Privacy Policy

Last Updated: September 29, 2026

1. Data We Collect

We collect personal data solely to process ticket purchases for events organized by First Wave ("we", "our", "us") and facilitate your entry at event venues. This data is limited to:

  • Full Name
  • Email Address
  • Purchased Ticket details (tier, transaction logs, and QR code identifiers)

Payment Data: All financial transactions are processed securely by our payment partner, Stripe. Your credit card numbers, billing addresses, and security codes are handled entirely by Stripe on their secure servers and are never stored on our application servers.

2. How We Use Your Data

Your personal data is processed by First Wave under the legal basis of contract fulfillment (delivering your purchased tickets). We use it to:

  • Generate and email your digital tickets.
  • Display your name on the guestlist inside our secure admin scanner tool so door staff can check you in at the venue.
  • Prevent duplicate scans or fraudulent entries.

3. Data Processors and Hosting

We partner with secure, GDPR-compliant cloud providers to host ticket logs and process payments:

  • Supabase: Database and server hosting services.
  • Stripe: Payment checkouts and webhook notification logs.
  • Vercel: Static and dynamic web application hosting.

4. Your Rights under GDPR

As an EU resident, you have the following rights regarding your personal information under the General Data Protection Regulation (GDPR):

  • Right of Access: Request a copy of the name and email linked to your ticket.
  • Right to Rectification: Request correction of spelling mistakes in your name or email.
  • Right to Erasure (Right to be Forgotten): Request the permanent deletion of your ticket logs from our databases after the event has concluded.

To exercise any of these rights, please contact the Data Controller at First Wave via email at info@beyondmusic.lu.

5. Cookies

We do not use any marketing or advertising tracking cookies (such as Google Analytics or Facebook Pixel) on our storefront. We only use essential, functional cookies that are required to authenticate internal team administrators in the backoffice console.