The Tomorrowland Winter 2026 Privacy Policy

Privacy Policy

1. Scope

<h2><strong>1. Scope</strong></h2><p>This privacy statement (hereinafter: “<strong>Privacy Statement</strong>”) applies to the processing of your personal data by WEAREONE.world BV, a private limited company incorporated under Belgian law, having its registered office at Kattendijkdok-Westkaai 12, 2000 Antwerp, Belgium, and registered with the Crossroads Bank for Enterprises under company number 0867.239.782 and/or its affiliated companies within the meaning of Article 1:20 of the Belgian Code on Companies and Associations (such as TL International BV, TL Travel CommV, TL Winter BV, Lemon BV, Magnashow, LoT BV and MNKY BZZ BV), including its acquirers and legal successors (hereinafter collectively referred to as “<strong>WEAREONE Group</strong>”, “<strong>we</strong>”, “<strong>us</strong>”, “<strong>our</strong>” and each individually as “<strong>WEAREONE</strong>” or “<strong>WEAREONE Group Company</strong>”), and your rights in relation to that processing. If you use our services, purchase our products, or participate in our activities, we will inform you of any special conditions that apply to the processing of your personal data, in derogation or addition to what is stipulated in this Privacy Statement. We advise you to consult all the documents provided.</p><p>This Privacy Statement does not apply to websites, services or applications of others, even if they are accessible through our websites (such as third-party websites, forums, Facebook, X, newsgroups and/or apps). We have no control over the information you post there and how it is processed, nor are we responsible for it. It is up to you to deal with this and to consult the privacy policies of these third parties for more information about how they handle your personal data.</p><p>We may change this Privacy Statement at any time. To find out when we last updated the Privacy Statement, please refer to the “Last Updated” date at the bottom of this page. Any changes to this Privacy Statement will become effective as soon as we make them available on our websites.</p><p>If you have any questions about this Privacy Statement or about the way in which we process your personal data, please contact us by email at <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a> or via the contact form if you have a Tomorrowland account.</p>

