## Privacy Policy and Platform Rules ### 1. About this page This page explains how **STATUS 200 OK** (hereinafter: **"platform"**) processes personal data and sets the basic **rules for using the platform** for discovering events and purchasing tickets. These are the **general rules of the platform**. Each **individual event** may have its own **Terms of Service / Event Rules**, defined by the event organizer. Those terms are **separate from this page** and **you MUST read and accept them before participating in any event**. STATUS 200 OK has a **contract with each organizer**, which regulates the use of the platform for ticket sales and related services. The **organizer is responsible** for the organization and execution of the event and for the event‑specific terms that apply between you and the organizer. By registering, purchasing a ticket, or otherwise using the platform, you confirm that you have read, understood and agree with this Privacy Policy and Platform Rules. --- ### 2. Role of STATUS 200 OK - **Platform operator**: STATUS 200 OK operates the technical platform that allows organizers to publish events and users to buy tickets. - **Contract with organizers**: STATUS 200 OK has a **separate contract with each organizer** that regulates ticket sales, use of the platform and settlement of payments. - **Not the event organizer**: Unless clearly stated otherwise, STATUS 200 OK is **not the organizer** of the events. The organizer is solely responsible for the event, its content, schedule and conditions. - **Event‑specific terms**: For every event, the **organizer’s Terms of Service / Event Rules** apply between you and the organizer. You are responsible for reading and accepting those terms before purchasing a ticket or attending the event. --- ### 3. Platform rules for users When using the platform, you agree to: - **Provide accurate information** when creating an account, purchasing tickets or communicating with us. - **Protect your login details** and not share your account with unauthorized persons. - Use the platform **only in accordance with the law**, without fraud, abuse or attempts to disrupt the technical operation of the platform. - Purchase tickets **only for yourself or for other persons with their consent**, and inform them about the applicable event terms. - **Respect the rules of each event**, including age restrictions, security rules, access conditions, and any special restrictions defined by the organizer. - Not resell or transfer tickets in ways that are prohibited by the organizer or applicable law. If we reasonably suspect fraud, abuse or breach of these rules or of the event terms, we may temporarily or permanently **limit or block access** to your account and/or cancel orders in cooperation with the organizer and/or the payment service provider, in accordance with the law. --- ### 4. Event terms and organizer responsibility - For each event, the organizer may publish **separate Terms of Service, house rules, refund and cancellation rules, age limits or other specific conditions**. - These terms apply **in addition** to this page and form the **contractual relationship between you and the organizer**. - STATUS 200 OK is **not responsible** for changes to the event (time, place, line‑up, cancellation, etc.) made by the organizer, but we will **technically support** the implementation of the organizer’s decisions regarding refunds, exchanges or other solutions, where applicable. - Before finalizing a purchase, you are obliged to **review the event details and organizer terms** and to confirm that you agree with them. --- ### 5. What personal data we collect When you use the platform, we may process the following categories of personal data: - **Account and identification data**: name and surname, email address, password (stored in encrypted form), contact phone and other data that you voluntarily provide when creating or updating your profile. - **Transaction and order data**: information about purchased tickets and orders (events, quantities, prices, discounts, payment status), invoices and other information related to your purchases. - **Technical and usage data**: IP address, device and browser information, log data, and basic usage information (for example, pages visited, time of access, actions taken on the platform) that are necessary for security and for improving the service. - **Communication data**: messages and requests that you send to us via forms, email or other channels available on the platform, as well as your consents and preferences (for example, for receiving marketing messages). During payment, the platform **does not have access to the full data of your payment card or bank account**. Payment card data is processed by the **bank and/or payment service provider** in a secure environment, in accordance with their rules and security standards. The platform does not store complete card numbers or security codes. --- ### 6. Why we use your data We process your personal data for the following purposes: - **Providing the service**: enabling you to create an account, log in, browse events, purchase tickets, receive tickets and invoices, and access events. - **Execution of contracts**: fulfilling our contractual obligations towards you as a user and towards organizers, based on the contracts between STATUS 200 OK and the organizers. - **Communication with you**: sending confirmations, notifications and important information related to your account, orders and events (for example, changes to date or venue, access instructions, or