In effect since 2026-08-12
Courtesy translation. The authoritative text of this policy is the Spanish one, published at the same address in Spanish. This English version is provided so that English-speaking readers can understand what they are accepting; in the event of any discrepancy between the two, the Spanish version prevails.
The "Personal Data Protection Policy for Clients and Users of the Multiticketing Platform" (hereinafter, the "POLICY") has as its purpose to explain how MULTITICKETING processes the personal data of the clients, users, participants and other data subjects who access, interact with or use the digital platform available on the website legal.multiticketing.com, as well as any other application, module, feature or digital channel enabled by MULTITICKETING (together, the "PLATFORM").
The POLICY covers the whole of the operations, interactions and records that take place on the PLATFORM, which may consist of the following activities: user registration, issuing and managing tickets for events, configuring user profiles, issuing invoices, notifications about event attendance, sending direct marketing communications, storing user information, networking features between participants, and any other activity proper to the business of MULTITICKETING carried out through the PLATFORM.
In accordance with the Organic Law on the Protection of Personal Data, its Regulations and other applicable rules on this matter (hereinafter, the "REGULATION"), MULTITICKETING acts as the "Controller", under the terms and conditions set out in the POLICY.
1.2.1. The contact information of MULTITICKETING is as follows:
1.2.2. The contact information of the Data Protection Officer ("DPO") is as follows:
For the purposes of the POLICY, the data subject (hereinafter, the "SUBJECT" or the "SUBJECTS") means the natural person, of legal age, who belongs to one or more of the following categories:
2.1. Clients: the SUBJECTS who contract the services offered by MULTITICKETING through the PLATFORM, whether for organizing, managing or promoting events. This category includes the natural persons or representatives of legal entities who enter into a contract or service agreement with MULTITICKETING, as well as the strategic allies who use the PLATFORM to run their events.
2.2. Users: the SUBJECTS who access, register with or interact with the PLATFORM, whether as occasional or recurring visitors, in order to browse the event offering, confirm their attendance, buy tickets, configure their profile, take part in networking features or use any other digital resource made available by MULTITICKETING. This category comprises those who browse the website legal.multiticketing.com, complete electronic registration forms or access other digital resources of the PLATFORM, without necessarily having contracted an event organization service.
2.3. Participants: the SUBJECTS who register for one or more events published or managed through the PLATFORM, providing their personal data in order to confirm their attendance, receive their entry ticket and access the features associated with the event, such as networking between attendees. This category includes people who have provided their personal data in the context of a specific event, without that necessarily implying that they are Clients of MULTITICKETING.
2.4. Other subjects: any other type of SUBJECT who does not fall into one of the preceding categories and who accesses or interacts with the PLATFORM for various reasons, among them: (i) visiting or browsing the MULTITICKETING website without registering; (ii) having had a prior contractual relationship with MULTITICKETING; (iii) accessing events or services through strategic alliances of MULTITICKETING; or (iv) being legal entities represented by natural persons, or natural persons represented by attorneys-in-fact or agents operating on the PLATFORM.
The POLICY applies to the processing of the personal data of the SUBJECTS on the PLATFORM, collected or gathered through the various mechanisms enabled by MULTITICKETING. Accordingly, MULTITICKETING processes the personal data of the SUBJECTS exclusively in accordance with the provisions of the REGULATION. This includes the processing of data in the context of commercial relationships, performance of contractual obligations or pre-contractual measures, legal obligation, judicial provisions, legitimate interest, or where necessary with the explicit consent of the SUBJECTS.
MULTITICKETING may access and/or collect the personal data of the SUBJECTS for the purposes set out in the POLICY in the following ways:
(i) Through the access, browsing, registration and/or use of the PLATFORM by the SUBJECTS.
(ii) Through direct and voluntary provision by the SUBJECTS. Such provision may be made through electronic registration forms, online acceptance of terms and conditions, and other mechanisms enabled by MULTITICKETING on the PLATFORM.
(iii) Through the internal generation of data derived from the SUBJECT's interaction with the PLATFORM, such as the issuing of tickets, attendance records and profile configurations.
(iv) Through provision by third parties who have sufficient authorization from the SUBJECTS, including strategic allies who contract the services of MULTITICKETING for the organization of events.
