This policy explains how the personal data of users who visit the website millesimeticke.com (the “Site”) and request the free tickets for the opening event and for store access is processed, in accordance with Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

The Data Controller is:
Millesimé Vintage Collection
Leidsestraat 64-66, 1017 Amsterdam, The Netherlands
VAT (BTW): NL8692198000B01
Email: web@millesimecollection.com

The Controller has not appointed a Data Protection Officer (DPO), as there is no legal obligation to do so.

2. What data we collect

When you request a ticket through the sign-up form, we collect the following data that you provide directly:

• First and last name

• Email address

• Phone number

• Gender

• City

• Date of birth

Automatically, while you browse, technical data may be collected (e.g. IP address, device and browser type) through the technical cookies described in the Cookie Policy.

In addition, only if you tick the box “Keep me updated on future events”, we record your consent to receive promotional communications.

3. Why we process your data and the legal bases

• Handle your request and issue the free ticket (event and store access) — Performance of pre-contractual measures / requested service – Art. 6.1.b

• Send you the ticket email and service communications related to the event — Performance of the requested service – Art. 6.1.b

• Send you promotional communications and updates on future events — Consent, given by ticking the relevant box – Art. 6.1.a

• Measure advertising campaigns and show you personalised ads on social media and search engines (Meta Pixel, TikTok Pixel, Google) — Consent, given through the cookie banner – Art. 6.1.a

• Comply with legal obligations — Legal obligation – Art. 6.1.c

• Handle any disputes or protect our rights — Legitimate interest – Art. 6.1.f

Providing the data marked as mandatory in the form is necessary to obtain the ticket: without it, we cannot grant you access to the event or store. Consent to promotional communications is instead optional and can be withdrawn at any time.

4. Promotional communications (email marketing)

Promotional emails are sent only to users who have ticked the consent box “Keep me updated on future events”. You can withdraw your consent at any time by clicking the unsubscribe link at the bottom of every email or by writing to the Controller. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Recipients of the data

To deliver the service we rely on providers that process data on our behalf, appointed as Data Processors under Art. 28 GDPR:

• Weeztix / Eventix – ticket issuing and management platform

• Intuit Mailchimp – email delivery and newsletter management platform

• Framer B.V. – Site hosting and management platform

• Meta Platforms Ireland Ltd. – Meta Pixel for measurement and remarketing of Facebook/Instagram campaigns

• TikTok Technology Ltd. – TikTok Pixel for measurement and remarketing of TikTok campaigns

• Google Ireland Ltd. – Google Ads and Google Analytics 4 for statistics and remarketing

The tracking cookies of Meta, TikTok and Google are activated only with your prior consent, as described in the Cookie Policy. Data is not disclosed or sold to third parties. It may be shared with public authorities where required by law.

6. Transfer of data outside the European Union

Some providers (in particular Mailchimp, Meta, TikTok and Google) may process data outside the European Economic Area, including in the United States. In such cases, the transfer is based on adequate safeguards provided by the GDPR, such as the European Commission’s Standard Contractual Clauses and/or adherence to the EU-U.S. Data Privacy Framework.

7. How long we keep your data

• Data relating to the ticket request and the event: for as long as necessary to manage the event and up to 24 months afterwards, unless otherwise required by law.

• Data processed for marketing purposes: until consent is withdrawn and in any case no longer than 24 months from the last interaction.

• Data required for legal compliance: for the periods set out by applicable law.

After these periods, data is deleted or anonymised.

8. Your rights

As a data subject, you may exercise at any time the rights provided by Articles 15-22 GDPR:

• access to your data;

• rectification of inaccurate data;

• erasure (“right to be forgotten”);

• restriction of processing;

• data portability;

• objection to processing;

• withdrawal of the consent given.

To exercise your rights, write to: web@millesimecollection.com. We will respond without undue delay and in any case within 30 days.

You also have the right to lodge a complaint with a supervisory authority, in particular the Dutch Data Protection Authority (Autoriteit Persoonsgegevens – autoriteitpersoonsgegevens.nl), competent for the Controller, or, alternatively, the data protection authority of your country of residence.

9. Minors

The Site and the event are not directed at children under 14. If you are under 14, do not submit your data without the consent of a parent or guardian.

10. Changes to this policy

The Controller reserves the right to update this policy. Changes will be published on this page with the date of the latest update.