Privacy Policy
Privacy Policy — Bloody Sexy Halloween
Last updated: 02.09.2026
This Privacy Policy explains how your personal data is collected, used, and protected when you visit our website, purchase tickets, or attend the Bloody Sexy Halloween event.
We are committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or "GDPR") and applicable national data protection laws in the Czech Republic, Slovakia, and Poland.
1. Who we are (Data Controller)
The controller responsible for your personal data is:
LEVELS Entertainment s.r.o.
Bělehradská 858/23, Vinohrady (Praha 2), 120 00 Praha, Czech Republic
Company ID (IČO): 04402316
Contact for privacy matters: hello@levelscz.com
2. What personal data we collect
Depending on how you interact with us, we may collect:
- Identity and contact data — name, email address, phone number.
- Order and ticket data — tickets purchased, event city and date, order reference, purchase history.
- Payment data — billing details and transaction confirmations. Card details are processed directly by our payment provider; we do not store full card numbers.
- Technical and usage data — IP address, browser type, device information, and pages visited on our website.
- Marketing data — your preferences for receiving communications from us.
- Event data — where applicable, entry records, and photography or video footage captured at the event (see Section 8).
3. How and why we use your data (purposes and legal bases)
Purpose: Processing and fulfilling your ticket order
Legal basis under GDPR: Performance of a contract (Art. 6(1)(b))
Purpose: Sending order confirmations and essential event information
Legal basis under GDPR: Performance of a contract (Art. 6(1)(b))
Managing entry and admission at the event
Performance of a contract (Art. 6(1)(b))
Responding to your enquiries and complaints
Legitimate interests (Art. 6(1)(f))
Sending marketing communications about future events
Consent (Art. 6(1)(a)) or legitimate interests for existing customers
Website analytics and improving our services
Legitimate interests (Art. 6(1)(f)) / consent for non-essential cookies
Security, fraud prevention, and safety at the event
Legitimate interests (Art. 6(1)(f))
Complying with legal and accounting obligations
Legal obligation (Art. 6(1)(c))
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Who we share your data with
We share personal data only as necessary, with:
- Ticketing platform — the provider that processes ticket sales on our behalf. Ticket Tailor
- Payment provider — to process payments securely. Ticket Tailor
- Venues and event partners — where necessary for admission and event operation in the relevant city.
- IT and marketing service providers — including website hosting, email delivery, and advertising platforms (e.g., Meta) that help us reach and communicate with our audience.
- Professional advisers and authorities — where required by law.All processors act on our instructions under written agreements that require appropriate safeguards.
5. International transfers
Where a service provider (for example, an advertising or analytics platform) processes data outside the European Economic Area, we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
6. How long we keep your data
We keep your data only as long as necessary:
- Order and ticket records — for the duration of the event cycle and thereafter as required for accounting and tax purposes (generally up to 10 years under applicable law).
- Marketing data — until you unsubscribe or withdraw consent.
- Website and analytics data — for a limited period in line with our cookie settings.
7. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten"), where applicable;
- Restrict or object to processing;
- Data portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time;
- Lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at sandro@levelscz.com.
We will respond within one month.
8. Photography and filming at events
Photography and video recording may take place at the event for promotional purposes. By attending, you understand that you may appear in general audience footage. If you do not wish to be featured in identifiable promotional material, please contact us at reservations@bloodysexy.cz, and we will use reasonable efforts to accommodate your request.
9. Cookies
Our website uses cookies and similar technologies to function correctly, analyse traffic, and support marketing.
You can manage your preferences through our cookie banner or your browser settings.
10. Complaints to a supervisory authority
If you believe we have not handled your data properly, you may contact us first, or lodge a complaint with the supervisory authority in your country:
Czech Republic
Úřad pro ochranu osobních údajů (ÚOOÚ),
www.uoou.cz
Slovakia
Úrad na ochranu osobných údajov Slovenskej republiky
www.dataprotection.gov.sk
Poland
Urząd Ochrony Danych Osobowych (UODO)
www.uodo.gov.pl
11. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always available on our website, with the "Last updated" date shown above.
12. ContactQuestions about this policy or your personal data:
LEVELS Entertainment s.r.o.
hello@levelscz.com