security notifications). - **Customer support**: answering your questions, resolving complaints and assisting you in using the platform. - **Security and fraud prevention**: protecting the platform, organizers and users from abuse, unauthorized access and fraudulent activities. - **Improvement of the service**: analyzing aggregated and anonymized data to improve the functionality, performance and user experience of the platform. - **Legal obligations**: fulfilling obligations arising from applicable regulations, including accounting, tax and consumer protection rules, as well as obligations related to the protection of personal data. Your personal data will **not** be processed for purposes that are incompatible with the above. If processing for another purpose is needed, we will do so **only on the basis of your prior consent** or another legal basis permitted by law. --- ### 7. Legal basis and retention periods We process your personal data on one or more of the following legal bases: - **Execution of a contract** with you (for example, when you purchase a ticket or create an account). - **Compliance with legal obligations** (for example, accounting and tax rules or obligations arising from regulations on personal data protection). - **Legitimate interest** of the platform (for example, preventing fraud, improving the service, protecting the security of systems and users), provided that such interests are not overridden by your rights and freedoms. - **Your consent**, when required by law (for example, for certain marketing communications). We store your personal data **only for as long as necessary** to achieve the purposes described above, or for as long as required by applicable law (for example, for accounting records). After the expiry of these periods, the data is deleted or anonymized in a secure manner. --- ### 8. Sharing of personal data We may share your personal data only with: - **Event organizers**, for the purposes of: - identifying participants and managing access to the event, - communicating important information related to the event, - resolving complaints or incidents related to the event. - **Payment service providers and banks**, in order to process payments for tickets and refunds, in accordance with their rules and security standards. - **Service providers (processors)** who provide hosting, email, SMS, analytics, IT support or other services necessary for the operation of the platform, with whom we have concluded agreements on the processing of personal data and who are obliged to protect the data. - **Competent authorities and institutions**, when we are legally obliged to do so (for example, courts, regulatory bodies, inspection authorities). We do not sell your personal data. Every transfer of data is carried out in accordance with the regulations for personal data protection that apply in the Republic of Macedonia and, if applicable, in other relevant jurisdictions. --- ### 9. Your rights In accordance with the regulations for personal data protection, you have the right to: - **Access** your personal data that we process. - **Request correction** of inaccurate or incomplete data. - **Request deletion** of data in cases provided by law (for example, when the data is no longer necessary for the purposes for which it was collected). - **Request restriction of processing** in certain situations. - **Object** to certain types of processing that are based on our legitimate interest. - **Withdraw consent**, when data is processed on the basis of your consent, without affecting the lawfulness of processing based on consent before its withdrawal. To exercise your rights or to obtain additional information about the processing of personal data, you can contact us through the contact details available on the platform. We will respond to your request in accordance with the applicable regulations and within the legally prescribed deadlines. --- ### 10. Cookies and technical data The platform may use **cookies and similar technologies** to: - ensure the basic functioning of the site (for example, keeping you logged in), - improve performance and user experience, - analyze usage in an aggregated and anonymized way. Details about the types of cookies used and your choices may be described in a separate Cookie Policy, if available on the platform. --- ### 11. Changes to this Policy The platform may update this Privacy Policy and Platform Rules from time to time. When we do so, we will **publish the updated version on the platform** and, if the changes are significant, we may additionally notify you (for example, by email or through a notice in your account). It is your responsibility to **periodically review this page** and to be informed about any changes. Continued use of the platform after the publication of changes means that you accept the updated Policy. --- ### 12. Acceptance By continuing to use the platform, creating an account, purchasing tickets or participating in an event, you confirm that: - you have read and understood this **Privacy Policy and Platform Rules**, - you accept these rules as **platform rules**, - you understand that **each event has its own Terms of Service / Event Rules** that you **must read and accept** before participation, - you understand that **STATUS 200 OK has a contract with each organizer**, and that the organizer is responsible for the event and the event‑specific terms. If you do not agree with this Policy and these rules, please stop using the platform and do not purchase tickets through it. Date of last update: March 2026