2. Why we process your personal data

<h2><strong>2. Why we process your personal data</strong></h2><h3>2.1 Pre-registration and ticketing</h3><p>During the pre-registration process for ticket sales for our events and events we co-promote, we process your personal data to contact you prior to the start of the actual ticket sale. To carry out the ticket sales, we process your identification details such as your name, date of birth, gender and nationality. We also process certain specifics of your purchase, such as the type of ticket you prefer. To complete the purchase process, we need to process necessary payment details, such as credit card number of the ticket buyer.</p><p>To confirm your order and send your tickets, we process your contact details. If your ticket is delivered electronically, this will be your email address. If your ticket is delivered physically, such as the Tomorrowland Bracelet, we process your delivery address.</p><p>When we process your personal data during the pre-registration process, we do so at your request and based on your consent. Once your pre-registration leads to the purchase of a ticket, we rely on the necessity to execute the purchase agreement for processing your personal data. To the extent that we are subject to a legal obligation to perform fraud prevention and we process your personal data for this purpose, we rely on our legitimate interest in efficiently fulfilling that legal obligation. We also rely on our legitimate interest when we process your personal data to make the ticket sales as efficient and secure as possible, and to use statistical information about the pre-registration process and ticket sales to assess and improve our procedures for the future.</p><h3>2.2 Event attendance</h3><p>Our tickets are issued in the registered name. This means that we may ask you for your identification details such as your name, at the entrance to our events to verify whether it matches the name on your ticket. When you purchase Pearls and/or make purchases on-site, we also process your payment details. We rely on external suppliers for the secure processing of these transactions.</p><p>For these processing activities, we rely on the necessity to execute our purchase agreement. Since we are highly committed to providing our visitors with unique and unforgettable moments, we may also process your personal data in certain circumstances, such as when responding to your special requests. In these cases, we rely on our legitimate interest in providing you and other visitors with a unique experience. To the extent that we process statistical information about your visit, we rely on our legitimate interest in continuing to create unique visitor experiences in the future.</p><h3>2.3 Atmospheric images and close-ups</h3><p>During our events, we capture atmospheric images which we use in content such as aftermovies and social media posts. If we feature you specifically, this is based on your consent. Please note that permission to capture and use your image is not always required and can also be implicit. For the processing of your personal data, we rely on our legitimate interest in promoting our events to a wider audience and keeping archives of our various events.</p><h3>2.4 Event accessibility</h3><p>At your request, we can arrange special needs accommodations to tailor your visit to your specific physical and/or medical needs. For processing your personal data for enabling such accommodations, we ask for your consent.</p><h3>2.5 Travel and accommodation</h3><p>For some events, we offer certain travel and accommodation options – whether or not through our travel and accommodation partners. When you wish to link such an option to your visit, we process, among other things, identification details such as your name, contact details such as your email address, and certain specifics such as your preferred travel class. This information is necessary for making the required reservations and confirming them to you. To complete your purchase, we also process necessary payment details, such as your bank account number. The legal basis for processing these personal data is the necessity to execute the agreement.</p><p>To optimize your travel and accommodation experience, you can also share certain preferences, such as your interest in specific Global Journey activities. In this case, we process your preferences along with your identification and contact details so that we can contact you with suggestions. For this, we ask for your consent.</p><h3>2.6 Communication</h3><p><strong>Customer service and complaint handling</strong></p><p>We communicate directly with you when you contact us with questions, comments or complaints. To communicate with you, we process your identification details such as your name, contact details such as your email address, and any other information you provide to us. To handle your question, comment or complaint, we also process the content of your communication and its practical details. Depending on the type of request, we may share your request with others if necessary for handling it. The legal basis for this processing is our legitimate interest in responding to questions and comments and in handling complaints smoothly. To the extent that we use contextual information from your communications to train our staff internally to provide better customer service, we rely on our legitimate interest in improving our customer interactions.</p><p><strong>Practical communications</strong></p><p>We send you practical information about the events, activities and other initiatives for which you are registered. These communications may include, among other things, special access conditions, and information about accessibility, payment options, weather conditions, public transport strikes, etc. Additionally, these practical communications may also contain relevant details about products and services offered by our partners at the event for which you are registered, such as the supermarket at DreamVille. For these communications, we process identification details such as your name, contact details such as your email address, and registration information.</p><p><strong>Live Today, Industry Mailings and other community updates</strong></p><p>We would like to keep you informed about our events and activities, as well as our other projects, brands and initiatives such as Terra Solis, Mesa and Love Tomorrow. For this type of communication, we process identification details such as your name, contact details such as your email address, and your preferences as you have shared them with us. We will only send you our updates if you have given your consent or have requested to stay informed, for example, by signing up for a specific newsletter, unless you are an existing customer and we keep you updated on similar products and services we believe you may find interesting. If we are mistaken in this, you can always adjust your preferences or unsubscribe by clicking the “unsubscribe” link at the bottom of our emails.</p><p>If you have given your consent, we will also inform you about products or services from partners with whom we collaborate. For this communication, we process identification details such as your name, contact details, such as your email address, and the preferences you have shared with us.</p><p><strong>Customer satisfaction surveys and broader inquiries</strong></p><p>To optimize our overall services, we may invite our existing customers to participate in satisfaction surveys or to share experiences in broader inquiries. For this, we process identification details such as your name, and contact details such as your email address. Additionally, we process any other information about you that emerges from the research and that you provide to us in this context. We rely on our legitimate interest in inviting you to voluntarily participate in our inquiries. Participation is, of course, not mandatory, and the choice is entirely yours. We will try as much as possible to dissociate your responses from you as an individual. However, this also means that we may not always be reasonably able to respond to certain follow-up requests, such as an access request.</p><h3>2.7 Website</h3><p>To provide content on our website, optimize its functionality, and allow you to browse it, we may process your personal data. These will primarily be technical data about the device you use, such as the type of browser, and technical identifiers like your IP address.</p><p>The legal basis for this processing is our legitimate interest in offering our website and allowing you to use it. If legally required, for example, for placing analytical cookies, we ask for your consent for this processing.</p><h3>2.8 Tomorrowland account</h3><p>When you create a Tomorrowland account, for example, to make purchases in the Tomorrowland Store, we process identification details such as your name, date of birth, gender and nationality. We also process contact details such as your (email) address and phone number. Furthermore, we store certain preferences and interests, such as your music preferences if you have shared this information with us.