Personal data (GDPR)

Last update: September 20, 2026

Velora Ticket respects your privacy. This page explains what data we collect, why, how long we keep it, and how to exercise your rights, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act.

1. Data Controller

Velora Ticket, represented by Jules Ferands
225 rue du Pin de Galles, 83220 Le Pradet, France
Email: julesferands2@gmail.com
Phone: +33 6 29 15 92 53

2. Data we collect

  • Identity and contact details: surname, first name, email address, phone number.
  • Orders: events and tickets purchased, amount, purchase history, and, for nominative tickets, the names of spectators.
  • Payment: bank details are entered directly on the secure payment page of Shopify and its service providers; we never have access to your full card number.
  • Correspondence: messages sent via the contact form, by email, or by phone.
  • Browsing: IP address, device and browser type, pages viewed, via cookies (see section 7).

3. Why we use it, and on what basis

  • Process your order and transfer your tickets to you — contract performance.
  • Answer your questions and manage customer service — contract performance or legitimate interest.
  • Prevent fraud and secure payments — legitimate interest.
  • Comply with our accounting and tax obligations — legal obligation.
  • Send you new dates by email — your consent, which you can withdraw at any time via the unsubscribe link.
  • Measure site audience — your consent (cookies).

4. Who receives your data

  • Shopify, our hosting and sales platform, and its payment service providers.
  • The official ticketing service for the event (e.g., Ticketmaster), only the name and email address required to transfer your tickets.
  • Authorities, only if required by law.

We never sell your data.

5. Transfers outside the European Union

Some service providers, including Shopify, may process data outside the European Union. These transfers are governed by appropriate safeguards, including the European Commission's standard contractual clauses.

6. Retention period

  • Order data and invoices: 10 years (accounting obligation).
  • Customer data not subject to accounting obligations: 3 years after your last purchase.
  • Subscription to new dates: until you unsubscribe, or 3 years without interaction.
  • Customer service messages: 3 years after the last exchange.
  • Cookies: 13 months maximum.

7. Cookies

The site uses cookies that are essential for its operation (cart, security, payment), which do not require your agreement. Audience measurement and marketing cookies are only placed with your consent, collected via the banner displayed during your first visit. You can change your choice at any time by clearing your browser's cookies, at which point the banner will be displayed again.

8. Your rights

You have the right to access, rectify, erase, restrict, object to, and port your data, as well as the right to withdraw your consent at any time and to provide instructions regarding the fate of your data after your death.

To exercise these rights, write to us at julesferands2@gmail.com specifying your request. We will respond within a maximum of one month. Proof of identity may be requested in case of doubt regarding your identity.

If you believe your rights are not being respected, you may lodge a complaint with the CNIL: www.cnil.fr.

9. Security

The site is served entirely over HTTPS and payments are processed via an encrypted page compliant with the PCI DSS banking standard. Access to data is limited to those who need it to process your order.

See also: Shopify privacy policy, general terms and conditions of use, legal notice.