OPEN-AIR festival A donation to the Armed Forces of Ukraine from every ticket
Vechornytsi

Home — Privacy policy · Українською

Privacy policy

Version of 14 September 2026

This is an English translation of the Privacy Policy, provided for convenience. In case of any discrepancy between the Ukrainian and English versions, the Ukrainian version prevails.

This Privacy Policy explains what personal data is processed when you use the website https://vechornytsi.org (the "Website") and buy tickets on it, why, to whom the data is disclosed and what rights you have. The terms "Seller", "Buyer", "Event", "Ticket" and "Order" have the same meaning as in the Public Offer. A person who simply browses the Website is referred to in this Policy as a Website user.

1. Who is responsible for your data

1.1. Controller of personal data: individual entrepreneur (FOP) Tykhonov Yevhenii Oleksandrovych, taxpayer registration number (RNOKPP) 3288707697, address: 2b Myru Street, Lypliany village, Lutsk district, Volyn region, Ukraine (the "Seller" or "we").

1.2. Contact for all personal data matters: vechornytsi.org@gmail.com.

1.3. The Website runs on the tixy.shop ticketing platform. The technical operator of the platform processes data on behalf of the Seller and only to operate the Website.

2. What data we process

2.1. When you buy Tickets:

  • your e-mail address. We do not ask for your name, phone number or identity document details;
  • Order contents: Event, Tickets, seats or categories, amount, currency, promo code, time of checkout and payment;
  • the language you used on the Website;
  • your answer regarding news and announcements: whether you agreed to receive them, the version of the consent text and the time of your answer;
  • your choice regarding advertising and analytics services at the time of checkout;
  • parameters of the advertising campaign you came from (UTM tags), the site you came from and the page where you started on the Website;
  • payment status received from WayForPay.

2.2. You enter payment card details only on the WayForPay page. The Website does not receive or store them.

2.3. To protect against mass holding of Tickets, the IP address from which a hold was made is stored together with the hold record.

2.4. Technical request data (IP address, browser type, time of request) is processed by the Website's hosting and protection providers in order to deliver pages and repel attacks.

2.5. If you write to us, we process your e-mail address and the content of your message.

3. Cookies and statistics

3.1. Buyer session cookie. It is strictly necessary: without it, the selected Tickets cannot be held for you and the Order cannot be placed, so consent to it is not requested.

3.2. Advertising and analytics choice cookie. It stores your answer for 6 months so that we do not ask again.

3.3. Our own visit statistics work without cookies. We do not store IP addresses or device identifiers. To count unique visits per day, a hash with a salt that changes daily and is not stored anywhere is used, so a statistics record cannot be linked to a specific person. The visitor's country is received from the content delivery network (Cloudflare) without the IP address.

3.4. Advertising and analytics services (Google Analytics and Google Tag Manager, Meta Pixel, TikTok Pixel), if connected, are loaded only after your consent and only on the catalog and Event pages. These services may set their own cookies and process data under their own privacy policies. You can change your choice or withdraw consent at any time via the "Advertising and analytics" («Реклама і аналітика» in Ukrainian) link at the bottom of the page.

4. Purposes and legal bases

4.1. The legal bases for processing are set out in Article 11 of the Law of Ukraine "On Personal Data Protection" and, for persons in the European Union, Article 6 of the EU General Data Protection Regulation (GDPR).

  • Performance of the contract. Placing the Order, sending Tickets and e-mails about rescheduling or cancellation of the Event, entry control, refunds, answering requests.
  • Legal obligations. Accounting and tax records.
  • Consent. News and announcements by e-mail; advertising and analytics services. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
  • Legitimate interest. Preventing fraud and mass holding of Tickets, Website security, error monitoring and fixing, anonymous statistics, evaluating advertising campaigns based on the referral parameters stored with the Order.

5. Who we share data with

5.1. Data is received only by providers without which the Website cannot work, and only to the extent needed for their service:

  • WayForPay: accepting payments and making refunds;
  • Resend: delivery of e-mails with Tickets and notices;
  • Cloudflare: content delivery network, protection against attacks, file storage, including Ticket PDF files;
  • Neon: database located in the EU (Amazon Web Services, Frankfurt, Germany);
  • Railway: hosting of the Website application, EU region (Amsterdam, Netherlands);
  • Sentry: error monitoring, EU region; configured not to collect e-mail addresses, IP addresses or cookies;
  • Google, Meta, TikTok: only with your consent, as described in clause 3.4.

5.2. Data is disclosed to public authorities only in the cases and in the manner provided by law.

5.3. We do not sell personal data.

5.4. Some providers process data outside Ukraine and the EU, in particular in the USA. We use providers that assume contractual data protection obligations (standard contractual clauses or equivalent mechanisms), encrypt data in transit and restrict access to it.

6. How long we keep data

  • Order data: 3 years after the Event date, for accounting and tax records and for handling disputes. After that, the e-mail address is deleted or replaced with an irreversible value.
  • Consent to news and announcements: until you unsubscribe. After unsubscribing, only a record of the unsubscription is kept, so that you are not e-mailed again.
  • Advertising and analytics choice cookie: 6 months.
  • Request e-mails: as long as needed to reply and to handle a possible dispute.

7. Your rights

7.1. Under Article 8 of the Law of Ukraine "On Personal Data Protection" and, for persons in the EU, the GDPR, you have the right to:

  • know who processes your data and why, and access it;
  • have inaccurate data corrected;
  • have your data erased. On such a request we replace your e-mail address in Orders with an irreversible value and remove it from the subscriber list; Order contents and amounts remain for accounting. After that, Tickets or notices can no longer be sent to that address;
  • object to processing based on legitimate interest;
  • withdraw consent at any time;
  • unsubscribe from news via the link included in every news e-mail;
  • for persons in the EU: receive your data in a structured, machine-readable format;
  • lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights, and for persons in the EU, also with the data protection authority of their country.

7.2. To exercise a right, write to vechornytsi.org@gmail.com from the address you used for the Order. We may ask you to confirm that the address belongs to you, but we never ask for a card number or copies of documents. We reply within 30 calendar days at the latest.

8. Children

8.1. The Website is not intended for purchases made by children under 14 on their own. If you believe a child has provided us with their data without parental consent, write to us and we will delete that data.

9. Data security

9.1. Data is transmitted only over an encrypted connection (HTTPS). Only persons who need it for their work have access to Buyers' data, and this access is restricted at the database level. Ticket PDF files are kept in private storage and are available only via a private link.

10. Changes to this policy

10.1. A new version of the Policy is published on this page with its date. If a change concerns processing based on consent, we will ask for your consent again.