Version effective from 22 September 2026.

These Terms apply to the purchase of event tickets on www.medusa.lt and to the use of “MEDUSA Tickets” ticket distribution services. The Privacy Policy section explains how personal data are processed when using the website and purchasing tickets.

PART I. “MEDUSA Tickets” Terms of Use

1. Who provides the service and who organises the event?

The “MEDUSA Tickets” ticket distribution service is provided by UAB “Medusa Concert”. Depending on the specific event, UAB “Medusa Concert” may act as the ticket distributor, the event organiser, or both.

Where an event is organised by another person or entity, the specific event organiser and its contact details are indicated in the event description and/or on the ticket. The event organiser is responsible for the event content, programme, performers, venue, date, delivery of the event and other organisational matters to the extent such responsibility lies with the organiser under applicable law. UAB “Medusa Concert” is responsible for the ticket distribution and other services it provides.

Before purchasing a ticket, the purchaser has the opportunity to review these Terms, the description of the specific event and, where applicable, any additional rules of the event organiser or venue.

2. Information about the event and the ticket

Before purchase, the page of the specific event provides the essential information required to make a purchasing decision, including the event name, organiser, venue, date, start time, ticket price and, where applicable, seat, age restrictions, accessibility or other important conditions.

The ticket contains the information required by law, including details of the service provider (event organiser), the name of the service, venue, date, start time, price, the assigned seat where applicable, and information on ticket refund and exchange conditions or a reference to the applicable rules.

If special conditions apply to a specific event, they are presented in a manner that allows the purchaser to review them before confirming the order. Special conditions apply only to the extent that they do not conflict with mandatory consumer protection provisions.

3. Purchasing tickets and placing an order

Tickets may be purchased at www.medusa.lt with or without a user account, as well as at “Medusa” or partner box offices where such box offices are available at the relevant time.

The purchaser must provide accurate data required for the order. If a ticket cannot be delivered or the purchaser cannot be properly informed about the order due to an incorrect email address, telephone number or other data provided by the purchaser, the purchaser is responsible for such consequences to the extent they arise from the incorrect data supplied.

Before finally submitting the order, the purchaser sees the main characteristics of the selected event and tickets, the number of tickets, the total amount payable and applicable fees. When placing a paid order, the purchaser must clearly confirm that the order entails an obligation to pay.

The order is considered accepted when payment has been successfully confirmed and the “MEDUSA Tickets” system has generated the order and ticket(s). After purchase, the purchaser receives by email and/or another durable medium the order confirmation, ticket(s) and information on the applicable contractual terms, or a reference to them in a form that allows the purchaser to save the information and reproduce it unchanged at a later time.

4. Prices, fees and payment

All prices and fees that the consumer is required to pay are displayed before the final submission of the order. The final amount payable includes the ticket price and all mandatory fees applicable to the specific order. No additional paid service may be added without the purchaser’s clear choice.

Available payment methods are indicated on the website before the order is submitted. Payment is made through the selected bank, payment service provider or another payment method indicated on the website. “Medusa” generally does not receive or store online banking credentials or full payment card details where these are entered in the payment service provider’s environment.

5. Delivery and use of electronic tickets

Once the order has been successfully paid, electronic tickets are made available in the system and/or sent to the email address provided by the purchaser. The purchaser must check that the ticket has been received and that the information shown on it corresponds to the order.

One electronic ticket entitles the holder to one admission unless the conditions of the specific event state otherwise. The ticket QR code or barcode must not be published or copied in a way that could allow another person to use it. If several copies of the same ticket are presented, the first person presenting a valid code is admitted to the event, unless the organiser provides otherwise.

If the ticket is not received, is lost or damaged, or another technical issue arises, the purchaser may contact info@medusa.lt and provide the information necessary to identify the order.

6. Event rules and admission

The ticket holder must comply with the lawful internal, safety and conduct rules of the specific event and venue. Information on age restrictions, admission of children, discounts, seated or standing areas, accessibility for persons with disabilities, prohibited items and other essential conditions is provided in the event description and/or the organiser’s or venue’s rules.

It may be prohibited to bring weapons, dangerous or sharp objects, food or beverages, professional photography, filming or audio-recording equipment, animals or other items specified by the organiser into the event, except where exemptions are provided by law or by the conditions of the specific event.

7. Ticket exchanges, refunds and the right of withdrawal

Important: the 14-day right of withdrawal applicable to distance contracts does not apply to tickets for events where the service is to be provided on a specific date or during a specific period. Therefore, a purchaser’s change of mind alone does not create a right to return the ticket.

The possibility of exchanging or refunding tickets in other cases is determined by the conditions of the specific event and applicable law.

