Skip to content
Maledetta Primavera

Legal

privacy
policy

Last updated: 7 September 2026

Maledetta Primavera Bruxelles (“MP”, “we”, “us”) is committed to protecting the personal data of the people who buy tickets to, attend, or otherwise engage with our events and online channels. This Privacy Policy explains what personal data we process, for what purposes, on what legal basis, with whom we share it, and what rights you have under Regulation (EU) 2016/679 (“GDPR”) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

1. Who we are (Data Controller)

MP is a de facto association (association de fait / feitelijke vereniging) organised under Belgian law. It has no separate legal personality. For the purposes of the GDPR, the data controller is:

Any question, request or complaint concerning your personal data can be addressed to us at the email address above.

2. Scope of this Policy

This Policy applies to personal data we process in connection with:

  • (a) the sale of tickets to our events via the Weeztix platform;
  • (b) the organisation of our events in Brussels;
  • (c) photographs taken by us during our events and published on our social media channels;
  • (d) our Instagram and TikTok accounts, including direct messages and interactions on those pages; and
  • (e) our website (once online).

3. Categories of personal data and purposes

3.1 Ticket sales (via Weeztix)

When you buy a ticket to one of our events, Weeztix collects and processes on our behalf the personal data required to issue and manage your ticket. This typically includes your name, email address, order details, and any information you provide at checkout.

  • Purposes: issuing tickets; managing entry to the event; sending event-related communications (e.g. changes, cancellations, practical information); complying with our accounting and tax obligations.
  • Legal bases (Art. 6 GDPR): performance of the contract of sale between you and MP (Art. 6(1)(b)); and compliance with our legal obligations, in particular Belgian accounting law (Art. 6(1)(c)).
  • Storage: we do not store attendee data outside the Weeztix platform. Weeztix acts as our processor within the meaning of Art. 28 GDPR. For details on how Weeztix handles your data, please consult Weeztix’s own privacy policy at weeztix.com/en/privacy-policy.

3.2 Photographs at events

During our events, we take photographs and short video content, which may include images of attendees. A selection of this material is published on our Instagram and TikTok accounts to document our events and promote future ones.

  • Purposes: documentation of MP’s activities; communication and promotion of future events.
  • Legal basis (Art. 6 GDPR): our legitimate interest in documenting and promoting our activities as a cultural association (Art. 6(1)(f)). We have carried out a balancing exercise and consider that this interest does not override your rights and freedoms, in particular because (i) our events are open, social gatherings where photography is expected, (ii) images are used only for MP’s own communication about its events, and (iii) you can at any time ask us to take down any image in which you appear (see §7).
  • Minors: access to our events is reserved to persons aged 18 or older. We do not knowingly photograph minors.
  • Removal on request: if you appear in a photograph or video published by us and wish it to be removed, please contact us at maledettaprimaverabxl@outlook.it. We will remove the content from our accounts without undue delay. Please note that once content has been reshared by third parties on their own accounts, we cannot guarantee its removal from those third-party accounts.

3.3 Interactions on Instagram and TikTok

If you follow, comment, react to or send us a direct message on Instagram or TikTok, we process the personal data that these platforms make available to us (typically your username, profile picture, message content and any other information you choose to share).

  • Purposes: responding to your messages and questions; interacting with our community.
  • Legal basis (Art. 6 GDPR): our legitimate interest in maintaining a community around our events and responding to enquiries (Art. 6(1)(f)); where you initiate a message, also the taking of steps at your request prior to a possible contract (Art. 6(1)(b)).
  • Joint controllership: in respect of the operation of our Instagram and TikTok accounts, we act as joint controllers with, respectively, Meta Platforms Ireland Ltd. and TikTok Technology Limited, within the meaning of Art. 26 GDPR. The essence of the arrangement is that Meta and TikTok are responsible for the processing of personal data carried out through their platforms (including profiling, advertising and cookies), while MP is responsible for the content it publishes and the messages it sends. For the platforms’ own processing, please consult:

3.4 Website

Our website provides information about MP and its events. It does not place cookies or similar tracking technologies on your device. Links to Weeztix, Spotify and our social media channels open in the respective third-party services, not within our website; the processing carried out by those services is governed by their own privacy and cookie policies.

4. Marketing

MP does not send newsletters or marketing emails. All promotional communication takes place through our public Instagram and TikTok posts.

5. Recipients and processors

Your personal data may be shared with:

  • Weeztix (Weeztix B.V., the Netherlands), acting as our processor for ticketing;
  • Meta Platforms Ireland Ltd. and TikTok Technology Limited, as joint controllers for the operation of our social media pages (see §3.3);
  • Public authorities, where we are legally required to do so (e.g. tax administration, judicial authorities);
  • Our accountant, where relevant to accounting or tax compliance.

We do not sell your personal data to third parties.

6. International transfers

Personal data processed by Weeztix is in principle stored within the European Economic Area. Communications and content published on Instagram and TikTok may be transferred to servers outside the EEA (including the United States) by Meta and TikTok respectively. Those transfers take place under the safeguards implemented by those platforms (in particular the EU-US Data Privacy Framework and/or Standard Contractual Clauses adopted by the European Commission).

7. Retention

  • Ticketing data (Weeztix): retained for the duration of the event and thereafter as set out in Weeztix’s own privacy policy. Accounting data linked to ticket sales is retained for 7 years as required by Article III.86 of the Belgian Code of Economic Law.
  • Photographs and videos published on social media: kept online for as long as they remain useful to document MP’s activities, or until you request their removal (see §3.2).
  • Direct messages on Instagram/TikTok: kept for as long as necessary to handle the conversation and any follow-up, and thereafter in accordance with the retention rules of the relevant platform.

8. Your rights

Under the GDPR, you have the right to:

  • access your personal data (Art. 15);
  • request its rectification (Art. 16);
  • request its erasure (Art. 17), including removal of photographs in which you appear;
  • request restriction of processing (Art. 18);
  • data portability (Art. 20), where applicable;
  • object to processing carried out on the basis of our legitimate interest (Art. 21), including in relation to photographs; and
  • withdraw your consent at any time, where processing is based on consent (Art. 7).

To exercise any of these rights, please contact us at maledettaprimaverabxl@outlook.it. We may ask for reasonable information to verify your identity.

If you consider that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Belgian Data Protection Authority:

9. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration. In particular, attendee data is stored solely within the Weeztix platform, which is subject to its own security measures set out in its privacy policy and data processing agreement.

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our activities or in applicable law. The version in force is the one published on our website and dated at the top of this document.