Last updated: January 27, 2026

1. Identity of Data Controller

The data controller responsible for your personal data is:

• Name: VeriTicket
• Email: privacidad@veriticket.lat
• Data Protection Officer: You can contact our Data Protection Officer at privacidad@veriticket.lat

2. Data We Collect

2.1 Organizer Data

When you register as an event organizer, we collect:

• Identification data: Full name, ID number or RUC (tax ID), address.
• Contact data: Email address, phone number.
• Financial data: Bank information for payment transfers.
• Usage data: Information about your activity on the platform, events created, sales made.

2.2 Buyer Data

When you make a ticket purchase, we collect:

• Identification data: Full name, ID number.
• Contact data: Email address, phone number (when applicable).
• Transaction data: Purchase history, tickets acquired.

2.3 Technical Data

We automatically collect certain technical information, including:

• IP address.
• Browser type and version.
• Operating system.
• Cookie data and similar technologies.
• Device information.

3. Purpose of Processing

3.1 Primary Purposes

Your personal data will be processed for the following essential purposes:

• Provision of ticket management and sales service.
• Processing of payments and transfers.
• Generation and delivery of digital tickets.
• Communication related to your purchases or events.
• Identity verification and fraud prevention.
• Technical support and customer service.
• Compliance with legal and tax obligations.

3.2 Secondary Purposes

With your express consent, we may process your data for:

• Sending marketing and promotional communications.
• Satisfaction surveys and service improvement.
• Statistical and market analysis (in anonymized form).

4. Legal Basis for Processing

The processing of your personal data is based on the following legal bases under the LOPDP:

4.1 Consent (Art. 7 LOPDP)

For platform registration and data processing for marketing purposes, we obtain your free, specific, informed, and unambiguous consent.

4.2 Contract Performance

Processing is necessary for the provision of our services and fulfillment of the contractual relationship.

4.3 Legal Obligations

Certain processing is necessary to comply with legal obligations, including tax regulations and anti-money laundering requirements.

5. Data Retention Period

We will retain your personal data for the following periods:

• Account data: For the duration of the contractual relationship plus 5 additional years.
• Transaction data: 7 years, in accordance with Ecuadorian tax obligations.
• Technical logs: 12 months.
• Marketing data: Until you withdraw your consent.

6. ARCO Rights

In accordance with the LOPDP, you have the following rights over your personal data:

6.1 Right of Access

You can request information about what personal data we have stored and how we process it.

6.2 Right of Rectification

You can request the correction of inaccurate or incomplete personal data.

6.3 Right of Cancellation (Erasure)

You can request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.

6.4 Right of Opposition

You can object to the processing of your data for certain purposes, especially for direct marketing.

6.5 Right of Portability

You can request to receive your data in a structured, commonly used format.

6.6 How to Exercise Your Rights

To exercise any of these rights, you can contact us at:

• Email: privacidad@veriticket.lat

We will respond to your request within a maximum period of 15 business days.

7. Data Transfers

Your personal data may be shared with:

7.1 Event Organizers

Data necessary for event management and ticket validation is shared with the corresponding organizer.

7.2 Payment Processors

We share necessary data with our payment service providers to process transactions.

7.3 Technical Providers

We use cloud service providers and other technical tools that may process data on our behalf.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption: We use TLS/SSL protocols for secure data transmission.
• Access control: Restricted access to personal data only to authorized personnel.
• Monitoring: Intrusion detection systems and continuous monitoring.
• Backups: Regular backups and recovery procedures.
• Training: Staff trained in data protection and information security.

9. Cookies and Similar Technologies

We use cookies and similar technologies to enhance your experience on our platform. These technologies allow us to:

• Keep your session active.
• Remember your preferences.
• Analyze platform usage for improvements.
• Display relevant content.

You can manage your cookie preferences through your browser settings.

10. Minors

The VeriTicket platform is not intended for persons under 18 years of age. We do not knowingly collect personal data from minors. If you become aware that a minor has provided personal data, please contact us so we can proceed with deletion.

11. Updates to This Policy

We may update this Privacy Policy periodically. Any changes will be posted on this page with the corresponding update date. We recommend reviewing this policy regularly.

12. Contact

If you have questions, comments, or concerns about this Privacy Policy or the processing of your personal data, you can contact us:

• Email: privacidad@veriticket.lat

You may also file a complaint with Ecuador's Personal Data Protection Authority if you believe your rights have been violated.