Tomorrowland 2023 - Privacy Statement

TOMORROWLAND BELGIUM 2023 - PRIVACY STATEMENT

Last modified on June 07, 2023.

First of all, Tomorrowland is excited that you are interested in this great application (the 'Application'). Tomorrowland does its utmost to make sure that you do not need to worry about the protection of your Personal Data when you are using the Application. This privacy policy describes how Tomorrowland uses the Personal Data you provide whilst using the Application.

Tomorrowland may ask you to share certain Personal Data, including but not limited to your first name, last name, and e-mail address (identification data). For certain specific obligations, you may be required to provide Tomorrowland with additional data, such as billing or payment data. For these purposes, Tomorrowland bases itself on the processing grounds of the agreement, the legal obligation, its legitimate interest, and in some cases, your consent (see also section 2).

If you do not wish to share any Personal Data, you will not be able to use the Application and Tomorrowland suggests uninstalling it on your mobile device. The processing of your Personal Data is subject to this privacy statement. In case you have questions or remarks concerning this policy, Tomorrowland invites you to contact info@tomorrowland.com. By providing your Personal Data, you are deemed to have acknowledged the use of your Personal Data in accordance with this privacy policy. 

 

DEFINITIONS
 

Affiliated Company; means a company that is affiliated to Appmiral insofar as it meets the conditions for an “affiliated company” as set out in article 1:20 of the Belgian Code on Companies and Associations, such as, for example, but not limited to, its subsidiary companies.

Application; means the “Tomorrowland Belgium” application that is developed for mobile devices for iOS- and Android operating systems, customized and operated by Appmiral, which acts as a Processor in this respect.

Appmiral; means BV Appmiral, a limited liability company organized and existing under the laws of Belgium, with its registered office situated at Scheldestraat 11, 2000 Antwerp (Belgium) and registered in the Belgian Crossroads Bank for Enterprises with number 0835.673.410.

Controller;  has the meaning as defined in the General Data Protection Regulation 2016/679. The Organizer will be qualified as the Controller concerning the processing of Personal Data within the framework of the Application which determines the purposes and means of the processing of Personal Data.

Organizer; means the company that hosts the event for which the Application is used: Tomorrowland Belgium – WEAREONE.world BV, with its registered office situated at Korte Vlierstraat 6, 2000 Antwerp (Belgium) and registered in the Belgian Crossroads Bank for Enterprises with number 0867.239.782.(hereafter “Tomorrowland”, “we” or “us”)

Personal Data;  has the meaning as defined in the General Data Protection Regulation 2016/679, which is any information relating to an identified or identifiable natural person (also referred to as “data subject”).

Processor; has the meaning as defined in the General Data Protection Regulation 2016/679, which is the entity or the person that processes Personal Data on behalf of the Controller.

 

PURPOSES AND LEGAL GROUNDS
 

CUSTOMER DATA 

Within the framework of the Application, Tomorrowland collects and processes the identification and contact data of its customers. The data may be processed for the purposes of execution of the agreement with the customers, customer management, accounting, and direct marketing activities such as sending promotional or commercial information. The legal grounds for this processing are the execution of the agreement, compliant with a legal obligation to which Tomorrowland is subject (amongst others, the Belgian accounting legislation), its legitimate interest, and in some cases, your consent.

Specifically, Tomorrowland may use the Personal Data it collects for the following purposes:


THE CONFIDENTIALITY OF YOUR PERSONAL DATA

Every time you, as a user, submit Personal Data, Tomorrowland shall handle this information in accordance with the stipulations of this privacy policy and the legal obligations within the scope of the processing of Personal Data, including the General Data Protection Regulation (GDPR) 2016/679.

Tomorrowland establishes reasonable measures and procedures to secure and protect the Personal Data it collects via the Application or via electronic correspondence. This way, Tomorrowland undertakes, as far as can reasonably be expected, to prevent the illegal processing of Personal Data and unintentional loss or removal of your Personal Data.

Tomorrowland seeks to optimize the security of your Personal Data by limiting access to your Personal Data to persons on a “need-to-know” basis (for example only Tomorrowland employees, associates, Affiliated Companies, or subcontractors who need your Personal Data for the purposes as described in section 2 shall receive permission to access the data).


