Back to Home
GDPR Standard 2016/679Last updated: March 15, 2026

Privacy Policy

Information on personal data processing and protection under the EU GDPR

1. Data Controller vs. Data Processor Roles

Data privacy is paramount to Roman Caha, Company ID: 23804009, having its registered office at Schmoranzova 156, 538 21 Slatiňany (hereinafter "QIKBOX"). Under the EU General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), we operate in two distinct capacities:

Data Controller

Regarding registered Organizers and businesses using the platform. We collect billing, contact, and authentication logs required for account management and contractual execution.

Data Processor

Regarding ticket holders and event attendees. We process validation and seat allocation data solely on behalf of the Organizer, who acts as the primary Data Controller.

2. Security & Data Location

All customer and transactional data is stored in high-security, ISO 27001 certified data centers located strictly within the European Union. All transit traffic is enforced over TLS 1.3 encryption, and tickets are cryptographically validated against counterfeits and duplicate entries.

3. Data Subject Rights

Under GDPR, you have the right to access, rectify, restrict, or erase your personal data, as well as the right to data portability. To submit a data request, contact us at podpora@qikbox.cz.