Privacy Policy

Last updated: 18 April 2026

Introduction

This Privacy Policy explains how personal data is collected, used, shared and protected when you access and use the Ticketto service, provided by Revan S.a.s.

Ticketto is committed to protecting your privacy and to handling your personal data with the utmost transparency, in full compliance with the General Data Protection Regulation (GDPR — EU 2016/679).

1. Data Controller

• Company name: Revan S.a.s.
• Registered office: Via Bruno Buozzi 8 — 20851 Lissone (MB), Italy
• Privacy / DPO contact: info@revan.it

2. Personal Data We Collect

We collect two broad categories of data:

• Organizer (User) data: Email, login credentials, billing details handled by Stripe, and dashboard usage data.
• Attendee (Guest) data: First name, last name, email, phone number, registration form selections, check-in history and access timestamps.

3. Purposes and Legal Bases

We process data for the following purposes:

• Providing the Service (Art. 6.1.b GDPR): Creating events, managing registrations, issuing tickets and handling on-site check-in.
• Processing Payments (Art. 6.1.b GDPR): Securely processing payments through our Stripe integration.
• Legal Obligations (Art. 6.1.c GDPR): Retaining invoices and tax records.
• Improving the Service (Art. 6.1.f GDPR): Anonymised analysis via Google Analytics (profiling cookies only with prior consent).

4. Sharing Data with Third Parties and Transfers Outside the EU

We do not sell or share user or attendee data for marketing purposes. To deliver the service, we rely on the following data processors (DPA):

• Google Cloud / Firebase: Hosting, database and authentication. Servers located in Europe.
• Stripe: Transaction and credit card processing (Stripe Payments Europe, Ltd.).
• TikTok / Google Ads: Used solely for conversion tracking (Pixel), limited by our Consent Mode v2 configuration and conditional on explicit acceptance of the cookie banner. Any transfers outside the EU are covered by the Standard Contractual Clauses (SCC).

5. Your Rights (GDPR)

You have the right to access your personal data and to request its rectification, erasure (the right to be forgotten), restriction of processing or portability. Where processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out on the basis of consent given before its withdrawal. You can exercise these rights by contacting info@revan.it.