Privacy Policy

INTRODUCTION

Ultra.lu ("we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://www.ultra.lu and use our event discovery and ticketing services.

This policy applies to all users of our platform, including event attendees, event organizers, and website visitors. By using our services, you consent to the collection and use of information in accordance with this policy.

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) for EU residents and other relevant privacy regulations.

INFORMATION WE COLLECT

Personal Information You Provide

We collect information you voluntarily provide to us, including:

• Account Information: Name, email address, phone number, date of birth, and profile information when you create an account through Auth0
• Payment Information: Credit card details, billing address, and payment history processed securely through Stripe
• Event Information: Details about events you create, including descriptions, dates, venues, and ticket information
• Communications: Messages you send us, customer support inquiries, and feedback
• Identity Verification: Government-issued ID or other documents for age verification and fraud prevention

Information Automatically Collected

When you use our services, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information
• Usage Data: Pages visited, time spent on pages, search queries, click patterns, and feature usage
• Location Data: Approximate location based on IP address and precise location when you consent (for finding nearby events)
• Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies (see Cookie Policy below)

Information from Third Parties

We may receive information from:

• Auth0: Authentication data and social media profile information if you sign in through social media
• Stripe: Payment processing information and fraud detection data
• Mapbox: Location and mapping data for event venues
• Event Partners: Information about sponsored events and promotional activities
• Social Media: Public profile information when you interact with our social media pages

HOW WE USE YOUR INFORMATION

We use your information for the following purposes:

Service Provision

• Create and manage your account
• Process ticket purchases and event registrations
• Facilitate event discovery and recommendations
• Enable communication between event organizers and attendees
• Provide customer support and respond to inquiries

Business Operations

• Process payments and prevent fraud
• Verify identity and age for restricted events
• Analyze usage patterns and improve our services
• Send transactional emails and important updates
• Comply with legal obligations and enforce our terms

Marketing and Communication

• Send promotional emails about events and services (with consent)
• Personalize content and event recommendations
• Conduct surveys and market research
• Display targeted advertisements on our platform and third-party sites

LEGAL BASIS FOR PROCESSING (GDPR)

For EU residents, we process your personal data based on:

• Contract Performance: Processing necessary to provide our services and fulfill our obligations
• Legitimate Interests: Improving our services, fraud prevention, and business operations
• Consent: Marketing communications and non-essential cookies
• Legal Compliance: Meeting regulatory requirements and legal obligations

HOW WE SHARE YOUR INFORMATION

We may share your information in the following circumstances:

Service Providers

• Auth0: Authentication and user management services
• Stripe: Payment processing and fraud prevention
• Mapbox: Mapping and location services
• Email Service Providers: Transactional and marketing communications
• Analytics Providers: Website usage analysis and improvement

Event Organizers

We share necessary information with event organizers, including attendee names, contact information, and ticket details, to facilitate event management and communication.

Legal Requirements

We may disclose information when required by law, court order, or to:

• Comply with legal processes and government requests
• Enforce our Terms of Service and other agreements
• Protect our rights, privacy, safety, or property
• Investigate fraud or security issues

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

INTERNATIONAL DATA TRANSFERS

Your information may be processed and stored in countries outside your residence, including the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with sufficient data protection
• Certification schemes and codes of conduct

DATA RETENTION

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal, tax, and accounting requirements
• Resolve disputes and enforce our agreements
• Prevent fraud and maintain security

Generally, we retain account information for 7 years after account closure, transaction records for 10 years, and marketing data until you opt out. You may request earlier deletion of your data, subject to legal requirements.

YOUR PRIVACY RIGHTS

Depending on your location, you may have the following rights:

GDPR Rights (EU Residents)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your information
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for processing

How to Exercise Your Rights

To exercise your privacy rights, contact us at support@ultra.lu or through your account settings. We will respond within 30 days and may require identity verification.

SECURITY MEASURES

We implement comprehensive security measures to protect your information:

• Encryption: Data encryption in transit and at rest
• Access Controls: Strict employee access controls and authentication
• Regular Audits: Security assessments and vulnerability testing
• Secure Infrastructure: Industry-standard hosting and security practices
• Incident Response: Procedures for detecting and responding to security breaches

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security but continuously work to improve our protections.

COOKIE POLICY

This section explains how Ultra.lu and its partners use cookies and similar tracking technologies on our website and services. For further details regarding our methods of information collection and usage, please refer to the other sections of this Privacy Policy.

What Are Cookies?

A cookie is a small text file sent to your browser by a website you visit. It helps the website remember specific information about your visit, such as your preferred language and other settings. This can make your next visit easier and the site more useful to you. Cookies play a crucial role in improving your web experience, and their absence would make it a more frustrating encounter.

