Privacy Policy

1. Introduction

This Privacy Policy explains how PACO EVENT S.R.L. (“unde.io”, “we”, “us”) collects, uses, shares, and protects personal data when you use the unde.io platform, websites, and mobile applications (the “Service”). For any privacy-related question or request, contact us at [email protected].

By using the Service, you confirm that you have read and understood this Policy. Where required by law, we will obtain your consent before processing your data.

2. Data We Collect

We collect the following categories of personal data:

• Account data: name, surname, and email address.
• Order and ticketing data: events purchased, attendee details you provide, billing address, invoice information.
• Payment data: processed by our payment partners (e.g. MAIB, card networks); we do not store full card numbers.
• Device and usage data: IP address, device identifiers, browser type, operating system, pages viewed, referrer, timestamps.
• Communications: messages you send to support and your support history.
• Cookies and similar technologies: see section 9.

3. Purposes and Legal Basis

We process your personal data for the following purposes:

• To provide the Service and fulfil your orders (legal basis: performance of a contract).
• To send transactional emails such as order confirmations, tickets, and receipts (performance of a contract).
• To send marketing emails and event recommendations where you have opted in (consent).
• To prevent fraud, secure the platform, and enforce our Terms (legitimate interests).
• To comply with tax, accounting, and other legal obligations (legal obligation).
• To analyse usage and improve the Service (legitimate interests, or consent for non-essential analytics).

4. How We Share Your Data

We do not sell your personal data.

We share personal data only with:

• Event organizers: we share attendee details with the organizer of each event you purchase tickets for, so they can manage entry, communicate with you, and meet legal obligations. Any other information requested as part of custom fields during ticket purchase is defined by the organizers and collected on their behalf.
• Payment processors and banks: to process payments and refunds.
• Hosting and infrastructure providers: to operate the Service.
• Email, SMS, and analytics providers: to send communications and measure usage.
• Authorities: where required by law, court order, or to protect rights, property, or safety.

5. Retention

We retain your data only as long as necessary for the purposes described above. Order, invoice, and tax records are retained for the period required by applicable accounting and tax law (typically up to 10 years). Account and usage data are deleted or anonymised after your account is closed, except where longer retention is required by law.

6. International Transfers

Your data is primarily stored within the European Economic Area. Where data is transferred outside the EEA (for example to certain sub-processors), we rely on appropriate safeguards such as European Commission Standard Contractual Clauses.

7. Your Rights

To exercise any of these rights, email [email protected] from the address associated with your account. We respond within 30 working days.

Subject to applicable law (including the EU GDPR and the Republic of Moldova's Law no. 133/2011 on personal-data protection), you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data (the "right to be forgotten") — see section 8.
• Restrict or object to certain processing.
• Port your data to another service in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of past processing.
• Lodge a complaint with a supervisory authority — for Moldova the National Centre for Personal Data Protection (www.datepersonale.md), or your local authority within the EEA.

8. Account Deletion

You can delete your unde.io account and the personal data associated with it at any time. To request deletion, send an email to [email protected] from the email address associated with the account, with the subject line “Delete my account”.

We will verify your identity, confirm the request, and action it within 30 working days. After deletion, we retain only the minimum information required by law (for example, invoice and tax records). Information that has been anonymised so that it can no longer identify you may be retained for statistical purposes.

Please note that tickets you have already purchased remain valid until the event takes place; for refund eligibility please contact the event organizer.

9. Cookies and Tracking

We use strictly necessary cookies to operate the Service (for example to keep you signed in and to remember your language and cart). We also use optional analytics and marketing cookies, which we set only with your consent.

You can manage cookie preferences in your browser settings at any time. Disabling strictly necessary cookies may prevent parts of the Service from working.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Security

We apply appropriate technical and organisational measures — including encryption in transit, access controls, and regular reviews — to protect your data. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date above always reflects the current version.

13. Language

This Privacy Policy is provided in English, Romanian, and Russian for your convenience. In the event of any discrepancy, ambiguity, or conflict between the English version and any translated version, the English version shall prevail and govern.

14. Contact

For questions about this Privacy Policy or to exercise your rights, contact us at [email protected] or at the address below: