International events promoted by World Entertainment Media FZ-LLC

Privacy

INTERNATIONAL PRIVACY POLICY

World Entertainment Media FZ-LLC (“we”, “us”, “our”) is the controller of personal data that we collect directly or receive for our own purposes in connection with international events, artist and tour activities, websites, business communications and customer support. This Policy should be read together with any event-specific notice and the privacy notices of ticketing platforms, venues, payment providers and other service providers.

1. Who we are and what this Policy covers

Tickets are currently purchased through independent third-party ticketing operators. A ticketing operator, venue, payment provider or other partner may act as an independent controller for personal data it collects through its own systems. Buying a ticket through a third-party platform does not mean that we receive all personal data held by that platform.
Where the operator shares data with us for Event administration, we process that information for our own lawful purposes as Promoter. Depending on the relevant arrangement, the operator and Promoter may have separate controller responsibilities for their respective processing activities.

2. Ticketing operators, venues and other independent controllers

  Identity and contact data: name, email address, telephone number, country/city and, where genuinely necessary, limited identity-verification information.
  Ticket and Event data: Event, ticket category, order or ticket reference, seating information, attendance or access status and customer-support history where made available to us.
  Limited transaction and accounting data: payment status, amount, currency, transaction reference, invoice details, refund status and, where supplied by the payment provider, masked payment information. We do not normally receive or store full card numbers or CVV/CVC codes.
  Customer-support and communication data: enquiries, complaints, invitation/accreditation requests, WhatsApp or email correspondence and information voluntarily supplied in those communications.
  Business-contact data: company, role, professional contact details, contracts and correspondence with venues, suppliers, artists, media and other professional contacts.
  Website and device data: IP address, browser/device information, referral source, log data, cookies, pixels and similar identifiers where used and legally permitted.
  Marketing preferences: opt-in, consent, objection, unsubscribe and communication-preference records.
  Photography, video and audio: footage or recordings captured at Events where lawful and appropriately notified.

3. Personal data we may process

Where a ticket is purchased through an independent ticketing operator, we may receive only the information reasonably necessary to organise and operate the Event. Depending on the operator and Event, this may include the purchaser’s or attendee’s name, contact details, order/ticket reference, ticket category, seat information, access status and Event details.
We do not normally receive the ticketing operator’s customer-account password, full payment-card number, CVV/CVC code or other card-security credentials.

4. Data we may receive from ticketing operators

5.1 Event administration and customer service
We process ticket, contact, invitation and support information to organise the Event, manage guest lists and accreditation, facilitate access, respond to enquiries and communicate operational information. Depending on the law that applies, the legal basis may be performance of a contract or steps requested before a contract, our legitimate interests in operating the Event and responding to attendees, or another basis permitted by applicable law.
5.2 Legal, accounting and dispute management
We process information where necessary to comply with tax, accounting, regulatory, safety or other legal obligations, and to establish, exercise or defend legal claims.
5.3 Security, fraud prevention and protection of rights
We may process relevant data to protect attendees, staff, artists, venues and our business, to prevent fraud or ticket misuse, and to investigate security incidents. We rely on legitimate interests, legal obligations or other grounds permitted by applicable law, as appropriate.
5.4 Business relationships
We process professional contact information to manage relationships with venues, ticketing operators, suppliers, artists, media and other business partners. The legal basis is typically contractual necessity or our legitimate interests in managing professional relationships.
5.5 Website analytics and advertising
We may use analytics and advertising technologies to measure website and campaign performance and improve our services. Where consent is required by applicable cookie or privacy law, these technologies are not activated until the relevant consent is provided.
5.6 Marketing communications
We send event announcements, news or promotional communications only where permitted by applicable law. Where consent or opt-in is required, it is obtained separately and is not a condition of buying a ticket or receiving operational Event information.
5.7 Event photography and video
We may create and use Event photography or video for lawful security, archive, editorial, documentary and promotional purposes. The legal basis depends on the nature and context of the use and may include legitimate interests or consent where consent is required.

5. Purposes and legal bases

We do not normally ask ticket purchasers or website visitors to provide sensitive or special-category personal data. If an attendee voluntarily provides health, accessibility or other sensitive information to request a reasonable accommodation or address a safety need, we process only the information necessary for that purpose and only where an appropriate legal basis and safeguards are available under the applicable law.

