Legal
Privacy policy
Last updated: Tue, 8 Sept 2026
1. Data controller
Music Hall Classics, Graaf van Vlaanderenplein 7, 9000 Ghent, is the controller of personal data collected through this website.
For privacy-related questions, contact: info@musichall.be
2. Legal framework
This policy has been drawn up in line with the General Data Protection Regulation (EU 2016/679 — GDPR), the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, and the ePrivacy rules for electronic communications and cookies.
3. Data we process
Depending on how you interact with our website and services, we process the following categories of personal data:
3.1 Identification and contact details
- First name and surname
- Email address
- Phone number (only for explicit contact requests)
3.2 Newsletter information
- Date of birth
- Preferred language for communication (Dutch or French)
- Preferred categories (show type / genre)
- Preferred cities
- Sign-up source (for example, the homepage or exit pop-up)
3.3 Purchase-related information
In some cases, we receive information from ticket partners (such as Ticketmaster, BOZAR, In&Uit, Ticketmatic, SeeTickets, Kinepolis and similar providers).
- This may include the following:
Identification details: first name, surname, email address, postal address and phone number - Purchase details: show type, venue, date and purchase amount
We distinguish between two situations: - Profile enrichment: purchase data from existing newsletter contacts is used to make communications more relevant, without requiring additional consent
- New contacts from ticket partners: if a ticket partner provides us with contact details for people who consented to third-party marketing through that partner, we may contact them directly. The ticket partner is responsible for recording and retaining that consent. We keep an internal record of which partner obtained the consent and on what date.
3.4 Technical and analytics data
- Necessary log, error and performance data, such as the time, the route visited without query parameters, browser and device details, and technical error information. Sentry is configured without personal data by default; sensitive fields such as email addresses, tokens, cookies and request content are removed before sending where technically possible. Session Replay is disabled.
- Analytics and marketing data: only after valid cookie consent
4. Purposes and legal bases
We process personal data only for specified purposes and on a valid legal basis:
- Responding to questions and enquiries — Legal basis: steps taken before entering into a contract or performance of a contract
- Sending the newsletter — Legal basis: consent (opt-in), withdrawable at any time
- Segmenting the newsletter based on stated preferences (language, category, city) — Legal basis: consent
- Enriching contact profiles using purchase history from ticket partners to make newsletter communications more relevant — Legal basis: legitimate interest
- Website security and fraud prevention — Legal basis: legitimate interest
- Detecting and resolving technical errors and performance issues with Sentry — Legal basis: legitimate interest in keeping the website reliable and secure
- Complying with legal obligations (accounting, disputes) — Legal basis: legal obligation
When we rely on legitimate interest as the legal basis, we have carried out a balancing assessment. You may object by contacting info@musichall.be.
5. Recipients and transfers
We share personal data with service providers and, for ad measurement subject to your consent, with advertising platforms. We enter into data processing agreements with parties acting as processors. Depending on the processing, advertising platforms may also act as controllers.
Our main processors are:
- Brevo (Sendinblue SAS, France) — email marketing platform and contact management
- Hostinger — web hosting provider
- Sanity — content management system
- Sentry (Functional Software, Inc.) — technical error and performance monitoring, without Session Replay and with sensitive fields filtered
- Ticket partners — for purchase-related data as described in section 3.3
For ad measurement, hashed customer identifiers and purchase data may be sent to Google Ads and Meta. Ticketmaster purchases are sent to Meta only in a separate measurement dataset, distinct from the production pixel and not intended for ad optimisation or combined revenue measurement. The raw Ticketmaster export is not stored in the Music Hall Command Center. Only a non-reversible order reference and aggregate delivery status are retained in protected analytics storage to prevent duplicate uploads.
When transferring personal data outside the European Economic Area (EEA), we use appropriate safeguards, such as the European Commission’s standard contractual clauses (SCCs), where required.
6. Retention periods
We do not keep personal data longer than necessary for the purpose for which it was collected, taking account of legal and contractual obligations.