(v) Through collection from legitimate and authorized sources.
(vi) Through access by any other means provided for in the REGULATION.
In every case, MULTITICKETING will process the personal data of each SUBJECT — both data obtained before the issuing of this POLICY and data collected in the future — in accordance with the following parameters: (i) in conformity with the provisions of the REGULATION; (ii) subject to the contracts or terms and conditions entered into by MULTITICKETING with the SUBJECT; and (iii) subject to the privacy or personal data protection policies and notices of MULTITICKETING, including this POLICY.
Personal data will be stored in databases administered by MULTITICKETING. These databases are organized and managed in accordance with the principles established in the REGULATION, safeguarding the integrity, confidentiality and availability of the information they contain.
The information required by the REGULATION will be registered and kept up to date by MULTITICKETING with the National Registry of Personal Data Protection, administered by the Superintendency of Personal Data Protection, once the latter is operational. If the Registry is already in operation, the SUBJECTS may verify the registration of the corresponding database with that entity.
The data processed by MULTITICKETING may fall into any of the following categories:
MULTITICKETING does not deliberately collect or process sensitive personal data of the SUBJECTS. In the event that, through exceptional circumstances or voluntary provision by the SUBJECT, data of this nature is received, MULTITICKETING will process it with the highest level of protection in accordance with the REGULATION.
MULTITICKETING undertakes to use the data exclusively for the purposes established in this document and in the electronic agreements entered into by the SUBJECT.
The SUBJECT's information will be retained in accordance with the REGULATION and other applicable rules in force. Data collected through the PLATFORM will be retained for as long as the contractual or usage relationship linked to the declared purposes subsists and, once it has ended, for the additional periods required in compliance with legal obligations, judicial provisions or for the defence of the interests of MULTITICKETING. All of the above takes into account the limitation periods established in Ecuadorian law.
In particular, data linked to the issuing of invoices and to tax obligations will be retained for a minimum period of seven (7) years, in accordance with the tax rules in force. Audit records (logs), access logs and technical browsing data will be retained for the period necessary to comply with applicable legal obligations, to address security incidents and to provide evidentiary support for the transactions carried out on the PLATFORM.
Once the retention period has expired, the data will be deleted, anonymized or blocked, as appropriate, in accordance with the REGULATION.
MULTITICKETING may carry out various types of processing of the SUBJECT's personal data, which may include, but is not limited to, collecting, recording, organizing, structuring, storing, modifying, processing, communicating, consulting, using, combining, deleting and destroying data.
Personal data will be used for any of the following uses or purposes, which may involve the processing of the categories of data described in the POLICY, as well as access by third parties, under the terms of this POLICY.
9.1.1. Manage the SUBJECT's registration, enrolment and account creation on the PLATFORM, authenticate their identity and administer the access flow.
9.1.2. Issue the tickets corresponding to the events for which the SUBJECT has confirmed attendance or bought entry through the PLATFORM.
9.1.3. Configure and manage the SUBJECT's profile on the PLATFORM, including the choice between a public or private profile for networking purposes between event participants.
9.1.4. Generate and issue the invoices corresponding to the services contracted through the PLATFORM, in accordance with the tax rules in force.
9.1.5. Store the information provided by the SUBJECT during their registration and use of the PLATFORM in order to guarantee the continuity and correct provision of the service.
9.1.6. Perform the obligations arising from the contracts or service agreements entered into between MULTITICKETING and the Clients or strategic allies who organize events through the PLATFORM.
9.1.7. Contact the SUBJECT by email, notifications on the PLATFORM or other enabled channels in order to inform them about the status of their registrations, tickets, events or other aspects related to the contractual relationship.
9.2.1. Comply with tax, regulatory and control obligations, including the issuing of sales receipts, declarations or other information required by the rules in force.
9.2.2. Respond to requirements of administrative or regulatory authorities, in accordance with applicable legislation.
9.2.3. Implement or comply with provisions established by the Superintendency of Personal Data Protection through resolutions, guidelines or requirements.
