Skip to content
Maledetta Primavera

Legal

privacy
policy

Last updated: 22 October 2026

Maledetta Primavera ASBL (“MP”, “we”, “us”) is committed to protecting the personal data of the people who buy tickets to, attend, or otherwise engage with our events and online channels. This Privacy Policy explains what personal data we process, for what purposes, on what legal basis, with whom we share it, and what rights you have under Regulation (EU) 2016/679 (“GDPR”) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

1. Who we are (Data Controller)

MP is a Belgian non-profit association (association sans but lucratif / vereniging zonder winstoogmerk, ASBL/VZW) with its own legal personality. For the purposes of the GDPR, the data controller is the association itself:

  • Maledetta Primavera ASBL
  • Numéro d’entreprise (BCE): 1043.875.594
  • Email: [email protected]

Any question, request or complaint concerning your personal data can be addressed to us at the email address above.

2. Scope of this Policy

This Policy applies to personal data we process in connection with:

  • (a) the sale of tickets to our events via the Weeztix platform;
  • (b) the organisation of our events in Brussels;
  • (c) photographs taken by us during our events and published on our social media channels;
  • (d) our Instagram and TikTok accounts, including direct messages and interactions on those pages;
  • (e) our website; and
  • (f) our newsletter.

3. Categories of personal data and purposes

3.1 Ticket sales (via Weeztix)

When you buy a ticket to one of our events, Weeztix collects and processes on our behalf the personal data required to issue and manage your ticket. This typically includes your name, email address, order details, and any information you provide at checkout.

  • Purposes: issuing tickets; managing entry to the event; sending event-related communications (e.g. changes, cancellations, practical information); complying with our accounting and tax obligations.
  • Legal bases (Art. 6 GDPR): performance of the contract of sale between you and MP (Art. 6(1)(b)); and compliance with our legal obligations, in particular Belgian accounting law (Art. 6(1)(c)).
  • Storage: we do not store attendee data outside the Weeztix platform. Weeztix acts as our processor within the meaning of Art. 28 GDPR. For details on how Weeztix handles your data, please consult Weeztix’s own privacy policy at weeztix.com/en/privacy-policy.

3.2 Photographs at events

During our events, we take photographs and short video content, which may include images of attendees. A selection of this material is published on our Instagram and TikTok accounts to document our events and promote future ones.

  • Purposes: documentation of MP’s activities; communication and promotion of future events.
  • Legal basis (Art. 6 GDPR): our legitimate interest in documenting and promoting our activities as a cultural association (Art. 6(1)(f)). We have carried out a balancing exercise and consider that this interest does not override your rights and freedoms, in particular because (i) our events are open, social gatherings where photography is expected, (ii) images are used only for MP’s own communication about its events, and (iii) you can at any time ask us to take down any image in which you appear (see §7).
  • Minors: access to our events is reserved to persons aged 18 or older. We do not knowingly photograph minors.
  • Removal on request: if you appear in a photograph or video published by us and wish it to be removed, please contact us at [email protected]. We will remove the content from our accounts without undue delay. Please note that once content has been reshared by third parties on their own accounts, we cannot guarantee its removal from those third-party accounts.

3.3 Interactions on Instagram and TikTok

If you follow, comment, react to or send us a direct message on Instagram or TikTok, we process the personal data that these platforms make available to us (typically your username, profile picture, message content and any other information you choose to share).

  • Purposes: responding to your messages and questions; interacting with our community.
  • Legal basis (Art. 6 GDPR): our legitimate interest in maintaining a community around our events and responding to enquiries (Art. 6(1)(f)); where you initiate a message, also the taking of steps at your request prior to a possible contract (Art. 6(1)(b)).
  • Joint controllership: in respect of the operation of our Instagram and TikTok accounts, we act as joint controllers with, respectively, Meta Platforms Ireland Ltd. and TikTok Technology Limited, within the meaning of Art. 26 GDPR. The essence of the arrangement is that Meta and TikTok are responsible for the processing of personal data carried out through their platforms (including profiling, advertising and cookies), while MP is responsible for the content it publishes and the messages it sends. For the platforms’ own processing, please consult:

3.4 Website

Our website provides information about MP and its events. It does not place cookies or similar tracking technologies on your device. Links to Weeztix, Spotify and our social media channels open in the respective third-party services, not within our website; the processing carried out by those services is governed by their own privacy and cookie policies.