HOW DOES TOMORROWLAND COLLECT PERSONAL DATA AND FOR HOW LONG IS IT KEPT?

Collection of data

Tomorrowland collects your Personal Data – without being exhaustive – in the following cases:

Tomorrowland avoids the collection of Personal Data that is not relevant for the purposes, as set out in section 2.

Tomorrowland can combine the Personal Data it collects via the Application with information that you provide in another way or which third parties deliver. 
 

Retention of data

Personal Data will be stored and processed by Tomorrowland for the duration that is required in relation to the purposes of the processing. 

Customer data will be removed from Tomorrowland's systems one year after the last time you log in to the Application, except for the Personal Data that Tomorrowland has to store for a longer duration, based on specific legal obligations or in case of pending litigation(s). 

Tomorrowland avoids the collection of Personal Data that is not relevant for the purposes set out in section 2.


Transfer of Personal Data?

Tomorrowland will not transfer your Personal Data to third parties outside the European Economic Area, unless it has Standard Contractual Clauses as provided by the European Commission, in place. 

Furthermore, Tomorrowland will not transfer your Personal Data to third parties inside the European Economic Area without your permission, except:

Any transfer of Personal Data to one of the third parties mentioned in the list above is in accordance with the stipulations of the General Data Protection Regulation (GDPR) 2016/679. 

We ensure that measures are taken to make sure that third parties cannot use your Personal Data for other purposes than, and according to the purposes mentioned in section 2, and that these third parties have taken the necessary technical and organizational measures to protect the data involved.

We will have data processing agreements in place with the aforementioned third parties and, if applicable, Standard Contractual Clauses as provided by the European Commission, in order to ensure the security of the Personal Data. 

We shall take all necessary precautionary measures to assure that our employees and associates who have access to Personal Data will process these Personal Data exclusively in accordance with this privacy policy and our obligations under the General Data Protection Regulation 2016/679. 


Rights of the data subject

By virtue of both Belgian and European legislation concerning data protection, you have the following rights. If you want to exercise the hereafter mentioned rights to your Personal Data, you have to send a written request and provide a copy of the front side of your ID card to info@tomorrowland.com

Tomorrowland will provide you with information within one month of receipt of the request on the action that will be taken. Tomorrowland can extend this one-month period to a maximum of three months, in which case you will be informed about the reasons for such delay within one month of the original request.


The right of access to Personal Data

You have the right to instruct us to provide you with any Personal Data we hold about you, providing the rights of other data subjects are not affected.


The right to rectification of Personal Data

Tomorrowland kindly asks you to help make sure that the Personal Data in its records is as accurate and up-to-date as possible. If you believe that the Personal Data submitted to Tomorrowland is incorrect or incomplete, please notify Tomorrowland as described above. Tomorrowland will correct or adapt your Personal Data as soon as possible.

 

The right to erasure of Personal Data

In some circumstances, you have the right to the erasure of your Personal Data without undue delay. 

Those circumstances include:

However, there are certain general exclusions of the right to erasure. Those general exclusions include where processing is necessary: 


The right to restrict the processing of Personal Data

In the following circumstances you have the right to restrict the processing of your Personal Data:

Where processing has been restricted on this basis, Tomorrowland may continue to store your Personal Data. However, Tomorrowland will only process it with your explicit consent, for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.
 

The right to object to the processing of Personal Data

You have the right to object to Tomorrowland’s processing of your Personal Data, under the following circumstances:

The right to data portability

If you wish to exercise your right to data portability, Tomorrowland will send the Personal Data in a structured, commonly used, and machine-readable format to a data controller of your choice.


The right to withdraw consent

To the extent that the legal basis for Tomorrowland’s processing of your Personal Data is consent, you have the right to withdraw that consent at any time. However, the withdrawal will not affect the lawfulness of processing before the withdrawal.


The right to complain to a supervisory authority

You can file a complaint with the Data Protection Authority (“Gegevensbeschermingsautoriteit”) by sending an e-mail to contact@apd-gba.be or by sending a written request to the Data Protection Authority, situated at Drukpersstraat 35, 1000 Brussels (Belgium).


