we may share personal information with carefully selected third parties under appropriate contractual and legal safeguards.
11.1 Service Providers
We may share personal information with trusted service providers who perform services on our behalf.
These providers may include companies responsible for:
cloud hosting;
website infrastructure;
mobile application services;
cybersecurity;
customer support;
data storage;
software maintenance;
fraud prevention;
identity verification;
email delivery (where applicable);
push notification services;
merchandise fulfillment;
logistics;
customer relationship management;
technical support.
These providers may only process personal data in accordance with our documented instructions and applicable data protection laws.
11.2 Payment Providers
Payments are processed securely through Stripe and, where applicable, other authorized payment partners.
Payment processing is carried out on behalf of the applicable merchant responsible for your purchase, which may be either Arcentia Global Marketing LLC or Badeea Infinity Line S.R.L.
Payment providers process payment information independently under their own privacy policies and security standards.
We may receive confirmation that:
payment was successful;
payment failed;
a refund was issued;
fraud prevention measures were triggered;
additional verification is required.
We do not receive or store your complete payment card details.
11.3 Merchandise Partners
To fulfill merchandise orders, we may share relevant personal information with companies responsible for:
warehouse operations;
order fulfillment;
packaging;
shipping;
delivery services;
returns processing.
Only the information necessary to complete your order will be shared.
11.4 Ticketing Partners
Where tickets are distributed or managed through authorized ticketing partners, we may exchange information necessary to:
issue tickets;
validate ticket ownership;
process transfers;
process refunds;
prevent fraud;
investigate duplicate or unauthorized ticket use.
11.5 Analytics Providers
We use Plausible Analytics to understand how visitors interact with our website.
Plausible Analytics receives limited technical information necessary to generate aggregated website statistics and improve our services.
We do not authorize analytics providers to use your personal data for advertising profiling on our behalf.
11.6 Technology Providers
We may share limited personal information with providers responsible for operating our digital infrastructure, including:
website hosting;
application hosting;
database management;
content delivery networks (CDNs);
cloud infrastructure;
security monitoring;
backup services.
Such providers are contractually required to implement appropriate technical and organizational security measures.
11.7 Customer Support Providers
If customer support services are provided by third-party partners, they may access personal information solely to assist in resolving your requests.
Such providers are subject to strict confidentiality obligations.
11.8 Security Providers
For the protection of visitors, employees, contractors, and festival operations, we may share relevant information with:
licensed security companies;
emergency medical providers;
emergency response services;
access control providers.
Information shared is limited to what is necessary for safety, incident management, and public security.
11.9 Legal Advisors
Where necessary, we may disclose personal information to:
legal counsel;
auditors;
accountants;
compliance consultants;
insurance providers.
Such disclosures occur only where reasonably necessary for legal, financial, regulatory, or contractual purposes.
11.10 Competent Authorities
We may disclose personal information where required by law or where necessary to:
comply with legal obligations;
respond to court orders;
respond to lawful government requests;
cooperate with law enforcement;
protect public safety;
investigate criminal activity;
enforce our legal rights.
We carefully review each request before disclosing personal information and will disclose only the information legally required.
11.11 Business Transactions
If either Arcentia Global Marketing LLC or Badeea Infinity Line S.R.L. undergoes a merger, acquisition, corporate restructuring, financing transaction, sale of assets, or similar business event, personal information may be transferred as part of that transaction.
11.12 Professional Advisors
We may share personal information with professional advisors including:
tax advisors;
financial advisors;
compliance specialists;
cybersecurity consultants;
external auditors.
Such disclosures occur only where reasonably necessary for the services they provide.
11.13 Insurance Providers
Where necessary to investigate incidents, accidents, liability claims, or insurance matters, relevant personal information may be shared with insurance companies and claims administrators.
11.14 Fraud Prevention
To protect our business and visitors, we may share limited information with providers specializing in:
fraud detection;
payment security;
cyber threat prevention;
identity verification;
abuse prevention.
These measures help protect both users and ASTRYON Festival from unauthorized activities.
11.15 International Service Providers
Because ASTRYON Festival serves an international audience, some of our service providers may operate in countries outside your country of residence.
Whenever personal data is transferred internationally, we implement appropriate safeguards in accordance with applicable data protection laws.
Further information regarding international transfers is provided in Section 14 – International Data Transfers.
11.16 Data Minimization
Whenever personal information is shared with third parties, we ensure that only the minimum amount of personal data necessary for the relevant purpose is disclosed.
Recipients are prohibited from using personal information for purposes unrelated to the services they provide to ASTRYON Festival.
11.17 No Sale of Personal Information
ASTRYON Festival does not sell personal information to advertisers, data brokers, or marketing companies.
We do not exchange customer databases for commercial gain.
Any sharing of personal data occurs solely for the purposes described in this Privacy Policy or as otherwise permitted or required by applicable law.