</p><p>For the processing necessary to manage your account, we rely on the necessity to execute the agreement. For the processing of your preferences, we ask for your consent. If we process your account information to ensure the security of your account and safeguard its use, we rely on our legitimate interest in providing our products and services securely and in continuously optimizing them. If you delete your account, we will keep your account information for at least as long as it takes to fully close the account. If we have legitimate grounds, we may retain your account information for a longer period based on our legitimate interest. This could include situations where we are involved in legal proceedings or an ongoing dispute. In such cases, your account information will be stored separately from other active accounts.</p><h3>2.9 Tomorrowland app</h3><p>To enable you to use the Tomorrowland app, we process identification details such as your first name. We also process your account information (as mentioned above) and technical data from the device you use to log in. Additionally, we collect information about your usage and interactions within the app. If you have given your consent, we process your location data.</p><p>We process your personal data in this context to provide you with the requested service, based on the necessity to fulfill our agreement. For the data we process to ensure the use and security of the app, we rely on our legitimate interest in offering our products and services securely and in continuously optimizing them. For processing location data, we ask for your consent.</p><h3>2.10 Community engagement</h3><p>We organize contests and other initiatives to increase engagement among the People of Tomorrow. If you participate in these, we process your identification details such as your name, and where applicable, your contact details such as your email address. If a financial reward is associated with certain winners and you are one of the winners, we will also process your payment details or other necessary information to transfer the prize to you. For some initiatives, we may request content, such as images or other visuals. We ask you to follow our terms and conditions and ensure that you respect the rights of others. Lastly, in this context, we may also process certain personal characteristics, preferences, and interests that you provide to us or that emerge from your participation, such as your favorite artist. To the extent that we do not ask for your consent for the processing of your personal data, such as for the processing of your personal characteristics and preferences, we rely on our legitimate interest in enhancing engagement within our People of Tomorrow community.</p><h3>2.11 Tomorrowland Store</h3><p>We process your personal data when you purchase items in our Tomorrowland Store, either on-site or online. You can make your online purchase using your Tomorrowland account (see section 2.9). Additionally, we process contact details such as your email address and delivery address to confirm and deliver your purchase. For these purchases, we process your bank account number to enable financial transactions. Finally, we process certain preferences, interests, and consumption behaviour, such as your personal purchase history.</p><p>The processing necessary to facilitate the sale of our Tomorrowland Store items is based on the necessity to execute our agreement. The processing of your personal data for keeping track of your purchase history is based on our legitimate interest in offering our products and services as customer-friendly as possible and in optimizing our services. For the processing of your preferences, interests, and consumption behaviour, we ask for your consent.</p><h3>2.12 Safety and security</h3><p>We take various safety and security measures to protect our visitors, employees and others, both in physical environments such as festival grounds, concert halls, and office buildings, and in our digital environments. In addition to the protection of individuals, these measures also relate to the protection of property, including physical property such as buildings, land, and goods, as well as other property such as intellectual property, digital environments, and IT systems.</p><p>In general, we rely our legitimate interest in pursuing safety and security in the broadest sense of the word for processing personal data in this context. In certain cases, we rely on legal obligations, such as when we are required to take certain measures in compliance with the Municipal Police Regulations of Boom.</p><p><strong>Special situations</strong></p><p><strong><em>Camera surveillance</em></strong></p><p>We may use camera surveillance. For large events, we are even legally required to do so. We only use surveillance cameras when we meet the conditions of the Camera Act. You will be informed about the camera surveillance with a sign at the entrance of the monitored area. For the processing of footage in which you may appear, we rely on our legitimate interest in pursuing the safety of the environments for which we are responsible, as well as the safety of the goods and individuals present, and in efficiently meeting our legal obligations.</p><p><strong><em>Drug and alcohol checks</em></strong></p><p>During certain events, we carry out drug and alcohol checks in cooperation with the competent authorities. This involves the processing of personal data such as test results indicating the use of prohibited substances. The purpose of this processing is to promote safety and public order during our events. This contributes to a safer environment for all visitors and our staff.</p><p>Drug and alcohol checks are conducted by competent authorities with whom we collaborate, such as local police. We do not receive details about criminal offenses linked to you from them. We only receive statistical information about the results of the checks.</p><p><strong><em>First aid</em></strong></p><p>You will encounter first aid posts at several of our events. For some events, we are even legally required to provide first aid stations. This ensures that in the event of an incident or accident, you have quick access to medical assistance. If you report to a first aid station, we will ask for your identification details to register you. If you are unable to register yourself, we will try to identify you in other ways, such as through a person accompanying you. To ensure you receive timely medical assistance, service providers will process medical details regarding the nature of the injury, your medical history, and the care provided. Where possible, we will ask for your consent to this. In exceptional cases, your personal data will be processed based on the necessity to protect your vital interests.</p><p>First aid is provided by specialized care providers with whom we work, such as the Red Cross. We do not receive medical details about you from them, but we do receive an overview of the types of incidents and accidents that were treated by the first aid services.</p><h3>2.13 Compliance and legal obligations</h3><p>Where necessary, we process your personal data for compliance purposes. This means that when we are legally required, we will process your personal data to comply with our legal obligations. This is the case, for example, when we process your personal data to comply with our obligations under applicable legislation to prevent money laundering and the financing of terrorism.</p><p>Additionally, we may be required to process your data to comply with a request from a competent authority, such as a competent data protection authority. In such cases, too, we process your personal data to meet a legal obligation.</p><p>To the extent that we are not legally required to comply with government requests, or if we take the initiative to share certain information about you with competent authoritie (e.g., when there are reasonable suspicions of an illegal act or crime linked to you), we rely on our legitimate interest in helping authorities prevent or investigate illegal activities, protecting our property in the broadest sense from misuse and illegal activities, and enforcing our own policies.</p><h3>2.14 Administration and organization of business activities</h3><p>We believe it is important to continue growing in a creative and innovative manner. This means that we are constantly focused on further developing and expanding our business activities and strengthening our relationships with others. In addition to the purposes specified above, we therefore also process your personal data – albeit to a limited extent, meaning only when strictly necessary –to generally manage, organize, and develop our business activities.</p><p>This includes, for example, processing your personal data to ensure high-quality customer management, and approaching you as a supplier or partner to maintain our professional relationship. Furthermore, we may use your personal data to monitor compliance with our internal procedures and policies, for example in the context of audits and reporting, and to verify if they comply with applicable regulations. Where necessary, we may also use your personal data to inform relevant parties in the context of business transactions, such as a possible merger, acquisition, or reorganisation.</p><p>For these data processing activities, we rely on our legitimate interest in conducting and organizing our business activities efficiently, enforcing our policies, and continually evaluating and improving our business processes to remain flexible and future-oriented as an organization.</p>