GEOLOCALISATION

Your Personal Data is used for detecting your location while using the Application. Tomorrowland will store such information for a limited duration of 36 months maximum. Tomorrowland will only use your Personal Data for this purpose if you have explicitly agreed to this by opting in. You have an unconditional right to opt out at any time you want by sending an e-mail to info@tomorrowland.com or by turning off the ‘Location’ and ‘Background Location’ buttons in the settings of the Application.

 

THIRD-PARTY LINKS

The Application may contain links to other websites that are not controlled by Tomorrowland. Although Tomorrowland will do its utmost to make sure that the links in the Application lead exclusively to websites that have corresponding security and confidentiality standards, Tomorrowland is not responsible for the protection and confidentiality of data, among which Personal Data, which you submit on other websites after you have left the Application. 


---
 

Before submitting personal information on other sites Tomorrowland recommends that you proceed carefully and consult the privacy statement which applies on the website concerned before submitting Personal Data.

 

Amendments 

Tomorrowland has the right to change this privacy policy at any time by publishing a new version of the Application. Tomorrowland recommends consulting the Application on a regular basis in order to verify that you agree to any changes made to this privacy policy. In any event, you will be informed of any changes to this privacy policy by e-mail.

 

We consider the protection of your privacy to be extremely important. We want to inform you as much as possible, respect you and give you control over what happens to your personal data. Below you will find information about what data we collect, why we do this, how long we keep it, what your privacy rights are and how you can exercise them.

We are bound by and use your personal data in accordance with the General Data Protection Regulation 2016/679 of April 27th, 2016 (the “GDPR”) and its implementation into national law.

ARTICLE 1: WHO IS PROTECTED BY THIS PRIVACY POLICY 

This privacy policy applies only to the personal data we process in our capacity of data controllers (as defined under Article 2 below).

It applies to the processing of personal data of our (private and business) customers in relation to our products and services (for example, when making a purchase with us or when creating a Tomorrowland account), as well as to the personal data of the end users who, through their relationship with our customer (for example: other people whom our customer buys tickets for), use our products and services.

This privacy policy also applies to those who visit our websites, use our apps and our online media channels, participate in market research, survey or contest, action, join any of our events or otherwise use our products and services.

For the sake of clarity, processing the personal data of businesses is only relevant in the context of this privacy policy if the business represents is a natural person, or - if the business is a legal person - then this privacy policy only applies to the personal data of the natural persons which we process in the context of their relationship with such business (such as mandates, contact persons and/or end users).

ARTICLE 2: DATA CONTROLLER  

WEAREONE.world BV, with registered offices at B – 2000 Antwerp, Korte Vlierstraat 6, VAT number BE0867239782 (hereafter “Tomorrowland”, “we” or “us”), is responsible for processing your personal data. This means that Tomorrowland determines the purpose and means for processing your personal data. This does not alter the fact that our customers have a number of obligations in connection with the processing of personal data of the end users whom they allow to use our products and services (for example: other people whom our customer buys tickets for)

Under Tomorrowland can be understood the organizer of the Tomorrowland festivals, the licensor of Unite with Tomorrowland, the creator of Tastes of the World and Tomorrowland Store and any future Tomorrowland-related products or events, Tomorrowland-related artists and all affiliated entities and companies (such as but not limited to MNKY BZZ BV, TL International BV, TL Travel BV and TL Winter BV).

ARTICLE 3: PERSONAL DATA PROCESSED ABOUT YOU

Processing activities

When using the term “processing personal data” in this privacy policy, we are talking about our use of personal information that identifies you or is able to identity you, either directly or in combination with other information that is held or obtained externally. Your personal data may include, for example, your name, your contact details, information on how you use our websites and apps and those of our partners and, generally, how you interact with Tomorrowland. The processing of personal data received from third parties is further explained in this policy.

Personal data is collected:

Tags of your personal data:

Based on your previous purchases, festival visits and your activity on our platforms, we will create tags to categorize you as our client. This will help us map your needs and preferences in the future. With these tags we will be able to provide you with personalized content on our website, in our mailing or any other communication. Tags will be added to the data that you already have provided us with. We will never harvest any external data to create these tags.   

