Privacy policy

In short:

• Showtacle Ltd. (Tron Event Agency) is responsible for your personal data.
• We use what you send us – through the contact form, by e-mail, phone or WhatsApp – to answer your inquiry and, if you book a show, rent or buy LED suits, to perform the contract.
• You get our newsletter only if you sign up and confirm it by e-mail; you can unsubscribe at any time.
• Analytics cookies are used only if you accept them. Details: Cookie policy.
• We do not sell your data.
• Questions or requests: [email protected].

This policy explains what personal data we process when you visit troneventagency.com, contact us, book a show, rent or buy LED suits, apply to become a partner or subscribe to our newsletter, and what your rights are. It follows the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), Slovak Act No. 18/2018 Coll. on personal data protection, and Slovak Act No. 452/2021 Coll. on electronic communications.

The controller of your personal data is:

Showtacle Ltd. (trading as Tron Event Agency)
Ľubietovská 3260/8, 851 01 Bratislava, Slovakia
Company ID (IČO): 36 735 361 · Tax ID (DIČ): 2022320652 · VAT ID: SK2022320652
Registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, file no. 44461/B
E-mail: [email protected] · Phone: +421 948 871 799

We have not appointed a Data Protection Officer, as our activities do not require one under Article 37 GDPR. Please send any privacy question or request to the e-mail address above.

Contact form. We process your name, e-mail address and message and – if you fill them in – your phone number, what your inquiry is about (a show, rental, purchase, partnership or something else), the event date, city or venue, type of event, the show you are interested in, your country and the number of suits. We also receive the page of our website you came from, so we know which show or service you were looking at.

Direct contact. If you write to us by e-mail, call us or message us on WhatsApp, we handle your contact details and what you tell us in the same way. WhatsApp also processes your data under its own privacy policy.

Purpose and legal basis: to answer your inquiry and prepare an offer – a step taken at your request before a possible contract (Art. 6(1)(b) GDPR). If you write on behalf of a company, agency or event organiser, we rely on our legitimate interest in answering business inquiries (Art. 6(1)(f) GDPR).

Your name, e-mail address and message are needed so we can answer you; all other fields are optional. You are not legally or contractually obliged to give us any data.

The form is delivered to our mailbox as an e-mail through Brevo’s e-mail service. The website itself does not store submissions.

If you book a show, rent or buy LED suits, controllers or software, we process the contact and billing details of you or your organisation, the event or delivery details, payment information (such as the date and amount of a payment – never full card details) and our correspondence, to conclude and perform the contract (Art. 6(1)(b) GDPR). For deliveries we pass your name, delivery address and phone number to the shipping company. We keep contracts and invoices to meet our accounting and tax duties under Act No. 431/2002 Coll. on accounting and Act No. 222/2004 Coll. on VAT (Art. 6(1)(c) GDPR). If you act on behalf of a company, we process the details of its contact persons based on our legitimate interest in performing the contract with that company (Art. 6(1)(f) GDPR).

We need these details to conclude the contract and issue invoices; without them we cannot accept the booking or order.

If you ask about starting your own LED dance business with us, we process the details you send us in the application form or by e-mail (contact details, country and city, company or team name, website or social media, who you are, your experience with LED shows, the number of your dancers, what you are interested in, when you want to start and your plans) to discuss a possible cooperation – a step taken at your request before a contract (Art. 6(1)(b) GDPR), or our legitimate interest in business cooperation if you act for a company (Art. 6(1)(f) GDPR).

If you subscribe, we process your e-mail address, your first name (only when you sign up through the contact form) and the record of your consent – when you signed up and confirmed, from which form, and the wording you agreed to. We send you news about our shows, new acts and LED technology based on your consent (Art. 6(1)(a) GDPR and § 116 of Act No. 452/2021 Coll.).

We use double opt-in: Brevo sends you an e-mail with a confirmation link, and you are added only after you click it. Subscribing is voluntary – the newsletter box in the contact form is optional and your inquiry is sent either way. Every newsletter has an unsubscribe link, or you can simply e-mail us. As part of the newsletter service, Brevo records whether our e-mails are opened and which links are clicked, so we can see what interests our readers.

Our forms are protected by Google reCAPTCHA v3. It is loaded only when you click or tab into one of our forms (the contact form or the newsletter box). To tell humans from bots, it evaluates technical data such as your IP address, browser and device details and how you interact with the page, and stores the _GRECAPTCHA cookie and a few entries in your browser’s storage. Submissions that look automated are rejected. This is not a decision with legal or similarly significant effects on you – if it happens, just e-mail or call us.

Legal basis: our legitimate interest in protecting our forms and mailbox from spam and abuse (Art. 6(1)(f) GDPR). Because reCAPTCHA starts only when you begin using a form – a service you asked for – its cookie and storage are strictly necessary for the security of that form and do not need cookie consent (§ 109(8) of Act No. 452/2021 Coll.). Google processes reCAPTCHA data as our processor under the Google Cloud data processing terms.

If you accept analytics cookies in our cookie banner, we use Google Analytics 4 to see how the website is used: pages visited, how you arrived, approximate location (country, city), device and browser, and actions such as playing a video, sending an inquiry or clicking our WhatsApp, phone or e-mail links – never what you wrote. Until you consent, Google Analytics is not loaded and no analytics cookies are set (Google Consent Mode v2, “basic” mode). Google Analytics 4 does not log or store IP addresses. We do not use Analytics for advertising: Google signals and links to advertising accounts are switched off, and the advertising consent signals always stay “denied”. Analytics data is kept for 14 months.

