Naudojimosi taisyklės ir privatumo politika
MEDUSA Tickets TERMS OF USE
- The services provided on the Ticket Distributor’s website include ticket sales services and payment for them. As well as all other services that the Ticket Distributor provides on the website or may provide in the future.
- The Ticket Distributor “Medusa Concert”, UAB is an intermediary between the event organizer (service provider) and the ticket buyer. The Ticket Distributor does not organize events, therefore, does not assume responsibility for the event that did not take place, its postponement, quality or other issues related to the organization of the event. The event organizer is responsible for all this.
- Users can purchase tickets in the following ways:
- By registering on the website www.medusa.lt, i.e. create a user and receive login details.
- Without registering on the website www.medusa.lt, i.e. do not create a user account, only receive purchased e-tickets.
- At the “Medusa” box offices.
- At partner box offices that are authorized to distribute Medusa Tickets tickets.
- Before purchasing an e-ticket, each buyer must enter all or part of the requested personal data (name and surname; city; mobile phone number; e-mail address, in exceptional cases, the ticket delivery address) and consent to the processing of their personal data in order to properly provide the ticket sales service. If the ticket buyer does not agree to the processing of their data for the purpose of e-ticket sales and related services, they cannot purchase tickets online.
- Purchased e-tickets are generated after payment. They can be printed from the system or after receiving an e-mail with e-tickets to the specified e-mail address.
- The ticket distributor is not responsible for incorrect, inaccurate contact information provided during registration, ticket ordering and payment or later.
- One e-ticket can only be used once. The holder of an electronic ticket must not allow other persons to copy their ticket or to copy or otherwise reproduce it. In the event of copying a ticket, the person who first presented the ticket at the entrance control point will be admitted to the event. Copying electronic tickets is strictly prohibited. Persons who violate or attempt to violate this prohibition shall be held liable in accordance with the procedure established by the laws of the Republic of Lithuania.
- Before purchasing tickets, the user must inquire at the box office about discounts applied to tickets, age restrictions for visitors and free admission for children.
- Tickets may be subject to service or other fees. These fees are included in the ticket price and are determined separately for each event, depending on the event category, venue or organizer. To see the applicable fees, the user can find the tickets in the ticket cart by clicking the button marked with the letter "i". Discounts are not applicable to fees.
- Tickets may be subject to a venue fee. This fee is included in the ticket price. The venue fee is set for the ticket by the venue manager or operator. The venue fee is included in the general Service Fee line and is not separately identified and displayed to the user.
- An additional “E-ticket delivery fee” may be applied to tickets or a ticket basket. Users are informed about such a fee in advance, before payment.
- Invoices are issued in the self-service by logging into the “Invoices - Invoices” system only after the end of the event by the 10th of the following month. If you want to issue an invoice later, you must contact us by e-mail info@medusa.lt and provide a copy of the ticket or purchase receipt.
- It is prohibited to bring to events: drinks in any container, food products, weapons, sharp objects, animals, filming, photography and sound recording equipment (unless the organizer specifies otherwise).
- Information about events is provided by e-mail info@medusa.lt (charged according to the available plan).
- Anyone holding a ticket to an event agrees to abide by the internal rules of the venue where the event is taking place.
- Tickets are non-exchangeable and non-refundable. Money for tickets is refunded only if the event is cancelled, postponed or due to other circumstances for which the Organiser has instructed the Ticket Distributor to carry out the refund of Tickets and has ordered the Ticket Refund Service. Only the full ticket price is refunded to the Buyer. No other costs incurred by the consumer are reimbursed.
- Tickets are returned by contacting us by e-mail – info@medusa.lt, by sending a ticket return form, which includes the e-mail address that was specified when purchasing tickets in the “Medusa Tickets” system, the ID code of the ticket(s), the bank account number, the name and surname of the bank account holder who purchased the tickets, and the amount requested for refund. The money will be returned to the bank account specified in the form within 10 days. The buyer is responsible for providing the correct data.
- The ticket distributor “Medusa Tickets” is not responsible if the ticket was lost or damaged due to the buyer’s fault and therefore lost its functionality.
- The website www.medusa.lt has a security SSL certificate. An SSL certificate is an electronic document that allows you to establish the identity of the website and gain the trust of visitors. When using it, the information sent between the visitor’s browser and the server is encrypted.
- All payments are made through the bank's electronic banking system or through a payment collector selected by Medusa Concert, UAB.
- The Ticket Distributor's website may contain links to third-party websites. The Ticket Distributor is not aware of and is not responsible for the content of such websites and their privacy policy practices.
- The Ticket Distributor reserves the right to change the terms of use at any time without separately informing users. All changes come into effect upon their publication on the Ticket Distributor's website www.medusa.lt.
MEDUSA Tickets PERSONAL DATA COLLECTION AND PROCESSING RULES
GENERAL PROVISIONS
1. These rules describe the norms for the processing and protection of personal data of users of the ticket distribution system (Data Subjects).
2. These rules define the fundamental rights and freedoms of personal data, in particular the right of users to the protection and free movement of personal data.
