Privacy Policy

1. Scope


Blueticket – Serviços de Bilhética SA, legal entity number 508668050, with headquarters in Rossio dos Olivais, lot 2.13.01A, 1990-231 Lisbon, is the entity responsible for the website meoblueticket.pt (hereinafter, the “site”), acting equally as a controller under the General Data Protection Regulation; i.e. is the entity that determines the purposes and means of processing personal data.

This document (hereinafter, “Privacy Policy”) contains information about how personal data is collected and processed through the site. The user must also consult the Cookies Policy HERE and the Terms and Conditions HERE.

If you have any additional questions, please contact us at dados@blueticket.pt.



2. Processing of personal data


2.1. What are they?

In accordance with the provisions of the General Data Protection Regulation, personal data is all information relating to an identified or identifiable natural person («data subject»); An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The processing of personal data must be preceded by a condition that legitimizes it (as provided for in articles 6, 9 and 10 of the Regulation). Regarding the indicated retention periods, the data will be deleted after this period, unless there is pending litigation, in which case the data will be kept until the decision is final.


2.2. What are the basis for data treatment?

Under the terms of the General Data Protection Regulation, the processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The processing of personal data for a specific purpose must meet one of the legal bases exhaustively provided for in the GDPR. Blueticket may process personal data on the followinggrounds:


a) Consent to the processing of personal data for one or more specific purposes (article 6, paragraph 1, a));

b) If the processing is necessary for the execution of a contract to which the data subject is party, or for pre-contractual measures at the request of the data subject (article 6, paragraph 1, b));

c) If the processing is necessary to comply with a legal obligation to which Blueticket is subject (article 6, paragraph 1, c));

d) Processing is necessary for the purposes of the legitimate interests pursued by Blueticket or third parties, except if the interests or fundamental rights and freedoms of the holder that require the protection of personal data prevail, in particular if the holder is a child (article 6, paragraph 1, f)).


2.3. What are the purposes of the treatment?

Blueticket processes personal data in accordance with the General Data Protection Regulation, and related legislation, for the purposes described below. The grounds that legitimize the processing of personal data by Blueticket are also identified below, along with the storage periods for data for each of the purposes.


2.3.1. User registration

For the site to formalize the purchase there must be a user registration, which has the following functions:

  • Facilitate the process of purchasing or booking tickets;
  • Sending information about Blueticket events to the data subject (if the data subject has given consent under section 2. of this Privacy Policy);
  • Possibility for the user to check their purchases and reservations while their account is active.
  • Management of billing information.
  • Management of preferentes and setting of favorites.

In order for users to create an account on the site, they must provide the following data when registering:

  • First and last name;
  • Date of birth;
  • Mobile phone number;
  • Country;
  • Email address;
  • Password (created at the time of registration, to access the reserved area).

The data identified as mandatory in the form must be provided to Blueticket to complete the registration or transaction.


As part of the registration on the site, Blueticket processes personal data as follows:

Purpose Basis Storage Period
User registration Contract 1 year after account cancellation
Legal obligation
Legitimate interest


2.3.2. Purchases via the site

As part of the purchase of tickets and bookings through the site, Blueticket processes personal data as follows:


Purpose Basis Storage Period
Issuance of invoicing and fulfillment of fiscal and accounting obligations Contract 10 years
Legal obligation
Booking management Contract 1 year after the event
Ticket issuance and customization and delivery management Contract 1 year after the event
Sending communications relating to the event for which tickets were purchased and related information Legitimate Interest 1 year after the event
Accreditation management and access contro Legitimate Interest End of the event
Answering and clarifying questions (customer support, complaints, information requests) Contract 1 year after the issue or complaint is closed
Legitimate Interest
Fraud management and control (includes IP collection through storing cookies on the user's device) Legitimate Interest 6 months
Consent
Response to judicial and criminal investigation notifications Legal obligation Legal term applicable to each obligation
Legitimate Interest

The data identified as mandatory in the form must be provided to Blueticket to complete the registration or transaction.


2.3.3. Direct Marketing (unsolicited communications) and segmentation

If the data subject’s consent is obtained, Blueticket will send communications related to events, through the means mentioned below.

