Privacy Policy
This Privacy Policy describes what personal data we collect, how we use it, who we share it with, and why.
Personal data means any information that can be linked to you as an individual. This includes your name and contact details, as well as other information that may be connected to you directly or indirectly.
In this Privacy Policy you can read about the personal data for which Fabnite is the data controller. It is important to us that you understand what personal data we process, so that you can exercise your rights under applicable data protection legislation.
1. Introduction
1.1 – Data Controller
Fabnite is the data controller for all processing of personal data where we determine both the purpose and the means of processing.
If you have questions about this Privacy Policy or the decisions we have made, you are welcome to contact us at privacy@fabnite.com.
1.2 – Data Protection Officer
Fabnite has appointed a Data Protection Officer (DPO) who you can contact if you have questions about how we process personal data about you, or if you need help exercising your rights with Fabnite. The Data Protection Officer has a duty of confidentiality.
You may contact the Data Protection Officer at privacy@fabnite.com.
2. When Do We Collect Personal Data?
We primarily process personal data about you in the following circumstances:
You have purchased ticket(s) to an event
You have joined an organiser's customer club
You create a user account with Fabnite
You visit the fabnite.com website or use the Fabnite app
You have contacted us by email
We may also receive information about you from third parties in the following circumstances:
An organiser contacts us regarding a scanning error relating to tickets you have purchased
An organiser contacts us in connection with suspected ticket fraud where you are the registered ticket buyer
3. How We Process Personal Data
3.1 – You Have Purchased Tickets to an Event
When you purchase tickets from us, we use the information you provide to fulfil both our own obligations and those of the Organiser in delivering services to you.
Organisers who sell tickets through Fabnite are permitted to receive ticket and customer data from us. In these cases, the Organiser acts as a data processor in respect of that personal data.
We share information including your contact details, details of the tickets you have purchased, and any other information necessary to enable the Organiser to fulfil its obligations to you.
The Organiser uses this information to make the event safer and more enjoyable for attendees — for example, by carrying out access control, analysing customer behaviour, and sending essential event-related communications (not marketing) before and after the event by email.
The legal basis for processing and sharing personal data in connection with ticket purchases is Article 6(1)(b) of the GDPR, which permits us to process and share information necessary to perform a contract to which you are a party.
3.2 – You Have Joined an Organiser's Customer Club
When you sign up to an organiser's customer club, you consent to Fabnite sharing the following information about you with the Organiser:
Your personal information
Your contact details
Information and statistics about your ticket purchases with that organiser
This information will be accessible to the Organiser through their administration panel in Fabnite.
By joining, you also consent to the Organiser using your information to personalise communications and offers, and to send these to you by email and/or SMS.
You may withdraw from an organiser's customer club at any time through My Memberships, found under My Account.
Please note that if you leave a customer club, you may no longer meet the eligibility criteria if, for example, you have purchased discounted member tickets as part of a customer club promotion for a future event with that organiser. The Organiser reserves the right to refuse entry to the event if you are no longer a member of their customer club.
Upon withdrawal, the Organiser will no longer have access to view or use your information in their administration panel, and will no longer be permitted to send you the communications described above.
3.3 – You Create a User Account with Fabnite
Anyone who purchases tickets through Fabnite must create an account and provide certain information in a user profile. Some of the information we request is required to deliver our services; other information helps us make Fabnite a more personalised experience.
Required information we ask for:
Login information (email address or phone number)
Personal information (full name is required to identify you as a ticket buyer)
Contact information (email address is required to deliver your tickets and to identify you as a ticket buyer)
Optional personal information you may choose to provide:
Gender
Date of birth
Address
Postal code
City
Country
We may use this optional information to, for example, provide recommendations based on your location or the preferences of users with similar profiles.
You may delete your Fabnite account at any time by going to My Account.
3.4 – You Visit fabnite.com or Use the Fabnite App
When you visit fabnite.com or use the Fabnite app, we collect certain information using cookies.
Cookies are small text files stored on your device when you visit a website. When you visit a website for the first time, a cookie file is sent to your device, which identifies your browser.
Cookies help us improve the functionality of our website. They are important for reducing load times and enhancing the user experience. Cookies collect information about how visitors use our website, providing us with valuable insight into how we can deliver a better customer experience and improve our services.
We use Cookiebot as our consent management solution. Non-essential cookies are only used following your active consent. You may change or withdraw your consent at any time via our website.
The legal basis for generating anonymous statistics is Article 6(1)(f) of the GDPR, which permits us to process information where it is necessary for a legitimate interest that outweighs the interests of the individual. That legitimate interest is to improve and develop the content of our website and app.
