Privacy policy

Effective from 26 October 2026.

1. Data Controller

The controller of your personal data is Zenith Music Ltd, Unit 26, Park West Enterprise Centre, Nangor Road, Dublin 12, D12 N2X6, Republic of Ireland ("we", "the Organiser").

For any question about your personal data, email pytania@zenithevents.eu or write to the address above.

We process data in line with Regulation (EU) 2016/679 (GDPR) and the Irish Data Protection Act 2018.

2. What Data We Collect

When you buy a ticket: name, email address, phone number (if given), order details (event, ticket type and quantity, price, purchase date) and the information needed to admit you to the event (ticket code, time of scanning at the entrance).
Payment details: you give your card number and other payment details directly to Stripe or PayPal. We never see or store them. We only receive confirmation of whether the payment succeeded.
Correspondence: the content of your messages and your contact details when you email us.
Newsletter: your email address and city, if you sign up for event updates.
Website use: IP address, browser and device type and time of visit recorded in server logs, and information from cookies (section 9).
Image: photos and video recordings showing the audience may be taken at events.

3. Purposes and Legal Bases

Selling tickets and handling your order, including sending your ticket, admitting you to the event and telling you about date changes or cancellations. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Accounting and tax, including keeping sales records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
Answering questions and complaints. Legal basis: performance of a contract or our legitimate interest in customer service (Art. 6(1)(b) and (f) GDPR).
Event safety and fraud prevention, such as ticket touting. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Emails about similar events sent to ticket buyers. Legal basis: legitimate interest and Regulation 13(11) of Irish S.I. No. 336/2011. You can opt out at purchase and in every email.
Newsletter, analytics and marketing cookies, social media advertising. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time.
Event photos and videos used for promotion. Legal basis: legitimate interest in documenting and promoting our events (Art. 6(1)(f) GDPR). If you do not want your image used, contact us.

4. Who We Share Data With

We never sell your data. We share it only with the parties we need to sell tickets and run events:

Ticket Tailor (Zimma Ltd, London, United Kingdom): ticketing system, processing data on our behalf.
Stripe (Stripe Payments Europe Ltd, Ireland) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg): payment processing. They act as separate controllers for payment data under their own privacy policies.
The hosting provider of koncerty.ie (Zenbox, Poland) and our email provider.
Brevo (Sendinblue SAS, Paris, France): sending our newsletter and event emails, processing data on our behalf.
Venue staff and security: only as needed to check tickets at the entrance.
Accountants and advisers and public authorities where the law requires it.
Meta (Facebook, Instagram) and Google: only if you consent to analytics or marketing cookies.

5. Transfers Outside the European Economic Area

Ticket Tailor processes data in the United Kingdom and the EEA. The European Commission has issued an adequacy decision for the United Kingdom.

Some providers (such as Meta and Google) may transfer data to the USA. This happens under the EU-US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

6. How Long We Keep Data

Order data and sales records: 6 years from the end of the year of sale, as required by Irish tax law.
Correspondence: up to 2 years after the matter is closed.
Newsletter and marketing data: until you withdraw consent or object.
Server logs: up to 30 days.
Your cookie choice: 12 months.

7. Your Rights

You have the right to:

access your data and receive a copy,
have inaccurate data corrected,
have your data erased ("right to be forgotten"),
restrict processing,
data portability,
object to processing based on legitimate interest, including direct marketing,
withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To use these rights, email pytania@zenithevents.eu. We will reply within one month.

8. Complaints

If you believe we process your data unlawfully, you can complain to the Irish supervisory authority: Data Protection Commission, 6 Pembroke Row, Dublin 2, D02 X963, Ireland, www.dataprotection.ie. You can also contact the supervisory authority in the country where you live or work.

9. Cookies

koncerty.ie uses:

strictly necessary cookies and browser storage: they remember your choice in the consent banner (cookie "kie_consent", 12 months) and the city selected in the event filter. No consent is needed;
analytics cookies: only with your consent;
marketing cookies, such as Meta Pixel: only with your consent.

You can change your choice at any time with "Ustawienia cookies" (cookie settings) in the page footer. The Ticket Tailor checkout (buytickets.at) uses its own cookies, described in Ticket Tailor's privacy policy.

Event images on this site are loaded from Ticket Tailor's servers, which receive your IP address for that purpose.

10. Do You Have to Provide Data

Your name and email address are needed to buy and receive a ticket. Other data is optional.

11. Profiling

We do not make decisions about you based solely on automated processing. If you consent to marketing cookies, advertising platforms may tailor ads for our events to your interests.

12. Children

Tickets may be bought by adults. We do not knowingly collect data from children under 16.

13. Changes to This Policy

We may update this policy. The current version is always available on this page, with its effective date at the top.