3. The purpose of these personal data collection and processing rules (hereinafter referred to as the Rules) is to regulate the processing of personal data, ensuring compliance with and implementation of the Law of the Republic of Lithuania on the Legal Protection of Personal Data (Official Gazette, 1996, No. 63-1479; 2003, No. 15-597) (hereinafter referred to as the Law on the Legal Protection of Personal Data), other laws and legal acts regulating the processing and protection of personal data.
4. These Rules apply to all Persons, including Persons who have not registered in the online store, to the extent that this does not contradict the Purchase Rules and the legal acts of the Republic of Lithuania.
5. Employees of the ticket distribution system authorized to process personal data must comply with these Rules, must be familiarized with them against signature and have a copy of the Rules. Employees of the ticket distribution system, when performing their duties and processing personal data, must comply with the basic principles of personal data processing and the confidentiality and security requirements established in the ADTAĮ and these Rules.
6. The concepts used in the Rules correspond to the concepts used in the ADTAĮ.
7. The provisions of the Rules cannot expand or narrow the scope of application of the Law and contradict the principles of personal data processing established in the ADTAĮ and other legal acts regulating the processing of personal data.
8. The Data Protection Officer appointed by the Director's order (2018-05-03, No. 20180503) ensures that the rights of the data subject are properly implemented and all necessary information is provided to the data subject in a clear, understandable and acceptable form.
RIGHTS AND OBLIGATIONS OF THE DATA SUBJECT
9. The data subject agrees that his/her data will be managed and processed by Medusa Concert, UAB, registered address Aušros takas 10 - LT- 44211 Kaunas, Company code: 135812959, VAT code: LT358129515. Personal data protection specialist e-mail info@medusaconcert.lt.
10. The data subject agrees to provide all or part of the data specified below: E-mail address; Name and surname; Phone number; City; In exceptional cases, the ticket delivery address.
11. The data subject shall provide the data requested in point 2 on the website www.medusa.lt:
On the user registration page;
On the user login page without registration;
12. The Buyer ensures that the personal information provided by him/her on the Ticket Distributor’s website is complete and correct.
13. The purpose of processing and collecting the data provided by the data subject is the sale of E-Tickets and the provision of related services, such as reprinting, resending the purchased ticket, identifying the ticket owner, etc.
14. The data subject confirms his/her consent to the management of his/her data by the Data Controller for the purpose specified in point 13 by checking the box on the pages of the website specified in point 11.
15. The data subject may not agree to the management of his/her data by the Data Controller for the purpose specified in point 13 by not checking the box on the pages of the website specified in point 11. In such a case, the data subject may not purchase tickets on the website www.medusa.lt.
16. The data provided by the data subject is stored in the Ticket Distributor's system for no longer than 6 years from the visitor's last login.
17. The Buyer agrees that the Ticket Distributor may disclose the personal data provided by the Buyer to third parties, with his written permission or without his consent, when such disclosure is required by applicable laws or competent authorities.
18. If the Buyer, when purchasing tickets on the Ticket Distributor's website, registered in the system and received user logins, he may at any time correct and/or supplement personal data in his account. The Buyer is responsible for the correctness of the corrected and/or supplemented data.
19. If the Buyer has received and has logins to the Ticket Distributor's system, he must protect his login name and password and not disclose them to any third parties.
20. If the Buyer purchased tickets without registering in the system and does not have user logins, he may do so by contacting the personal data protection specialist by e-mail.
21. The user may express a desire to be removed from the database by clicking the appropriate button in his/her account, if he/she is registered in the system. When the user clicks the delete account button, the system automatically removes the user and the information related to him/her from the system.
22. The buyer has the right to access his/her personal data and for the purposes of their management, by sending an official request to the Ticket Distributor with a copy of an identity document. The Ticket Distributor, upon receiving such a request, shall within 5 days provide a response to the buyer, indicating what data about the buyer it has and how it is processed and used. The data shall be provided in a structured, commonly used and computer-readable format. Such data shall be provided free of charge once per calendar year per buyer. Requests submitted by the same buyer in the same year shall be considered disproportionate due to their repetitive content and shall be subject to a service fee of €1.
23. The Buyer also has the right to request the suspension of the processing of personal data. The Ticket Distributor, upon receiving a request to suspend the processing of the Buyer's data, shall within 2 days. d. delete the Buyer's data and systems. Once the Buyer's data has been removed, it cannot be restored.
24. If the Buyer is not satisfied or believes that his/her data is being processed incorrectly, he/she has the right to contact the VDAI.
25. The Buyer has the right to request the restriction of data processing. In order to restrict the processing of his/her data, the Buyer must submit a written or electronic request to the Ticket Distributor. The Buyer may request the restriction of the processing of his/her data only if one of the following applies: - the personal data subject contests the accuracy of the data for a period during which the data controller can verify the accuracy of the personal data;
the processing of personal data is unlawful and the data subject does not agree to the data being erased and instead requests the restriction of their use;
the controller no longer needs the personal data for the purposes of the processing, but the data subject requires them for the establishment, exercise or defence of legal claims; the data subject has objected to the processing pursuant to Article 21(1) of XXX, pending verification whether the legitimate grounds of the controller override those of the data subject.
