Privacy Policy

Website maxkorzh.eu · Version 1.0 · Effective 27 August 2026
The Polish version of this document is the legally binding one. This translation is provided for your convenience.

In short

We collect two things only: your first name and your phone number. We use them solely to send you an SMS with the link to the ticket sale — nothing else. We do not sell numbers and we do not pass them to anyone for marketing purposes. You can unsubscribe at any time with a one-line message to privacy@maxkorzh.eu.

1. Who is the data controller

The controller of your personal data is:
EU RESERVE sp. z o.o.
ul. Henryka Sienkiewicza 85/87 lok. 8, 90-057 Łódź, Poland
Company register (KRS) 0001133625 · VAT PL7252348284 · REGON 529957955
EORI PL725234828400000 · D-U-N-S® 665144755
(hereinafter: the “Controller”, “we”)

Contact for all data protection matters: privacy@maxkorzh.eu. We accept enquiries in Polish, English, Russian, Ukrainian, Belarusian and German.

We have not appointed a Data Protection Officer. Messages sent to the address above go directly to the people responsible for data protection within our company.

2. What this policy covers

This policy describes the processing of data collected through the website maxkorzh.eu (the “Website”), in particular through the sign-up form for the SMS notification about the start of ticket sales for the Max Korzh concert — Frankfurt, Deutsche Bank Park, 10 October 2026 (the “Event”).

3. What data we collect

3.1. Data you provide yourself

First name — used only to address you in the message. We do not verify identity; you may enter any name or a nickname.
Phone number including country code — without it we cannot send the message.

3.2. Data recorded automatically at sign-up

We record it for one purpose only: to be able to demonstrate that consent was actually given (Art. 7(1) GDPR):

date and time the consent was given,
the exact wording and version number of the consents ticked,
the language the page was displayed in,
the device IP address and basic browser data,
which checkbox was ticked and which was not.

3.3. Data generated when sending

date and time the message was sent,
the delivery status returned by the mobile operator,
the date, channel and content of a withdrawal of consent, if you withdraw it.

3.4. What we do not collect

We do not collect special categories of data referred to in Art. 9 GDPR — we do not ask about citizenship, origin, political opinions, religion, health or any other sensitive data, and we do not want to receive them. Please do not enter such information in the “name” field. We do not collect email addresses, dates of birth, home addresses or payment data — we do not sell tickets.

4. Purposes and legal bases of processing

Purpose	Legal basis	Note
Sending an SMS about the start of ticket sales for the Event and messages directly concerning the Event (additional ticket release, organisational changes)	Art. 6(1)(a) GDPR (consent) in conjunction with Art. 398 of the Polish Act of 12 July 2024 — Electronic Communications Law (consent to the use of telecommunications terminal equipment for direct marketing)	Consent required in order to use the service
Sending SMS about further concerts, tours and events organised or promoted by the Controller	Art. 6(1)(a) GDPR in conjunction with Art. 398 of the Electronic Communications Law	Entirely optional consent, in a separate checkbox. Not giving it has no effect on the notification about the Event
Providing the notification service — performance of the contract concluded under the Terms of Service	Art. 6(1)(b) GDPR	—
Demonstrating that consent was given and handling its withdrawal (accountability)	Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR	Legal obligation of the controller
Maintaining a suppression list of unsubscribed numbers so that no message reaches someone who does not want it	Art. 6(1)(f) GDPR — legitimate interest in honouring an objection	The number is stored in a secured form only
Website security, server logs, protecting the form against bots and abuse	Art. 6(1)(f) GDPR — legitimate interest	—
Establishing, exercising or defending legal claims, including in proceedings before UODO or UKE	Art. 6(1)(f) GDPR — legitimate interest	—

5. Is providing the data mandatory

Providing the data is entirely voluntary. The only consequence of not providing your number is that we cannot send you an SMS.

You do not need to sign up in order to buy a ticket. Sales are run exclusively on ticketmaster.de and fanaticka.eu and are open to everyone on the same terms. We will also announce the start of sales publicly on the Website.

