Privacy Policy

1. Scope

<h2 style="text-align: start;">1. Scope</h2>This privacy statement (hereinafter: “Privacy Statement”) applies to the processing of your personal data by WEAREONE.world BV, a private limited company incorporated under Belgian law, having its registered office at Kattendijkdok-Westkaai 12, 2000 Antwerp, Belgium, and registered with the Crossroads Bank for Enterprises under company number 0867.239.782 and/or its affiliated companies within the meaning of Article 1:20 of the Belgian Code on Companies and Associations (such as TL International BV, TL Travel CommV, TL Winter BV, Lemon BV, Magnashow, LoT BV and MNKY BZZ BV), including its acquirers and legal successors (hereinafter collectively referred to as “WEAREONEGroup”, “Tomorrowland”, “we”, “us”, “our” and each individually as “WEAREONE” or “WEAREONE Group Company”), and your rights in relation to that processing. If you use our services, purchase our products, or participate in our activities, we will inform you of any special conditions that apply to the processing of your personal data, in derogation or addition to what is stipulated in this Privacy Statement. We advise you to consult all the documents provided.A brand of the WEAREONE group is Tomorrowland. By “Tomorrowland” we mean all festivals, events, products, and activities that are organized, produced, or offered by or on behalf of the WEAREONE group under the name Tomorrowland or under related brands, concepts, and companies. If you participate in our activities or make use of our applications and services, specific terms and conditions may apply in addition to, or by way of derogation from, this privacy statement. We strongly advise to review these terms carefully.This Privacy Statement does not apply to websites, services or applications of others, even if they are accessible through our websites (such as third-party websites, forums, Facebook, X, newsgroups and/or apps). We have no control over the information you post there and how it is processed, nor are we responsible for it. It is up to you to deal with this and to consult the privacy policies of these third parties for more information about how they handle your personal data.We may change this Privacy Statement at any time. To find out when we last updated the Privacy Statement, please refer to the “Last Updated” date at the bottom of this page. Any changes to this Privacy Statement will become effective as soon as we make them available on our websites.If you have any questions about this Privacy Statement or about the way in which we process your personal data, please contact us by email at <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a> or via the contact form if you have a Tomorrowland account.

2. Why we process your personal data

3. How we obtain your personal data

<h2 style="text-align: start;">3. How we obtain your personal data</h2>In most cases, we receive the personal data we process about you directly from you. This happens, for example, when you purchase a festival ticket, register to receive certain communications, or contact us for information or support.However, there are situations where we receive your personal data from others. This can happen when someone else purchases a festival ticket for you or when we receive information about you from our partners, such as when purchasing a Global Journey package offered in collaboration with external parties.In specific circumstances, we may also receive information about you from official authorities such as the police or other competent government bodies. This can occur in the context of legal obligations or during security incidents where your personal data is relevant.In the few cases where we collect personal data from children, such as for the organization of the Neighborhood Party, this will be done through and/or with the approval of a parent or guardian.

4. How we keep your personal data

<h2 style="text-align: start;">4. How we keep your personal data</h2>We retain your personal data for as long as necessary to achieve the purposes outlined above or as required by applicable regulations. When determining the appropriate retention period for your personal data, we consider various factors, such as the purposes for which we process the data and the categoriesof personal data. For example, we naturally retain atmospheric images created for our aftermovies much longer than the footage captured by surveillance cameras.The retention period may also vary depending on applicable legal and regulatory obligations, such as accounting requirements, which may require us to keep your data for a certain period.When the processing of your personal data is based on your consent, we will no longer retain your personal data once you withdraw your consent, unless other grounds permit or require us to retain your data longer.After the retention period expires, your personal data will be anonymized or deleted. However, this will not happen if there is an overriding interest for us or for someone else in continuing to retain your data, or when a legal obligation or a judicial or administrative order prevents us from de-identifying or deleting your personal data.

