Privacy Policy

1. Who we are

Afrodise Scanner is the door-staff application of the Afrodise ticketing platform. It is operated by Afrodise Music SRL, a company incorporated in Romania with its registered office in Bucharest, Romania, CIF RO52584816 ("Afrodise", "we"). We are the data controller for the personal data described here. Privacy contact: contact@afrodisemusic.eu. The Afrodise brand is owned by Afrodise FZ-LLC (Ras Al Khaimah, United Arab Emirates), which publishes the app on the App Store and Google Play under the developer name "Afrodise"; it does not process the data described here.

This notice is specific to the Scanner app. Ticket buyers are covered by the platform's Terms & Conditions, Privacy, Cookie and Refund Policy at https://app.afrodisemusic.com/tickets-store/terms.

2. Who this app is for

The app is used only by event staff (door scanners and managers) with an account created for them by an event organiser on the Afrodise platform. Ticket holders do not use this app; their data appears in it only at the door, when their ticket is checked. This policy therefore covers two groups: staff who use the app and ticket holders whose tickets are scanned.

3. What the app processes

Staff account. Your e-mail address, name, account category and the sign-in token issued by the platform. The token is kept in the phone's secure storage (iOS Keychain / Android Keystore) until you sign out. Every scan you make is recorded on the platform against your account.

Events. The name, dates, venue and gates of the events you are assigned to, and which ticket types you may admit.

Ticket data at the door. When a ticket is scanned or looked up: the holder's name, ticket reference, ticket type, gate, wristband colour, the ticket's status and, for a ticket already used, the time it was first scanned. The manual lookup can also show the holder's e-mail address, so that a guest without their ticket can be found by it.

Offline list. To keep working without signal, the app can download to the phone the list of valid tickets for one event (codes, holder names, e-mail addresses, ticket type, gate, status). It is stored in the app's private database on the phone and replaced or removed when you download again, clear it, sign out or uninstall the app.

Scan log on the phone. Each scan is logged on the phone (time, code, holder name, ticket type, result, whether it was made online, offline or by manual lookup) so staff can review recent scans. It can be cleared at any time from the app and is deleted when the app is uninstalled.

Scans sent to the platform. Every check (online immediately, or uploaded later for scans made offline) is sent to the Afrodise platform with the ticket code, the time and your account, and marks the ticket as used. This is the record the organiser relies on for admission and reconciliation.

Camera. The camera is used only to read QR codes on tickets. Frames are processed on the phone and are never stored or sent anywhere. The torch is used only to light the ticket.

App updates. When the app starts it asks our update service, Expo (EAS Update), whether a newer version of the app's code is available, and downloads it if so. That request carries the app version, the platform (iOS or Android), a random installation identifier generated by the app and the phone's IP address. It carries no account, ticket or guest data, and the identifier is not linked to you.

Nothing else. The app does not use the microphone, location, contacts, photos or files, does not show advertising, does not contain analytics, tracking or crash-reporting SDKs, and does not use cookies. Apart from the update check above it talks only to the Afrodise platform (app.afrodisemusic.com), always over encrypted connections.

4. Why we process it and on what legal basis

• To check tickets and admit guests at the door, and to record admissions for the organiser: this is necessary for the performance of the ticket contract with the holder and for our legitimate interest in running secure, fraud-resistant entry (GDPR art. 6(1)(b) and (f)).
• To authenticate staff and attribute scans to the staff member who made them: our legitimate interest in accountable access control, and our contract with the organiser (art. 6(1)(b), (f)).
• To keep the app working without network coverage (offline list and later upload): the same purposes.
• To deliver fixes to the app quickly (update check): our legitimate interest in keeping the door app working and secure (art. 6(1)(f)).

We do not use this data for marketing, profiling or automated decision-making with legal effect.

5. Who receives the data

Data is processed on the Afrodise platform's servers, operated for us by our hosting provider in the European Union, and shown to the staff of the event concerned. Expo (650 Industries, Inc.) delivers app updates as our processor and receives only the update-check data described in section 3. We do not sell personal data and do not share it with advertisers. Apple and Google distribute the app but receive no data from it. We disclose data to authorities only where the law requires it.

6. How long we keep it

On the phone: until you clear the offline list or scan log, sign out, or uninstall the app. On the platform: scan records are part of the event's ticketing records and are kept for as long as the ticketing platform keeps the order and ticket data they belong to, and in any case no longer than the applicable accounting and legal retention periods. Staff accounts are kept while the account is active and deleted or archived when the organiser removes the staff member.

7. Security

Connections use TLS. The sign-in token is stored in the platform's secure storage on the phone and the app's database is private to the app; Android backups of the app's data are disabled. Access to the platform is restricted to authenticated staff and limited to the events and ticket types each account may scan.

8. Your rights

Under the GDPR you may ask us for access to your personal data, its rectification or erasure, restriction of or objection to its processing, and portability, by writing to contact@afrodisemusic.eu. Ticket holders may also contact the organiser of their event. You may lodge a complaint with the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or the authority of your country of residence.

9. Children

The app is a staff tool and is not intended for anyone under 18.

10. Changes

We will publish any change to this policy at the same address, with the version and date at the top. Material changes will also be announced in the app.