Privacy Policy
Updated on 13 October 2026.
This policy explains what personal data we collect, why, who we share it with and what rights you have.
It applies to the website vapovapolx.developh.co, ticket purchases and the Avisa-me (notify me) list. It complies with the General Data Protection Regulation (GDPR).
1. Who is the controller
The data controller is Mauro Alexandre Almeida Urakawa Silva (VAPO VAPO LX), Portuguese tax number (NIF) 263099962, Rua Dom João de Castro, n.º 22, 5.º D, 1300-192 Lisboa, Portugal.
Contact for privacy matters: [EMAIL DE CONTACTO A CONFIRMAR].
Data protection officer: [ENCARREGADO DE PROTEÇÃO DE DADOS A CONFIRMAR].
2. What data we collect
When you buy tickets, we collect:
- name and email;
- phone number, only if you pay with MB WAY;
- gender and year of birth, which are optional and used only for statistics;
- payment method and order details (event, tickets, amount, promo code, payment status).
We do not receive or store your card details. They are handled by EuPago.
3. Avisa-me list data
When you join the Avisa-me list, we collect your email, your consent (with the text version and date) and the event or page you signed up from.
Your subscription only becomes active after you confirm your email.
4. Why we use it and the legal basis
We process your data for the following purposes:
- To process your purchase, issue and send tickets, and manage your account and ticket transfers. Legal basis: performance of a contract.
- To meet invoicing and accounting obligations. Legal basis: legal obligation.
- To send you updates about new events and tickets through the Avisa-me list. Legal basis: consent.
- To keep the website secure and prevent fraud and abuse. Legal basis: legitimate interest.
- To produce aggregated statistics about our audience. Legal basis: legitimate interest.
Gender and year of birth are only used for statistics and never to contact you.
5. Who we share data with
We do not sell your data. We use the following processors, who handle data on our behalf:
- Convex: database and backend of the website.
- Vercel: website hosting.
- Resend: email delivery (confirmations, tickets and updates).
- EuPago: payment processing (MB WAY, card, Apple Pay and Google Pay).
We may also share data with authorities or other bodies when the law requires it.
6. International transfers
Some processors may handle data outside the European Economic Area.
In those cases, the transfer relies on standard contractual clauses or a European Commission adequacy decision [CONFIRMAR COM CADA SUBCONTRATANTE].
7. How long we keep data
We keep data only as long as needed for each purpose: [PRAZO DE CONSERVAÇÃO A CONFIRMAR].
Invoicing data is kept for the period required by tax and accounting law.
Avisa-me data is kept until you leave the list or withdraw your consent.
8. Your rights
You have the right to:
- access your data;
- correct inaccurate data;
- have your data erased;
- restrict processing;
- receive your data in a portable format (portability);
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting processing already carried out.
To exercise any right, write to [EMAIL DE CONTACTO A CONFIRMAR]. We reply within the legal deadlines. Some data must be kept to meet legal obligations.
9. Avisa-me and emails
We only send Avisa-me messages to people who confirmed their subscription by email (double opt-in).
Every email from the list has a link to unsubscribe. You can leave at any time.
Emails about your purchase (confirmation, tickets, transfers) are needed for the service and do not depend on the Avisa-me list.
11. Security
We use appropriate technical and organisational measures to protect your data.
Access to your account is through a link sent by email. Do not share that link.
12. Minors
The website is intended for people aged 18 or over [IDADE MÍNIMA A CONFIRMAR].
If you know that a minor has given us data, contact us and we will delete it.
13. Changes to this policy
We may update this policy. The version in force is always published on this page, with the date of the last update.
14. Contact and complaints
For questions about your data, write to [EMAIL DE CONTACTO A CONFIRMAR].
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