6. How long we keep the data

Data category	Retention period
First name and phone number	Until consent is withdrawn. Independently of that, at least once every 24 months we review the database and delete numbers that have not been used for any send-out during that period
Number on the suppression list (after withdrawal of consent)	Indefinitely, as a cryptographic hash, solely to prevent a repeat send-out. In that form the number cannot be used to contact anyone
Proof of consent given and withdrawn	3 years from the withdrawal of consent or deletion of the number — the period during which claims may be raised or a supervisory inspection carried out
Server logs and technical data	Up to 12 months
Correspondence (complaints, data subject requests)	3 years from the closure of the matter

7. Who we share the data with

We do not sell data and we do not share it for marketing purposes with any other entity. Your data reaches only:

LINK Mobility Poland sp. z o.o. (VAT 969-156-67-36) — the operator of the SMSAPI.pl platform through which we send the messages. It acts as a processor under a data processing agreement concluded with us and may not use the numbers for its own purposes;
hosting and IT infrastructure providers of the Website — under a data processing agreement;
telecommunications operators that physically deliver the SMS to your number — a technical necessity of sending;
legal advisers and accounting service providers — only where necessary, under a data processing agreement or professional confidentiality obligations;
public authorities — solely where an obligation to disclose follows from applicable law.

8. Transfers outside the European Economic Area

We store and process the data within the European Economic Area.

Important if your number is not an EU one

If the number you provide belongs to an operator outside the EEA (for example a Belarusian, Russian, Ukrainian, Moldovan, British, Georgian, Kazakh or Turkish number), delivering the SMS requires passing your number and the message content to that operator. This takes place under Art. 49(1)(b) GDPR — the transfer is necessary to perform a service you requested yourself.

In some of those countries the level of data protection may be lower than in the European Union, and we have no influence whatsoever over how local operators process traffic data or which authorities they disclose it to. If you are not comfortable with that, simply do not provide your number. We will also announce the start of sales publicly on the Website.

Where the technology providers we use transfer data outside the EEA within their own corporate group, this takes place on the basis of the Standard Contractual Clauses adopted by the European Commission (Art. 46(2)(c) GDPR).

9. Your rights

In connection with the processing of your data you have the following rights:

right of access to your data and to obtain a copy of it (Art. 15 GDPR),
right to rectification of inaccurate data (Art. 16 GDPR),
right to erasure — the “right to be forgotten” (Art. 17 GDPR),
right to restriction of processing (Art. 18 GDPR),
right to data portability (Art. 20 GDPR),
right to object to processing based on legitimate interest (Art. 21 GDPR),
right to withdraw consent at any time (Art. 7(3) GDPR) — withdrawal does not affect the lawfulness of processing carried out before it,
right to lodge a complaint with the President of the Personal Data Protection Office of Poland (Prezes UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl. You may also contact the supervisory authority of your own country of habitual residence (Art. 77 GDPR),
on matters concerning the mere fact of receiving an unsolicited SMS — also a complaint to the President of the Office of Electronic Communications (Prezes UKE), ul. Giełdowa 7/9, 01-211 Warsaw, uke.gov.pl.

To exercise any of these rights, write to privacy@maxkorzh.eu. We respond without undue delay and no later than one month from receipt. Exercising your rights is free of charge.

10. How to stop receiving messages

Unsubscribing takes a minute and is free

Write to privacy@maxkorzh.eu stating the phone number concerned. We delete the number immediately, no later than within 7 working days. This route always works.
Use the unsubscribe link included in the SMS.
Reply to the message with STOP — if it was sent from a number that accepts replies.

You do not need to give a reason or justify anything. You can withdraw consent to marketing messages about future events separately while keeping the notifications about this Event — just say so in your message.

11. Automated decision-making and profiling

We do not take decisions concerning you based solely on automated processing, including profiling, which produce legal effects or similarly significantly affect you (Art. 22 GDPR). We do not build a profile of you, do not analyse your behaviour and do not combine your number with any other data set. The only automation involved is that the same message is sent to all registered numbers at the same moment.

