Privacy Policy

Controller (registered business name): Raffaele Zarrella

Place of business: Lachova 1599/2, 851 03 Bratislava-Petržalka, Slovak Republic

Business identification number (IČO): 50333089

Privacy contact: info@seatlify.sk

We process only data proportionate to the relevant purpose. We do not use automated decision-making that produces legal or similarly significant effects for you.

• Beta applications: name, email, organization, optional website, and event description; steps before entering a contract and the legitimate interest in evaluating and protecting the beta service (Articles 6(1)(b) and 6(1)(f) GDPR).
• User accounts: identity, contact, and authentication data; contract performance and service security (Article 6(1)(b) GDPR).
• Orders and tickets: name, email, order contents, payment status, consent records, and details needed for delivery and admission; contract performance and accounting or tax duties (Articles 6(1)(b) and 6(1)(c) GDPR).
• Security and operations: IP address, request time, device, technical logs, and error reports; legitimate interests in preventing abuse, diagnosing errors, and protecting the service (Article 6(1)(f) GDPR).
• Optional marketing: email and consent record; consent (Article 6(1)(a) GDPR), which can be withdrawn at any time.
• Google Analytics: online identifiers and website-usage data; your consent (Article 6(1)(a) GDPR and Section 109(8) of Slovak Act No. 452/2021).

Stripe processes payments for the relevant organizer. Seatlify does not store complete payment-card details. The event organizer receives buyer data needed to fulfil the order, validate admission, provide support, and meet its legal duties.

We use Vercel (hosting and performance metrics), Supabase (database and authentication), Stripe (payments), Resend (transactional email), Sentry (error diagnostics), and—after analytics consent—Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics). Public authorities may receive data where required by law.

We load Google Analytics only after analytics consent. It processes a random browser identifier, pages visited, referrer, approximate location derived from the IP address, browser and device type, and website-usage events. We do not send Google your name, email, or Seatlify account identifier.

Google Signals and advertising personalization are disabled in the tag. Analytics cookies are not refreshed on every visit and expire no later than one year after first consent. We retain user-level and event-level Google Analytics data for no more than two months; aggregate reports without identifiers may remain longer.

You can withdraw consent through “Cookie settings” in the footer. Withdrawal blocks further measurement, deletes analytics cookies, and reloads the page. It does not affect processing that was lawful before withdrawal.

How Google uses data from sites that use its services

Vercel Speed Insights receives anonymous page-performance, route, device, browser, and country data without identifying a visitor or reconstructing a browsing session across pages. Sentry receives limited technical data only when an error occurs; default personal data, cookies, headers, request bodies, and query parameters are disabled. We use these tools for the legitimate interest in maintaining a secure and reliable service.

Some providers or subprocessors may process data outside the EEA. Where this occurs, we use a mechanism under Chapter V GDPR, primarily an adequacy decision including the EU–US Data Privacy Framework for certified recipients, or Standard Contractual Clauses under Article 46 GDPR. You may request information or a copy of the applicable safeguards through our privacy contact.

We retain account data while the account exists and afterward only as needed for claims, security incidents, or legal duties. We keep order data and accounting records for the applicable statutory period. Failed or abandoned pending orders are cleaned up regularly. Technical logs and error records are retained only for a period proportionate to diagnostics and security. Specific analytics-cookie and consent periods appear below.

You may request access, correction, deletion, restriction, and portability, object to processing based on legitimate interests, or withdraw consent. You also have the right to complain to a supervisory authority. Send requests to info@seatlify.sk; we may reasonably verify your identity before responding.

Fields marked as required are necessary to create an account, order and deliver a ticket, or meet a legal obligation. We cannot provide the relevant service without them. Analytics and marketing consent are optional, and refusing them does not affect the core Seatlify service.