1. Who handles your data

The data controller is:

  • Name: to be completed
  • Tax ID: to be completed
  • Address: to be completed
  • Email:
  • Phone: to be completed

It runs Arken's ticket office at arkencol.net and its subdomains.

2. What data we collect

  • What you give us when you create your account: first and last names, ID type and number, mobile number and email.
  • Your purchases, your tickets, their transfers and your entries to events (time and gate).
  • The payment receipts you upload and each payment's reference.
  • Technical data for account security, such as your IP address and the time of each sensitive action.

We don't ask for sensitive data. Your ID number is stored encrypted.

3. What we use it for

  • Selling you tickets in your name, checking your payments and giving you the QR.
  • Controlling entry to events and preventing fraud (resale, duplicated or fake tickets).
  • Carrying out the ticket transfers you ask for.
  • Writing to you about your purchases, your tickets and changes to your events.
  • Handling your requests.
  • Meeting our accounting, tax and public-events obligations.

We don't use your data for advertising without a separate authorisation.

4. Who we share it with

Only as far as needed, with:

  • The providers that serve us as processors: server, email delivery and content delivery network.
  • The authorities, when the law requires it.

Door staff and promoters see your name and ID partially hidden. We don't sell your data.

5. How long we keep it

  • Account data: while your account is active.
  • Purchases and payments: ten years, an accounting obligation (Colombian Commercial Code, art. 60), even if you ask us to delete your account.
  • Entry and security records: as long as their purpose requires.

6. Your rights

Free of charge, you can:

  • Know, update and correct your data.
  • Ask for proof of your authorisation.
  • Find out how we use it.
  • Withdraw your authorisation and ask us to delete it, when there is no legal duty to keep it.
  • File complaints with Colombia's Superintendence of Industry and Commerce (SIC).

7. How to exercise them

There are two ways:

Response times:

  • Queries: 10 business days.
  • Claims (correction, deletion and withdrawal): 15 business days.

If we need more time we'll let you know beforehand, as the law allows.

8. How we protect it

  • Encrypted ID numbers.
  • Passwords stored with Argon2id.
  • Secure connections (HTTPS).
  • Team access by role, with an audit log.
  • Tickets with a QR that changes every 20 seconds.

9. Changes

This policy applies from October 4, 2026. If it changes in an important way, we'll email you before it applies.