Privacy Policy
Our Privacy Policy was last updated on September 1st 2025.
We are Netgen d.o.o., Zagreb (Grad Zagreb), Savska cesta 182, OIB: 56703914419, EUID:HRSR.080442192, a company incorporated and existing under the laws of Croatia, with its principal place of business located at Zagreb, Croatia (hereinafter referred to as "Provider”, “we”, “us”, or “our”).
We operate the website https://konfica.com/ (the “Site”), as well as any other related products such as Konfica mobile application and services that refer or link to these Privacy Policy (the “Privacy Policy”) (collectively, the “Services”).
Netgen offers an event management and ticketing platform to its users ("Organisers") that assists with the planning and management of events, as well as promoting these events and enabling potential and actual attendees ("Attendees") to purchase tickets. In some cases, Organisers may act as the controllers of certain Attendees' Personal Data. Attendees who are customers of, or interact with our Organisers through Konfica’s services are encouraged to also review this Privacy Notice.
For the purposes of this Privacy Notice, Netgen is considered the data controller of your Personal Data. If you have any questions or concerns regarding this notice, please reach out to us at [email protected] .
Whenever Netgen processes an Attendee's Personal Data on behalf of an Organiser, we are acting as a processor, and we therefore conduct such activities strictly in accordance with the instructions of that Organiser and pursuant to the contractual arrangements in place with them. If you are an Attendee with an existing relationship with one of our Organisers, you should refer to the Organiser's website or any terms provided by that Organiser to understand their privacy practices and policies. Where you, as an Attendee, would like to exercise your rights in relation to your Personal Data over which the Organiser is the controller, you should contact the Event Organiser with such requests. We will cooperate as appropriate with requests from our Organisers to assist with such requests.
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
We will provide you with prior notice of any scheduled changes to the Services you are using. The modified Terms will become effective upon posting or notifying you by e-mail, as stated in the email message. By continuing to use the Services after the effective date of any changes, you agree to be bound by the modified terms.
1. Definitions
For the purposes of this Privacy Policy:
"Services" means the ticket event management software services provided via the website https://konfica.com/, and the Konfica mobile application, including documentation, updates, and support, means the usage of the Ticket Event Management Software “KONFICA”
"Account" means a unique account created for You to access our Service or parts of our Service.
“Client” means a company or an individual person who creates an Account for the usage of the Services.
"Organizer” means any individual who is authorized by the Client to use the Services and who has been supplied a user identification and password by the Client (or by the Provider at the Client's request).
"Country" refers to Croatia
"Cookies" are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.
"Device" means any device that can access the Service such as a computer, a cell phone or a digital tablet.
"Personal Data" is any information that relates to an identified or identifiable individual.
"Service Provider" means any natural or legal person who processes the data on behalf of the Provider. It refers to third-party companies or individuals employed by the Provider to facilitate the Service, to provide the Service on behalf of the Provider, to perform services related to the Service or to assist the Provider in analyzing how the Service is used.
"Usage Data" refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
"Website" refers to KONFICA, accessible from https://konfica.com/
“Application” refers to KONFICA mobile application
"You" means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
2. Collecting of Your Personal Data
2.1. Types of Data Collected
2.1.1. Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
Email address
First name and last name
Phone number
Address, State, Province, ZIP/Postal code, City
2.1.2. Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.
We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.
2.1.3.Transactional History
This includes information about the date, time, value and number of transactions you make through the Services.
2.1.4. Camera usage
We don’t store your camera usage, we just use your mobile phone’s camera to scan your QR code.
2.1.5. Credit cart
We do not store or process any of your card or payment information. All payment information is processed by our trusted third party payment providers.
3. Use of Your Personal Data
Hereby we inform you that we are legally bound to keep the necessary personal information which are incorporated in the issued invoice according to legislative requirements.
This Privacy Policy also applies whenever you access our Konfica website and/or use our Konfica application.
When you browse our website, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system. This information is purged after 30 days.
Where allowed under applicable law and we rely on our legitimate business interest to process Personal Data about you.
Hereby we determine our legal bases for which and the reasons why we collect, obtain and process your Personal Data:
Legal Basis: Contract
It is necessary to process this Personal Data to enter into and perform our contract with you in relation to use of the Konfica Services as an Event Organiser; and your use of the Website. If you do not wish to provide us with your Personal Data for these purposes, we will not be able to enter into or perform our contract(s) with you and you will not be able to avail of the Konfica Services.
Purpose(s):
to provide you with access to the Website and the Application and to allow you to use the Website and the Application; to perform and execute the Services, to process your payments, through our third party payment providers;
to contact you in relation to any aspect of the Services;
to create your account for you to use on the Website; to process your actions through this account; and to otherwise manage and administer your account.