11.18 Confidentiality Obligations
All third-party processors acting on behalf of ASTRYON Festival are required, through contractual agreements where applicable, to:
maintain confidentiality;
implement appropriate security measures;
process personal data only for authorized purposes;
comply with applicable privacy laws;
promptly notify us of any personal data breach where legally required.
11.19 Data Sharing Between Controllers
Where necessary for the operation and management of ASTRYON Festival, Arcentia Global Marketing LLC and Badeea Infinity Line S.R.L. may exchange limited personal data relating to ticket sales, customer support, fraud prevention, accounting, legal compliance, festival access management, and event operations.
Such transfers are carried out only where legally permitted and only to the extent necessary for the purposes described in this Privacy Policy.
12. Data Retention
ASTRYON Festival retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, enforce our agreements, and protect our legitimate interests.
When personal data is no longer required, we securely delete, anonymize, or otherwise dispose of it using appropriate technical and organizational measures.
Retention periods may vary depending on the nature of the information, applicable legal requirements, contractual obligations, and operational needs.
12.1 General Account Information
Personal information associated with your ASTRYON Festival account is retained for as long as your account remains active.
If your account becomes inactive or you request its deletion, we will delete or anonymize your personal data unless we are legally required or otherwise permitted to retain certain information.
Inactive accounts may be deleted after a reasonable period of inactivity following appropriate review.
12.2 Ticket Purchase Records
Information relating to ticket purchases, orders, invoices, and transaction history is retained for up to five (5) years, unless a longer retention period is required by applicable tax, accounting, or legal obligations.
Ticket purchase records are retained by the merchant responsible for the relevant transaction in accordance with the applicable legal and tax obligations.
This information may include:
order history;
ticket information;
purchase confirmations;
refund records;
transaction references;
customer communications relating to purchases.
12.3 Payment Information
ASTRYON Festival does not store complete payment card information. Payment-related records are maintained by the applicable merchant responsible for the transaction, in accordance with applicable accounting and tax legislation.
Payment processors, including Stripe, retain payment-related information according to their own legal and regulatory obligations.
We retain only the payment information necessary to:
verify completed transactions;
process refunds;
investigate fraud;
comply with financial reporting obligations.
12.4 Merchandise Orders
Information relating to merchandise purchases may be retained for up to five (5) years to:
process returns;
manage warranty claims;
provide customer support;
comply with accounting and tax obligations.
12.5 Customer Support Communications
Emails, support tickets, inquiries, complaints, and related communications may be retained for up to five (5) years after the matter has been resolved, unless a longer retention period is required by law or necessary for legal proceedings.
12.6 Technical Logs
Technical logs, server logs, authentication records, and security logs are retained only for the period reasonably necessary to:
maintain platform security;
investigate incidents;
detect fraud;
prevent unauthorized access;
troubleshoot technical problems.
Retention periods may vary depending on operational and security requirements.
12.7 Analytics Information
Analytics information collected through Plausible Analytics is retained only for as long as necessary to generate aggregated reports, improve our services, and monitor website performance.
Where technically possible, analytics information is aggregated or anonymized.
12.8 Mobile Application Data
Information generated through the ASTRYON Festival mobile application is retained only for as long as necessary to provide application functionality, synchronize user accounts, maintain digital tickets, and improve application performance.
Application data may be deleted when:
your account is deleted;
the application is uninstalled (where applicable);
retention is no longer necessary.
12.9 Push Notification Tokens
Push notification tokens are retained until:
you disable notifications;
you uninstall the application;
your account is deleted;
the token expires or becomes invalid.
12.10 CCTV Recordings
CCTV recordings collected for security purposes are retained for a maximum period of thirty (30) days, unless a longer retention period is required for:
criminal investigations;
legal proceedings;
insurance claims;
public safety investigations;
regulatory requests.
Access to CCTV recordings is strictly limited to authorized personnel.
12.11 Photography and Video Recordings
Photographs, promotional videos, livestream recordings, drone footage, documentaries, and aftermovies created during ASTRYON Festival may be retained for archival, historical, documentary, promotional, and marketing purposes.
Such recordings may be retained for as long as they remain relevant to our legitimate business interests or until deletion is appropriate based on operational or legal considerations.
Where applicable law grants individuals the right to object or request removal, we will assess such requests on a case-by-case basis.
12.12 Legal Claims
Where personal data is required for the establishment, exercise, or defense of legal claims, it may be retained until:
the claim is fully resolved;
all applicable appeal periods have expired;
any statutory limitation periods have ended.
12.13 Legal and Regulatory Requirements
Certain records must be retained for longer periods where required by:
tax legislation;
accounting regulations;
anti-money laundering requirements;
consumer protection laws;
court orders;
governmental authorities;
other applicable legal obligations.
Where different legal retention periods apply, we will retain personal data for the period required by the applicable law.
12.14 Archived Information
In limited circumstances, personal data may be archived where necessary for:
legal compliance;
historical documentation;
disaster recovery;
business continuity;
audit purposes.