6. Sensitive or special-category data

We may obtain personal data directly from you through website forms, email, telephone, WhatsApp, social media, invitations, accreditation or other communications; from ticketing operators, venues, payment providers and Event partners; and automatically through website technologies where legally permitted.

7. How we obtain personal data

  Venues, ticketing operators, payment and customer-support providers where necessary for the relevant service.
  Production, security, accreditation, logistics and Event-management partners.
  IT, hosting, cloud, email, analytics and communications providers.
  Professional advisers, insurers, accountants, auditors and legal advisers.
  Public authorities, courts and regulators where disclosure is required or otherwise legally justified.
  Group companies or project partners where necessary for the relevant Event or business relationship and permitted by law.

We do not sell personal data to advertisers.

8. Who we may share personal data with

Our Events, systems and suppliers operate internationally. Personal data may therefore be processed outside the UAE or outside the country in which it was collected.
Where UAE data-protection law applies, cross-border transfers are handled in accordance with Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data and applicable implementing requirements.
Where EU GDPR or UK GDPR transfer restrictions apply, we use a lawful transfer mechanism where required, such as an adequacy decision or regulation, approved standard contractual clauses, the UK International Data Transfer Agreement or UK Addendum, or another lawful safeguard or derogation appropriate to the transfer.

9. International transfers

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected and for applicable legal, accounting, tax, security, claims and regulatory requirements. Retention periods vary by data type, Event and jurisdiction. When data is no longer required, it is deleted, anonymised or securely archived as appropriate.

10. Retention

Purchasing a ticket does not by itself mean that you have agreed to receive marketing from us. Where a ticketing operator offers a separate option to share data with the Promoter for marketing, we use that data for marketing only where the required permission or other lawful basis exists. You may withdraw consent or opt out of direct marketing at any time using the method provided in the communication or by contacting us.
Operational messages necessary to administer an Event, customer request or legal obligation are not dependent on marketing consent.

11. Marketing and ticket purchases

Events may be photographed or filmed by us, venues or authorised production partners. Crowd and atmosphere footage may incidentally include attendees. We provide Event-specific notices where appropriate and use identifiable content only where a valid legal basis exists. More prominent or individual promotional use is handled in accordance with applicable privacy and image-rights requirements.

12. Event photography and filming

Our website may use cookies, pixels, tags and similar technologies. Non-essential technologies that require prior consent under applicable law are activated only in accordance with the user’s cookie choices. Please see our International Cookie Policy and the cookie preference tools available on the website.

13. Cookies and similar technologies

Where the EU GDPR or UK GDPR applies, you may have rights to access personal data, correct inaccurate data, request erasure or restriction, receive certain data in a portable format, object to processing based on legitimate interests or to direct marketing, and withdraw consent where processing is based on consent. You may also have the right to complain to the competent data-protection authority. These rights are subject to the conditions and exceptions in the applicable law.
If applicable law requires us to appoint an EEA or UK representative for particular processing activities, we will make the representative’s contact details available in this Policy or in the relevant Event privacy notice.

14. Rights of individuals in the EEA and United Kingdom

Depending on the law that applies, you may have rights to obtain information about processing, access personal data, request correction, deletion or restriction, object to or stop certain processing, receive or transfer certain data, withdraw consent and complain to a competent authority. These rights are subject to applicable legal conditions and exceptions.

15. Rights under UAE and other applicable privacy laws

Our general website and Event-promotion services are not designed to collect personal data directly from children without appropriate safeguards. Age restrictions for individual Events are stated on the Event page or by the venue. Where parental or guardian authorisation is required by applicable law, we apply the relevant requirement.

16. Children

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No system is completely secure, and individuals should also take reasonable steps to protect their own accounts and communications.

17. Security

To exercise a privacy right or ask a privacy question, contact support@we-mediagroup.com. We may need to verify your identity and may request only information reasonably necessary to do so. Requests are handled within the time required by the law that applies to the request.

18. Exercising your rights and complaints

We may update this Privacy Policy as our services, systems or legal obligations change. The current version is published on www.we-media.group. Material changes may also be communicated through another appropriate channel where required.

19. Updates