Pixel tags are technologies embedded in websites or emails to track specific activities, such as page views or email opens. Pixel tags are often used in conjunction with cookies.

Single Sign-On (SSO) allows you to log into our platform using third-party services like Google or Facebook through Auth0. These services authenticate your identity and may share certain personal information with us, such as your name and email address, to pre-populate our registration form.

Types of Cookies We Use

Essential Cookies (Process Cookies)

These cookies enable our website to function effectively and provide services that visitors expect, such as navigating web pages, accessing secure areas, and maintaining your login session through Auth0. Our website cannot operate correctly without these cookies. Examples include:

• Session management and user authentication
• Security and fraud prevention
• Shopping cart and checkout functionality
• Load balancing and performance optimization

Preference Cookies

These cookies allow our website to remember information that changes how the website behaves or appears, such as your preferred region or language. For example, by remembering your region, our website can provide you with relevant local events and language preferences. These cookies can also help you customize text size, fonts, and other web page elements. Loss of information stored in preference cookies may make the website experience less functional, but should not prevent its functionality.

Authentication and Security Cookies

Authentication cookies help us show you the appropriate information and settings when you log into our website through Auth0. Security cookies are used to authenticate users, prevent fraudulent use of login credentials, and safeguard user data from unauthorized parties. These include:

• User identity verification
• Protection against cross-site request forgery (CSRF)
• Fraud detection and prevention
• Account security monitoring

Analytics Cookies (Session State Cookies)

We use analytics cookies to collect information about user interactions with our website, including which pages users visit most and whether they encounter errors on particular pages. We use these "session state cookies" to help us improve our services and enhance users' browsing experience. Deleting or blocking these cookies will not make the website unusable.

Google Analytics: We use Google Analytics, an analytical tool developed by Google, to help us understand how visitors interact with our website. Google Analytics employs cookies to collect and report website usage statistics without disclosing the identity of individual users to Google.

Marketing and Advertising Cookies

Depending on your settings and consent, we may allow third-party advertising partners to use cookies and other technologies on our site to promote our services to you on other websites and online services you use. These cookies can help:

• Limit the number of times you see an advertisement
• Measure the effectiveness of our marketing campaigns
• Provide personalized event recommendations
• Track conversion rates and user engagement

Third-Party Service Cookies

Our platform integrates with several third-party services that may set their own cookies:

• Auth0: Authentication, user management, and social login features
• Stripe: Payment processing, fraud prevention, and transaction security
• Mapbox: Interactive maps, location services, and venue mapping
• Social Media Platforms: Social sharing, login integration, and promotional content

Your Cookie Choices and Controls

It's important to note that some cookies, such as essential cookies, are necessary for the proper functioning of our website, and disabling them may impair its operation.

Cookie Consent Management

When you first visit our website, you'll see a cookie consent banner that allows you to accept or decline non-essential cookies. You can manage your cookie preferences through the "Cookie Settings" link in our website footer or by clicking the consent button on our platform.

Browser-Based Cookie Management

Most web browsers allow you to control cookies through their settings. You can typically:

• Review your cookie settings and advertising preferences
• Set up rules for managing cookies on a site-by-site basis for finer privacy control
• Disable cookies from all sites except those you trust
• Delete existing cookies and associated data

Google Chrome Users

For Google Chrome users, you can use the "Clear Browsing Data" feature (accessible via the Tools menu) to remove cookies and other data associated with websites and plugins, including data stored by Adobe Flash Player (Flash cookies). Chrome's incognito mode allows you to browse online without your website visits or downloads being recorded in your browsing history. Any cookies created during incognito mode are deleted when you close all incognito windows.

Impact of Disabling Cookies

Disabling certain types of cookies may affect your experience on our platform:

• Essential cookies: Disabling these may prevent core functionality like login, payment processing, and security features
• Preference cookies: You may lose customized settings and need to re-enter preferences on each visit
• Analytics cookies: We won't be able to improve our services based on usage patterns
• Marketing cookies: You may see less relevant event recommendations and advertisements

Updates to Cookie Policy

We reserve the right to update this Cookie Policy at our discretion. We recommend that you periodically review this policy to stay informed about our use of cookies and any related updates. If changes significantly impact how we use cookies, we will endeavor to provide advance notice on our website. Your continued use of our website indicates your agreement to this Cookie Policy and any updates.

Cookie-Related Questions

If you have any questions about our use of cookies, please contact us at:

CHILDREN'S PRIVACY

Our services are intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:

• Updating the "Last updated" date at the top of this policy
• Sending email notifications for material changes
• Displaying prominent notices on our website

Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

CONTACT INFORMATION

If you have questions about this Privacy Policy or our data practices, please contact us:

DATA PROTECTION OFFICER

For EU residents, you may contact our Data Protection Officer for privacy-related matters: