Loading privacy statement
This privacy statement explains how Antro processes personal data when you visit and use the platform, manage an account or organisation, register for and buy tickets, or request advertising. It covers free and paid events, payments, refunds and contact with Antro or an organiser. The data processed depend on the features you use. Antro does not sell personal data or use them for advertising tracking.
Antro does not make solely automated decisions with legal or similarly significant effects on you. Events may be ranked automatically based on your preferences and location. You can adjust the account preferences used. The payment service provider may use other processes for its own fraud prevention and statutory checks; it explains those in its own privacy notice.
Antro determines why and how data are used for accounts, platform security, its own communications, advertising requests and its own financial records. Antro is the controller for these purposes. The organiser determines the purpose of event registration and participant management; Antro processes those data on the organiser’s instructions, as processor. The organiser ensures a valid legal basis and information for participants. Mollie is an independent controller for payment services, fraud prevention and its own statutory checks. Each party remains responsible for its own processing.
Antro
Business and complaints address: Havikshorst 25, 1083 TM Amsterdam
Chamber of Commerce number: 91180414
VAT identification number: NL004875304B93
Email: info@antro.nl
Privacy requests: info@antro.nl
Data required for an account, order or payment are necessary to provide that service. Without those data, Antro cannot fulfil the relevant request. Optional profile details and a profile photo are not required to order a ticket. Where Antro relies on a legitimate interest, it weighs that interest against your privacy and you can object.
A buyer may enter other participants' names and sometimes email addresses. Only enter data needed for the ticket, make sure you are authorised to provide it and tell participants about this policy. These data are used for registration, fulfilment and the participant management described above by the relevant organiser.
A personal account has no public profile page or visibility toggle. If you post a review or another public contribution, or are listed in a public role at an event, Antro may display your display name and round profile image. Without a photo, Antro shows your initials in your chosen profile colour. A photo is only used while the recorded photo consent remains active. Public contributions, organisation pages and events can be viewed and copied by visitors or search engines.
Antro uses Supabase for its database, authentication and storage, and Vercel for hosting and technical processing. The relevant organiser and its authorised administrators receive the order, participant and contact details needed for fulfilment and follow-up. Google OAuth is only used when that login option is available and you choose it. Map features may make requests to OpenStreetMap, Unpkg, GitHub and Google Maps when displayed or used.
Antro uses Resend for ticket emails, review requests, order communications and contact enquiries and notifications to Antro. For those purposes, Resend receives the email address, message content and any ticket attachments. Account confirmations and recovery emails are sent through Supabase Auth and TransIP's SMTP service. Contact enquiries and bug reports may also arrive in Antro's support mailbox.
The info@antro.nl mailbox is hosted by TransIP. To receive, store and send email, TransIP processes the sender's and recipient's email addresses, message content and any attachments.
Antro uses Mollie for paid orders. Antro provides the amount, currency, order description and references needed to link the payment and any refund to the correct order. During checkout, Mollie also receives the payment details you provide and technical data such as your IP address and browser information. Antro receives the payment status and relevant payment references; Antro does not store your bank password, full card number or card security code. Mollie may share data with the banks, payment networks and other parties involved in payment processing and statutory checks. Read more in Mollie's privacy notice.
For an external booking, you complete registration or payment on the external provider's website. That provider informs you about its own data processing. Antro does not automatically receive complete booking or payment details from an external website.
Antro’s primary Supabase database, authentication service and files are hosted in Stockholm, Sweden (eu-north-1). TransIP hosts the mailbox in the Netherlands. Vercel processes hosting traffic through its international infrastructure; the database region does not determine where every technical request is processed.
Resend sends Antro emails from Ireland but stores message content and delivery logs in the United States. Open and click tracking are disabled for antro.nl. Resend describes 30 days of email and log retention and 7 days for backups on its standard plans. We can contact the provider for an earlier erasure request.
Providers may also process data outside the European Economic Area. Their contractual safeguards include the European Commission’s Standard Contractual Clauses where applicable; an applicable adequacy decision may also support a transfer. You can request information or a copy of the relevant safeguards through our privacy contact.