12. Age of users

The service is addressed to people aged 16 or over. If you are under 16, please do not sign up without the knowledge and consent of a parent or legal guardian. If we learn that a number belongs to a person under 16 and we hold no guardian's consent, we will delete the data. A legal guardian can report such a case to privacy@maxkorzh.eu.

13. Cookies and similar technologies

On the Website we use only cookies and similar technologies that are strictly necessary for the page to work: remembering the selected language, maintaining the form session and protecting the form against automated submissions. Under Art. 174 of the Electronic Communications Law, no consent is required for strictly necessary cookies.

If in future we deploy analytics or marketing tools on the Website (e.g. Google Analytics, Meta Pixel, TikTok Pixel, Google Ads), they will load only after you give consent in a cookie consent banner, and this policy will be updated accordingly together with the list of tools used. You can also manage cookies at any time in your browser settings.

14. Data security

The connection to the Website is encrypted with HTTPS/TLS.
Access to the number database is limited to persons authorised in writing and bound by confidentiality.
Access to the sending panel is protected by two-factor authentication.
We maintain a record of processing activities in accordance with Art. 30 GDPR.
We have data processing agreements compliant with Art. 28 GDPR in place with every provider that has access to the data.

15. Changes to this policy

The current version of the policy is always available on the Website. We will announce material changes prominently on the homepage at least 14 days in advance. A change to the policy never extends the scope of processing covered by a consent already given — for new purposes we will ask for a new consent.

Version 1.0 · 27 August 2026

SMS Notification Service Terms

Website maxkorzh.eu · Version 1.0 · Effective 27 August 2026
The Polish version of this document is the legally binding one. This translation is provided for your convenience.

§ 1. General provisions

These Terms set out the rules for the free provision of an electronic service consisting in sending an SMS message with information about the start of ticket sales for the Max Korzh concert — Frankfurt, Deutsche Bank Park, 10 October 2026.
The service provider is EU RESERVE sp. z o.o., registered office at ul. Henryka Sienkiewicza 85/87 lok. 8, 90-057 Łódź, Poland, KRS 0001133625, VAT PL7252348284, REGON 529957955 (the “Provider”).
Contact: privacy@maxkorzh.eu and the registered office address given in paragraph 2.
These Terms are made available free of charge on the Website in a form allowing them to be obtained, reproduced and stored — in accordance with Art. 8(1)(2) of the Polish Act of 18 July 2002 on the provision of services by electronic means.

§ 2. Definitions

Website — the website available at maxkorzh.eu.
User — a natural person using the Website and signing up for the Service.
Form — the form on the Website used to enter a first name and a phone number.
Event — the Max Korzh concert, Frankfurt, Deutsche Bank Park, 10 October 2026.
Service — the free SMS notification service described in § 3.
Consumer — a User who is a consumer within the meaning of Art. 22¹ of the Polish Civil Code, as well as a natural person concluding a contract directly connected with their business activity where the contract is not of a professional nature for them.

§ 3. Nature and scope of the Service

The Service consists in the Provider sending an SMS to the number given in the Form approximately 5 minutes before ticket sales for the Event begin, containing a link to the official points of sale.
Up until the day of the Event the Provider may send further messages directly concerning the Event, in particular about an additional ticket release, a change of start time, organisational announcements or a cancellation of the Event.
A User who has given the additional, voluntary marketing consent will also receive messages about further concerts, tours and events organised or promoted by the Provider. That consent can be withdrawn separately, while keeping the notifications relating to the Event.
The Service is entirely free of charge. The User pays nothing to the Provider. Receiving an SMS may incur charges from the User's own mobile operator — in particular while roaming — according to that operator's price list; the Provider has no influence over those charges.
The number of messages sent under the Service is limited to the necessary minimum.