Legal Basis: Legitimate interests
It is in our legitimate interests to collect and process your Personal Data for the purposes of improving and monitoring website efficiency, enhancing your use of the Website. It is also necessary for the purposes of our legitimate interests to process your Personal Data to respond to any queries or requests submitted by you to us. Before we process your Personal Data to pursue our legitimate interests for these purposes, we determine if such processing is necessary and we carefully consider the impact of our processing activities on your fundamental rights and freedoms. On balance, we have determined that such processing is necessary for our legitimate interests and that the processing which we conduct does not adversely impact on these rights and freedoms.
Purpose(s):
Improving functionality and efficiency
To monitor, test and improve the effectiveness of the Konfica Services;
to monitor metrics such as total number of visitors, traffic data and demographic patterns on our Website and to ensure the content on the Website is presented in the most effective manner for you and your device.
To process and respond to any queries or requests you submit to us whether through the Website, by emailing us or otherwise; and to seek your views on the Website and our services.
We may use your contact details to send you a personal introduction email when you first sign up for the Konfica Services.
Legal basis: Consent
News and marketing
Purpose(s):
We use your information to keep you informed about our latest news, updates, and relevant promotional or marketing material that we believe may be of interest to you.
Legal basis: Legal obligations
The Provider may disclose Your Personal Data in the good faith belief that such action is necessary to comply with applicable legal or regulatory requirements.
Purpose(s):
Comply with a legal obligation
Protect and defend the rights or property of the Provider
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of Users of the Service or the public
Protect against legal liability
To file legal proceedings;
to investigate, establish, exercise or defend a legal claim; and
to settle legal claim
4. How do we get your consent?
When you provide us with personal information to complete a registration, we imply that you consent to our collecting it and using it for that specific reason only.
If we ask for your personal information for a secondary reason, like marketing, we will ask you directly for your expressed consent.
5. How do I withdraw my consent?
If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us from contact form or mailing us at: [email protected] .
6. Retention of Your Personal Data
The Provider will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
The Provider will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.
7. Your rights and how to exercise them
You have a number of rights in relation to your Personal Data.
Right to be Informed: You have the right to know whether your Personal Data is being processed by us, how we use your Personal Data and your rights in relation to your Personal Data.
Right of Access: You have the right to request a copy of the Personal Data held by us about you and to access the information which we hold about you. We will only charge you for making such an access request where we feel your request is unjustified or excessive.
Right to Rectification: You have the right to have any inaccurate Personal Data which we hold about you updated or corrected.
Right to Erasure: In certain circumstances, you may also have the Personal Data that we hold about you deleted, for example if you exercise your right to object and we do not have an overriding reason to process your Personal Data or if we no longer require your Personal Data for the purposes set out in this notice.
Right to Restriction of Processing: You have the right to ask us to restrict processing your Personal Data in certain cases, including if you believe that the Personal Data we hold about you is inaccurate or that our use of your Personal Data is unlawful. If you validly exercise this right, we will store your Personal Data and will not carry out any other processing on it until the issue is resolved.
Right to Data Portability: You may request us to provide you with your Personal Data which you have given us in a structured, commonly used and machine-readable format and you may request us to transmit your Personal Data directly to another controller where this is technically feasible. This right only arises where we process your Personal Data on the legal basis of either your consent or where it is necessary to perform our contract with you and the processing is carried out by automated means.
Right to Object: You have a right to object at any time to the processing of your Personal Data where we process your Personal Data on the legal basis of pursuing our legitimate interests.
You can exercise any of these rights by submitting a request to [email protected]
We will provide you with information on any action taken in relation to any of these rights upon your request without undue delay and at the latest within 1 month of receiving your request. We may extend this timeframe by one more month if necessary however we will inform you if this arises. Please note that we may ask you to verify your identity when you seek to exercise any of your data protection rights.
8. Transfers of your personal data
We store and process your Personal Data on servers located within the European Economic Area (the "EEA"). However, we may transfer your Personal Data outside the EEA where we engage with third party services providers. We only transfer your personal data outside the EEA where the European Commission has decided that the third country in question ensures an adequate level of protection in line with EEA data protection standards or there are appropriate safeguards in place to protect your Personal Data. If you would like to find out more about the appropriate safeguards that we have in place to govern the transfer of your Personal Data you can contact us at [email protected] .
Unfortunately, the transmission of information via the internet is not completely secure. Although we will always do our best to protect your Personal Data, we cannot guarantee the security of any information you transmit to us. Any transmission is at your own risk. Once we have received your information, we use strictly maintained physical, electronic and procedural safeguards to prevent unauthorised access.
9. Detailed Information on the Processing of Your Personal Data
The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies.
10. Third-party Service
We may use third-party Service providers to monitor and analyze the use of our Service.
In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.
However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.
For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.
In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.
As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.
Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.
11. Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
12. Children's Privacy
Our Service does not address anyone under the age of 18. We do not knowingly collect personally identifiable information from anyone under the age of 18. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 18 without verification of parental consent, We take steps to remove that information from Our servers.
If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.
