My tickets

Privacy policy

Version of 20 October 2026

This is an English translation of the Privacy Policy, provided for convenience. In case of any discrepancy between the Ukrainian and English versions, the Ukrainian version prevails.

This Privacy Policy explains what personal data is processed when you use the website https://tix.tikhonov-concert.com (the "Website") and buy tickets on it, why, to whom the data is disclosed and what rights you have. The terms "Seller", "Buyer", "Event", "Ticket" and "Order" have the same meaning as in the Public Offer (terms of sale). A person who simply browses the Website is referred to in this Policy as a Website user.

1. Who is responsible for your data

1.1. Controller of personal data: TIKHONOV AGENCY ORGANIZADORA DE EVENTOS SL., tax number ES56254188, address: PARTIDA COLINA DEL SOL 49 - A, 33, 03710 (the "Seller" or "we").

Registration details: B56254188.

1.2. Contact for all personal data matters: tikhonovagency@gmail.com.

1.3. The Website runs on the tixy.shop ticketing platform. The technical operator of the platform processes data on behalf of the Seller and only to operate the Website.

2. What data we process

2.1. When you buy Tickets:

  • your e-mail address. We do not ask for your name, phone number or identity document details;
  • Order contents: Event, Tickets, seats or categories, amount, currency, promo code, time of checkout and payment;
  • the language you used on the Website;
  • your answer regarding news and announcements: whether you agreed to receive them, the version of the consent text and the time of your answer;
  • your choice regarding advertising and analytics services at the time of checkout;
  • parameters of the advertising campaign you came from (UTM tags), the site you came from and the page where you started on the Website;
  • payment status received from the payment service Viva.com;
  • the number of the browser session in which the Order was placed (clause 3.1);
  • whether the e-mail with your Tickets reached you, whether you followed the link in that e-mail, and when you opened the Tickets page or downloaded a Ticket from the Website. Only the time is stored: we do not record the device or the IP address.

2.2. You enter payment card details only on the page of the payment service Viva.com. The Website does not receive or store them.

2.3. To protect against mass holding of Tickets, the IP address from which a hold was made is stored together with the hold record.

2.4. Technical request data (IP address, browser type, time of request) is processed by the Website's hosting and protection providers in order to deliver pages and repel attacks.

2.5. If you write to us, we process your e-mail address and the content of your message.

3. Cookies and statistics

3.1. Buyer session cookie. It is strictly necessary: without it, the selected Tickets cannot be held for you and the Order cannot be placed, so consent to it is not requested. The cookie contains only a random number created by the Website, the time it was created and our signature. It contains no data about you or your device. The Website sets it on your first visit, and it is kept in your browser for 1 year.

3.2. The session number is also recorded in every Order placed in that browser and is kept together with the Order data (section 6). By it, the Website recognises your Orders when you return in the same browser. In particular, on the "Didn't get the ticket email?" page the Website shows the paid Orders of that browser whose e-mail went to an address other than the one you entered: the Event, city, date, number of Tickets and the address the e-mail was sent to. The address of any of them can be changed to the one you entered, and the Tickets will be sent there. This information is not visible from another browser or device. If several people use one browser, they see each other's Orders. To avoid this, delete the Website's cookies in your browser settings.

3.3. Advertising and analytics choice cookie. It stores your answer for 6 months so that we do not ask again.

3.4. Our own visit statistics work without cookies and do not store IP addresses or device identifiers, so their records cannot be linked to a specific person.

3.5. Advertising and analytics services from Google, Meta and TikTok, if connected, help us understand where visitors come from and how our advertising works. They may run on the Website pages, including while you select Tickets and place the Order. They are not present on the payment result page or the Tickets page. These services may set their own cookies and process data under their own privacy policies. Where the law requires it, they are switched on only after you consent.

3.6. If these services are connected, to measure advertising we pass Meta information about the steps of a purchase: Ticket selection, proceeding to payment and payment (the Event, number of Tickets and amount). Technical browser data and the Order e-mail address in encoded form, from which the address itself cannot be recovered, are passed along with it. This lets Meta match the purchase with the advertising. We likewise pass Google information about the payment (the Event, number of Tickets and amount) together with the technical browser identifier that Google itself set earlier. Google does not receive the e-mail address. We do not pass your phone number, name or IP address.