If an event does not take place for reasons not attributable to the consumer, the purchaser is entitled, in accordance with applicable law, to a refund of the amount paid for the service not provided, including mandatory ticket-related fees to the extent they form part of the price of the service not provided. If an event is rescheduled or materially changed, the purchaser will be informed separately about their rights and the applicable refund procedure, taking into account the nature of the specific change and the requirements of applicable law.

Where UAB “Medusa Concert” is authorised to process a refund, the purchaser may be asked to provide the order or ticket identifier, the email address used for the purchase and, where necessary for the refund, bank account details. Where technically possible, the refund is made using the same payment method that was used for the original payment.

8. Invoices and purchase documents

Where the self-service system provides this function, an invoice is issued using the data entered in the system. For issuance or correction of an invoice, the purchaser may contact info@medusa.lt and provide information identifying the order or ticket. Accounting documents are retained for the period required by law.

9. Website operation and liability

UAB “Medusa Concert” uses reasonable efforts to ensure the operation of the website and ticketing system. Temporary disruptions may occur due to telecommunications operators, banks, payment service providers, third-party systems, technical maintenance, force majeure or other circumstances reasonably beyond the control of “Medusa”.

The website may contain links to third-party websites or services. The relevant third parties are responsible for their content and operation. Nothing in these Terms limits any consumer rights that cannot be contractually restricted under applicable law.

10. Complaints and consumer disputes

Questions regarding tickets, orders, invoices, event changes or refunds may be submitted by email to info@medusa.lt.

A consumer who believes that their rights or legitimate interests have been infringed must first contact the seller or service provider in writing and state a specific request. It is recommended that such a request be submitted no later than within 3 months from the day the consumer became aware or should have become aware of the possible infringement. The consumer’s request is examined free of charge and, where the request is rejected or only partially satisfied, a reasoned written response is provided no later than within 14 calendar days of receipt, unless the law provides otherwise.

If the response does not satisfy the consumer or no response is provided within 14 calendar days, the consumer may contact the State Consumer Rights Protection Authority (Valstybinė vartotojų teisių apsaugos tarnyba, VVTAT), A. Goštauto g. 12, 01108 Vilnius, www.vvtat.lrv.lt, or submit an application electronically through the Consumer Rights Information System at www.vtis.lt.

These Terms and contracts concluded under them are governed by the law of the Republic of Lithuania; however, this does not limit protection granted to a consumer under mandatory provisions of the law of the consumer’s country of residence where such protection applies.

11. Amendments to the Terms

These Terms may be updated following changes in legislation, services, technologies or business processes. The current version is published at www.medusa.lt. A particular purchase is governed by the version of the Terms and the event conditions presented to the purchaser at the time the order was concluded, unless the law provides otherwise.

PART II. Privacy Policy

1. Data controller

When you use www.medusa.lt and “MEDUSA Tickets” services, the controller of your personal data is UAB “Medusa Concert”, company code 135812959, Aušros tak. 10-3, LT-44211 Kaunas, Lithuania, email info@medusa.lt.

Where a ticket is sold for an event organised by another organiser, that organiser may independently process data lawfully transferred to it for its own purposes, such as delivering the event, informing purchasers of material event changes or complying with legal obligations. In such cases, the organiser is responsible for its own processing as a separate data controller unless the specific relationship provides otherwise.

2. What personal data do we process?

• Identity and contact data: first name, surname, email address, telephone number, city and, where necessary, billing or delivery address.
• Order and ticket data: order number, ticket ID, event, number of tickets, seats, price, discount information, purchase date, order status and other information related to the specific purchase.
• Payment and refund data: confirmation of payment, amount, transaction identifier and, where necessary for a refund, bank account number and account holder details. We generally do not receive online banking credentials or full payment card details where payment is made in the payment service provider’s environment.
• Account data: login identifier, account settings, selected city or other information provided by you.
• Communication data: enquiries, complaints, requests, correspondence and information necessary to resolve a specific matter.
• Technical and usage data: IP address, device and browser information, session identifiers, login and system log data.
• Cookie, analytics and advertising data: cookie or device identifiers, page views, actions on the website, conversion events, event or product identifiers, order value and other information collected in accordance with your cookie choices.
• Marketing data: email address, the fact and date of consent, the city or interests indicated by you and, where the relevant function is used, information on newsletter delivery, opens or clicks.

3. Where do we obtain the data from?

We obtain most data directly from you when you purchase a ticket, create an account, complete a form, contact us or choose marketing and cookie settings. We may obtain technical data automatically from your device, browser, cookies and similar technologies. We receive payment confirmation data from banks or payment service providers. Where necessary to service a specific event or refund, we may receive limited information from the event organiser or another service partner.

4. For what purposes and on what legal basis do we process data?

Where the same data are required for several purposes, the longest legally necessary retention period applies. At the end of that period, the data are deleted, anonymised or their use is restricted to the extent that we are required to retain them by law or reasonably need them for legal claims.