9.3.1. Comply with reasoned orders, mandates or requirements of judicial authorities requesting personal information.
9.3.2. Retain the data in order to respond to judicial requirements during the legal limitation period.
9.3.3. Enforce judgments, resolutions or awards issued by the competent judicial authorities.
9.4.1. Send the SUBJECT direct marketing communications, including notifications about MULTITICKETING's own events or those of its strategic allies, promotions, campaigns and advertising content related to the PLATFORM's offering.
9.4.2. Share the data of the SUBJECT's public profile with other participants registered for the same event, in order to enable the networking features available on the PLATFORM, where the SUBJECT has voluntarily opted for a public profile.
9.5.1. Send notifications ahead of events to remind the SUBJECT of the date, time and other details relating to their confirmed attendance.
9.5.2. Share the SUBJECT's data with the strategic allies who run the events for which the SUBJECT has registered, for purposes strictly linked to the management and logistics of the event.
9.5.3. Use the information collected for programmes to improve the user experience and the quality of the services offered through the PLATFORM.
9.5.4. Produce internal statistics using anonymized or dissociated data, for the purposes of analysing use of the PLATFORM, participation trends in events and service improvement.
The SUBJECT declares that they understand that the data collected by MULTITICKETING on the PLATFORM is necessary for the correct provision of the contracted services, as well as for compliance with applicable legal obligations. Consequently, the timely and truthful provision of the data by the SUBJECT is an indispensable condition for MULTITICKETING to be able to meet their requirements and comply with the purposes described in this document. The SUBJECT guarantees and takes responsibility for the data provided being accurate, complete, precise, verifiable, clear and up to date.
Refusal to provide data, the provision of incomplete, erroneous or inaccurate information, or the impossibility of accessing it, may have the following effects as the case may be: (i) preventing the SUBJECT's registration on the PLATFORM; (ii) making it impossible to issue tickets or confirm attendance at events; (iii) preventing the generation of invoices and the processing of payments; or (iv) adversely affecting the quality and timeliness of the provision of the services.
Where the purpose of the processing is based on the SUBJECT's consent, refusal to provide the data or its withdrawal will not affect access to the essential services of the PLATFORM that rest on other legitimizing bases.
MULTITICKETING may allow access to or transfer the SUBJECT's personal data in accordance with this POLICY, with the contracts entered into with third parties and with the REGULATION. The SUBJECT understands and accepts that MULTITICKETING may share their personal information with natural or legal persons located in the Republic of Ecuador or abroad, in the following cases:
11.1.1. Where they act as processors of personal data, providing services on behalf of and under the documented instructions of MULTITICKETING, in order to fulfil the purposes detailed in this POLICY.
11.1.2. Where it is necessary to make a transfer or communication to a third party acting as a recipient of the data, in accordance with the REGULATION.
The categories of third parties that may access or receive the SUBJECT's personal data are set out below:
11.2.1. Strategic allies:
11.2.2. Technology and operations service providers:
MULTITICKETING undertakes not to disclose or share the SUBJECT's personal data without their prior consent. The following cases are, however, excepted:
MULTITICKETING informs the SUBJECT that, by virtue of the use of technology service providers whose servers are located outside Ecuadorian territory, the SUBJECT's personal data may be subject to international transfer. In particular, the cloud hosting services provided by Sevalla by Kinsta and Google Cloud involve the storage and processing of data on servers located in the United States of America.
These international transfers will be carried out in conformity with the rules in force and with the provisions issued by the Superintendency of Personal Data Protection on international transfers of personal data, guaranteeing at all times an adequate level of protection of the SUBJECT's data.
MULTITICKETING has entered into the corresponding contractual instruments with its processors located abroad, in order to ensure compliance with the obligations established in the REGULATION.
MULTITICKETING will implement the appropriate technical and organizational measures to guarantee a level of security appropriate to the risk, in accordance with the REGULATION. The purpose of those measures is to protect the SUBJECT's personal data against unauthorized access, use, modification, disclosure or destruction, as well as to guarantee the confidentiality, integrity and availability of the information.
The measures implemented include, without limitation, the following:
MULTITICKETING will review and update the security measures implemented periodically, in order to align them with the technological standards in force and with the provisions of the REGULATION.
MULTITICKETING informs the SUBJECT that the PLATFORM allows the configuration of user profiles, by means of which SUBJECTS may select a public or private profile for networking in accordance with their preferences. This feature is based on the information provided voluntarily by the SUBJECT and does not involve automated profiling with legal or significant effects for the SUBJECT.
