TOMORROWLAND BRASIL* 2025 - PRIVACY POLICY
1. Scope
This privacy policy applies to the “Tomorrowland Brasil” mobile application (the “application”), available on iOS and Android, developed and operated by Appmiral BV on behalf of Magnashow Eventos Ltda. (“Tomorrowland Brasil” or “We”).
Tomorrowland Brasil, located at at Rua Madre Maria Basilia, Centro, Itu/SP, CEP (ZIP Code) 13300-003, Brazil, enrolled with the CNPJ/MF (National Corporate Taxpayers Register of the Ministry of Finance) No. 71.736.037/0001-20, acts as the controller and is therefore responsible for determining the purposes and means of processing your personal data. Appmiral BV, with registered office at at Scheldestraat 11, 2000 Antwerp (Belgium) and registered in the Belgian Crossroads Bank for Enterprises with number 0835.673.410, acts as our processor in providing and maintaining the application.
This privacy policy explains how Tomorrowland Brasil collects, uses, shares, and protects your Personal data when you interact with the application. It applies in addition to the terms and conditions of the application and, if you link your Tomorrowland account, also to the Tomorrowland privacy policy.
2. Why we process your personal data
Tomorrowland Brasil processes your personal data to enable you to use the application and its functionalities, and for other purposes necessary to organize and improve our services. Below we explain in detail why we use your data.
2.1. Access to and use of the application
We process your personal data to enable you to use the application and its functionalities, such as ticket overview, cashless top-up, forums and blogs, and, if you agree, push notifications and geolocation services. If you link your Tomorrowland account to the application, your data will also be processed in accordance with the Tomorrowland account privacy policy. These processing activities are necessary for the performance of our contract with you, while certain optional features such as notifications and geolocation are only activated when you have given your consent.
2.2. Customer management and support
We use your personal data to manage your account, to provide customer support, and to respond to inquiries or complaints. This processing is necessary for the execution of our agreement with you and is also justified by our legitimate interest in providing an efficient and high-quality service.
2.3. Transactions and compliance with legal obligations
Your billing and payment details may be processed to execute transactions and to comply with our statutory obligations, in particular those arising from Brazilian accounting and tax legislation. In these cases, the processing of your personal data is required by law.
2.4. Improving our services
We process your personal data to evaluate and improve the application and our services, to correct errors, and to maintain accurate internal administration and records. This processing is based on our legitimate interest in continuously enhancing our services and safeguarding their proper functioning.
2.5. Customer management and support
When you have subscribed, we may use your personal data to provide you with information about Tomorrowland Brasil products and services through e-mail, push notifications, or other channels. This processing is based on your consent, which you may withdraw at any time, although we may also rely on our legitimate interest to inform you about similar services you have already used.
2.6. Marketing and promotional activities
With your explicit consent, we may use your personal data for direct marketing purposes, including personalised offers and promotions, so that you can stay informed about Tomorrowland Brasil and related activities.
3. How do we obtain your personal data
Tomorrowland Brasil collects your personal data in several ways. Most of the information comes directly from you when you use the application, for example when you create or manage your account, connect your Tomorrowland account, or register through a social media login such as Facebook. We also collect data when you make use of specific functionalities, including geolocation services if you have opted in, or when you interact with features such as ticket overview or cashless top-up.
In addition, we may collect information when you communicate with us by phone, e-mail, or through other channels, for instance when you file a complaint or request information. Where appropriate, we may combine data collected through the application with information you provide to us in other contexts or with data we receive from trusted third parties.
Tomorrowland Brasil does not intentionally collect personal data that is not relevant for the purposes described in this privacy policy.
4. How long we keep your personal data
Tomorrowland Brasil does not keep your personal data longer than necessary for the purposes described in this privacy policy. The exact retention period depends on the type of data and the purpose of the processing.
Customer data linked to the application is stored for as long as you actively use the application. If you stop using the application, your personal data will be deleted one year after your last login, unless a longer retention period is required by law or necessary in the context of ongoing disputes or legal proceedings.
Certain categories of data must be retained for longer periods to comply with legal obligations, in particular accounting and tax requirements under Brazilian law. Location data collected through the application is kept for a maximum period of thirty-six (36) months, after which it is automatically deleted or anonymised.
In all cases, Tomorrowland Brasil applies the principle of data minimization, and personal data that is no longer relevant is securely deleted or anonymised.
5. How we share your personal data
Tomorrowland Brasil only shares your personal data with third parties when this is necessary for the purposes described in this privacy policy, or when we are legally obliged to do so.