5. Are you required to provide data?

Data marked as necessary for an order are required to enter into and perform the contract. For example, without a working email address we could not deliver an electronic ticket or provide an order confirmation. If other data necessary for a specific purchase are not provided, the order may not be completed. You are not required to provide marketing data, and consent to receive news is not a condition of purchasing a ticket.

6. Newsletters and personalisation of offers

We send newsletters and special concert or ticket offers to individuals with their consent, except where expressly permitted by law. Consent is requested separately and is not pre-ticked.

If you have chosen to receive news and offers, we may segment their content according to the city or interests you have indicated or your previous interaction with our marketing communications, where this is permitted by your choices. We do not make decisions based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.

You may withdraw your consent at any time by clicking the unsubscribe link in an email you receive or by writing to info@medusa.lt. After consent is withdrawn, marketing emails will no longer be sent, but this does not affect the lawfulness of processing carried out before withdrawal.

7. Cookies, analytics and advertising technologies

The website uses cookies and similar technologies. Necessary cookies are used to enable the website’s core functions, such as session management, the shopping cart, security, storing consent choices or the payment process. Non-essential analytics and advertising cookies and other tracking technologies are activated only after obtaining your consent.

The website uses the “Cookiebot” consent management solution. The cookie settings window provides an up-to-date list of cookies and other technologies used, their providers, purposes, categories and duration. You can also give or refuse consent there and later change your choice.

Depending on your choices, the website may use “Google Tag Manager”, “Google Analytics 4”, “Google Ads” and “Meta Pixel”. These may be used to analyse website traffic, measure conversions and, where you have given the relevant consent, create remarketing audiences. Analytics and advertising technologies are not necessary to purchase a ticket.

You may change or withdraw your consent to non-essential cookies and tracking technologies at any time through the cookie settings function available on the website. Refusing consent must not prevent the use of core ticket purchasing functions, except for functions that objectively depend on the specific technology selected.

8. To whom may we disclose data?

We disclose data only to the extent necessary for a specific purpose and where there is a lawful basis. Depending on the service, recipients may include:

• IT, hosting, cloud, system maintenance and cybersecurity service providers;
• banks, payment service providers and payment collection providers;
• accounting, audit, legal and other professional service providers;
• newsletter delivery and customer communication service providers where such services are used;
• analytics and advertising technology providers, including “Google” and “Meta”, only to the extent permitted by your consent and cookie choices;
• event organisers, venues or other partners where disclosure is necessary for the specific event, a refund, accessibility arrangements or another service requested by you;
• public authorities, courts, law enforcement or supervisory authorities where we are required by law to provide the data.

Where a service provider acts as our processor, it is subject to data processing terms compliant with the GDPR. Where a recipient processes the data for its own independent purposes, it is responsible for such processing as a separate data controller.

9. Transfers of data outside the European Economic Area

When using international service providers, for example analytics, advertising, cloud or communication solutions, some data may be processed outside the European Economic Area. In such cases, transfer mechanisms and safeguards provided for by the GDPR are used, such as an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework where applicable to the particular recipient, and/or Standard Contractual Clauses together with supplementary safeguards.

10. How do we protect data?

We apply technical and organisational security measures taking into account the nature of the data and the risks of processing. Among other things, we restrict access according to job functions, use access controls, encrypted communications, system logs, backups and other reasonable measures. Website traffic is transmitted using HTTPS.

11. Your rights

Under the GDPR, subject to the specific circumstances and applicable exceptions, you have the right to:

• receive information about the processing of your personal data and obtain access to the data being processed;
• request correction of inaccurate data or completion of incomplete data;
• request erasure of data where there is a legal basis for doing so;
• request restriction of processing;
• receive data you have provided in a structured, commonly used and machine-readable format and, where applicable, transmit those data to another controller;
• object to processing where it is based on legitimate interests;
• withdraw consent at any time where processing is based on consent;
• object at any time to the use of personal data for direct marketing;
• file a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI), www.vdai.lrv.lt.

To exercise your rights, write to info@medusa.lt. Before providing data or taking action, we may reasonably ask you to verify your identity. We respond to requests without undue delay and generally no later than within one month; in complex cases specified by the GDPR, this period may be extended.

Requests are generally handled free of charge. A fee may be charged or a request may be refused only in the cases provided for by the GDPR where the request is manifestly unfounded or excessive, in particular because of its repetitive character.

12. Amendments to the Privacy Policy

We may update this Privacy Policy following changes in legislation, technologies used, services or data processing practices. The current version is published at www.medusa.lt together with its effective date. If changes are material and additional notice is appropriate in the circumstances, we will inform you in an appropriate manner.