Furthermore, in some cases, to determine communications that may be of interest to the data subject, Blueticket will analyze their consumption preferences by processing the following data and categories of personal data:

  • Ticket purchase and booking history;
  • Gender, age, district and city

The only consequence of the segmentation carried out by Blueticket is the personalization of promotional campaigns and not any decision-making that may in any way influence data subjects or produce significant effects in their legal sphere.


Blueticket will send personalized, unsolicited communications, using profiling, and non-personalized communications, directed to the general universe of data subjects. In any case, these unsolicited communications for marketing purposes will be sent directly to the contacts provided by the data subject, through the following channels:

  • Telephone calls with and without human intervention;
  • Electronic mail;
  • SMS (Short Messaging Services), EMS (Enhanced Messaging Services), MMS (Multimedia Messaging Services) and similar mechanisms.

In view of the above, for direct marketing purposes, Blueticket processes data for the following purposes and for the following reasons:


Purpose Basis Storage Period
Sending unsolicited communications and newsletters Consent 1 year
Sending unsolicited communications, following the purchase of tickets or reservation, on the site Legitimate Interest (“soft opt-in” or “opt-out”) 1 year since the last purchase without opposition
Segmentation to send personalized communications Legitimate Interest 1 year since last purchase

For more information regarding the exercise of the data subject’s right to object, see item 2.5.1.6. of this Privacy Policy.


2.4. Recipients of personal data

In order for Blueticket to fulfill all its duties and provide the data subject with the best possible service, they may have to communicate or give access to their personal data to other entities.

Blueticket will only communicate or give access to personal data to the following categories of entities:

  • Arena Atlântico;
  • Entities that provide services to Blueticket, in matters of:
    • IT support;
    • Marketing and advertising services;
    • Document management;
    • Legal and accounting support;
    • Logistical support;
    • Support with human resources issues (e.g. temporary work);
  • Event promoters, to whom, in some cases, Blueticket may transmit the personal data of data subjects who have made reservations or purchased tickets, so that they can send them more information about the events. Promoters will be identified when purchasing or booking tickets.
  • Public authorities, such as Tax Authorities or Judicial Courts.
  • Payment service providers for completing transactions via the site.


2.5. Exercise of rights by data subjects


2.5.1. Data subject rights

With regard to the processing of personal data, the data subject enjoys the following rights, in accordance with articles 15 to 22 of the General Data Protection Regulation, as described below.


2.5.1.1. Right of access

The data subject has the right to obtain confirmation as to whether their personal data is processed by Blueticket. They also have the right to access their personal data, as well as obtain the following additional information or clarifications:

  • reasons why personal data is processed;
  • types of personal data that are processed;
  • entities to whom personal data may be transmitted, including entities located in countries outside the European Economic Area, in which case the data subject will be informed of the guarantees applied to the transfer of their data;
  • storage period for the data or, if this is not possible, the criteria for establishing this period;
  • rights the data subject enjoys in relation to the processing of their personal data;
  • if the personal data was not provided by the data subject, information about their origin;
  • existence of automated individual decisions, including profile processing, and, if so, information on the logic behind such processing, as well as the significance and anticipated consequences of such processing.


2.5.1.2. Right to rectification

Whenever the data subject considers that their personal data is incorrect or incomplete, they can request its rectification or completion.

They may also proceed directly and at any time to rectify or add personal data by accessing the site meoblueticket.pt, in case they registered as a customer under the terms of point 2.3.1. of this Privacy Policy.

Their right to rectification will only be verified in relation to the personal data that they provided to Blueticket (e.g., member data) and not in relation to personal data that results from the analysis carried out by Blueticket (e.g., the creation of profiles).


2.5.1.3. Right to erasure

Under legal terms, the data subject has the right to request the erasure of personal data when one of the following situations occurs:

  • personal data are no longer necessary for the purpose for which they were collected or processed;
  • the data subject objects to the processing of data and there are no prevailing legitimate interests that justify the processing, or the data is processed for direct marketing purposes (sending unsolicited communications);
  • personal data is processed unlawfully;
  • personal data must be erased under a legal obligation to which Blueticket is subject; or
  • the personal data have been collected in the context of offering information society services.