3.5 – You Have Contacted Us by Email
We use email to carry out our day-to-day activities. Emails we receive will be deleted when they are no longer needed for our ongoing work. In practice, this means such emails are not normally retained for more than approximately one year.
We ask that you do not send special categories of personal data to us in unencrypted emails.
We scan all inbound and outbound emails for viruses and malware to protect the integrity, confidentiality, and availability of our systems.
The legal basis for this scanning is Article 6(1)(c) of the GDPR. Fabnite has a legal obligation to ensure information security under Articles 5(1)(f) and 32 of the GDPR. Following a specific risk assessment, we have determined this measure is necessary for Fabnite to fulfil that obligation, and that the personal data processed does not go beyond what is strictly necessary.
3.6 – An Organiser Contacts Us Regarding a Scanning Error
If the organiser of an event for which you have purchased tickets experiences a scanning error, they may contact us in order to resolve it. In such cases, we and the Organiser may share information about you to facilitate troubleshooting.
The legal basis is Article 6(1)(b) of the GDPR, as described in section 3.1.
3.7 – An Organiser Contacts Us Regarding Suspected Ticket Fraud
If an organiser suspects ticket fraud during scanning and you are the registered ticket buyer, they may contact us to verify certain information. In such cases, we and the Organiser may exchange information about you for verification purposes.
The legal basis is Article 6(1)(b) of the GDPR, as described in section 3.1.
3.8 – Resale (Peer-to-Peer Ticket Resale)
Fabnite facilitates ticket resale between users. We process the personal data necessary to complete the transaction, ensure correct ticket transfer, and prevent misuse. The legal basis is the performance of a contract and legitimate interests.
4. Disclosure of Personal Data
We share your personal data only in the following circumstances:
With organisers, to fulfil both our own and their obligations to deliver services to you
With organisers, when you join an organiser's customer club in Fabnite
With third parties, where part of your order includes services provided by that third party
With our service providers, who carry out tasks or work on our behalf and under our instructions as data processors, for the purposes set out in this Privacy Policy
To protect and defend the rights and interests of Fabnite AS (including enforcement of our Purchase Terms)
With public authorities or agencies where required by law, court order, or enforceable decision of an authority
Fabnite does not sell personal data to third parties.
5. Security, Data Retention and Consent
Fabnite employs multiple layers of security to protect personal data against unauthorised access, use, or transfer.
Personal data you provide is stored in data centres with physical security controls and access restrictions. We use established encryption technologies for data transfers and grant access to systems containing personal data only to relevant personnel.
To maintain the security, stability, and reliability of our services, Fabnite uses sub-processors. The use of sub-processors is governed by data processing agreements with each provider.
Fabnite follows best practice and does not retain personal data for longer than is necessary to fulfil the purpose for which it was collected. Where processing is based on consent, the retention period is clearly stated in each individual consent.
Consent to the collection, processing, and sharing of personal data may in certain cases be implicit or inferred based on the activity or transaction through which you have provided us with that data. Where required by law, we have implemented an explicit 'accept' policy to obtain consent in connection with marketing.
6. Your Rights
You may exercise your rights by contacting us at privacy@fabnite.com or by post at:
Fabnite AS
Leif Weldings vei 18
3208 Sandefjord
Norway
You are entitled to a response without undue delay and no later than one month after we receive your request.
6.1 – Right of Access
You may request a copy of all personal data we process about you.
Read about the right to access at the Norwegian Data Protection Authority.
6.2 – Right to Rectification
You may ask us to correct or supplement information about you that is inaccurate or incomplete.
Read about the right to correction at the Norwegian Data Protection Authority.
6.3 – Right to Erasure
In certain circumstances, you may request the deletion of personal data we hold about you.
Read about the right to deletion at the Norwegian Data Protection Authority.
6.4 – Right to Restriction of Processing
In certain circumstances, you may ask us to restrict the processing of your personal data.
Read about the right to limitation at the Norwegian Data Protection Authority.
6.5 – Right to Object
Where we process your personal data on the basis of our legitimate interests, you have the right to object to that processing.
Read about the right to object at the Norwegian Data Protection Authority.
6.6 – Right to Data Portability
Where we process your personal data on the basis of consent or a contract, you may ask us to transfer your data to you or to another data controller.
Read about the right to data portability at the Norwegian Data Protection Authority.
6.7 – Right to Lodge a Complaint
We encourage you to contact us first if you believe we have not complied with applicable data protection law. You may also contact our DPO for advice and guidance — the DPO is bound by a duty of confidentiality.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.
Last updated: 10 May 2026