Archived information is subject to enhanced security controls and restricted access.
12.15 Secure Deletion
When personal data reaches the end of its retention period, we take reasonable steps to ensure that it is securely:
deleted;
anonymized;
destroyed; or
permanently removed from active systems,
unless retention remains necessary under applicable law.
Deletion methods are designed to reduce the risk of unauthorized recovery or reconstruction of personal information.
12.16 Periodic Review
We periodically review the personal data we hold to ensure that information which is no longer necessary is securely deleted or anonymized.
Retention periods may be updated where required by changes in legislation, operational needs, or regulatory guidance.
13. Security of Personal Data
The protection of your personal information is a fundamental priority for ASTRYON Festival.
We implement appropriate technical, organizational, and administrative measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, misuse, or any other unlawful form of processing.
Although no method of electronic transmission or storage can be guaranteed to be completely secure, we continuously review and improve our security measures to reduce risks and maintain a high level of protection.
13.1 Security Framework
Our security program is designed to:
protect the confidentiality of personal information;
maintain the integrity of our systems and data;
ensure the availability of our services;
prevent unauthorized access;
detect security incidents;
respond promptly to security threats;
support business continuity and disaster recovery.
Security measures are reviewed periodically and updated when necessary to reflect changes in technology, operational requirements, and emerging cybersecurity threats.
13.2 Technical Security Measures
Depending on the nature of the service, we implement technical safeguards that may include:
encrypted HTTPS connections using TLS;
secure server infrastructure;
firewalls;
intrusion detection and prevention systems;
malware protection;
endpoint security;
vulnerability monitoring;
software security updates;
encrypted authentication credentials;
secure password hashing;
session management controls;
secure API communication;
database security controls;
access logging.
Where appropriate, personal information is encrypted both during transmission and while stored.
13.3 Organizational Security Measures
We implement organizational measures including:
restricted access to personal data;
role-based permissions;
confidentiality obligations;
internal security procedures;
staff awareness regarding data protection;
periodic security reviews;
incident response procedures;
documented access management processes.
Only personnel who require access to personal information in order to perform their duties are authorized to access such data.
13.4 Authentication and Account Security
Users are responsible for maintaining the confidentiality of their account credentials.
You should:
choose a strong password;
never share your password;
protect your login credentials;
immediately notify us if you suspect unauthorized access to your account.
Where supported, we may introduce additional authentication mechanisms to further enhance account security.
13.5 Payment Security
All online payments are processed through Stripe, a PCI DSS-compliant payment processor.
Stripe processes payments on behalf of the applicable merchant responsible for the transaction.
Payment card information is transmitted directly to Stripe using encrypted communication channels.
ASTRYON Festival does not store complete payment card numbers, CVV codes, or other sensitive payment credentials.
13.6 Infrastructure Security
Our digital infrastructure is designed with multiple layers of security.
These measures may include:
secure hosting environments;
infrastructure monitoring;
redundancy;
automated backups;
network segmentation;
system hardening;
secure deployment procedures.
Infrastructure components are regularly maintained to reduce known security risks.
13.7 Monitoring and Logging
We maintain security logs and monitoring systems designed to identify:
unauthorized access attempts;
abnormal activity;
suspicious logins;
fraud indicators;
application errors;
infrastructure failures.
Security logs are accessed only by authorized personnel and retained only for as long as necessary.
13.8 Data Backups
To reduce the risk of accidental data loss, we maintain secure backups of critical systems.
Backup procedures are designed to support:
disaster recovery;
operational continuity;
restoration following technical failures;
recovery after cybersecurity incidents.
Backup data is protected using appropriate security measures and access controls.
13.9 Third-Party Security
Where third-party service providers process personal information on our behalf, we take reasonable steps to ensure they maintain appropriate security standards.
Service providers are expected to:
protect personal information;
implement appropriate technical safeguards;
comply with applicable privacy laws;
notify us of reportable security incidents where legally required.
13.10 Security Testing
We periodically evaluate the effectiveness of our security measures through activities such as:
vulnerability assessments;
software updates;
infrastructure reviews;
security audits;
penetration testing where appropriate;
continuous improvement of cybersecurity controls.
13.11 Personal Data Breaches
Despite our security efforts, no system can guarantee absolute protection.
If we become aware of a personal data breach that is likely to result in a risk to the rights and freedoms of individuals, we will:
investigate the incident without undue delay;
contain and mitigate the impact;
notify the competent supervisory authority where required by applicable law;
notify affected individuals where legally required;
document the incident and the corrective actions taken.
Our incident response procedures are designed to minimize disruption and reduce the likelihood of similar events occurring in the future.
13.12 Your Role in Protecting Your Information
You also play an important role in protecting your personal information.
We encourage you to:
keep your password confidential;
use strong, unique passwords;
log out after using shared devices;
protect your devices with appropriate security measures;
update your software regularly;
report suspicious activity immediately.