Sensitive “special category” personal data

Personal data that can be considered sensitive is not actively processed. However, your nationality, meal preferences and special requests concerning injuries or disabilities might reveal sensitive data. This data is processed by our customer service team, which is trained to respect and handle this data carefully. Tickets containing sensitive data of this type will be flagged and deleted one year after the respective event.

Personal data of minors

Our products and services are not intended for minors. You must be at least 18 years old to access the Tomorrowland festival. Personal data of minors will never knowingly or intentionally be collected.

Minors who intend to use our products and services need to be supervised by the holder of parental responsibility over the child. The privacy of minors will be protected and holders of parental responsibility for the child will be encouraged to take an active part in their children’s (online) activities.

Personal data of non-customers

You are considered as our customer when you make a purchase with us or when you create a Tomorrowland account. Through various channels, such as competitions, promotions/actions and our websites/apps we may collect personal data about persons who are not (yet) customers of us with the aim of offering these persons the most relevant range of our products and services. In doing so, we guarantee your right to information and enforce that contractually (as applicable, together with your possible legally required consent) from the third parties who would collect your data in this context.

ARTICLE 4: HOW AND WHY IS YOUR PERSONAL DATA USED

Proportionality

We process personal data for various purposes, whereby we only process the data that are necessary to achieve the intended purpose.

As such, we process your personal data when necessary:

If the processing of your personal data is not necessary for any of these three reasons, we will always ask your permission to process your personal data. If you choose not to give your consent, or if you withdraw your consent, you will not be able to take (full) advantage of the services offered.

Consent for commercial purposes

After explicit consent, you will be informed about upgrades and additional services linked to your ticket purchase, such as vouchers for restaurants, lockers, parking, shuttles, etc.  

After explicit consent, you can receive commercial e-mails to inform you about all Tomorrowland-related events (such as Unite with Tomorrowland), artists (such as Dimitri Vegas & Like Mike or Lost Frequencies), People of Tomorrow (social platform), Tomorrowland surveys, Tomorrowland theme and videos and Tomorrowland Store.

For example, during the registration process of a Tomorrowland Account, you will be asked for the aforementioned consents. Your consent is not required for the operation of your Tomorrowland Account.

Processing activities

Your personal data can be used for the following purposes:

A. When you create a Tomorrowland account via www.tomorrowland.com

B.  When making a (festival ticket) purchase (e.g. through your Tomorrowland account)  

C.  When using our websites and apps 

D.  When visiting our event(s)

Personal data shared with third parties

We do not give your personal information to third parties unless: 

Your responsibilities towards end-users

If you, as our customer, allow end-users (such as family members, friends, visitors, and employees) to use the products and services covered by this privacy policy, you have the following responsibilities:

Your responsibilities with regards to third-party services

Through our products and services, you can also use the services of other parties such as third-party activities through vouchers sale, third party websites, forums, Facebook, Twitter, newsgroups, and/or apps. We have no control over the information you place there and how it is processed, nor are we responsible for it. It is up to you to deal with this and to read the privacy policy of these third parties carefully.

ARTICLE 5: CONTROL YOUR DATA

Your privacy rights

You have the following rights to govern your personal data:

If you want to exercise the right to be erased to the full extent and have purchased tickets for a future event, these tickets will be canceled without a refund. Your details are needed to fulfill all these services. Your personal data will be removed as soon as possible, except if it concerns information that needs to be kept in pursuance of the law or an agreement.

We will respond to your request as soon as possible, and in any case within 30 calendar days after receipt of your request and after your identity is checked. Depending on the complexity of the requests and the number of requests, this period can be extended by a further two months if necessary. If the period is extended, we will inform you of this within one month of receiving the request.

You can exercise your rights via your Tomorrowland account on our website, by sending an email to dpo@tomorrowland.com or write to the following address:

WEAREONE.world BVBA
Attn: Data Protection Officer
Korte Vlierstraat 6
2000 Antwerp
Belgium

Tomorrowland account

Insofar and to the extent you have a Tomorrowland account, you can remove your account on the Tomorrowland platform to execute the final removal of your personal data. Please note that your personal data is needed to fulfill our services and will only allow a full deletion after your purchase is completed and (in case you bought a festival/event ticket) the event has passed. In the my.tomorrowland.com platform, you will be able to specifically remove yourself from optional applications like the social platform or non-transactional mailing lists.