3. How we obtain your personal data

<h2><strong>3. How we obtain your personal data</strong></h2><p>In most cases, we receive the personal data we process about you directly from you. This happens, for example, when you purchase a festival ticket, register to receive certain communications, or contact us for information or support.</p><p>However, there are situations where we receive your personal data from others. This can happen when someone else purchases a festival ticket for you or when we receive information about you from our partners, such as when purchasing a Global Journey package offered in collaboration with external parties.</p><p>In specific circumstances, we may also receive information about you from official authorities such as the police or other competent government bodies. This can occur in the context of legal obligations or during security incidents where your personal data is relevant.</p><p>In the few cases where we collect personal data from children, such as for the organization of the Neighborhood Party, this will be done through and/or with the approval of a parent or guardian.</p>

4. How long we keep your personal data

<h2><strong>4. How long we keep your personal data</strong></h2><p>We retain your personal data for as long as necessary to achieve the purposes outlined above or as required by applicable regulations. When determining the appropriate retention period for your personal data, we consider various factors, such as the purposes for which we process the data and the categories of personal data. For example, we naturally retain atmospheric images created for our aftermovies much longer than the footage captured by surveillance cameras.</p><p>The retention period may also vary depending on applicable legal and regulatory obligations, such as accounting requirements, which may require us to keep your data for a certain period.</p><p>When the processing of your personal data is based on your consent, we will no longer retain your personal data once you withdraw your consent, unless other grounds permit or require us to retain your data longer.</p><p>After the retention period expires, your personal data will be anonymized or deleted. However, this will not happen if there is an overriding interest for us or for someone else in continuing to retain your data, or when a legal obligation or a judicial or administrative order prevents us from de-identifying or deleting your personal data.</p>