Failure to safeguard your account credentials may increase the risk of unauthorized access.
13.13 Security Limitations
While we use commercially reasonable and industry-recognized security measures, no internet-based service, electronic transmission, or storage system can be guaranteed to be completely secure.
Accordingly, ASTRYON Festival cannot guarantee absolute security of personal information. However, we are committed to continually improving our security practices and responding promptly to emerging risks and vulnerabilities.
13.14 Continuous Improvement
Cybersecurity threats continue to evolve.
Accordingly, we regularly review, update, and improve our technical and organizational security measures to maintain an appropriate level of protection for personal information and to comply with evolving legal, regulatory, and industry standards.
14. International Data Transfers
ASTRYON Festival is operated through Arcentia Global Marketing LLC (United States) and Badeea Infinity Line S.R.L. (Romania), depending on the applicable services and the merchant responsible for the transaction.
As an international festival serving visitors from multiple countries, your personal information may be transferred to, stored in, accessed from, or processed in jurisdictions outside your country of residence, including jurisdictions that may not provide the same level of data protection as your home country.
Whenever we transfer personal data internationally, we implement appropriate safeguards designed to protect your information in accordance with applicable data protection laws.
Where Badeea Infinity Line S.R.L. acts as the data controller, certain personal data may be transferred to Arcentia Global Marketing LLC in the United States for centralized festival administration, customer support, financial reconciliation, fraud prevention, event management, and operational coordination.
Depending on the applicable merchant responsible for your transaction, personal data may be processed by either Arcentia Global Marketing LLC or Badeea Infinity Line S.R.L.
Whenever such transfers occur, appropriate safeguards are implemented in accordance with applicable data protection laws, including the GDPR where applicable.
14.1 International Nature of Our Services
Our services are available worldwide.
Depending on how you interact with ASTRYON Festival, your personal data may be processed in connection with:
• our website;
• our mobile application;
• ticket purchases;
• merchandise orders;
• customer support;
• payment processing;
• analytics;
• security operations;
• business administration.
Depending on the applicable merchant responsible for your transaction, your personal data may be processed by either Arcentia Global Marketing LLC or Badeea Infinity Line S.R.L.
As a result, personal information may be transferred across international borders where necessary to provide our services.
14.2 Countries Where Data May Be Processed
Depending on the services used, personal information may be processed in:
the United States;
Member States of the European Union;
the European Economic Area (EEA);
the United Kingdom;
and other countries where our trusted service providers operate.
The actual processing location depends on the specific service being used and the infrastructure of our authorized service providers.
14.3 Transfers from the European Economic Area
Where personal data originating from the European Economic Area ("EEA"), Switzerland, or the United Kingdom is transferred to countries that have not been recognized as providing an adequate level of data protection, ASTRYON Festival implements appropriate safeguards in accordance with applicable law.
Such safeguards may include:
Standard Contractual Clauses (SCCs) approved by the European Commission;
the UK International Data Transfer Addendum or other approved UK transfer mechanisms;
supplementary technical and organizational measures where appropriate;
contractual obligations requiring an equivalent level of data protection;
other lawful transfer mechanisms recognized under applicable legislation.
14.4 Transfers to the United States
As part of the international organization of ASTRYON Festival, certain categories of personal information may be processed in the United States by Arcentia Global Marketing LLC where necessary for festival administration and related services.Whenever European personal data is transferred to the United States, we seek to ensure that such transfers are protected through appropriate legal mechanisms and security measures consistent with applicable data protection requirements.
14.5 International Service Providers
Some of our trusted service providers operate globally.
These providers may include organizations responsible for:
payment processing;
cloud hosting;
infrastructure management;
website hosting;
mobile application services;
cybersecurity;
fraud prevention;
merchandise fulfillment;
customer support;
content delivery;
software maintenance.
We carefully select providers that demonstrate appropriate commitments to privacy and information security.
14.6 Payment Processing
Payments are processed through Stripe, which operates internationally.
Stripe may process payment information in multiple jurisdictions depending on:
your country;
payment method;
applicable banking infrastructure;
fraud prevention requirements;
legal obligations.
Stripe independently determines certain aspects of payment processing in accordance with its own Privacy Policy and regulatory obligations.
14.7 Analytics Services
We use Plausible Analytics, which is designed to provide privacy-friendly website analytics while minimizing the processing of personal information.
Where international processing occurs in connection with analytics services, appropriate contractual and organizational safeguards are implemented where required by applicable law.
14.8 Security Measures for International Transfers
Whenever international transfers occur, we seek to ensure that transferred personal information benefits from protections comparable to those required under applicable data protection legislation.
Depending on the circumstances, such measures may include:
encryption during transmission;
encrypted storage where appropriate;
contractual confidentiality obligations;
restricted access controls;
data minimization;
vendor due diligence;
security assessments;
periodic compliance reviews.