3.7. You can opt out of advertising and analytics services at any time: with the "Decline" button in the cookie notice or via the "Advertising and analytics" («Реклама і аналітика» in Ukrainian) link at the bottom of the page. After that, we no longer switch these services on, delete their cookies that we are able to delete and do not pass any data to them, including the information in clause 3.6.

4. Purposes and legal bases

4.1. The legal bases for processing are set out in Article 6 of the EU General Data Protection Regulation (GDPR) and in Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.

  • Performance of the contract. Placing the Order, sending Tickets and checking that they have reached you, e-mails about rescheduling or cancellation of the Event, entry control, refunds, answering requests.
  • Legal obligations. Accounting and tax records.
  • Consent. News and announcements by e-mail; advertising and analytics services (clauses 3.5–3.7) where the law requires consent. Withdrawing consent does not affect the lawfulness of processing before withdrawal.
  • Legitimate interest. Preventing fraud and mass holding of Tickets, Website security, error monitoring and fixing, anonymous statistics, evaluating advertising campaigns based on the referral parameters stored with the Order; advertising and analytics services (clauses 3.5–3.7) where the law does not require consent, with the right to opt out at any time.

5. Who we share data with

5.1. Data is received only by providers without which the Website cannot work, and only to the extent needed for their service:

  • Viva.com: accepting payments and making refunds;
  • Resend: delivery of e-mails with Tickets and notices;
  • Cloudflare: content delivery network, protection against attacks, file storage, including Ticket PDF files;
  • Neon: database located in the EU (Amazon Web Services, Frankfurt, Germany);
  • Railway: hosting of the Website application, EU region (Amsterdam, Netherlands);
  • Sentry: error monitoring, EU region; configured not to collect e-mail addresses, IP addresses or cookies;
  • Google, Meta, TikTok: on the terms of clauses 3.5–3.7.

5.2. Data is disclosed to public authorities only in the cases and in the manner provided by law.

5.3. We do not sell personal data.

5.4. Some providers process data outside the EU, in particular in the USA. We use providers that assume contractual data protection obligations (standard contractual clauses or equivalent mechanisms), encrypt data in transit and restrict access to it.

6. How long we keep data

  • Order data: 3 years after the Event date, for accounting and tax records and for handling disputes. After that, the e-mail address is deleted or replaced with an irreversible value.
  • Consent to news and announcements: until you unsubscribe. After unsubscribing, only a record of the unsubscription is kept, so that you are not e-mailed again.
  • Buyer session cookie: 1 year in your browser. The session number in an Order is kept together with the Order data.
  • Advertising and analytics choice cookie: 6 months.
  • Technical browser data for Meta and Google (clause 3.6): only until it is passed, for no longer than 8 days.
  • Request e-mails: as long as needed to reply and to handle a possible dispute.

7. Your rights

7.1. Under Articles 15–22 of the GDPR you have the right to:

  • know who processes your data and why, and access it;
  • have inaccurate data corrected;
  • have your data erased. On such a request we replace your e-mail address in Orders with an irreversible value and remove it from the subscriber list; Order contents and amounts remain for accounting. After that, Tickets or notices can no longer be sent to that address;
  • object to processing based on legitimate interest;
  • withdraw consent at any time;
  • unsubscribe from news via the link included in every news e-mail;
  • receive your data in a structured, machine-readable format;
  • lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or with the data protection authority of the country where you live.

7.2. To exercise a right, write to tikhonovagency@gmail.com from the address you used for the Order. We may ask you to confirm that the address belongs to you, but we never ask for a card number or copies of documents. We reply within 30 calendar days at the latest.

8. Children

8.1. The Website is not intended for purchases made by children under 14 on their own. If you believe a child has provided us with their data without parental consent, write to us and we will delete that data.

9. Data security

9.1. Data is transmitted only over an encrypted connection (HTTPS). Only persons who need it for their work have access to Buyers' data, and this access is restricted at the database level. Ticket PDF files are kept in private storage and are available only via a private link.

10. Changes to this policy

10.1. A new version of the Policy is published on this page with its date. If a change concerns processing based on consent, we will ask for your consent again.