Free registrations: buyer and participant details, ticket links, answers, recorded attendance and internal notes have a retention period of 24 calendar months after the event ends. For a bundle, the end of the last event covered by that booking applies. Without an end time, we use the end of the local start day. Editing a note, consulting a record or making a new registration does not extend the old booking’s retention period.
After this period, the data can no longer be accessed through participant lists, attendance history, downloads or ticket links. Expired free bookings and their related copies within Antro are deleted automatically, normally within one hour. Antro checks that deletion succeeds. Data no longer needed before then are deleted sooner.
Paid orders: non-financial participant data and notes are retained only as long as needed to deliver, complete and provide necessary follow-up for the event. Antro assesses the need no later than 24 calendar months after the event and deletes or anonymises data no longer needed. Data necessary for an outstanding refund or a specific payment dispute are retained with restricted access until it is resolved, with a recorded reason and review date. Financial evidence follows its own statutory period. Automatic cleanup of free bookings does not apply to financial records.
The connection to an organiser's payment account is retained for as long as needed for the service and the handling of outstanding payments. After termination, access ends as soon as completion allows; financial evidence remains only for the applicable retention period. As an independent controller, Mollie applies its own retention periods to payment and identification data, as explained in Mollie's privacy notice.
A public review you chose to post has a separate purpose and remains until you delete it or your account, subject to necessary moderation or dispute handling. When the registration expires, we remove references to the original order and participant. Only the existing verification result remains with the review; the review itself may still show your participation in the named event.
For a specific dispute or legal obligation, only necessary information may be kept longer. We record the reason and a review date. These records are hidden from ordinary participant and ticket access. An overdue review date requires attention and does not justify indefinite retention.
Advertising requests and materials: a draft is retained while you use it and can be deleted at your request. Antro reviews unused drafts within 12 months of the last change and deletes them if there is no ongoing request or other need. Rejected, withdrawn or completed requests and related materials are deleted within 6 months of closure unless a specific dispute requires longer retention. Necessary agreements, invoices and payment records follow statutory financial retention periods. Antro performs these checks on uploaded files and correspondence as well.
Support email: for as long as needed to handle the request and up to 90 days afterwards, unless a recorded dispute or legal obligation requires longer retention. Antro also checks this in its mailbox; deleting a database message does not automatically delete a received email.
Administration and organisation activity records: up to 24 months, or sooner when the associated participant data are deleted. To secure ordering, we use keyed fingerprints instead of raw IP and email addresses. These limit the number of requests within 15 minutes. The data are retained for up to 24 hours and then removed at the next hourly cleanup.
Our own recovery copies are kept under restricted access and deleted or replaced within 30 days. After restoration, we reapply subsequent erasures before making the data available again. Providers also maintain their own cycles for technical logs and backups; these have restricted access and are not used for ordinary participant lookups. You can request current provider information through our privacy contact.
Where the relevant right applies, you can request access, correction, deletion, restriction or portability and object to processing based on a legitimate interest. You can withdraw consent for optional processing at any time without affecting earlier lawful processing. You withdraw consent for your profile photo by removing the photo in My account. You can correct your details and start a deletion request through the account dashboard. Use the privacy contact for other requests. Antro normally responds within one month. For a complex request, the period may be extended by up to two months; Antro explains this within the first month. We ask for additional identification only when necessary. If your request concerns processing for which an organiser or Mollie is responsible, we help you reach the right party. You can also lodge a complaint with the Dutch Data Protection Authority.
Antro restricts access to authorised people, uses secure connections, limits abuse of forms and records necessary administrative actions. Report a possible data breach to info@antro.nl.
Antro does not ask account users to record religious or philosophical beliefs. Interest in, attendance at or a review of an activity related to a worldview may sometimes reveal this indirectly. Antro restricts access and does not use these signals for advertising or decisions based solely on automated processing with legal or similarly significant effects. Do not share sensitive personal data in free-text fields or participant notes. If processing special categories of personal data proves necessary, Antro only does so where an exception under the GDPR applies. Data about minors are only processed through the necessary ticket or registration process; the person entering them must be authorised to do so.
The version and date at the top identify changes. Material changes will be clearly communicated before they take effect. See also the terms and conditions.