5. How we share your personal data with others

<h2><strong>5. How we share your personal data with others</strong></h2><h3>5.1 Recipients of your personal data</h3><p>We ensure that access to your personal data is limited to those persons and departments that need to process these data in order to achieve the above-mentioned purposes.</p><p>Even when we share your personal data with others, this is done exclusively for the same purposes. Possible recipients of your personal data include service providers, partners, advisors, and government authorities.</p><p>For example, we may share your data with external service providers who support us in our business operations, such as IT service providers, logistics companies, financial institutions, and mobility partners. These parties help us to manage our services and infrastructure that are essential for our day-to-day operations.</p><p>In addition, we work with various advisors, such as accountants, lawyers, and other professionals who assist us in protecting our interests or enforcing our rights. We may share your personal data with potential parties in the context of business transactions, such as a possible merger, acquisition, or reorganisation.</p><p>In certain cases, we may share your personal data with courts and authorities where this is required by law or when it is necessary to protect our interests or safeguard our rights. We also share your personal data with government authorities when we are legally required to provide certain data, for example, to meet our tax or administrative obligations.</p><p>Finally, we may also share your data with others if you have requested us to do so, if this is necessary to execute our agreement, or if we are legally obliged to do so.</p><h3>5.2 Transfer of personal data outside the European Economic Area</h3><p>Some recipients of your personal data may be located in a country outside the European Economic Area (hereinafter: “<strong>EEA</strong>”). For certain third countries, the European Commission has determined that they provide an adequate level of protection of personal data. Such adequacy decisions exist for countries such as the United Kingdom and Switzerland.</p><p>If we transfer personal data to a recipient in a third country for which no adequacy decision exists, and no exemptions for specific situations apply, we are required to observe appropriate safeguards for the processing of your personal data. Such safeguards may be provided, inter alia, by a contractual arrangement between us and the recipient in the third country that is based on the standard contractual clauses for international transfers of personal data established by the European Commission, or any other mechanism that allows for the international transfer of your personal data in accordance with applicable data protection laws.</p><p>Where we rely on appropriate safeguards for the transfer of your personal data, we will assess whether these safeguards can provide sufficient protection for your personal data so that the level of protection guaranteed in the EEA is not undermined by the transfer. If this is not the case, we will take the necessary additional measures to provide adequate protection. If this is not possible, we will not transfer your personal data to that recipient, or will only transfer your personal data if and to the extent another mechanism makes the transfer possible. For more information about these applicable safeguards, you can send a request by email to <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a>.</p>

6. How we protect your personal data

<h2><strong>6. How we protect your personal data</strong></h2><p>We treat the personal data we process confidentially and we protect it in accordance with applicable regulations and our internal policies and procedures for data security.</p><p>We use commercially reasonable efforts to ensure that your personal data is securely stored and protected against loss or unauthorized disclosure and use. However, you understand that security is an obligation of effort, not result, and that the outcome can never be guaranteed.</p>

7. Your choices and rights

<h2><strong>7. Your choices and rights</strong></h2><p>In accordance with applicable data protection legislation, you have the following rights, if and to the extent applicable, regarding the processing of your personal data:</p><ul class="unordered_list"><li><p>You have the right to request access to the personal data we process about you. We may charge an administrative fee if we consider your repeated requests to be unfounded or excessive, or if we believe that your request is intended to harm our business or impose an administrative burden on us.</p></li><li><p>You have the right to request the correction of inaccurate personal data about you, free of charge. You must provide proof of the inaccuracies you want to have corrected.</p></li><li><p>When we process your personal data based on your consent, you have the right to withdraw that consent at any time.</p></li><li><p>Under certain conditions, you have the right to obtain the deletion of your personal data. Upon receiving your request, we will assess whether there are compelling grounds, such as legal or regulatory obligations, judicial or administrative orders, or a legitimate interest of us or someone else, that allow or require us to retain your personal data in an identifiable form rather than deleting it.</p></li><li><p>In certain circumstances, you have the right to restrict the processing of your personal data. This can be done, for example, if you contest the accuracy of your personal data or if your personal data is no longer necessary for the purposes described above, but you still require it in a legal proceeding.</p></li><li><p>When we process your personal data based on our legitimate interest, you have the right to object to the processing of your personal data on grounds relating to your particular situation. You can object to processing for the purpose of direct marketing at any time without cost or justification.</p></li><li><p>If we process your personal data based on your consent or to execute an agreement, and the processing is carried out by automated means, you have the right to obtain the personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.</p></li><li><p>You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you, unless such a decision is necessary for the conclusion or performance of our agreement or if you have expressly consented to this type of processing. Currently, we do not engage in such decision-making, but if we were to do so, you have the right to object to it.</p></li></ul><p>You can send your request to exercise the above rights by email to <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a>. In your request, clearly state which right you wish to exercise, and if required, provide the necessary explanation. We will acknowledge receipt of your request. If your request is valid, we will grant it. If we have any doubts about your identity, we may ask you for additional information to verify your identity.</p><p>If you are not satisfied with the way we process your personal data, we ask you to let us know about your concern by sending an email to <a href="mailto:dpo@tomorrowland.com">dpo@tomorrowland.com</a>. You have the right to lodge a complaint with a competent supervisory authority. In Belgium, this can be done via the complaints procedure on the website of the Data Protection Authority.</p><p></p><p><strong>Last Updated: August 18, 2025</strong></p>