All your personal data can be changed in the Tomorrowland platform – except for your name and e-mail. To change them you should contact the support desk on www.tomorrowland.com  by clicking the support button. Please note that changing the delivery details of your tickets or name changes on Global Journey tickets can incur additional fees.

If you wish to remove your personal details from the Tomorrowland platform, you can specifically select the parts in your account that you want to be removed: you can either unsubscribe from mailing lists and specific applications like the Tomorrowland social platform or exercise the complete removal of your account to the full extent.

ARTICLE 6: COOKIES AND OTHER TECHNOLOGIES

While using our website and apps, we may place cookies, originating from the domain tomorrowland.com or any tomorrowland.com subdomain.

A cookie is a small amount of data, which often includes an anonymous unique identifier that is sent to your browser from a website's computer and stored on your computer's hard drive.

We do not store any personal data in a cookie that can be used to identify individuals. We can, however, track your activity on online assets for statistical analysis and to enhance your experience.

Although cookies are required to be able to fully use the services and all of its features, you can always refuse to accept cookies by changing the related settings of your browser.

Certain cookies like first party functional cookies and performance cookies are mandatory, other cookies can be switched off in your browser.

You can find more details about the cookies we use and manage them  here.

ARTICLE 7: SECURITY OF YOUR PERSONAL DATA

Technical and organizational measures

Appropriate technical and organizational measures are taken to protect your personal data against unauthorized or unlawful processing and against accidental loss, destruction or damage. When you provide your personal data through our websites or mobile apps, this information is transmitted across the internet securely using high-grade encryption.

As described in this privacy policy, in some instances your personal data will be shared with third parties, in which case that third party is required to have appropriate technical and organizational measures in place to protect your personal data.

However, in some instances, we may be compelled by law to disclose your personal data to a third party, such as a government body, and has limited control over how that data is protected by that party.

Processing of personal data inside/outside the EER

The information that you provide to us will be held in the systems located at the registered office in Antwerp or in those of an appointed third party (mentioned above) or our cloud service provider Zendesk. 

We may also allow access to your information by other third parties who act for us for some of the purposes described in this privacy policy or for other purposes explicitly approved by you.

To the extent that personal data is processed outside the European Union, we will ensure through contractual or other measures that such data enjoy an adequate level of protection there, comparable to that which they would enjoy in the European Union, in accordance with the European regulations.

Privacy incidents

Data breaches can be reported by mail to:  dpo@tomorrowland.com. We have an internal policy and regularly educates staff on preventing and reporting possible data breaches. Based upon the outcome of an impact assessment, we can notify affected data subjects and the Belgian Privacy authorities of the breach.

ARTICLE 8: DATA RETENTION

We will not retain your data longer than necessary: your personal data is retained in your my.tomorrowland.com account and will be removed automatically once you decide to delete your account. Data stored and processed outside of themy.torrowland.com account will be removed once the processing activity is completed and the data is no longer needed to expect when we are legally required to keep the records for a specified retention time.

ARTICLE 9: MISCELLANEOUS

This privacy policy is without prejudice to our right to take further actions vis-à-vis certain users of our products and services, based on an agreement, the law, regulations, etc and we implement Data Privacy, Data Protection and Data Security by design and by default where and whenever possible.

ARTICLE 10: COMPLAINTS

If we were unable to handle your data subject request optimally, you always have the right to file a complaint with our Data Protection Authority or your own local data protection authority.

ARTICLE 11: UPDATES

We may make changes to this privacy policy from time to time, including as part of the GDPR. The latest version of our privacy policy is always available on www.tomorrowland.com

ARTICLE 12: CONTACT

Questions, comments, and requests regarding this privacy policy via dpo@tomorrowland.com or:

WEAREONE.world BVBA
Attn: Data Protection Officer
Korte Vlierstraat 6
2000 Antwerp
Belgium

 

Last update: October 18, 2021