Privacy Policy

 


Effective date: November 6, 2025

 

 

 

1. Data Controller

 


The controller of personal data pursuant to Article 4(7) of Regulation (EU) 2016/679 (GDPR) is:


Antonín Blažek

Business ID (IČO): 21879206

Registered address: T. G. Masaryka 313, 407 77 Šluknov, Czech Republic

E-mail: info@90plustickets.com

Phone: +420 774 051 061


The controller operates under the following business names:

 

  • 90+Tickets – ticket sales and related services,

  • 90+ Football Travel Agency – travel packages and related tourism services.

 


The controller ensures that all personal data is processed in accordance with the GDPR and Act No. 110/2019 Coll., on the Processing of Personal Data.

 

 

 

2. Scope of Processed Personal Data

 


The controller processes only the personal data necessary for:

 

  • processing and fulfilling orders,

  • communication with the customer,

  • accounting and legal compliance,

  • fulfilling contractual and legal obligations,

  • and marketing activities (based on consent only).

 


The processed personal data may include, in particular:

 

  • first and last name,

  • billing and delivery address,

  • e-mail address and phone number,

  • IP address and website usage data,

  • order history and payment details,

  • and data required for named tickets or travel services (e.g., date of birth, ID/passport number).

 

 

 

 

3. Purpose and Legal Basis for Processing

 


Personal data is processed for the following purposes:

Purpose of Processing

Legal Basis

Example

Performance of a contract

Art. 6(1)(b) GDPR

processing an order for tickets, trips, or goods

Legal obligation

Art. 6(1)(c) GDPR

accounting, tax records

Legitimate interest of the controller

Art. 6(1)(f) GDPR

website security, handling complaints, fraud prevention

Consent of the data subject

Art. 6(1)(a) GDPR

newsletters, marketing e-mails, cookies

 

The customer may withdraw their consent at any time by sending a request to info@90plustickets.com, without affecting the lawfulness of processing based on consent before its withdrawal.

 

 

 

4. Retention Period

 


Personal data is stored only for the period necessary to fulfill the purposes of processing:

 

  • for the duration of the contractual relationship and up to 5 years thereafter (for accounting and tax purposes),

  • for the duration of consent in the case of marketing activities,

  • or until the customer requests deletion, unless a longer retention period is required by law.

 


After this period, personal data is securely deleted or anonymized.

 

 

 

5. Data Sharing with Third Parties

 


The controller may share personal data only with trusted partners who assist in providing services to customers.

These recipients may include:

 

  • E-commerce platform: Shopify International Ltd.

    (151 O’Connor Street, Ottawa, Ontario, K2P 2L8, Canada; data transfers are secured under EU Standard Contractual Clauses).

  • Payment service providers: Stripe Payments Europe Ltd., PayPal (Europe) S.à r.l., or similar.

  • Delivery and travel partners: Česká pošta, Zásilkovna, DPD, FlixBus, airlines, and accommodation partners.

  • Accounting and tax advisors – for bookkeeping purposes.

  • IT and website maintenance providers.

 


All partners are contractually bound to maintain confidentiality and ensure compliance with GDPR.

 

 

 

6. Cookies and Tracking Technologies

 


The website www.90plustickets.com uses cookies to ensure proper functionality and analyze traffic.

Cookies may include:

 

  • Necessary (technical) – essential for website and checkout operation,

  • Analytical – used to improve site performance and user experience,

  • Marketing – used only with consent, for personalized advertising (e.g., Meta Pixel, Google Ads).

 


The user can manage cookie preferences in the cookie consent banner (e.g., Cookiebot or Consentmo).

Further details are provided in the separate Cookies Policy.

 

 

 

7. Data Subject Rights

 


Under the GDPR, every customer has the following rights:

 

  • the right of access to personal data,

  • the right to rectification of inaccurate or incomplete data,

  • the right to erasure (“right to be forgotten”),

  • the right to restriction of processing,

  • the right to data portability,

  • the right to object to processing based on legitimate interests,

  • the right to withdraw consent at any time,

  • and the right to lodge a complaint with a supervisory authority.

 


Supervisory authority in the Czech Republic:

The Office for Personal Data Protection (ÚOOÚ)

Pplk. Sochora 27, 170 00 Prague 7

www.uoou.cz

 

 

 

8. Data Security

 


The controller has implemented appropriate technical and organizational measures to protect personal data against:

 

  • unauthorized access,

  • loss, destruction, misuse, or alteration.

 


Access to personal data is restricted to authorized persons only.

All communication between the customer and the website is encrypted using HTTPS / SSL.

 

 

 

9. Marketing Communication

 


The controller may send commercial communications to customers only if:

 

  • the customer has explicitly requested them, or

  • the customer has previously purchased similar products or services.

 


The customer can unsubscribe from marketing e-mails at any time by clicking the “Unsubscribe” link or by contacting info@90plustickets.com.

 

 

 

10. Final Provisions

 


10.1 This Privacy Policy is publicly available on www.90plustickets.com.

10.2 The controller reserves the right to update or amend this Policy at any time, particularly to reflect legal or technical changes.

10.3 The current version is always available at the website above.

 

 

In Liberec, on November 6, 2025

Antonín Blažek

90+Tickets / 90+ Football Travel Agency

Business ID: 21879206

info@90plustickets.com