Privacy Policy

Welcome to EyaTickets! We are a ticketing and registration platform that aims to bring the world together through live experiences. Through our platform, we enable people to create, share and register for events.

When this Privacy Policy uses the term« Organizer » , we mean event creators who use our Services to create events for consumers.
When this Privacy Policy uses the term « Consumer », we mean people who use our Services to (a) consume information or attend events, or (b) for any other reason.
Organizers, Consumers and third parties who use our Services are all collectively referred to herein as “users”, “you” or “your”.

RINTIO SARL is the data controller of the personal data collected through EyaTickets. DRWINTECH Rwanda acts as local representative in Rwanda.

We use your information to:

• Process ticket purchases and issuance (including QR code generation), send event updates and manage refunds where applicable
• Verify entries (check-in) on the day of the event
• Produce the aggregated statistics made available to organizers
• Provide, maintain and improve ticketing, payment, attendee management and customer support services
• Protect the platform, prevent fraud and comply with legal and regulatory obligations
• Communicate with you about your account, your transactions and service updates where permitted.

Each processing activity is based either on your consent or on the performance of the ticket sale contract to which you are a party.

In connection with your use of the Platform, we may collect several types of personal data about you:

• Identification data: last name, first name, email address, phone number
• Payment data: Mobile Money (e.g. MTN MoMo, Airtel Money) or bank payment details, managed by our payment aggregator partners.
  EyaTickets never directly stores your Mobile Money credentials or PIN codes.
• Event-related data: information about your events, registrations, ticket purchases, name associated with tickets, purchase history.
• Browsing data: see the “Cookies and trackers” section below.

Some information is mandatory in order to use our Services (indicated as such at the time of collection). Refusing to provide this information may make it impossible to access certain features.

We use cookies and similar technologies to ensure the proper functioning of the Platform, measure audience and, subject to your consent, carry out targeted communication campaigns (in particular on social media).

We may share your personal data with:

• our technical service providers (hosting, email/SMS sending, analytics tools) acting as processors and bound by contractual confidentiality obligations;
• our Mobile Money and bank payment aggregator partners, for transaction processing;
• event Organizers, limited to the information needed for entry verification (name, ticket, QR code);
• the competent authorities, where required by law.

We never sell your personal data to third parties for commercial purposes.

We implement reasonable technical and organizational measures (encryption of sensitive data, access control, separation of environments) to protect your personal data against unauthorized access, loss or disclosure.

As no system is infallible, we encourage you to report any suspected vulnerability to legal@eyatickets.com.

Account and purchase data are retained for the duration of the relationship with EyaTickets, then archived for 5 years for accounting and tax purposes in accordance with Rwandan legal obligations, before being permanently deleted.

Depending on where you live, you may have the right to:

• access, update, correct or delete your personal information
• object to certain processing activities or request their restriction
• request data portability where applicable
• withdraw your consent where processing is based on it.

In accordance with Law No. 058/2021, any request to exercise these rights is processed within 30 days.

Deletion requests are handled in accordance with our Data Deletion Policy.

Our Services are not intended for people under the age of 16. If you are a parent or legal guardian and believe that a minor has provided us with personal data without your consent, contact us at legal@eyatickets.com so that we can delete it.

Your data may be transferred to and processed in countries other than the one where you reside, including by hosting providers located in other countries. Where applicable, we implement appropriate safeguards for cross-border transfers, including contractual protections in line with applicable data protection law. As EyaTickets is established in Rwanda, these transfers are also governed by Article 50 of Law No. 058/2021.

For any questions about this policy or to exercise your rights, contact our data protection officer: legal@eyatickets.com.