Privacy policy | Diamond Party Show

Data controller

The data controller is PLATINUM FINANCIAL SERVICES Sp. z o.o., Aleja Wincentego Witosa 31 / 3A, 00-710 Warszawa, Poland, tax ID (NIP) 5214092769. For data protection enquiries: events@mmgold.pl.

What data we process and why

When you purchase tickets, we process your full name, email, phone number, billing address and, for business purchases, company name and Polish tax ID (NIP), ticket quantity, guests’ names, dinner menu choices, payment information and promotional code. These details are used to perform the contract, deliver tickets, manage your account and organise the event (Article 6(1)(b) GDPR). Invoice and settlement data are processed to meet legal obligations (Article 6(1)(c) GDPR).

At the entrance, we record the ticket identifier, the time the QR code is used and the scanner operator. This information is used to perform the contract, prevent ticket reuse and resolve admission issues. Security logs and abuse prevention are based on the controller’s legitimate interest (Article 6(1)(f) GDPR).

The contact form stores your name, email, subject and message so that we can reply and take steps at your request. Do not include sensitive personal data in your message. We send marketing emails only with your voluntary consent, which you may withdraw at any time by writing to events@mmgold.pl.

Payments, infrastructure and email

Payments are processed by Stripe. You enter card details in Stripe’s secure form; we do not store the full card number or security code. Google Firebase provides hosting, database services and authentication. Resend handles transactional emails. Authorised event staff, our accounting provider and bodies entitled by law may also receive data, only to the extent necessary for their duties.

Technology providers may process some data outside the European Economic Area. Transfers rely on appropriate safeguards, including adequacy decisions or standard contractual clauses, depending on the provider. Provider information: Stripe, Firebase, Resend.

Retention periods

We retain order and attendance data for as long as needed to deliver the event, settle accounts and handle claims. Accounting documents are retained for the period required by tax and accounting laws. Marketing data are kept until consent is withdrawn or the processing purpose ends. One-time sign-in codes expire after 10 minutes.

Your rights

You may request access to your data, rectification, erasure where provided by law, restriction of processing and data portability. You may object to processing based on legitimate interest and withdraw consent without affecting the lawfulness of earlier processing. You may lodge a complaint with the President of Poland’s Personal Data Protection Office (UODO).

Providing data is voluntary, but fields marked as required are necessary to enter into and perform the contract or reply to your message. We do not make decisions about attendees based solely on automated processing that produce legal effects.

Browser storage and security