09 / Privacy

YOUR DATA.
YOUR RIGHTS.

What data is processed, why, for how long, and how to exercise your rights.

Document under review: items in brackets must be completed by the organiser before going live. This page is kept out of search engines until it is final.

Data controller

La Guilde des Cartes SRL, Louveterie 27, 4830 Limbourg, company number 1026.445.684, is the controller of the processing described below. Contact for any question about your data: info@generationtcg.be.

This policy follows the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

Data, purposes and legal bases

SituationDataPurposeLegal basis

Visiting the websiteIP address, date and time, page requested, browser (hosting server logs)Website security and operationLegitimate interest (Art. 6(1)(f) GDPR)

Email contactName, email address, message, company if relevantAnswering requests (visitors, exhibitors, partners, press)Legitimate interest or pre-contractual steps (Art. 6(1)(b) and (f))

Buying ticketsName, email, order details, payment information handled by the platform’s payment providerSelling and sending tickets, customer service, refunds if cancelledPerformance of a contract (Art. 6(1)(b))

AccountingBilling and order dataAccounting and tax obligationsLegal obligation (Art. 6(1)(c))

Entering the showTicket code, date and time of the checkAccess control and fraud preventionContract and legitimate interest

Event photos and videosImages of people attendingCoverage and promotion of the eventLegitimate interest (Art. 6(1)(f)); photos and filming accepted by entering the show (admission terms)

Exhibitors and partnersBusiness contact details, stand or partnership informationOrganising and managing contractsPerformance of a contract (Art. 6(1)(b))

Ticket payments are made on the Billetweb platform. La Guilde des Cartes SRL never has access to your card details. No data is sold or used for profiling. No automated decision is made about you.

External ticketing

Tickets are sold through Billetweb, acting as processor for La Guilde des Cartes SRL for order management and, for its own user accounts, as a separate controller. Its data protection policy applies to your use of its platform: Billetweb legal notice and GDPR. Tournament registrations also take place on external platforms with their own policies.

Photos and videos at the show

Photographers and videographers may be present during the event; signs at the entrance will say so. By entering the show, every visitor agrees to be photographed or filmed and to these images, wide shots and portraits alike, being used to present and promote the event on the website, social media and the organisers’ communication materials, as set out in the terms of sale and admission. For minors, this agreement is given by their parents or by the adult accompanying them. You keep the right to object to being photographed by telling the photographer on site, and to ask at any time for an image to be removed by writing to the contact address.

Recipients

Your data is only accessible to the organisation members who need it and, within the limits of their task, to our providers: website host (Infomaniak), ticketing platform (Billetweb) and its payment provider, email provider ([name]), accountant ([name]), the security company in charge of access control, and photographers or videographers working on behalf of the organisation. It may be disclosed to authorities when required by law. Photos and videos published to present and promote the event are visible to everyone.

Transfers outside the EU

The website is hosted in Switzerland by Infomaniak; Switzerland benefits from a European Commission adequacy decision. Should another provider process data outside the European Economic Area, the transfer would be covered by a European Commission adequacy decision or by standard contractual clauses.

Retention periods

Website technical logs: 12 months maximum.
Email exchanges: 3 years after the last contact.
Order and billing data: the period required by Belgian accounting and tax law (up to 10 years).
Access control data: until the end of the claim period following the event, then deleted or anonymised.
Photos and videos: as long as they are used to present the event, unless you object or ask for removal.

Your rights

You have the right of access, rectification, erasure, restriction, portability, objection (in particular to processing based on legitimate interest) and the right to withdraw consent at any time (Articles 15 to 21 GDPR). To exercise these rights, write to the contact address with your request; proof of identity may be requested if there is any doubt. We reply within one month, which may be extended by two months for complex requests.

Complaints

If you believe your rights are not respected, you may lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels — contact@apd-gba.be — dataprotectionauthority.be.

Minors

Ticket purchases are reserved for adults or for minors acting with their parents’ permission. The website does not knowingly collect data about children under 13.

Security

The website is served over an encrypted connection (HTTPS). Access to data is limited to authorised people and password-protected. Fonts are hosted on the website itself: browsing triggers no calls to third-party font services.

Changes

This policy may be updated, in particular when ticket sales open or when a new tool is added. The last update date is shown at the bottom of the page.

Last updated: 10 November 2026

YOUR DATA.YOUR RIGHTS.