RIGHTS AND OBLIGATIONS OF THE DATA CONTROLLER AND PROCESSOR
26. The data controller and data processors must implement appropriate organizational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing. The aforementioned measures must ensure a level of security that is appropriate to the nature of the personal data to be protected and the risks posed by their processing, and are set out in this document.
27. The data controller processes all or part of the data subjects' data specified below:
E-mail address;
Name and surname;
Telephone number;
City;
In exceptional cases, the ticket delivery address;
28. The data controller receives the data specified in paragraph 27 from the website www.medusa.lt:
User registration page;
User login page without registration;
29. The Data Controller considers that the personal information provided by the data subjects specified in point 27 is complete and correct.
30. The purpose of the data processed by the Data Controller is the sale of e-tickets and the provision of related services, such as reprinting, resending of the purchased ticket, identification of the ticket owner, etc.
31. The Data Controller considers that the data subjects are familiar with these rules when, when filling in the pages specified in point 28, they tick the box indicating that they agree to these Purchase Rules.
32. The Data Controller provides the opportunity to object to the data subject's data being managed for the purpose specified in point 30 by the Data Controller without ticking the box on the website pages specified in point 28. In such a case, the Data Controller cannot provide services to the data subject.
33. The Data Controller stores the data provided by the data subject in the Ticket Distributor's system for no longer than 6 years from the date of the data subject's e-ticket purchase. last login.
34. The Data Controller reserves the right to disclose personal data provided by the Data Subject to third parties with his/her written permission or without his/her consent, when such disclosure is required by applicable laws or competent authorities.
35. The Data Controller grants the right to correct the data provided by the Data Subject in the following ways:
If the Data Subject, when purchasing tickets on the Ticket Distributor's website, registered in the system and received user logins, he/she may correct and/or supplement personal data in his/her account at any time. The Data Subject is responsible for the correctness of the corrected and/or supplemented data.
If the Data Subject purchased tickets without registering in the system and does not have user logins, and wishes to correct them and/or generally delete the data provided by the buyer and held by the Ticket Distributor, he/she may do so by contacting the Personal Data Protection Specialist by e-mail.
36. The Data Controller grants the Data Subject the right to express his/her desire to be removed from the database by clicking the appropriate button in the Data Subject's account, if he/she is registered in the system. When the User clicks the delete account button, the system automatically removes the User and the information related to him/her from the system.
37. The Data Controller grants the right to access the personal data of the Data Subject held by the Ticket Distributor and for the purposes of their management, upon receipt of an official request with a copy of an identity document. The Ticket Distributor, upon receipt of such a request, shall within 5 days provide a response to the Data Subject, indicating what data it has about him/her and how it is processed and used. The data shall be provided in a structured, commonly used and computer-readable format. Such data shall be provided free of charge once per calendar year per buyer. Requests submitted by the same buyer in the same year shall be considered disproportionate due to their repetitive content and shall be subject to a service fee of €1.
38. The Data Controller grants the Data Subject the right to suspend the processing of personal data upon request. The Ticket Distributor, upon receipt of a request to suspend the processing of the Buyer's data, shall within 2 days. d. remove the Buyer's data and systems in its possession. Once the Buyer's data has been removed, it cannot be restored. 39. The Data Controller grants the Data Subject the right to apply to the VDAI if the Data Subject is not satisfied or believes that his/her data is being processed incorrectly.
40. The Data Controller grants the Data Subject the right to request restriction of data processing. The Data Controller, upon receipt of a written or electronic request, shall restrict data processing for the purpose specified in paragraph 30 of these Rules. The Data Subject may request restriction of their data processing only if one of the following cases applies:
the personal data subject contests the accuracy of the data for a period during which the Data Controller may verify the accuracy of the personal data;
the processing of personal data is unlawful and the data subject does not consent to the erasure of the data and instead requests the restriction of their use; to the data controller
PERSONAL DATA PROTECTION MEASURES
41. Users' personal data are processed automatically.
42. Users' personal data and personal data protection measures are reviewed and updated periodically once every 2 years.
43. The security level of automatically processed personal data is the first.
44. In order to ensure the first security level, the following organizational and technical personal data security measures have been implemented:
45. protection, management and control of access to personal data are ensured;
46. access to personal data may be granted only to the person for whom the personal data are necessary to perform their functions.
47. only those actions may be performed with personal data for which the user is granted rights.
48. passwords for access to personal data are granted, changed and stored ensuring their confidentiality. Passwords are unique, consist of at least 8 characters, without using personal information; are changed at least once every 2 months. User passwords are mandatory changed by the user upon first login.
49. Personal data protection is ensured against unauthorized access to the internal computer network by electronic means of communication.
50. All data provided by Individuals is securely stored on the Company's servers;
51. Computer equipment protection against malicious software is ensured (installation, updating of antivirus programs, etc.).
52. In order to protect users, an SSL certificate is installed on the Ticket Agent website. An SSL certificate is an electronic document that allows the identity of the website to be determined. When used, information sent between the visitor's browser and the server is encrypted. All payments are made through the electronic banking system of the bank chosen by the user or through an official payment collector.