ON THE MOVE
Privacy policy.
Version 18 October 2026
This explains which information On The Move uses when you visit this website, buy tickets or contact us.
1. Who is responsible?
The organiser and data controller is Quin de Wit, registered at Middelweg 2c, 3237LJ Vierpolders, Chamber of Commerce number 99645440. Contact: [email protected].
2. Website traffic and source links
When enabled, our analytics count daily website views, arrivals and ticketshop openings by campaign code. An artist, partner or Instagram link can pass that code to the shop. Our analytics do not store names, email addresses, full IP addresses, full referrer URLs or persistent visitor identifiers. They use no fingerprinting, analytics cookies or local browser storage. A forwarded source link remains attributed to its original source. Counts are not unique people. We cannot reconstruct a complete individual journey or recognise a visit from another device. Our analytics honour Global Privacy Control and Do Not Track.
3. Tickets and payments
The shop loads when you open it. Weeztix then receives the details needed for your order and payment, including the information you enter and technical connection data. The organiser uses order details to supply tickets, manage admission and answer order questions. Weeztix and the payment provider handle payments. Your bank or payment app may open outside this website.
Our private dashboard receives paid-order and order-update notifications from Weeztix. It stores a derived order code, campaign code, payment time, currency, order value, ticket types and counts. Any buyer contact details present in the notification are discarded by the dashboard. Return notifications are held apart for review. Opening the shop is never treated as a purchase. See Weeztix’s privacy information and the shop for its own purposes, retention and cookies. A source link does not itself provide consent for advertising cookies.
4. Contact and team access
We use your name, email address and message to answer enquiries. The dashboard uses a secure login session for team members and stores passwords only as hashes. Sessions expire after 30 minutes of inactivity or 8 hours in total. Short-lived IP-derived keys that change daily limit abuse; they are not visitor profiles.
5. Purposes and legal bases
Ticket fulfilment and order support are necessary to perform the contract. Mandatory administration is based on legal obligations. Where personal data are involved in limited measurement, security and general enquiries, we rely on our legitimate interest in understanding and protecting the website and sales, using only necessary data. You can object by email. Dashboard data are not used for automated decisions about you or individual advertising profiles.
6. Retention
Our traffic counters and derived order data are deleted after 180 days. Expired abuse-limit records are removed during dashboard use and processing; the daily cleanup task must also run. Team sessions last at most 8 hours. We retain correspondence while an enquiry or complaint is open and delete it within 12 months after closing, unless a legal obligation or dispute requires longer retention. Statutory financial retention is separate from this dashboard.
Our hosting provider stores and serves the website and handles technical server security. Technical server logs may include IP addresses and URLs and are retained for 60 dagen. Ticket and payment providers apply their own retention for services they are responsible for.
7. Recipients and security
Only authorised team members can access this dashboard. Hosting, email, ticket and payment providers receive information for their services. We do not sell your data. Access requires a login and data files are protected against public download. Providers processing personal data on our behalf require appropriate processing arrangements. Any processing outside the European Economic Area requires suitable safeguards; consult providers’ current privacy information for their processing.
8. Your rights
You can request access, correction, deletion, restriction, portability where applicable, or object to processing. You may withdraw consent where processing relies on it. We request only information needed to verify a request and normally respond within one month. Aggregate counters without visitor identifiers cannot be linked back to you. You may complain to the Dutch Data Protection Authority.
9. Updates
We update this policy when processing changes. The date at the top identifies this version.