MULTITICKETING does not currently carry out scoring, profiling or automated decision-making that produces legal effects on the SUBJECT or significantly affects them. In the event that such processes are implemented in the future, MULTITICKETING will inform the SUBJECT beforehand and will guarantee their right to obtain human intervention, to express their point of view and to contest the decision, in accordance with the REGULATION.
The PLATFORM may use cookies and other similar tracking technologies to improve the SUBJECT's browsing experience, facilitate the technical operation of the PLATFORM, collect statistical information about use of the website and personalize the content shown to the SUBJECT.
The SUBJECT may configure their browser to reject all or some cookies, or to receive a notice when a cookie is sent. However, if the SUBJECT disables or rejects cookies, some features of the PLATFORM may be unavailable or may not work correctly.
For further information about the use of cookies, the SUBJECT may consult the cookie policy published on the PLATFORM.
The SUBJECT may exercise the rights over their personal data by sending a request to the email address info@redplanettribe.org.
The Request must include at least the following:
16.1.1. The SUBJECT's name and email address or any other means of receiving responses.
16.1.2. A document evidencing the identity of the applicant and, where applicable, that of their representative together with the corresponding authorization.
16.1.3. A clear and precise description of the personal data in respect of which the SUBJECT seeks to exercise one of the rights established in the Organic Law on the Protection of Personal Data.
16.1.4. The specific request.
In relation to the processing of their personal data, the SUBJECTS may exercise the following rights:
MULTITICKETING will respond to the SUBJECTS' requests within the periods and under the conditions established by the REGULATION. In the event that the request cannot be met in whole or in part, MULTITICKETING will inform the SUBJECT of the reasons for its refusal, which may be founded on the existence of legal obligations, prevailing legitimate interests, or any other cause established in the REGULATION.
The SUBJECT may withdraw the authorization and consent granted to MULTITICKETING for one or more of the purposes of the processing of their personal data, by submitting a written request sent to the email address info@redplanettribe.org.
Upon express written request by the SUBJECT, which must be sent to the email address info@redplanettribe.org, MULTITICKETING may provide their personal data in a compatible, up-to-date, structured, common, interoperable and machine-readable format, preserving its characteristics, so that it may be held by the SUBJECT themselves or handed over to another controller designated by the SUBJECT.
The terms contained in this POLICY are governed by and interpreted in accordance with the laws in force in the Republic of Ecuador.
The SUBJECT declares that they have been informed of, and accepts, without reservation or condition of any kind, the declarations and commitments contained herein. In particular, they expressly, freely, specifically, unequivocally and on an informed basis accept and approve the handling of their personal data by MULTITICKETING, in the manner and to the extent detailed in the POLICY.
The SUBJECT gives their consent to the use of electronic and technological means in their relationship with MULTITICKETING, and undertakes for that purpose to act in good faith and for legal and lawful ends. In that sense, the SUBJECT ratifies, accepts and irrevocably declares that the instructions and communications made to MULTITICKETING through electronic, computing and telematic means — such as the internet, email, electronic forms, and other mechanisms enabled by MULTITICKETING — are fully valid and binding.
In addition, the SUBJECT makes the following declarations: (i) They have sufficient legal capacity and are empowered to make the declarations contained in this clause and consequently to bind themselves to MULTITICKETING, and are therefore fully responsible for their scope and effects. (ii) The keys, codes and other security measures used as electronic validation methods have the legal effects established in the Electronic Commerce, Electronic Signatures and Data Messages Act, its Regulations and other applicable rules. (iii) They expressly acknowledge and accept that the POLICY will be binding and enforceable from its acceptance, which may be given through the electronic means enabled by MULTITICKETING.
MULTITICKETING reserves the right to update, modify or delete this POLICY at any time, whether in whole or in part. Any modification will be published or notified to the SUBJECTS through the PLATFORM or other channels that MULTITICKETING enables for that purpose. Such amendments will take effect and their application will be mandatory from that notification or publication.
Version 1
Fingerprint: deddc89049d1918ab8805f2a920f2f9ead6bfefba49cb018e7ba191a7386afc0