Legal
Privacy
Last updated 5 November 2026
This notice explains what personal data VITA ARCANA processes, why, and your rights under the GDPR. Items in brackets will be completed once the organiser's legal registration in Greece is finalised.
Controller
[Legal name / trade name, AFM, registered address, contact email]. VITA ARCANA is an independent event organiser and is not affiliated with Deree – The American College of Greece.
What we collect
Priority list: your email, optional first name, the consent wording you agreed to and when.
Ticket orders: name, email, optional phone, tickets purchased, amount, payment status and the Stripe payment reference. We never receive or store card details — payments are processed by Stripe.
Admission: when and by which staff device a ticket was scanned.
Security: a salted, one-way hash of your IP address for rate limiting (raw IP addresses are not stored). Anonymous usage events (e.g. "page viewed") contain no personal data.
Why (legal basis)
Priority-list emails: your consent (Art. 6(1)(a)), which you can withdraw at any time.
Tickets, admission and customer support: performance of the contract (Art. 6(1)(b)).
Accounting and tax records: legal obligation (Art. 6(1)(c)).
Fraud prevention and platform security: legitimate interests (Art. 6(1)(f)).
Who processes it
Supabase (database hosting, EU region), Stripe (payments), Resend (transactional email), the website hosting provider and Reservify (technology provider). Venues or partners receive attendee data only where required for admission and only if stated for that event.
Retention
Priority list: until you unsubscribe. Orders and tickets: [retention period per accountant — typically as required by Greek tax law]. Rate-limit records: short-lived.
Your rights
Access, rectification, erasure, restriction, portability and objection; withdraw consent at any time via the unsubscribe link in every email. You may complain to the Hellenic Data Protection Authority (dpa.gr). Contact: [privacy contact email].