Privacy Policy
Last updated: January 4, 2026 | GDPR Compliant
1. Introduction
Welcome to tomorrowland-thailand.com ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, Thailand's Personal Data Protection Act (PDPA), and other applicable data protection laws.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our pre-registration service. Please read this policy carefully to understand our practices regarding your personal data.
2. Data Controller Information
The data controller responsible for your personal data is:
Tomorrowland Thailand Fan Website
Email: privacy@tomorrowland-thailand.com
For EU users, you may contact our EU representative at: eu-privacy@tomorrowland-thailand.com
3. Personal Data We Collect
3.1 Information You Provide
When you use our pre-registration form, we collect:
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Full Name | Identification and personalization | Consent |
| Phone Number | SMS notifications about ticket sales | Consent |
| WhatsApp Number | WhatsApp notifications and updates | Consent |
| Telegram Username | Telegram notifications and updates | Consent |
| Email Address (optional) | Email newsletters and updates | Consent |
3.2 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address and approximate geographic location
- Browser type and version
- Device information (desktop, mobile, tablet)
- Pages visited and time spent on pages
- Referral source and exit pages
- Date and time of visits
4. How We Use Your Data
We use your personal data for the following purposes:
- Communication: To send you notifications about Tomorrowland Thailand 2026 ticket sales, lineup announcements, and event updates via your preferred communication channels
- Service Improvement: To analyze website usage and improve our content and user experience
- Legal Compliance: To comply with applicable laws and regulations
- Marketing: To send promotional content about related events (only with your explicit consent)
5. Legal Basis for Processing (GDPR Article 6)
We process your personal data based on:
- Consent (Article 6(1)(a)): You have given clear consent for us to process your personal data for specific purposes (pre-registration notifications)
- Legitimate Interests (Article 6(1)(f)): Processing is necessary for our legitimate interests in operating and improving our website
6. Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access (Article 15): Request a copy of the personal data we hold about you
- Right to Rectification (Article 16): Request correction of inaccurate or incomplete data
- Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing (Article 18): Request restriction of processing under certain circumstances
- Right to Data Portability (Article 20): Receive your data in a structured, commonly used format
- Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent (Article 7(3)): Withdraw your consent at any time without affecting prior lawful processing
To exercise any of these rights, contact us at privacy@tomorrowland-thailand.com. We will respond within 30 days.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes for which it was collected:
- Pre-registration data: Until 6 months after Tomorrowland Thailand 2026, unless you request earlier deletion
- Analytics data: Aggregated and anonymized after 26 months
- Communication records: 3 years for legal compliance purposes
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmissions
- Secure server infrastructure with access controls
- Regular security assessments and updates
- Staff training on data protection practices
9. International Data Transfers
Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
10. Third-Party Sharing
We do not sell your personal data. We may share data with:
- Analytics providers (Google Analytics) – anonymized data only
- Communication service providers (for sending notifications)
- Legal authorities when required by law
11. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy regularly.
13. Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EU users, you can contact your local Data Protection Authority. For Thai users, contact the Personal Data Protection Committee.
14. Contact Us
For any questions about this Privacy Policy or our data practices:
Email: privacy@tomorrowland.sale
Subject line: Privacy Inquiry