3.5 Newsletter

You may subscribe to our newsletter using the form in the footer of this website. We collect your email address, together with the date, time and IP address recorded when you confirm the subscription, which together evidence your consent.

  • Purposes: sending occasional emails about MP’s upcoming events, new podcast episodes and related activities. We do not use the list for any other purpose, and we do not profile subscribers or build segments from their behaviour.
  • Legal basis (Art. 6 GDPR): your consent (Art. 6(1)(a)). Subscription works by double opt-in: after you submit the form we send you an email containing a confirmation link, and your address joins the list only when you click it. An address that is never confirmed never joins the list.
  • Tracking: the confirmation link is rewritten by Brevo so that it passes through Brevo’s redirection service before it reaches our website. That is how Brevo registers your confirmation, and it cannot be disabled for this type of message. We have enabled Brevo’s anonymous tracking setting, so the resulting data is not tied to you individually. We do not use open or click data to profile subscribers or to segment the list.
  • Withdrawing your consent: every email we send carries an unsubscribe link, which takes effect immediately, and you may also write to [email protected]. Withdrawal does not affect the lawfulness of processing carried out before it.
  • Processor: the list is stored, and the emails are sent, by Brevo (Sendinblue SAS, France), acting as our processor within the meaning of Art. 28 GDPR. For details, see brevo.com/legal/privacypolicy.

4. Marketing

MP sends marketing emails only to people who have subscribed to the newsletter and confirmed that subscription (see §3.5). We do not add ticket buyers, event attendees or people who write to us to that list: subscribing is always a separate, deliberate act. We do not send postal mail or SMS, and we neither sell, rent nor share our list with third parties. Apart from the newsletter, promotional communication takes place through our public Instagram and TikTok posts.

5. Recipients and processors

Your personal data may be shared with:

  • Weeztix (Weeztix B.V., the Netherlands), acting as our processor for ticketing;
  • Brevo (Sendinblue SAS, France), acting as our processor for the newsletter (see §3.5);
  • Meta Platforms Ireland Ltd. and TikTok Technology Limited, as joint controllers for the operation of our social media pages (see §3.3);
  • Public authorities, where we are legally required to do so (e.g. tax administration, judicial authorities);
  • Our accountant, where relevant to accounting or tax compliance.

We do not sell your personal data to third parties.

6. International transfers

Personal data processed by Weeztix is in principle stored within the European Economic Area, as is newsletter data processed by Brevo, whose servers are located in the European Union. Communications and content published on Instagram and TikTok may be transferred to servers outside the EEA (including the United States) by Meta and TikTok respectively. Those transfers take place under the safeguards implemented by those platforms (in particular the EU-US Data Privacy Framework and/or Standard Contractual Clauses adopted by the European Commission).

7. Retention

  • Ticketing data (Weeztix): retained for the duration of the event and thereafter as set out in Weeztix’s own privacy policy. Accounting data linked to ticket sales is retained for 7 years as required by Article III.86 of the Belgian Code of Economic Law.
  • Photographs and videos published on social media: kept online for as long as they remain useful to document MP’s activities, or until you request their removal (see §3.2).
  • Direct messages on Instagram/TikTok: kept for as long as necessary to handle the conversation and any follow-up, and thereafter in accordance with the retention rules of the relevant platform.
  • Newsletter subscriptions: your email address and the record of your consent are kept until you unsubscribe or ask us to delete them, and are erased without undue delay thereafter. Addresses that never complete the confirmation step are not added to the list.

8. Your rights

Under the GDPR, you have the right to:

  • access your personal data (Art. 15);
  • request its rectification (Art. 16);
  • request its erasure (Art. 17), including removal of photographs in which you appear;
  • request restriction of processing (Art. 18);
  • data portability (Art. 20), where applicable;
  • object to processing carried out on the basis of our legitimate interest (Art. 21), including in relation to photographs; and
  • withdraw your consent at any time, where processing is based on consent (Art. 7).

To exercise any of these rights, please contact us at [email protected]. We may ask for reasonable information to verify your identity.

If you consider that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Belgian Data Protection Authority:

9. Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss or alteration. In particular, attendee data is stored solely within the Weeztix platform, which is subject to its own security measures set out in its privacy policy and data processing agreement.

10. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in our activities or in applicable law. The version in force is the one published on our website and dated at the top of this document.