6.1 Newsletter subscribers
Data is retained while consent remains active. After unsubscribing, personal data is removed from active systems within 30 days. The email address is then retained for no longer than 12 months on a suppression list, solely to prevent repeated unwanted subscriptions.
6.2 Profile enrichment using purchase history
Purchase data from ticket partners is used only for segmentation and kept while the newsletter contact remains active. It is also deleted when the contact unsubscribes.
6.3 Contact enquiries
Messages and enquiries are kept for no more than 24 months after the last contact, unless an ongoing contract or legal obligation requires longer retention.
6.4 Technical error and performance data
Technical monitoring data is retained only for the limited retention period of the Sentry account and then deleted. We do not keep it longer than needed to investigate errors and improve the website’s reliability.
6.5 Legal obligations
Data needed for accounting or dispute resolution is kept for the applicable statutory periods (generally 7 years for accounting records).
7. Your rights
As a data subject, you have the following rights under the GDPR:
- Right of access: you can ask what data we hold about you
- Right to rectification: you can have inaccurate or incomplete data corrected
- Right to erasure (‘right to be forgotten’): subject to certain conditions
- Right to restriction of processing: in specific circumstances
- Right to data portability: you can request your data in a structured format
- Right to object: to processing based on legitimate interest
- Right to withdraw consent: at any time, without retroactive effect
You can exercise these rights by emailing privacy@musichall.be. We will handle your request within 30 days. For complex or multiple requests, this period may be extended by up to two months, provided we inform you.
8. Lodging a complaint
If you believe your rights have not been respected, you have the right to lodge a complaint with the competent supervisory authority:
- Belgian Data Protection Authority (GBA/APD), Rue de la Presse 35, 1000 Brussels
- Website: dataprotectionauthority.be
- Email: contact@apd-gba.be
9. Cookies
We use cookies and similar technologies on our website. Non-essential cookies (analytics and marketing) are placed only after your explicit consent through our cookie banner.
For more details on the cookies we use, their purposes and retention periods, see our cookie policy at musichall.be/cookiebeleid.
10. Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. These include encrypted connections (HTTPS), access controls and regular assessments of our security practices.
If a data breach poses a high risk to individuals, we will inform you in accordance with applicable legal obligations.
11. Changes
We may amend this policy when legislation, processing activities or the tools we use change. The latest version is always available at musichall.be/privacybeleid with an updated date. We inform active newsletter subscribers by email of substantial changes.
Version 2.2 — 8 September 2026.
TikTok: ad measurement and interest in tickets
After marketing consent, we use TikTok Pixel in the browser and TikTok Events API through our server to measure and improve ad campaigns and reach relevant audiences. Website visits and clicks on ticket buttons are processed. The legal basis is consent; you can withdraw it at any time through ‘Cookie preferences’ at the bottom of the website.
When you click a ticket link, we share with TikTok the performance, page URL, time, event ID, IP address, browser information and, where available, TikTok cookie and ad-click IDs. Browser and server use the same event ID to avoid double counting. Our TikTok server connection does not send names, email addresses or phone numbers.
A click on ‘Buy tickets’ is recorded in TikTok as InitiateCheckout and represents interest in tickets here. This connection does not give us confirmation of a Ticketmaster purchase, and we do not send a purchase amount or revenue to TikTok.
TikTok receives this data and may combine it with information it already holds about you for ad measurement and personalisation. Processing outside the European Economic Area may occur. Applicable roles, transfer safeguards and retention periods are explained in TikTok’s terms and privacy information. Cookie lifetime is not the same as the retention period for all data held by TikTok. Our server connection does not itself keep a separate archive of sent TikTok events.
After marketing consent, TikTok may use _ttp on musichall.be and .tiktok.com, and ttcsid / ttcsid_<pixelcode> and ttclid on our domain, for recognition, ad attribution and personalisation. TikTok states a period of 13 months from placement or last use. Which cookies are present depends on your visit and browser settings.