Codiqo AB’s privacy policy for ZipperTic users

1. Introduction

1.1. ZipperTic is a trademarked solution owned by Codiqo AB (org. number 559223-0550). This Data Privacy Policy will explain how Your personal data is collected and dealt with when using the ZipperTic application and websites.
1.2. ZipperTic generates a digital personal ticket to enter events in a safe way, addresses the issues with the unwanted secondary market and the issues with digital fake tickets. You can always sell Your digital personal ticket to anyone through ZipperTic.
1.3. This policy adheres to the current legal framework in relation to data processing and with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
1.4. Your acceptance of ZipperTic's Terms and Conditions (The Agreement) and acceptance of this Data Protection Policy upon registration on ZipperTic are the legal basis for collecting and using personal data about You.
1.5. Codiqo AB is Data Controller for all personal data we collect about You.

2. What data do we collect?

2.1. Personal identification information (name, mobile number, device ID, email, personal number, document number (for example passport number) and physical address).
2.2. We also collect data on how You use the ZipperTic Services.
2.3. When You reserve a ticket for someone who is not registered on ZipperTic, we store a temporary phone number and the name of the person You reserved the ticket to.

3. How do we collect the data?

3.1. When registering and agreeing with the terms and conditions to use the ZipperTic Service, Your name, mobile number, device ID, personal number and email address are collected from You directly and indirectly when You identify Yourself with mobile electronic ID (for example BankID in Sweden) and when You complete a purchase. We may also get information (for example, Your address) about You from government agencies or other authorized bodies where permitted or required by law. We also store data on how You use the ZipperTic services. When You reserve a ticket for a person who is not registered with ZipperTic, we ask You for the phone number and name of the person You reserve the ticket for. There is a legitimate interest in using the temporarily stored personal data of the unregistered friend to deliver the ticket once the friend registers on ZipperTic. However, we recommend that you obtain the unregistered friend’s consent before reserving a ticket for them on ZipperTic. If the unregistered person does not claim their ticket, we will delete their personal data immediately after the event has concluded. (Compare this to a flower delivery service, which needs personal data to surprise and deliver flowers to someone who has not consented to the use of their personal information.)

4. How do we use Your data?

4.1. To manage Your account.
4.2. To communicate and complete a purchase.
4.3. To communicate and complete a refund of Your purchase.
4.4. To understand, diagnose, troubleshoot, and fix issues with the ZipperTic Service.
4.5. When ZipperTic processes Your order, it may send Your data, and also use the resulting information from our partner managing the checkout.
4.6. If You agree, Codiqo AB will share Your data with our partner companies so that they can offer You their services: a) Promoters of events that You have bought tickets and/or merchandise to; b) Artists of events that You have bought tickets and/or merchandise to; c) Promoters’ partners, such as hotels, travel companies, local partners and the providers of administrative services and system services that have been engaged by the promoter to deliver the service(s) You have purchased.
4.7. We may also commercially use Your data on an aggregated level, without revealing Your identity.
4.8. To comply with legal obligations and law enforcement requests.
4.9. When a friend of Yours is paying or reserving a ticket for You, Your name is displayed to Your friend, making sure that the ticket is paid or reserved to the right person. You can opt out of the service in the setting later on.
4.10. When You reserve a ticket for someone who is not registered on ZipperTic, we store a temporary phone number and the name of the person You reserved the ticket for. The person's name and phone number are only used to deliver the reservation to the right individual. ZipperTic does not send any messages to anyone before they have registered, so it is important that You notify the person that You have reserved a ticket on ZipperTic. If the person does not pay and collect their ticket on time, the reservation expires, and the person's name and phone number are immediately deleted in the ZipperTic system.
4.11. To send push notifications to You we share a number (and device ID) connected to You, with our partner that delivers push notifications for us.
4.12. When scanning your document to deliver a purchase or to permit access to the event.

5. How does a card issuer use Your data?

5.1. The tickets purchased using ZipperTic are to be paid for with a charge/credit card (VISA or Mastercard) that You have registered in the app.
5.2. A card issuer processes the personal data that You have submitted to the card issuer. When users make payments using the Service, the card issuer may process this data for the purpose of providing information and marketing to You.
5.3. You may, at any time, contact the card issuer and revoke their consent to the processing of personal data for marketing purposes.

6. How do we store Your data?

6.1. ZipperTic and thereby Your data is hosted and stored in our cloud-based IT-infrastructure provider’s datacenters in EU/EEA. The data is stored in a private- cloud with strict firewall rules to prevent unauthorized organizations to access the data. All data in the private cloud will be encrypted and data transmission to the private- cloud is ensured with HTTPS connection (SSL protocol).
6.2. Codiqo AB will keep Your personal identification data as long as You are registered with ZipperTic. Once You have deleted Your ZipperTic account we will delete Your data by anonymizing the data. We will never process Your personal data for a period longer than permitted by the applicable laws, regulations, practices or governmental decisions. For example, data may be stored longer if stipulated by the Consumer Purchases Act or the Accounting Act.
6.3. The users information and payments are secured via Svea Ekonomi Close Payment gateway. The card number is sent via an encrypted channel directly to the issuing bank. No card information or account details are stored within the application. Svea Ekonomi adheres to the regulations under the industry standard Payment Card industry Data Security Standard (PCI-DSS).

7. Marketing

7.1. Promoters and artists of the events in ZipperTic want to send You information of new events, discounts and other offers that they think You might like.
7.2. You can opt out in different ways:
7.3. 1. Use the ‘forget Event’ function in ZipperTic if You don’t like to receive information from one or several events. Please note that this option should only be used after the event as the ticket will be erased as well.
7.4. 2. You can choose not to receive push notification in settings for ZipperTic. - Contact the promoter/artist telling them that You don’t want to receive any marketing mails from them.
7.5. 3. Contact Codiqo AB (info@zippertic.se).

8. What are Your data protection rights?

8.1. Codiqo AB would like to ensure that You are fully aware of Your protection rights.
8.2. Every user has the right to:
8.3. 1. Request Codiqo AB for copies of Your personal data. We may charge You a small fee for this.
8.4. 2. Request that we correct any information You believe is inaccurate. You have also the right to request Codiqo AB to complete any data You believe is incomplete.
8.5. 3. Request that Codiqo AB erase Your personal data, under certain restrictions.
8.6. 4. Request that Codiqo AB restrict the processing of Your personal data, under certain restrictions.
8.7. 5. Request that Codiqo AB transfer the data we have collected to another organization, or directly to You, under certain restrictions.
8.8. You can exercise some rights (right to erase Your data for a specific event, delete Your account, correct some personal identification information or hide Your name to other users) under the profile section in the ZipperTic app and website.
8.9. If You make a written request, we have one month to respond to You. If You want to exercise any of these rights, please contact us at info@codiqo.com.

9. Privacy policies on other websites

9.1. ZipperTic contains links to other websites. Our data privacy policy only applies to ZipperTic’s app and website, so if You click on a link to another website, You should read their privacy policy.

10. Changes to our privacy policy

10.1. Codiqo AB keeps its privacy policy for ZipperTic’s users under regular review and places any updates on this web page. This privacy policy was last updated on 2021-05-17.

11. How to contact us

11.1. If You have any question about Codiqo AB’s privacy policy, the data we hold on You, or You would like to exercise on of Your data protection rights, please don’t hesitate to contact us at info@codiqo.com.

12. How to contact the appropriate authorities

12.1. Should You wish to report a complaint, or if You feel that Codiqo AB has not addressed Your concerns in a satisfactory manner, You may contact the Integritetsskyddsmyndigheten (IMY), https://www.imy.se.