The right to erasure does not apply when processing is necessary for the following purposes:

  • exercise of freedom of expression and information;
  • compliance with a legal obligation that requires processing and that applies to Blueticket;
  • reasons of public interest in the field of public health;
  • archiving purposes of public interest, scientific or historical research purposes or statistical purposes, to the extent that the exercise of the right to erasure seriously hinders the achievement of the objectives of such processing; or
  • declaration, exercise or defense of a right in a judicial proceeding.

Although the data subject can exercise the right to erasure at any time, the exercise of this right, with regard to the purpose of creating profiles for the purpose of sending personalized offers and promotions (direct marketing), is compromised.

Once the right to erasure has been exercised, the personal data will be anonymized within a maximum period of 30 (thirty) days. The anonymization of personal data means that it is no longer possible to identify them, making it impossible to relate the information to the respective data subject.


2.5.1.4. Right to limit treatment

The data subject can request the limitation of the processing of personal data in the following cases:

  • if they contest the accuracy of personal data, for a period of time that allows Blueticket to verify its accuracy;
  • if the processing is unlawful and they oppose the erasure of personal data and request, in return, the limitation of processing;
  • if Blueticket no longer needs the personal data for processing purposes, but if the data are necessary for the purposes of declaring, exercising or defending a right in legal proceedings; or
  • if the data subject has objected to the processing, until it is verified that Blueticket’s legitimate interests prevail over theirs.


2.5.1.5. Right to portability

The data subject has the right to receive the personal data provided by themselves, in a structured, commonly used and machine-readable format. They also have the right to request that Blueticket transmit this data to another controller, as long as this is technically possible.


2.5.1.6. Right to object

Under legal terms, the data subject has the right to object to the processing of personal data at any time, for reasons related to a particular situation, in the following situations:

  • when the processing is based on the legitimate interests of Blueticket, without prejudice to the fact that Blueticket may present compelling and legitimate reasons for such processing that prevail over the interests, rights and freedoms of the data subject, or for the purposes of declaration, exercise or defense of a right in a judicial proceeding; or
  • when processing is carried out for purposes other than those for which the data were collected, but which are compatible with them.

The data subject can therefore object at any time and without the need for justification, to the processing of their data for direct marketing purposes, including profile creation related to such marketing, without this compromising the legality of the processing carried out based on the consent previously given.


2.5.1.7. Right not to be subject to automated individual decisions

The segmentation and definition of profiles for personalized marketing purposes is made based on fully automated decisions without human intervention; however, they do not have any legal effects or similar significant effects, as the sole objective of these decisions is to direct campaigns and offers tailored to the data subject’s interests and needs, in accordance with the objectives of the Loyalty Program.


2.5.1.8. Right to lodge complaints with the supervisory authority

The data subject has the right to lodge complaints with the competent supervisory authority in relation to matters relating to the processing of their personal data.

In Portugal, the competent control authority is the National Data Protection Commission.

For more information, visit www.cnpd.pt.


2.6. How to exercise your rights

You can exercise your rights with Blueticket through the address dados@blueticket.pt.

The exercise of your rights is free of charge, without prejudice to the fact that, whenever there are repeated, manifestly unfounded and repetitive requests, Blueticket may require the payment of a reasonable fee, due to the administrative costs of providing the information or taking the requested measures or even refuse to proceed with the request.

When Blueticket has reasonable doubts as to the identity of the natural person submitting the request, it may request that additional information necessary to confirm their identity be provided.



3. 3 Stay up to date with the processing and protection of your personal data


The information contained in this document may need to be changed from time to time.

Therefore, we advise you to consult the site www.meoblueticket.pt, where this information will be updated at all times, so that you can always be aware of how your data is being processed.

Whenever there are changes in the terms of processing of personal data, Blueticket will inform you through the site or through other communication channels normally used.

You can access other information related to privacy, security measures and protection of personal data and/or the functioning of the registration:

  • Blueticket Cookies Policy, available HERE;
  • Terms and Conditions, available HERE


Version 13.10.2024