14.9 Data Subject Rights
International transfers do not reduce or eliminate your rights under applicable data protection laws.
Where GDPR, UK GDPR, or similar legislation applies, you continue to benefit from the rights granted under those laws regardless of where your information is processed.
14.10 Government Requests
Where permitted by law, we carefully review requests from governmental authorities seeking access to personal information.
We disclose personal information only where:
disclosure is legally required;
the request is valid and enforceable;
disclosure is necessary to comply with applicable law;
disclosure is necessary to protect public safety or legal rights.
Whenever legally permitted, we may object to requests that we consider excessive, unlawful, or disproportionate.
14.11 Continuous Review of Transfer Mechanisms
International privacy laws continue to evolve.
Accordingly, ASTRYON Festival periodically reviews its international data transfer mechanisms and may implement updated contractual, technical, or organizational safeguards as legal requirements change.
Where necessary, this Privacy Policy will be updated to reflect those changes.
14.12 Questions About International Transfers
If you would like additional information regarding the safeguards applied to international data transfers, or if you have questions regarding the countries in which your personal information may be processed, you may contact us using the contact details provided in this Privacy Policy.
Where required by applicable law, we will provide additional information regarding the relevant transfer mechanisms, subject to legal, contractual, and confidentiality limitations.
15. Your Privacy Rights
ASTRYON Festival respects your privacy rights and is committed to ensuring that you are able to exercise your rights under applicable data protection laws.
Depending on your country of residence and the laws applicable to you, you may have some or all of the rights described below.
We will respond to requests in accordance with applicable legal requirements and within the time periods prescribed by law.
15.1 Right to Be Informed
You have the right to receive clear, transparent, and easily understandable information regarding:
what personal data we collect;
why we collect it;
how we use it;
who receives it;
how long it is retained;
your available privacy rights;
how to contact us regarding privacy matters.
This Privacy Policy is intended to satisfy that obligation.
15.2 Right of Access
You have the right to request confirmation as to whether we process your personal data.
If we do, you may request access to information including:
the categories of personal data processed;
the purposes of processing;
recipients of the data;
retention periods;
the source of the information where it was not obtained directly from you;
information regarding international transfers;
safeguards applied to such transfers.
Where legally permitted, we may verify your identity before responding.
15.3 Right to Rectification
If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request that it be corrected or updated.
Where technically possible, you may also update certain information directly through your ASTRYON Festival account.
15.4 Right to Erasure ("Right to be Forgotten")
You may exercise your privacy rights by contacting us using the details below:
Privacy Team
ASTRYON Festival
Email:
privacy@astryonfestival.com
Depending on the applicable data controller responsible for your transaction, your request will be handled by either Arcentia Global Marketing LLC or Badeea Infinity Line S.R.L.
When submitting a request, please include sufficient information to allow us to identify your account or the relevant interaction with our services.
We may request additional information where reasonably necessary to verify your identity.
15.5 Right to Restrict Processing
You may request that we temporarily restrict the processing of your personal data where:
you contest its accuracy;
processing is unlawful but you oppose deletion;
we no longer need the information but you require it for legal claims;
you have objected to processing and verification is pending.
During restriction, personal data may continue to be stored but will not otherwise be processed except where legally permitted.
15.6 Right to Data Portability
Where processing is based on your consent or the performance of a contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
Where technically feasible and legally permitted, you may also request that we transmit such information directly to another service provider.
15.7 Right to Object
You may object to the processing of your personal data where processing is based on our legitimate interests.
If you object, we will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where processing is necessary for legal claims.
You may also object at any time to processing for direct marketing purposes, should we introduce such marketing in the future.
15.8 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Examples include:
optional cookies;
push notifications;
optional promotional communications;
other processing activities that specifically rely on consent.
15.9 Rights Related to Automated Decision-Making
ASTRYON Festival does not make decisions producing legal or similarly significant effects based solely on automated processing without appropriate human involvement.
Should such processing be introduced in the future, affected individuals will be informed where required by applicable law and will be able to exercise the rights available to them.
15.10 Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection authority in your country of residence, place of work, or where the alleged infringement occurred.
Residents of the European Economic Area may contact their national supervisory authority.
Residents of the United Kingdom may contact the Information Commissioner's Office (ICO).
Lodging a complaint does not affect your right to seek judicial remedies under applicable law.
15.11 Verification of Identity
To protect your privacy and prevent unauthorized disclosure of personal information, we may request reasonable evidence to verify your identity before fulfilling privacy requests.
Where necessary, we may request additional information solely for identity verification purposes.
15.12 Response Time
We aim to respond to privacy requests without undue delay.
Where GDPR applies, we generally respond within one (1) month of receiving a valid request.
Where permitted by law, this period may be extended by up to two additional months for complex or numerous requests.
If an extension is necessary, we will inform you of the reasons for the delay.