In practice, your data may be shared with affiliated companies, associates, subcontractors, suppliers, and commercial partners who support us in providing the application and related services. These parties may, for example, provide IT infrastructure, payment processing, marketing support, market research, or customer services on our behalf. All such parties act as processors and are bound by contractual obligations to process your personal data only in accordance with our instructions and to apply appropriate technical and organisational measures to protect it.
We may also disclose your personal data to public authorities or other third parties when required by law, or when it is necessary to safeguard our rights, your safety, or the safety of others.
If personal data is transferred outside Brazil or the European Economic Area, Tomorrowland Brasil applies appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or other mechanisms recognized under applicable data protection law.
6. How we protect your personal data
Tomorrowland Brasil implements appropriate technical and organisational measures to protect personal data against unauthorised access, misuse, loss, or unlawful processing. Access to personal data is limited to employees, partners, and service providers who require such access for the purposes described in this privacy policy, and who are bound by confidentiality obligations.
The measures applied include, among others, encryption, firewalls, access controls, secure account creation, and monitoring of access logs. These measures apply once personal data has been received by Tomorrowland Brasil and remain in place for as long as the data is processed. The security of the device or network you use to access the application remains your own responsibility.
No security system can provide absolute protection. If a personal data breach occurs that affects your personal data, Tomorrowland Brasil will notify you within a reasonable period, providing information on the nature of the data concerned, the protective measures in place, the potential risks, and the steps taken to mitigate the impact.
7. Your choices and rights
As a data subject, you have a number of rights with regard to the processing of your personal data. These rights are derived from the General Data Protection Regulation (GDPR) and the Lei Geral de Proteção de Dados (LGPD). You may exercise these rights at any time by contacting our Data Protection Officer at privacidade@tomorrowlandbrasil.com. We may request additional information to confirm your identity before acting on your request.
· You have the right to request access to the personal data we process about you. We may charge an administrative fee if we consider your repeated requests to be unfounded or excessive, or if we believe that your request is intended to harm our business or impose an administrative burden on us.
· You have the right to request the correction of inaccurate personal data about you, free of charge. You must provide proof of the inaccuracies you want to have corrected.
· When we process your personal data based on your consent, you have the right to withdraw that consent at any time.
· Under certain conditions, you have the right to obtain the deletion of your personal data. Upon receiving your request, we will assess whether there are compelling grounds, such as legal or regulatory obligations, judicial or administrative orders, or a legitimate interest of us or someone else, that allow or require us to retain your personal data in an identifiable form rather than deleting it.
· In certain circumstances, you have the right to restrict the processing of your personal data. This can be done, for example, if you contest the accuracy of your personal data or if your personal data is no longer necessary for the purposes described above, but you still require it in a legal proceeding.
· When we process your personal data based on our legitimate interest, you have the right to object to the processing of your personal data on grounds relating to your particular situation. You can object to processing for the purpose of direct marketing at any time without cost or justification.
· If we process your personal data based on your consent or to execute an agreement, and the processing is carried out by automated means, you have the right to obtain the personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.
· You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you, unless such a decision is necessary for the conclusion or performance of our agreement or if you have expressly consented to this type of processing. Currently, we do not engage in such decision making, but if we were to do so, you have the right to object to it.
In addition to the rights above, the LGPD grants you additional rights:
· You may request the anonymisation, blocking, or deletion of personal data that is unnecessary, excessive, or processed unlawfully.
· If we process your personal data on the basis of consent, you may request its deletion, unless retention is required by law or necessary for the establishment, exercise, or defence of legal claims.
· You may request information about the public and private entities with which we have shared your personal data.
If you are dissatisfied with the way your personal data is processed, you have the right to lodge a complaint with the competent supervisory authority. For GDPR matters, this is the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be). For LGPD matters, you may contact the Autoridade Nacional de Proteção de Dados (ANPD). We encourage you to first contact our Data Protection Officer so that we can seek a solution together.
8. Third party links
The application may contain links to websites or services operated by third parties. Tomorrowland Brasil does not control these websites and is not responsible for how they handle your personal data. We encourage you to carefully read the privacy policy of each website you visit before providing any personal data.
9. Updates to this privacy policy
Tomorrowland Brasil may amend this privacy policy from time to time, for example to reflect changes in the application, in our services, or in applicable legislation. The most recent version will always be available in the application and will indicate the date of last update.
10. Contact
If you have questions, comments, or requests regarding this privacy policy or the processing of your personal data, you can contact our Data Protection Officer:
Tomorrowland Brasil- Data Protection Officer
E-mail: privacidade@tomorrowlandbrasil.com
* Tomorrowland Brasil is part of the WEAREONE.world -group and refers to activities of any festival, event or activity organized, produced by, or otherwise related to the WEAREONE -group under the Tomorrowland or affiliated companies, acquirers, brands, concepts and legal successors, as determined in the privacy policy