Privacy Policy for Medusa X


The event organiser, Medusa X, has the legal responsibility to tell ticket buyers and event attendees how their personal information will be collected and used. You can find their Privacy Policy below or contact them to request it.

MEDUSA X — PRIVACY POLICY

(Last updated: 07 January 2026)

1. Introduction

Medusa X is committed to protecting the privacy and personal data of all individuals who interact with its experiences, platforms, and communications.

This Privacy Policy explains what data we collect, why we collect it, how it is used, and your rights under applicable data protection laws, including the General Data Protection Regulation (GDPR).

Medusa X treats personal data with discretion, restraint, and purpose.

We collect only what is necessary to deliver and protect the experience.

2. Data Controller

The data controller responsible for processing personal data is:

Medusa X

Operated by: Pink Treasure – Experiências, Unipessoal Lda

Registered in Portugal

Contact: enter@medusax.pt

3. Personal Data We Collect

Depending on your interaction with Medusa X, we may collect the following categories of personal data:

3.1 Identification & contact data

  • Full name
  • Email address
  • Phone number
  • Country of residence

3.2 Transaction & access data

  • Purchase confirmations
  • Payment references (processed by third-party providers; Medusa X does not store full payment details)
  • Access status to experiences

3.3 Experience-related data

  • Dietary restrictions or allergies (where strictly necessary)
  • Accessibility needs (only if voluntarily provided)

3.4 Digital interaction data

  • IP address
  • Device and browser type
  • Website usage data via cookies (see Section 9)

3.5 Communication data

  • Messages sent via forms or email
  • Responses to invitations or access requests

4. Purpose of Data Processing

Personal data is processed only for legitimate and defined purposes, including:

  • Managing access to Medusa X experiences
  • Processing purchases and confirmations
  • Curating and validating participant eligibility
  • Communicating essential information related to the experience
  • Ensuring safety, logistics, and legal compliance
  • Responding to inquiries or requests
  • Improving website functionality and security

Medusa X does not sell, rent, or trade personal data.

5. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

  • Performance of a contract (e.g. access to an experience)
  • Legal obligation (e.g. accounting or regulatory compliance)
  • Legitimate interest (e.g. security, fraud prevention, curatorial integrity)
  • Consent, where explicitly provided (e.g. optional communications)

6. Data Sharing & Third Parties

Personal data may be shared only when strictly necessary, with:

  • Payment service providers
  • Technical service providers (hosting, ticketing, email systems)
  • Legal or regulatory authorities, if required by law

All third parties are contractually bound to comply with GDPR and confidentiality obligations.

7. International Data Transfers

Where data is transferred outside the European Economic Area (EEA), Medusa X ensures:

  • Adequate protection mechanisms
  • Standard Contractual Clauses (SCCs) or equivalent safeguards

8. Data Retention

Personal data is retained only for as long as necessary, according to:

  • Legal requirements
  • Contractual obligations
  • Legitimate operational needs

After this period, data is securely deleted or anonymized.

9. Cookies & Tracking Technologies

Medusa X uses cookies to:

  • Ensure proper website functionality
  • Analyze basic usage patterns
  • Improve security and performance

Non-essential cookies are used only with user consent.

You may manage cookie preferences through your browser settings.

10. Your Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request erasure (“right to be forgotten”)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where applicable)

Requests may be submitted via the contact details provided below.

11. Data Security

Medusa X applies appropriate technical and organizational measures to protect personal data against:

  • Unauthorized access
  • Loss or misuse
  • Alteration or disclosure

However, no digital system can guarantee absolute security.

12. Artistic Context & Image Disclaimer

Medusa X experiences may include live performances, immersive environments, and artistic documentation.

Where image, video, or sound recording occurs:

  • It will be clearly indicated
  • Consent will be obtained where legally required
  • Recordings will be used exclusively for artistic, archival, or communication purposes aligned with the Medusa X universe

13. Changes to This Policy

Medusa X reserves the right to update this Privacy Policy when necessary.

The most current version will always be available on the official website.

14. Contact

For privacy-related questions or requests, please contact:

[enter@medusax.pt]

Subject line: Privacy Request — Medusa X