15.13 Requests Submitted by Authorized Representatives
Where permitted by applicable law, an authorized representative may exercise privacy rights on your behalf.
Before responding, we may request documentation demonstrating the representative's authority and may verify your identity to prevent unauthorized disclosures.
15.14 Exercising Your Rights
You may exercise your privacy rights by contacting us using the details provided below:
Privacy Team
ASTRYON Festival
Email: privacy@astryonfestival.com
When submitting a request, please include sufficient information to allow us to identify your account or the relevant interaction with our services.
We may request additional information where reasonably necessary to verify your identity.
15.15 Limitations
Certain rights described in this Privacy Policy may be limited where:
disclosure would adversely affect the rights of others;
legal obligations require continued processing;
applicable law provides an exemption;
processing is necessary for legal proceedings;
fraud prevention or public security would be compromised.
Where we are unable to comply fully with a request, we will explain the legal basis for our decision unless prohibited by law.
15.16 No Discrimination
ASTRYON Festival will not discriminate against individuals for exercising their privacy rights.
Exercising your rights will not result in:
denial of access to our services, where the requested data is not essential to provide those services;
unfair treatment;
reduced quality of service; or
adverse pricing,
except where the processing of certain personal information is strictly necessary to provide the requested service or comply with legal obligations.
16. Cookies and Similar Technologies
ASTRYON Festival uses cookies and similar technologies to ensure the proper operation of our website, enhance user experience, improve security, remember user preferences, and better understand how visitors interact with our services.
This section provides an overview of our use of cookies. More detailed information is available in our separate Cookie Policy.
16.1 What Are Cookies?
Cookies are small text files placed on your device by your web browser when you visit a website.
Cookies help websites:
remember user preferences;
maintain secure sessions;
improve functionality;
enhance performance;
understand website usage;
provide a more consistent browsing experience.
Cookies generally cannot execute software or access other files stored on your device.
16.2 Similar Technologies
In addition to cookies, we may use technologies such as:
local storage;
session storage;
browser storage;
software development kits (SDKs) within our mobile application;
security tokens;
authentication tokens;
other technologies performing similar functions.
Throughout this Privacy Policy, these technologies are collectively referred to as "Cookies", unless otherwise specified.
16.3 Types of Cookies We Use
Depending on the services you use, ASTRYON Festival may utilize the following categories of cookies.
Essential Cookies
Essential cookies are strictly necessary for the operation of our website and cannot generally be disabled.
They are used to:
authenticate users;
maintain secure login sessions;
remember security settings;
process purchases;
validate tickets;
prevent fraud;
ensure website functionality;
protect against malicious activity.
Without these cookies, certain features of our website may not function correctly.
Legal Basis
Performance of a contract and legitimate interests.
Functional Cookies
Functional cookies improve your browsing experience by remembering preferences such as:
language selection;
regional settings;
account preferences;
accessibility settings;
interface customization.
These cookies help personalize your experience without being strictly necessary for basic website operation.
Legal Basis
Consent where required.
Analytics Cookies
We use Plausible Analytics to better understand how visitors interact with our website.
Plausible Analytics is a privacy-focused analytics solution designed to provide aggregated website statistics while minimizing the collection of personal information.
Analytics information may include:
page views;
popular pages;
visitor countries (derived in an aggregated manner);
browser type;
operating system;
device category;
referral sources;
session duration;
website performance metrics.
We do not use analytics technologies to create advertising profiles or to track users across unrelated websites.
Where required by applicable law, analytics cookies or similar technologies will only be activated after obtaining your consent.
Security Cookies
Security-related cookies help us:
detect fraudulent activity;
identify suspicious login attempts;
prevent abuse;
protect customer accounts;
secure payment processes;
defend against automated attacks.
These cookies contribute to maintaining the security and integrity of our services.
16.4 Cookies Used by Third Parties
Certain third-party service providers integrated into our services may place their own cookies or use similar technologies.
These providers may include:
Stripe (payment processing);
Google (where Google Sign-In is used);
content delivery providers;
infrastructure providers;
embedded third-party services that you choose to interact with.
Such third parties process information in accordance with their own privacy policies.
ASTRYON Festival does not control the cookies set by third-party services.
16.5 Managing Cookies
Most web browsers allow you to:
accept cookies;
reject cookies;
delete existing cookies;
block future cookies;
receive notifications before cookies are stored.
Instructions for managing cookies are generally available within your browser settings.
Please note that disabling certain cookies may affect the functionality, security, or performance of our website.
16.6 Cookie Consent
Where required by applicable law, we will request your consent before placing non-essential cookies or activating similar technologies.
You may:
accept all cookies;
reject non-essential cookies;
customize your cookie preferences.
Your choices may be modified at any time through our cookie management interface.
16.7 Do Not Track Signals
Some web browsers provide a "Do Not Track" (DNT) feature.
Because there is currently no universally accepted technical standard governing DNT signals, our website does not currently respond differently based solely on a DNT browser signal.
