PLEASE READ THIS PRIVACY POLICY CAREFULLY. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY POLICY, PLEASE DO NOT BROWSE, ACCESS OR USE OUR WEBSITE; MAKE A PURCHASE; ATTEND A FESTIVAL OR EVENT; OR OTHERWISE ENGAGE WITH OUR SERVICES.
Duco Touring Limited of PO Box 969, Shortland Street, Auckland 1140, New Zealand (Promoter, us, we or our) are committed to protecting the privacy of all our customers. The Privacy Act (2023) (New Zealand) (Privacy Act) govern the collection, storage, use, and disclosure of information by which individuals may be identified. In this Privacy Policy, “Website” means https://synthony.com/.This Privacy Policy details how we comply with the above laws regarding the collection, use, storage, sharing and protection of your information and data.
CHANGES TO THE PRIVACY STATEMENT
We may update this Privacy Policy from time to time at our sole discretion. Any variations become effective on posting the updated privacy policy to https://synthony.com/ and we shall have no obligation to provide you with individual notice of such changes. Your continued use of our products and services, including purchase of event tickets, following the publication of any amended Privacy Policy shall signify your acceptance of that amended Privacy Policy, except where we are otherwise required by law to seek your direct consent.
TYPES OF INFORMATION WE COLLECT
“Personal Information” means information about an identifiable individual, such as your name, age, date of birth, gender, telephone number, address, email address, photographs, or videos where you are personally identifiable, and, in some circumstances, financial information such as your credit card, direct debit, or PayPal account information. If the information we collect identifies you, or you are reasonably identifiable from it, the information will be considered Personal Information.
HOW WE COLLECT YOUR PERSONAL INFORMATION
We collect your Personal Information directly from you unless it is unreasonable or impractical to do so. We do this in several ways, including:
- When you contact us by email, telephone, or in writing;
- When you fill out a form on our website, complete an application, or place an order;
- When you purchase a ticket via one of our third-party ticket merchants;
- By recording or photographing you at a festival or event.
It is your choice to provide information to us. Wherever lawful and practicable, you may choose not to identify yourself when interacting with us. However, please note that it is necessary for us to collect your Personal Information to process transactions. If you choose not to provide your Personal Information, we may not be able to accommodate your order or provide certain services.We may also collect Personal Information from third parties, including our contractors, business partners, advertisers, mailing lists, recruitment agencies, and government entities, where applicable.
LEGAL BASIS FOR PROCESSING PERSONAL INFORMATION
We process your Personal Information based on the following lawful grounds, as per the GDPR:
- Consent: Where you have explicitly given your consent for processing, such as for marketing communications.
- Contractual necessity: When the processing is required to fulfill a contract with you (e.g., for ticket purchases).
- Legal obligation: To comply with legal obligations (e.g., for tax or accounting purposes).
- Legitimate interests: When processing is necessary for our legitimate interests, provided that those interests are not overridden by your fundamental rights and freedoms (e.g., for security, fraud prevention, and improving our services).
USANE, LOG DATA, AND COOKIES
We may collect your usage data through cookies, pixel tags, and other tracking technologies (collectively “Cookies”). Cookies are small data files downloaded onto your device when you access our website. Cookies store specific information that helps the website remember your actions and preferences over time.Cookies can be temporary (Session Cookies) or remain on your device until manually deleted (Persistent Cookies). Data collected by Cookies does not identify you, but it does identify your device. Where such data could potentially identify you personally, we will seek your explicit consent before collecting and processing this information.You can disable Cookies at any time in your browser settings. However, please note that disabling Cookies may affect the functionality of the website.
WHY WE COLLECT YOUR PERSONAL INFORMATION.
We collect your Personal Information for several reasons, primarily to enable us to conduct our business activities and provide products and services to you. Our purposes for collecting and processing your Personal Information include:
- Providing access to our website and services;
- Approving transactions you wish to make;
- Sending invoices and receipts;
- Responding to your requests;
- Enhancing our products and services;
- Verifying your identity;
- For administrative, planning, product/service development, quality control, and research purposes;
- Contacting you with information you may find interesting, where you have opted in to receive such communication (until you withdraw your consent);
- Preventing, detecting, and investigating potential illegal activities, security breaches, and fraud;
- Complying with legal obligations.
We will only use your Personal Information for purposes that you would reasonably expect in connection with operating our business, or where required by law. We will not sell, rent, or license your email address or any Personal Information unless you provide express consent.
WHO WE DISCLOSE YOUR PERSONAL INFORMATION TO
We may disclose your Personal Information to the following third parties:
- Our employees, contractors, or external service providers involved in the operation of our business;
- Third-party ticket merchants for ticket processing;
- Business partners, sponsors, or joint ventures related to our events;
- Authorities or enforcement bodies if required by law or if unlawful activity is suspected;
- Other third parties with your explicit consent.
We ensure that all third parties receiving your data adhere to data protection standards under the GDPR.
You can withdraw your consent for us to share your Personal Information with third parties at any time by emailing
[email protected], but please note that withdrawal of such consents may affect your ability to access and use the Website, purchase our products or services or attend any festival or event.
INTERNATIONAL DATA TRANSFER
If we transfer your Personal Information outside of New Zealand or the European Economic Area (EEA), we will take appropriate steps to ensure that your privacy rights are protected. This may include implementing data transfer agreements based on the European Commission’s Standard Contractual Clauses or ensuring that the recipient is certified under an approved privacy framework such as the EU-U.S. Privacy Shield.
DATA RETENTION
We will retain your Personal Information only for as long as necessary to fulfill the purposes for which we collected it, including complying with legal, accounting, or reporting obligations. If we process your Personal Information based on consent, we will retain it until you withdraw your consent.
INFORMATION SECURITY AND TECHNICAL MEASURES
We take the privacy and security of individuals and their personal information very seriously and are taking every reasonable measure and precaution to protect and secure the personal data that we process. We have dedicated information security policies and procedures in place to protect personal information from unauthorised access, alteration, disclosure or destruction and have several layers of security measures, including (in no particular order):
- Hardware Firewalls
- Software Firewalls
- Web Application Firewalls
- Data encryption
- Two Factor Authentication
- Password Protection
- Penetration Testing
YOUR GDPR RIGHTS
Under the GDPR, you have the following rights regarding your Personal Information:
- Right of Access: You can request access to the Personal Information we hold about you.
- Right to Rectification: You can ask us to correct any inaccuracies in your Personal Information.
- Right to Erasure (Right to Be Forgotten): You can request the deletion of your Personal Information under certain circumstances.
- Right to Restriction of Processing: You can ask us to limit the processing of your Personal Information in specific cases.
- Right to Data Portability: You can request that we provide your Personal Information in a structured, commonly used, and machine-readable format for transfer to another data controller.
- Right to Object: You have the right to object to our processing of your Personal Information under certain conditions, particularly where processing is based on legitimate interests.
- Right to Withdraw Consent: If you have given consent for any specific processing, you can withdraw it at any time.
To exercise any of these rights, please contact us at
[email protected]
ACCESSING AND CORRECTING PERSONAL INFORMATIONWe cannot modify your Personal Information. You can update your information by contacting us at
[email protected]. If you believe that any information we hold about you is incorrect, incomplete, or inaccurate, you may request that we amend it.
You acknowledge that it is your responsibility to maintain the truth, accuracy, and completeness of your information and your failure to do so may inhibit our ability to provide the Website, process your orders with us or allow you to access any festival or event.
EXTERNAL LINKS
Our website may contain links to third-party websites or applications. We are not responsible for the privacy policies or practices of these third parties.