5. How we share your personal data with others

<h2 style="text-align: start;">5. How we share your personal data with others</h2><h3>5.1 Recipients of your personal data</h3>We ensure that access to your personal data is limited to those persons and departments that need to process these data in order to achieve the above-mentioned purposes.Even when we share your personal data with others, this is done exclusively for the same purposes. Possible recipients of your personal data include service providers, partners, advisors, and government authorities.For example, we may share your data with external service providers who support us in our business operations, such as IT service providers, logistics companies, financial institutions, and mobility partners. These parties help us to manage our services and infrastructure that are essential for our day-to-day operations.In addition, we may, but only with your explicit consent, share personal data about your lifestyle and interests with trusted partners that wish to send their own promotional communications. These partners act as independent data controllers.We also work with various advisors, such as accountants, lawyers, and other professionals who assist us in protecting our interests or enforcing our rights. We may share your personal data with potential parties in the context of business transactions, such as a possible merger, acquisition, or reorganization.In certain cases, we may share your personal data with courts and authorities where this is required by law or when it is necessary to protect our interests or safeguard our rights. We also share your personal data with government authorities when we are legally required to provide certain data, for example, to meet our tax or administrative obligations.Finally, we may also share your data with others if you have requested us to do so, if this is necessary to execute our agreement, or if we are legally obliged to do so.<h3>5.2 Transfer of personal data outside the European Economic Area</h3>Some recipients of your personal data may be located in a country outside the European Economic Area (hereinafter: “EEA”). For certain third countries, the European Commission has determined that they provide an adequate level of protection of personal data. Such adequacy decisions exist for countries such as the United Kingdom and Switzerland.If we transfer personal data to a recipient in a third country for which no adequacy decision exists, and no exemptions for specific situations apply, we are required to observe appropriate safeguards for the processing of your personal data. Such safeguards may be provided, inter alia, by a contractual arrangement between us and the recipient in the third country that is based on the standard contractual clauses for international transfers of personal data established by the European Commission, or any other mechanism that allows for the international transfer of your personal data in accordance with applicable data protection laws.Where we rely on appropriate safeguards for the transfer of your personal data, we will assess whether these safeguards can provide sufficient protection for your personal data so that the level of protection guaranteed in the EEA is not undermined by the transfer. If this is not the case, we will take the necessary additional measures to provide adequate protection. If this is not possible, we will not transfer your personal data to that recipient, or will only transfer your personal data if and to the extent another mechanism makes the transfer possible. For more information about these applicable safeguards, you can send a request by email to dpo@tomorrowland.com.

6. How we protect your personal data

<h2 style="text-align: start;">6. How we protect your personal data</h2>We treat the personal data we process confidentially, and we protect it in accordance with applicable regulations and our internal policies and procedures for data security.We use commercially reasonable efforts to ensure that your personal data is securely stored and protected against loss or unauthorized disclosure and use. However, you understand that security is an obligation of effort, not result, and that the outcome can never be guaranteed.

7. Your choices and rights

<h2 style="text-align: start;">7. Your choices and rights</h2>In accordance with applicable data protection legislation, you have the following rights, if and to the extent applicable, regarding the processing of your personal data:You have the right to request access to the personal data we process about you. We may charge an administrative fee if we consider your repeated requests to be unfounded or excessive, or if we believe that your request is intended to harm our business or impose an administrative burden on us.You have the right to request the correction of inaccurate personal data about you, free of charge. You must provide proof of the inaccuracies you want to have corrected.When we process your personal data based on your consent, you have the right to withdraw that consent at any time.Under certain conditions, you have the right to obtain the deletion of your personal data. Upon receiving your request, we will assess whether there are compelling grounds, such as legal or regulatory obligations, judicial or administrative orders, or a legitimate interest of us or someone else, that allow or require us to retain your personal data in an identifiable form rather than deleting it.In certain circumstances, you have the right to restrict the processing of your personal data. This can be done, for example, if you contest the accuracy of your personal data or if your personal data is no longer necessary for the purposes described above, but you still require it in a legal proceeding.When we process your personal data based on our legitimate interest, you have the right to object to the processing of your personal data on grounds relating to your particular situation. You can object to processing for the purpose of direct marketing at any time without cost or justification.If we process your personal data based on your consent or to execute an agreement, and the processing is carried out by automated means, you have the right to obtain the personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you, unless such a decision is necessary for the conclusion or performance of our agreement or if you have expressly consented to this type of processing. Currently, we do not engage in such decision-making, but if we were to do so, you have the right to object to it.You can send your request to exercise the above rights by email to dpo@tomorrowland.com. In your request, clearly state which right you wish to exercise, and if required, provide the necessary explanation. We will acknowledge receipt of your request. If your request is valid, we will grant it. If we have any doubts about your identity, we may ask you for additional information to verify your identity.If you are not satisfied with the way we process your personal data, we ask you to let us know about your concern by sending an email to dpo@tomorrowland.com. You have the right to lodge a complaint with a competent supervisory authority. In Belgium, this can be done via the complaints procedure on the website of the Data Protection Authority.Last Updated: December 18, 2025