Privacy at Sphere Music

For your order, the organizer named on the concert page is the controller of your data: they sell you the ticket and decide what your order data is used for. Their legal name and contact are on the concert page and in your ticket email, and their own privacy policy applies to what they do with it.

Sphere Music, run by SPHERE.ART LLC (details in the terms of ticket sale), processes your order data on the organizer's behalf and on their instructions, to sell, deliver and check your ticket.

For a Sphere Music account, the security of the platform and support about a ticket, Sphere Music is the controller itself.

Write to info@sphere.art about any of it: we answer for our part and pass the rest to the organizer, with their details.

Your name and email, because a ticket has to reach somebody and the door has to know whose it is.

A phone number only if you choose to leave one. It is optional and the venue uses it to reach you about the concert.

Your order: the concert, the ticket types, what was paid, and when. Card details never touch our servers; the payment runs at Stripe.

Door records: when a ticket was scanned and by which staff account, so a dispute at the entrance has an answer.

To sell, deliver and check your ticket: it is needed for your contract with the organizer (GDPR, Article 6(1)(b)).

To keep order records for accounting and tax: a legal obligation (Article 6(1)(c)).

To keep the platform secure, prevent fraud and answer support requests: a legitimate interest in running a reliable ticket sale (Article 6(1)(f)).

Your phone number: your consent, which you can withdraw at any time by writing to us (Article 6(1)(a)).

To credit a blogger with a sale made through their link: your consent to the referral cookies (Article 6(1)(a)).

To show a map of the venue: our legitimate interest in helping you find it (Article 6(1)(f)).

We do not use your data for advertising and we do not send newsletters without a separate consent.

The organizer of the concert you bought for, as the seller of your ticket, and their door staff, limited to their own event.

Stripe, the payment provider, which processes your payment under its own terms.

Our service providers, bound by data processing agreements: Hetzner (servers in Germany), Cloudflare (delivery of the images on the site) and Resend (email).

The OpenStreetMap Foundation in the United Kingdom, when your browser loads the map on a concert page. It sees your IP address. The EU recognises the United Kingdom as giving adequate protection to personal data.

A blogger whose link brought you sees only how many visits and sales the link made, without your name or email.

Nobody else. We do not sell personal data and we do not hand a mailing list to third parties.

Our servers are in Germany. SPHERE.ART LLC is established in Georgia, so data the organizer passes to us for processing is protected by the European Commission's Standard Contractual Clauses.

Cloudflare and Resend are based in the United States. Transfers to them rely on the EU-US Data Privacy Framework or on Standard Contractual Clauses. Ask us at info@sphere.art for a copy of these safeguards.

The site uses the cookies it needs to work: your sign-in, your language, a checkout in progress and a confirmed email address.

If you arrive through a blogger's link, two more cookies are set, only with your consent: the link code, kept for 30 days to credit the blogger with a purchase, and a random visitor ID, kept for a year to count unique visitors. We store the visitor ID only in hashed form.

Order and ticket records stay for as long as accounting and tax law requires them, up to ten years for a paid order.

An account you created can be deleted on request; the anonymised order record stays for the books.

When you apply to open a concert, we keep your stage name, email, Telegram username and the link to your Instagram post, and we pass them to that concert's organizer so they can review the application and answer you.

The fan vote shows only your stage name and your Instagram post. Your email and Telegram stay with us and the organizer.

When you vote, we keep your email to confirm the vote and to stop one person voting twice, and a token on your device so the next vote needs no letter. News about concerts reaches you only if you ticked that box, and one email to info@sphere.art stops it.

You may ask for a copy of your data, a correction, deletion, a restriction of processing or a copy in a portable format, and you may object to processing based on our legitimate interest. Write to info@sphere.art and we answer within one month. If a request is complex we may take up to two months more, and we tell you inside the first month when that happens.

A request about the organizer's copy reaches them through us: we pass it on with their contact.

You may also complain to a data protection supervisory authority, in particular in the EU country where you live or work.