Privacy Policy
Last updated: 18 September 2026
1. Who is responsible for your data
The controller of personal data collected through `athensdancefestival.com` and its online checkout is:
YANKOV ZHIVO ANDRIYANOV | ZHIVO DANCE TEAM, trading as Athens Dance Festival / Zhivo Dance Team
Registered address: Kyriakou Efstathiadi 2 Argyroupoli, 16452, Athens, Greece
AFM number: 139148129
Email: info@athensdancefestival.com
Telephone: +30 694 762 2189
In this Policy, “we”, “us” and “our” refer to this controller.
2. Scope
This Policy explains how we process personal data when you browse the website, use the ticket checkout, request an invoice, contact us or complete an online purchase. Participant registration may require additional information and, where applicable, should be covered by a participant-specific privacy notice, particularly when information about minors is collected.
3. Data we collect
Depending on how you use the website, we may collect:
Checkout and order data
- full name;
- telephone number;
- email address;
- selected items, quantities, prices and total amount;
- order reference, order status and timestamps;
- payment status and payment transaction reference returned by the payment provider; and
- evidence of acceptance of the applicable purchase terms and policies, where recorded.
Invoice data
If you request an invoice, we may also collect:
- invoice name or company name;
- tax or VAT identification number;
- billing address, city, postal code and country; and
- other information required by Greek tax and accounting law.
Technical and security data
We may process IP address, browser and device information, request and error logs, session identifiers, security events and the dates and times of website and checkout activity.
Analytics data
If you consent to analytics cookies, Google Analytics may collect information about how the website is used, such as pages viewed, approximate location derived from IP address, device and browser characteristics, referral source, session activity and cookie or similar identifiers.
Communications
If you contact us, we process the contact details and content you provide, together with any order information needed to answer the request.
4. Temporary checkout session
The basket and checkout operate through session-based storage. Before an order is created, the selected items and information entered during checkout are held only in a temporary checkout session and are not stored as a completed order in the order database.
The session is linked to the browser through a strictly necessary session cookie. If checkout is abandoned, the temporary session data expires or is deleted according to the session retention period, currently **2 hours**.
When the customer submits the order, the information required to create, process and document that order is stored in our order records.
5. Payment-card information
We use the hosted redirection model of **epay eCommerce / Piraeus Paycenter** or the payment-services provider identified on the secure payment page.
Card numbers, expiry dates, CVV/CVC codes, PINs, online-banking passwords, one-time passwords and 3-D Secure authentication codes are entered directly on the payment provider’s secure page. They are not entered on, received by or stored on our website or in our database.
The payment provider sends us only the result and references needed to identify and reconcile the transaction. The provider processes payment data under its own legal obligations and privacy information, which is made available on or through the hosted payment page.
6. Why we use personal data and our legal bases
We process personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Maintain the basket and checkout session | Necessary to take steps at your request before entering into a contract and to provide the requested checkout service |
| Create, confirm and fulfil an order or participation purchase | Performance of a contract or steps requested before entering into a contract |
| Process and reconcile payment status | Performance of a contract and our legitimate interest in accurate and secure payment administration |
| Issue invoices and keep accounting or tax records | Compliance with legal obligations |
| Answer questions, complaints and refund requests | Performance of a contract, legal obligations and legitimate interests in customer service and the establishment, exercise or defence of legal claims |
| Prevent fraud, misuse and security incidents | Legitimate interests in protecting customers, the event and our systems, and compliance with legal obligations where applicable |
| Measure website usage through Google Analytics | Your consent; analytics cookies must not be activated before consent |
Where we rely on consent, you may withdraw it at any time without affecting processing already carried out lawfully before withdrawal.
7. Cookies and Google Analytics
The website uses strictly necessary cookies for functions such as session continuity, basket operation, checkout security and language preferences. These cookies are required to provide the service and cannot be disabled through the website’s preference tool, although they can be removed through browser settings.
We also use Google Analytics to understand website traffic and improve the website. Google Analytics and its non-essential cookies must be disabled by default and activated only after the visitor gives consent through the cookie banner or preference centre.
Declining analytics cookies does not prevent access to the website or the purchase of tickets.
8. Who receives personal data
We disclose personal data only where necessary to:
- the payment-services/acquiring provider for transaction processing and fraud prevention;
- website hosting, infrastructure, email and technical-support providers acting under appropriate contractual safeguards;
- accounting, tax, legal and professional advisers;
- competent public, regulatory, tax, judicial or law-enforcement authorities where required by law; and
- Google in connection with Google Analytics, but only after analytics consent.
We do not sell personal data.
9. How long we keep data
We keep personal data only for as long as necessary for the relevant purpose:
- abandoned checkout-session data: **2 hours**;
- order and customer-service data: subject to longer retention where necessary for legal claims;
- invoice, accounting and tax records: for the period required by Greek law;
- technical and security logs: **2 weeks**; and
Data may be kept longer where required by law, a competent authority, or for the establishment, exercise or defence of legal claims. When retention is no longer necessary, data is deleted or anonymized.
10. Your rights
Subject to the conditions and exceptions in applicable law, you may request:
- access to your personal data;
- correction of inaccurate or incomplete data;
- deletion of data;
- restriction of processing;
- portability of data you provided;
- objection to processing based on legitimate interests; and
- withdrawal of consent at any time for consent-based processing.
To exercise a right, email `info@athensdancefestival.com`. We may request information reasonably necessary to verify identity, but we will never ask for a card PIN, CVV/CVC, password or authentication code.
11. Required information
Fields marked as required in checkout are necessary to create and fulfil the order. If the required information is not provided, we cannot complete the purchase. Invoice information is required only when an invoice is requested or when the law requires it.
12. Children
The online purchaser must be at least 18 years old or otherwise legally capable and authorized to enter into the purchase. The ticket checkout is not designed to collect personal data directly from children. Where participant registration involves minors, the Organizer must provide appropriate information to and obtain any required authorization from the parent or legal guardian.
13. Automated decision-making
We do not use order data to make decisions based solely on automated processing that produce legal or similarly significant effects. Payment providers and card issuers may apply automated fraud and authorization checks under their own legal responsibilities and privacy notices.
14. Security
We use appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. No internet service is completely risk-free, and customers should contact us promptly if they suspect misuse of an order or confirmation.
15. Changes to this Policy
We may update this Policy to reflect changes in the website, payment process, service providers or law. The current version and “Last updated” date will always be published on this page.
16. Contact
For privacy questions or requests:
YANKOV ZHIVO ANDRIYANOV | ZHIVO DANCE TEAM
Email: info@athensdancefestival.com
Telephone: +30 694 762 2189
Postal address: Kyriakou Efstathiadi 2 Argyroupoli, 16452, Athens, Greece