Legal basis: your consent (Art. 6(1)(a) GDPR and § 109(8) of Act No. 452/2021 Coll.), which you can withdraw at any time under Cookie settings at the bottom of every page; the analytics cookies are then deleted. Google acts as our processor under the Google Ads Data Processing Terms, which cover Google Analytics.

The website and its form handler run on Cloudflare. To deliver pages and block attacks, Cloudflare processes technical data such as your IP address, browser, the page requested and the time; when a security check is active it may set a security cookie. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Our form handler logs only technical error codes, never your message.

• Fonts are served from our own website; no font provider is contacted.
• Site search runs in your browser: your search terms are not sent to us or anyone else.
• Videos: nothing loads from YouTube or Vimeo until you press play – a note under each video says so. When you do, your browser connects to YouTube (privacy-enhanced mode, youtube-nocookie.com) or Vimeo (“do not track” mode), which receive your IP address and may store cookies under their own privacy policies.

Links to WhatsApp, social networks and partner websites lead to services with their own privacy policies.

Where necessary, we use the data described above to establish, exercise or defend legal claims – for example in a dispute about a booking, a rental or a payment – based on our legitimate interest in protecting our rights (Art. 6(1)(f) GDPR), only to the extent and for as long as this is needed.

Giving us your data is voluntary. Without the details needed to answer an inquiry we may not be able to reply or prepare an offer, and without the details needed to conclude or perform a contract we cannot accept a booking, rental or order. Billing details must be provided to the extent the accounting and tax laws require.

We share personal data only with providers that help us run the website and our business, and with others where this is needed:

• Brevo (Sendinblue SAS, 9-17 rue Salneuve, 75017 Paris, France): delivery of contact-form e-mails and the newsletter – processor.
• Cloudflare, Inc. (USA): hosting, content delivery and security – processor.
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; data may also be processed by Google LLC, USA): reCAPTCHA and Google Analytics – processor; YouTube – independent controller, only if you play a video.
• Vimeo.com, Inc. (USA): independent controller, only if you play a Vimeo video.
• WhatsApp Ireland Limited: independent controller, only if you message us on WhatsApp.
• Our e-mail and server hosting provider (servers in the European Union): hosts our mailbox – processor.
• Shipping companies and payment providers (e.g. couriers, banks, PayPal): only to deliver and settle a rental or purchase – independent controllers.
• Our accountant, tax adviser and legal advisers: for bookings, invoices and legal claims; they are bound by confidentiality.
• Partner performers and show teams: only the event details they need to prepare a show you asked about or booked.
• Courts and public authorities: only where the law requires it.

Google LLC, Cloudflare, Inc. and Vimeo.com, Inc. are certified under the EU–U.S. Data Privacy Framework, which the European Commission recognised as providing an adequate level of protection on 10 July 2023; where it does not apply, they use the Commission’s Standard Contractual Clauses. Brevo stores data in the European Union; any of its sub-processors outside the EU are bound by Standard Contractual Clauses. Our mailbox is hosted in the European Union. You can check a company’s certification at dataprivacyframework.gov; for a copy of the Standard Contractual Clauses, e-mail us.

• Inquiries (and partner inquiries) that do not lead to a contract: 2 years after our last contact, then deleted.
• Bookings, rentals and purchases: for the duration of the contract and the limitation period for legal claims (usually 4 years under the Slovak Commercial Code); accounting records and invoices for 10 years (Act No. 431/2002 Coll.).
• Copies of form e-mails at Brevo: Brevo keeps the e-mail and its delivery log only for a limited time for delivery and troubleshooting, then deletes them.
• Newsletter: until you unsubscribe. After you unsubscribe we keep your address on a block list so we do not write to you again, and the record of your consent for 4 years, as § 116 of Act No. 452/2021 Coll. requires (Art. 6(1)(c) GDPR). Sign-ups that are never confirmed are not added to the list.
• Analytics: 14 months; aggregated statistics without identifiers may be kept longer.
• Technical security logs: only as long as needed for security and troubleshooting.
• Cookies: see the Cookie policy.

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure: the website and forms run only over encrypted connections (HTTPS), the forms are protected against spam and abuse, the website does not store form submissions, access to our mailbox and service accounts is limited to the people who need it for their work and protected by strong passwords and two-step verification where available, and our software is kept up to date. We use only service providers who give sufficient guarantees of data protection and, where they process data on our behalf, are bound by a data processing agreement (Art. 28 GDPR).

We use only the cookies the website needs to work securely, analytics cookies if you accept them, and the video provider’s cookies if you play a video. The full list, with durations, is in our Cookie policy. You can change your choice at any time with Cookie settings at the bottom of every page.

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to withdraw your consent at any time without affecting the lawfulness of earlier processing.

Right to object: where we rely on our legitimate interests (answering business inquiries, performing contracts with companies, spam protection, website security), you can object at any time on grounds relating to your particular situation. You can object to direct marketing at any time without giving a reason.

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you (Art. 22 GDPR).

To use these rights, e-mail [email protected]. We reply free of charge, without undue delay and at the latest within one month; for complex or numerous requests this can be extended by two more months, and we will tell you why. We may ask you to confirm your identity. Erasure may not be possible where the law requires us to keep the data (e.g. invoices) or where it is needed to establish, exercise or defend legal claims – we will tell you if this is the case.

You may also lodge a complaint with a supervisory authority, especially in the EU country where you live or work. In Slovakia this is the Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Galvaniho 7/B, 821 04 Bratislava, [email protected], +421 2 3231 3214, dataprotection.gov.sk.

Our services are meant for event organisers, agencies and businesses. We do not knowingly collect data of children under 16.

We update this policy when our website, our services or the law change. The date of the latest version is shown at the top of this page.