# Privacy & Security — MijnEvent # Privacy as the default, not an option MijnEvent is built from the ground up to collect as little data as possible and to maximally protect whatever we do process. Privacy by design means protection is baked into every decision — not bolted on afterwards. Here is what that looks like in practice, for organisers and visitors alike. How we do it ## Seven pillars of privacy by design Concrete choices in the technology, not just nice words in a policy document. - 01 ### No passwords You log in with a secure magic link instead of a password. There is no password database that can leak — the single biggest source of data breaches simply does not exist with us. - 02 ### Cookieless EU analytics Our analytics run entirely within the EU, without cookies and without personal data. That is why neither our site nor your event pages need an annoying cookie banner. - 03 ### Email addresses shielded Organisers see masked visitor email addresses by default. The full address is only shown when genuinely needed — and always with an auditable trail. - 04 ### Encrypted sensitive data Two-factor keys and payment connections (Mollie) are stored encrypted. Payment details such as card numbers never touch our servers — they stay with Mollie. - 05 ### Access & deletion in one click Visitors download all their data or have their account deleted from their own account. Access, data portability and the right to be forgotten (GDPR art. 15, 17 and 20) are built in. - 06 ### Forgotten automatically Personal data is automatically anonymised once it is no longer needed after an event. We keep nothing longer than required — only what the law mandates for accounting. - 07 ### Data processing agreement included Every organiser automatically receives a GDPR data processing agreement on sign-up. No separate legal hassle — it is simply taken care of. No data trading ## Your data is not a revenue model In the ticketing industry, visitor data is all too often treated as an extra source of income: address lists for marketing campaigns, profiles for advertisers. We see it differently. We use organiser and ticket-buyer data exclusively to sell, deliver and scan tickets — and that is where it ends. ### Never for our own marketing MijnEvent never emails your ticket buyers with its own offers or "recommended events". Your visitors are and remain your visitors. ### Never sold or shared We do not sell or rent data to third parties — no advertisers, no data brokers. Not "anonymised" either, and not in bulk. ### No profiles, no advertising We build no visitor profiles across events or organisers, and no advertising technology runs anywhere on the platform. Our revenue model is deliberately simple and visible: a fixed amount per ticket sold. That leaves no incentive whatsoever to make money from your data — privacy comes first, full stop. What does this mean for you? ## Concrete benefits, for both sides ## For organisers You do not have to build privacy infrastructure yourself — we already did. - You do not have to secure passwords or visitor data yourself; we handle that. - Your data processing agreement is automatically in order on sign-up. - You handle visitors' GDPR requests with a single button in your dashboard. - No cookie banner needed on your event pages. - Privacy becomes a selling point towards your visitors. ## For visitors Buy a ticket without having to worry about your data. - No password to remember or to have leaked. - Your data is never sold or used for advertising. - You download or delete your data whenever you like. - You are not tracked with tracking cookies. - After the event your data is automatically cleaned up. - No passwords - Cookieless - EU hosting - GDPR-proof - No data trading Frequently asked questions ## Frequently asked questions about privacy at MijnEvent ## Does MijnEvent sell ticket-buyer data? No. MijnEvent never sells or rents personal data — not to advertisers, not to data brokers, and not in "anonymised" or aggregated form either. Our revenue model is a fixed amount per ticket sold; we earn nothing from the data itself. ## Does MijnEvent use visitor data for its own marketing? No. MijnEvent never emails ticket buyers with its own offers or recommended events. Visitors only receive messages that belong to their order — such as tickets and payment confirmations — and email the organiser sends themselves. ## What data does MijnEvent collect with a ticket order? Only what is needed to deliver and check the ticket: name, email address and the order details. Payment details such as card or account numbers never touch our servers — payment runs entirely through payment provider Mollie. ## Who owns the visitor data on MijnEvent? The organiser of the event. MijnEvent is a processor within the meaning of the GDPR and uses the data exclusively to deliver the service, on the organiser's instructions. The data processing agreement that lays this down is included as standard with every sign-up. ## How long does MijnEvent keep personal data? No longer than necessary. After an event, personal data is automatically anonymised; only what the law requires for accounting is retained. Visitors can also download their data or have their account deleted themselves at any time. ## Does MijnEvent use tracking cookies? No. Our analytics run cookieless and entirely within the EU, without personal data. That is why organisers' event pages need no cookie banner and visitors are not tracked anywhere. What we stand for ## Build your event on a privacy-first platform Start for free and give your visitors the protection they deserve — without having to hire a privacy team yourself. [Start for free](https://mijnevent.nl/registreer) [See the technical security measures](https://mijnevent.nl/en/security) [Read our full privacy policy](https://mijnevent.nl/en/privacy)