Privacy Policy

This policy explains how WaveSycle B.V. collects and uses your personal data when you reserve a place at a Releasing Concert or subscribe to our mailing list.

Who is responsible for your data

WaveSycle B.V., Hillegomstraat 12, Unit 0.10, 1058 LS Amsterdam, Netherlands. KvK: 90989171. BTW: NL865519225B01. Contact: info@wavesycle.com.

Concert reservations: what data we collect

When you send a reservation request, your email to info@wavesycle.com contains your name, your email address, the concert or concerts you are requesting, the number of adults and children, and the total price. We do not ask for children's names or ages, only the number of seats at the child price (ages 10 to 16). This data reaches us only when you send the email yourself. The website itself sends nothing.

Concert reservations: why we use it and on what basis

We use your name and email address to handle your reservation request and, if you pay, to confirm and manage your reservation. We use the concert and seat details to manage capacity and to tell you about any changes. The legal basis is Article 6(1)(b) GDPR: the processing is necessary for steps you asked us to take before entering into a contract and, once you pay, for performing that contract. We do not use reservation data for marketing unless you separately subscribe to our mailing list.

Concert reservations: service providers

Your reservation email is received in our mailbox at Google Workspace, provided by Google, acting as a data processor under Google's data processing terms. Google may process data outside the European Economic Area and protects those transfers with Standard Contractual Clauses approved by the European Commission or another valid transfer mechanism. When you pay, the payment is handled by ING Bank N.V. under its own terms and privacy statement. We do not share your reservation data with anyone else.

Concert reservations: how long we keep it

If your request is not paid for, we keep it only for as long as we need it to handle the request and any questions about it. If you pay, your reservation forms part of our financial records, which Dutch law requires us to keep for 7 years (Article 52 of the Algemene wet inzake rijksbelastingen).

Temporary storage in your browser on the reservation page

The reservation page keeps what you enter (seat numbers, name and email address) in your browser tab's session storage, so that pressing Back brings it back. This data is never sent to us and is deleted automatically when you close the tab. This storage is strictly necessary for the service you are using, so under Article 5(3) of the ePrivacy Directive it does not require your consent.

Mailing list: what data we collect

When you subscribe to our mailing list, we collect your email address. MailerLite also keeps a record of when you signed up and confirmed your subscription, with technical details such as the IP address used, as evidence of your consent. What happens when you open an email or click a link in it is explained under 'Email tracking' below. Providing your email address is voluntary. If you do not subscribe, you will not receive our event announcements.

Mailing list: why we collect it

To send you announcements about upcoming Releasing Concerts and related updates. We do not use your data for any other purpose. We do not make solely automated decisions about you that produce legal or similarly significant effects (GDPR Article 22).

Mailing list: legal basis

We process your email address on the basis of your consent (GDPR Article 6(1)(a)). You may withdraw consent at any time by unsubscribing — see below.

Mailing list: service provider

Your email address is processed by MailerLite, a company based in the EU, acting as a data processor on our behalf under a Data Processing Agreement. MailerLite does not use your data for their own purposes. MailerLite may transfer data to subprocessors located outside the European Economic Area; such transfers are protected by Standard Contractual Clauses approved by the European Commission or another valid transfer mechanism. Their privacy policy is available at mailerlite.com/legal/privacy-policy.

Email tracking

Email services can record whether an email is opened, using a small invisible image, and which links in it are clicked, by sending each link through their own servers first. We switch off the recording of opens for every email we send. Links in our emails may still pass through MailerLite's servers on their way to the page you chose; when that happens, MailerLite records which link was clicked and when. If we want to start measuring opens or clicks, we will first ask for your consent, as Dutch law requires (Article 11.7a of the Telecommunicatiewet), and measure only the emails of subscribers who have agreed (GDPR Article 6(1)(a)). Saying no will not affect your subscription, and you can withdraw your consent at any time.

Mailing list: how long we keep it

We retain your email address for as long as you remain subscribed. When you unsubscribe, we stop sending you emails. We keep a record that you unsubscribed, so that you are not added again by mistake, and we keep it no longer than necessary for that purpose. You may unsubscribe at any time using the link in any email we send, or by writing to info@wavesycle.com.

Photography and recording at concerts

Photography, filming or audio recording may take place at a concert. If we would like to publish something in which you can be recognised, we will write to you after the concert and ask for your consent separately (GDPR Article 6(1)(a)). Agreeing is never a condition of attending. If you agree and later change your mind, write to info@wavesycle.com. For anyone under 16, we ask their parent or guardian instead. If we cannot identify or reach someone who can be recognised, we blur or crop them out rather than publish. We keep concert recordings, published or not, as an archive of our concerts and for possible future use, based on our legitimate interest in keeping a record of our own work (GDPR Article 6(1)(f)). Keeping a recording never means publishing it: anything in which you can be recognised is published only with your consent. You have the right to object to our keeping a recording in which you can be recognised, at any time, on grounds relating to your particular situation (GDPR Article 21); see 'Your rights' below.

Your rights

Under the GDPR you have the right to access, correct, or delete your personal data; to restrict processing; and to receive your data in a portable format. Where we rely on our legitimate interest, you have the right to object at any time, on grounds relating to your particular situation; we will then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data to establish, exercise or defend legal claims. You also have the right to withdraw your consent at any time — this does not affect the lawfulness of any processing that took place before withdrawal. To exercise any of these rights, contact us at info@wavesycle.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens, PO Box 93374, 2509 AJ The Hague; autoriteitpersoonsgegevens.nl.

Last updated: October 2026