Privacy Policy

Ticket & Keys™ ("we", "our", "us") is an event ticketing, accommodation booking, and travel planning platform. We are committed to protecting your personal data in compliance with the EU General Data Protection Regulation (GDPR) and applicable Finnish / EU law.

Data Controller: Ticket & Keys™
Contact: privacy@ticketandkeys.com

Account Data: Name, email address, profile information when you register.

Booking Data: Event registrations, accommodation bookings, ticket codes, payment amounts (not card numbers).

Travel Documents: Passport numbers, visa details, expiry dates — only if you voluntarily add them to your profile vault. This is sensitive personal data and requires your explicit consent.

Preference Data: Travel style, dietary requirements, seat preferences — used solely to power AI recommendations.

Payment Data: Payments are processed by Stripe. We never store card numbers. Stripe is GDPR-compliant and PCI-DSS certified.

Usage Data: Page views, feature interactions — collected in aggregate for platform improvement.

Contract (Art. 6(1)(b)): Processing necessary to fulfil your bookings and ticket purchases.

Legitimate Interest (Art. 6(1)(f)): Sending transactional emails (booking confirmations, reminders), fraud prevention, platform security.

Consent (Art. 6(1)(a) / Art. 9(2)(a)): Marketing communications and storing sensitive travel documents. You may withdraw consent at any time.

Legal Obligation (Art. 6(1)(c)): Financial records required by law.

Passport numbers, visa details, and ID cards constitute sensitive personal data under GDPR Art. 9. By adding documents to your vault, you give explicit consent to their storage. You may delete them at any time from your Profile. We do not share this data with third parties except where legally required.

• Process and confirm event registrations and accommodation bookings
• Send booking confirmation emails with QR codes
• Send event reminders (transactional — not marketing)
• Power AI-driven travel and event recommendations
• Enable QR code check-in at events
• Provide in-app notifications and inbox messaging

We do not sell your data. We share data only with:

• Stripe: For payment processing
• Event hosts: Your name and email are shared with the host of events you register for
• Accommodation hosts: Your name, email and stay dates are shared with property hosts
• Base44 (infrastructure): Our platform provider processes data on our behalf under a Data Processing Agreement

We retain your data for as long as your account is active or as needed to provide services. Booking records are kept for 7 years for legal/accounting obligations. Travel documents are deleted immediately upon your request or when your account is deleted.

• Right of Access (Art. 15): Request a copy of your personal data
• Right to Rectification (Art. 16): Correct inaccurate data
• Right to Erasure (Art. 17): Request deletion of your account and data
• Right to Portability (Art. 20): Export your data in machine-readable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent: At any time, for consent-based processing

To exercise any right, use the Data & Privacy tab in your profile or email privacy@ticketandkeys.com. We respond within 30 days.

We use strictly necessary cookies for authentication and session management. We do not use tracking or advertising cookies without your consent. You can manage cookie preferences in the cookie banner displayed on your first visit.

Data is stored in EU/EEA data centres. Any transfer outside the EEA is covered by Standard Contractual Clauses (SCCs) as required by GDPR Chapter V.

Our platform is not directed at children under 16. We do not knowingly collect data from minors.

We will notify registered users by email of material changes. Continued use after notice constitutes acceptance.

For privacy inquiries: privacy@ticketandkeys.com

You have the right to lodge a complaint with your national supervisory authority. In Finland: tietosuoja.fi