PRIVACY POLICY

PRIVACY POLICY

INFORMATION ABOUT US

This Privacy and Cookies Policy explains how Crazytrail – Unipessoal, Lda., owner of the LXMUSIC brand, collects, uses, stores and protects your personal data when you use our websites, applications, digital services, associated platforms and events (collectively referred to as the “Platforms”).


Data Controller:
Crazytrail – Unipessoal, Lda.
Cais Gás 7
1200-161 Lisbon
Portugal
VAT / NIF: PT518201198
Contact email: geral@lxmusic.pt

The Comissão Nacional de Proteção de Dados (CNPD) is the competent supervisory authority in Portugal:https://www.cnpd.pt

By using our Platforms, you agree to the terms of this Policy. If you do not agree, you should not use our services.

1. DATA WE COLLECT

We collect only the personal data strictly necessary for the operation of our activities, in accordance with the legal bases established by the GDPR and respecting the principle of data minimisation.


1.1 Data you provide directly to LXMUSIC:


  • Name, email address, phone number, postal address, age or date of birth
  • Newsletter subscriptions and contact form submissions
  • Participation in contests, promotions or events organised directly by LXMUSIC
  • Communications exchanged with us by email or via social media

1.2 Data collected automatically through our platforms:


  • IP address
  • Browser type, device and operating system
  • Session data (pages visited, time spent, clicks, etc.)
  • Cookies and technical identifiers (see section 3)



1.3 Data collected by ticketing platforms


LXMUSIC is not the owner or operator of the ticketing platforms used for our events. These platforms (such as Fourvenues, Shotgun, Xceed, Resident Advisor, among others) are managed by independent third-party entities.

Responsibility:
Any collection, processing and storage of personal data carried out by these platforms is the sole responsibility of the respective companies, acting as data controllers in accordance with the GDPR.

When purchasing a ticket via these platforms, your data will be processed in line with their own privacy policies and terms of service.

We recommend that you review the privacy policies of each platform before completing a purchase.


Examples:

Fourvenues:https://www.fourvenues.com/privacy-policy

Shotgun:https://shotgun.live/privacy

Xceed:https://xceed.me/privacy-policy

Resident Advisor:https://www.residentadvisor.net/privacy

Note: These policies may be updated without prior notice. We recommend checking them regularly.


LXMUSIC may receive basic data from these platforms (e.g. name, email address, ticket type), only when necessary for logistical and operational purposes, such as:


  • Sending essential information about the event
  • Ticket verification at entry
  • Resolving technical or administrative issues

These data are used exclusively for event execution purposes and are not shared with third parties or used for marketing unless you have explicitly consented to such use.

2. HOW WE USE YOUR DATA

We only process personal data that you have provided directly or that we have lawfully received from third parties (as explained above), for the following purposes:



  • Managing events and providing logistical information to participants
  • Responding to contact requests and support queries
  • Sending newsletters and promotional communications, where you have consented
  • Performing internal analysis and service improvement
  • Complying with legal, fiscal or security obligations
    Preventing fraud or unauthorised access

All data processing is carried out under a valid legal basis, as detailed in section 4.

3. COOKIES AND SIMILAR TECHNOLOGIES

Our platforms use cookies to ensure proper functionality and, with your consent, for statistical and marketing purposes.


Types of cookies:


Essential cookies:
Required for basic features such as security and navigation.


Analytics cookies (e.g. Google Analytics):
Allow us to analyse website usage and improve the user experience.


Third-party cookies:
Services like Facebook, Instagram or YouTube may place cookies for content sharing or personalised advertising purposes.


You can configure or reject cookies via our consent banner or through your browser settings.

More information:www.allaboutcookies.org

4. LEGAL BASIS FOR PROCESSING

All data processing activities carried out by Crazytrail – Unipessoal, Lda. are based on one or more of the lawful grounds under Article 6 of the GDPR.


Purpose

Sending event-related information

Sending newsletters and promotional campaigns

Statistical analysis and platform improvement

Security and fraud prevention

Compliance with legal obligations (e.g. invoicing)


Legal basis

Contract performance

Consent

Consent

Legitimate interest

Legal obligation

5. INTERNATIONAL DATA TRANSFERS

In some cases, your personal data may be processed outside the European Economic Area (EEA), particularly where we use service providers with servers located in third countries.


In such cases, we ensure that:



The country has an adequacy decision from the European Commission, or

Standard Contractual Clauses (SCCs) approved by the European Commission are in place, or
The provider has adhered to the EU–U.S. Data Privacy Framework, where applicable

6. DATA RETENTION PERIOD

In some cases, your personal data may be processed outside the European Economic Area (EEA), particularly where we use service providers with servers located in third countries.


In such cases, we ensure that:



The country has an adequacy decision from the European Commission, or

Standard Contractual Clauses (SCCs) approved by the European Commission are in place, or
The provider has adhered to the EU–U.S. Data Privacy Framework, where applicable

7. DATA SHARING WITH THIRD PARTIES

We only share personal data with third parties that provide services on behalf of Crazytrail – Unipessoal, Lda., always under data processing agreements.


Third-party providers may include:


Mailchimp (email and newsletter delivery)

Dropbox (cloud storage)

Google (Google Analytics)

Facebook / Instagram / TikTok / YouTube / Twitter / LinkedIn (advertising and social media)



We do not sell or commercially exploit your personal data.

8. YOUR RIGHTS

Under the GDPR, you have the following rights regarding your personal data:


Right of access

Right to rectification

Right to erasure (“right to be forgotten”)

Right to restriction of processing

Right to object

Right to data portability

Right to withdraw consent at any time

Right to lodge a complaint with the CNPD (https://www.cnpd.pt)


To exercise your rights:
Send an email to geral@lxmusic.pt. We may request proof of identity to verify your request.

9. DATA RELATING TO MINORS

Our platforms and services are not intended for individuals under the age of 16.
We do not knowingly collect personal data from minors.
If we become aware of the accidental collection of data from a minor under 16, we will delete the data immediately.

10. DATA SECURITY

We have implemented appropriate technical and organisational measures to ensure the security, integrity and confidentiality of your data, including:


  • Encryption of communications and devices
  • Restricted access to authorised personnel only
  • Firewalls, antivirus software and system monitoring
  • Internal data protection policies and ongoing staff training

11. CHANGES TO THIS POLICY

This policy may be updated periodically. Any significant changes will be communicated through our platforms or by email when applicable.

12. CONTACT

Crazytrail   – Unipessoal, Lda.
Cais Gás 7
1200-161 Lisbon
Portugal
VAT: PT518201198
Email: geral@lxmusic.pt


Last updated: December 2025
 Version: 1.0