If industry standards evolve or legal requirements change, we may update our practices accordingly.
16.8 Mobile Application Technologies
Our mobile application may use technologies functionally similar to cookies in order to:
authenticate users;
maintain secure sessions;
synchronize user preferences;
support application functionality;
remember settings;
manage digital tickets.
These technologies operate within the application environment rather than through a web browser.
16.9 Cookie Retention
Different cookies remain active for different periods.
Depending on their purpose, cookies may be:
deleted automatically when your browser session ends (session cookies); or
stored for a defined period until they expire or are manually deleted (persistent cookies).
Retention periods vary according to the specific function of each cookie.
16.10 Changes to Cookie Technologies
As our website and services evolve, we may introduce new cookies or discontinue existing ones.
Whenever material changes occur, we will update this Privacy Policy and our Cookie Policy accordingly.
Where required by law, renewed consent will be requested before activating newly introduced categories of non-essential cookies.
16.11 Additional Information
For more detailed information regarding the cookies used on our website, including their purpose, duration, legal basis, and methods for managing your preferences, please refer to our separate Cookie Policy, which forms an integral part of our privacy documentation.
17. Children's Privacy
ASTRYON Festival recognizes the importance of protecting the privacy and personal information of children and young people.
We are committed to processing children's personal data responsibly and in accordance with applicable data protection laws.
17.1 Festival Attendance by Minors
Minors may attend ASTRYON Festival only in accordance with the applicable Festival Terms & Conditions and any age restrictions announced for the specific event.
Where required by law or by our event rules, minors must:
be accompanied by a parent or legal guardian; or
present valid parental or legal guardian authorization.
Additional identification may be requested where necessary to verify compliance with age-related requirements.
17.2 Online Services
Our website, mobile application, ticketing platform, and merchandise store are intended for a general audience.
They are not specifically directed toward young children.
Parents and legal guardians are encouraged to supervise their children's online activities and assist them when using our services.
17.3 Collection of Children's Personal Data
We do not knowingly collect personal information directly from children where such collection is prohibited by applicable law.
Where the participation of a minor requires the processing of personal information, such processing will occur only where permitted by applicable law and, where required, with the involvement or authorization of a parent or legal guardian.
17.4 Parental Consent
Where applicable law requires parental or guardian consent before processing a child's personal data, ASTRYON Festival will take reasonable steps to obtain or verify such authorization before processing the relevant information.
The method used to verify parental authorization may vary depending on:
the age of the child;
the type of service provided;
the applicable legal requirements;
the level of risk associated with the processing.
17.5 Ticket Purchases for Minors
Tickets for minors should generally be purchased by:
a parent;
a legal guardian; or
another legally authorized adult.
Where attendee information relating to a minor is collected, it will be processed only for purposes necessary to administer the ticket purchase, facilitate event attendance, and comply with applicable legal or safety requirements.
17.6 Festival Safety
During the festival, additional measures may be implemented to promote the safety and well-being of minors, including:
age verification where appropriate;
emergency contact procedures;
lost child procedures;
cooperation with security personnel;
cooperation with emergency services where necessary.
Such measures are intended solely to protect the safety of festival attendees.
17.7 Photography and Video Recordings Involving Minors
As ASTRYON Festival is a large public event, photography, video recording, drone filming, livestreaming, and media coverage may take place throughout the festival grounds.
Where minors may be individually identifiable in recordings intended for specific promotional use, additional safeguards or consent may be obtained where required by applicable law.
General crowd footage that incidentally includes minors may be processed where permitted by law and where appropriate safeguards are implemented.
17.8 Requests from Parents or Legal Guardians
Parents and legal guardians may contact us to:
request access to personal information relating to their child where legally permitted;
request correction of inaccurate information;
request deletion of information where applicable;
withdraw consent where consent formed the legal basis for processing;
ask questions regarding our children's privacy practices.
Before responding, we may request documentation reasonably necessary to verify parental authority and protect the privacy of the child.
17.9 Unintentional Collection
If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to:
investigate the circumstances;
suspend unnecessary processing;
delete the information where appropriate;
implement corrective measures to prevent similar occurrences.
17.10 International Requirements
Because ASTRYON Festival serves visitors from multiple countries, the minimum age for independent consent to the processing of personal data may vary depending on applicable national legislation.
Where different legal standards apply, we will process children's personal information in accordance with the laws applicable to the relevant individual.
17.11 Contact Regarding Children's Privacy
If you believe that a child has provided personal information to ASTRYON Festival in circumstances that are inconsistent with this Privacy Policy or applicable law, please contact our Privacy Team without delay.
Privacy Team
ASTRYON Festival
Email: privacy@astryonfestival.com
We will investigate all such reports promptly and take appropriate action where necessary.
18. Contact Information, Complaints and Final Provisions
ASTRYON Festival is committed to protecting your privacy and handling your personal information responsibly, transparently, and in accordance with applicable data protection laws.
If you have any questions regarding this Privacy Policy or the way we process your personal information, we encourage you to contact us using the details provided below.
18.1 Contact Details
Depending on the applicable transaction and the merchant responsible for your purchase, the data controller may be either:
A. Arcentia Global Marketing LLC
5830 E 2nd St, Ste 7000 #32368
Casper, Wyoming 82609
United States
Entity ID: 2026-001872832
Website:
https://www.astryonfestival.com
Privacy Contact:
privacy@astryonfestival.com
Telephone:
+40 741 090 298
B. Badeea Infinity Line S.R.L.
Constanța, Județul Constanța
Postal Code: 900124
Romania
CUI: 42471275
Trade Register No.: J13/971/2020
Website:
https://www.astryonfestival.com
Privacy Contact:
privacy@astryonfestival.com
The applicable data controller is determined by the merchant responsible for your transaction and will be identified during the checkout process and on your invoice or payment confirmation.
18.2 Privacy Requests
You may contact us at any time to exercise your rights under applicable data protection laws or to request information regarding the processing of your personal data.
Examples include requests to:
access your personal information;
correct inaccurate information;
update your account details;
request deletion of personal data;
restrict processing;
object to processing;
withdraw consent where applicable;
request data portability;
ask questions regarding this Privacy Policy.
To help us process your request efficiently, please provide sufficient information to identify your account or your interaction with our services.
For security reasons, we may request additional information to verify your identity before responding.
18.3 Response to Requests
We aim to respond to all privacy-related requests without undue delay.
Where GDPR or similar legislation applies, we generally respond within one (1) month from receipt of a valid request.
If a request is particularly complex or numerous, we may extend this period where permitted by applicable law and will inform you of the reason for the extension.
18.4 Complaints
If you believe that ASTRYON Festival has processed your personal information in a manner inconsistent with applicable data protection laws, we encourage you to contact us first so that we may investigate and attempt to resolve the matter.
Nothing in this Privacy Policy limits your right to lodge a complaint with a competent supervisory authority or to seek judicial remedies where provided by applicable law.
18.5 Supervisory Authorities
Individuals located within the European Economic Area may lodge complaints with the data protection supervisory authority responsible for their country of residence, place of work, or the location where the alleged infringement occurred.
Individuals located in the United Kingdom may contact the Information Commissioner's Office (ICO).
Residents of other jurisdictions may contact the competent authority responsible for privacy or data protection matters within their country where applicable.
18.6 Electronic Communications
By using our website, creating an account, purchasing tickets, purchasing merchandise, or otherwise interacting with our services, you acknowledge that certain communications may be provided electronically where permitted by applicable law.
Such communications may include:
purchase confirmations;
payment confirmations;
ticket information;
important account notifications;
security notifications;
legal notices;
updates relating to our services.
Electronic communications are considered delivered when sent to the email address associated with your account or otherwise made available through our services, unless applicable law requires a different method.
18.7 Language
This Privacy Policy has been drafted in the English language.
If translations are provided for convenience, the English version shall prevail to the extent permitted by applicable law in the event of any inconsistency or conflict between language versions.
18.8 Severability
If any provision of this Privacy Policy is found to be invalid, unlawful, or unenforceable by a court or competent authority, the remaining provisions shall remain in full force and effect to the maximum extent permitted by applicable law.
The invalid provision shall, where possible, be interpreted in a manner that most closely reflects its original purpose while remaining legally enforceable.
18.9 Entire Privacy Policy
This Privacy Policy constitutes the entire privacy notice regarding the processing of personal data by ASTRYON Festival in connection with the services described herein.
It should be read together with our:
Terms of Use;
Terms and Conditions;
Cookie Policy;
Ticket Terms and Conditions;
Merchandise Terms;
Refund Policy; and
any additional privacy notices made available for specific services or activities.
Where a specific privacy notice applies to a particular service, that notice shall supplement this Privacy Policy.
18.10 Updates to this Privacy Policy
We reserve the right to amend, revise, or update this Privacy Policy at any time to reflect:
changes in applicable laws or regulations;
developments in technology;
improvements to our services;
changes in business operations;
new products or features;
security enhancements.
The "Last Updated" date at the beginning of this Privacy Policy will indicate when the most recent revision became effective.
Where required by law, we will notify users of material changes through appropriate communication channels before such changes take effect.
Your continued use of our services after the effective date of an updated Privacy Policy constitutes acceptance of the revised version, except where applicable law requires renewed consent.
18.11 Commitment to Privacy
Protecting your privacy is an ongoing responsibility.
ASTRYON Festival is committed to maintaining high standards of transparency, accountability, security, and respect for individual privacy rights.
We continuously review our privacy practices to ensure that they remain aligned with evolving legal requirements, technological developments, and internationally recognized best practices.
© ASTRYON Festival Operated by Arcentia Global Marketing LLC All rights reserved.