§ 4. Technical requirements

Using the Website requires a device with internet access and an up-to-date browser with JavaScript and cookies enabled.
Receiving messages requires an active mobile number capable of receiving SMS.
The Provider is not liable for non-delivery for reasons beyond its control, in particular: a switched-off or unavailable handset, no network coverage, full device memory, operator anti-spam blocks and filters, restrictions on SMS traffic in the recipient's country, network failures, or an incorrect number being entered.

§ 5. Conclusion and termination of the contract

The contract for the Service is concluded when the Form is correctly submitted with the mandatory consent checkbox ticked.
The contract is concluded for an indefinite period.
The User may withdraw from the Service at any time, without giving a reason and at no cost, by withdrawing consent in one of the ways described in the Privacy Policy: by email to privacy@maxkorzh.eu, via the unsubscribe link in the SMS, or by replying to the message with STOP.
Withdrawal of consent terminates the contract with immediate effect.
The Provider may terminate the contract with a User who breaches § 7, and may discontinue the Service once its purpose has been fulfilled, announcing this on the Website.

§ 6. Right of withdrawal (Consumers)

A Consumer has the right to withdraw from a distance contract within 14 days of its conclusion, without giving a reason and at no cost.
It is sufficient to send a withdrawal statement to privacy@maxkorzh.eu or to the Provider's registered office. Sending the statement before the deadline expires is enough.
As the Service is free of charge, withdrawal involves no financial settlement of any kind.
The unsubscribe described in § 5(3) has the same practical effect as withdrawal and remains available after the 14 days have passed.

§ 7. User obligations

The User undertakes to provide only their own phone number, or a number for which they hold the express consent of its user.
Providing unlawful content is prohibited (Art. 8(3)(2)(b) of the Act on the provision of services by electronic means), including entering offensive or vulgar content, content infringing third-party rights, or other people's personal data in the “name” field.
Using the Form in an automated manner — in particular bulk submission of numbers — and any action disrupting the operation of the Website are prohibited.
Where there is a reasonable suspicion of a breach of the above, the Provider may remove the number from the database and cease providing the Service to that User.

§ 8. Ticket sale disclaimers

The Provider is not a ticket seller. Tickets for the Event are sold exclusively by ticketmaster.de and fanaticka.eu, on the terms set by those entities and in their own regulations.
Signing up for the notification is not a ticket reservation, gives no priority in purchasing, does not increase the chance of obtaining a ticket in any way, and does not guarantee ticket availability.
The SMS is purely informational and does not constitute an offer within the meaning of Art. 66 § 1 of the Polish Civil Code.
The Provider takes due care to send the message at the announced time, but does not guarantee the moment of delivery — that depends on telecommunications operators and lies beyond the Provider's control.
Any complaints concerning the ticket purchase itself, payment, refunds or admission to the Event should be addressed to the ticket seller or the Event organiser respectively.

§ 9. Complaints

Complaints about the Service can be sent to privacy@maxkorzh.eu or in writing to the Provider's registered office.
A complaint should state the phone number concerned, describe the problem and indicate the expected resolution.
The Provider examines the complaint and replies within 14 days of receipt, to the email address or phone number the report came from.
A Consumer may use out-of-court complaint and redress procedures, in particular by applying to a permanent consumer arbitration court, requesting mediation from the voivodeship inspector of the Trade Inspection, or seeking free assistance from a district or municipal consumer ombudsman. Details are available at uokik.gov.pl.
A Consumer resident in another EU Member State may seek assistance from the relevant European Consumer Centre (ECC). Use of these procedures is voluntary for both parties.

§ 10. Personal data

The rules for processing Users' personal data — including purposes, legal bases, retention periods, recipients and User rights — are set out in the Privacy Policy, which forms an integral part of these Terms.

§ 11. Final provisions

Matters not regulated by these Terms are governed by Polish law, in particular the Civil Code, the Act on the provision of services by electronic means, the Consumer Rights Act, the Electronic Communications Law and the GDPR.
The choice of Polish law does not deprive a Consumer of the protection afforded by provisions that cannot be derogated from by agreement under the law of their country of habitual residence (Art. 6 of the Rome I Regulation).
The Provider may amend these Terms for important reasons, in particular a change in the law or in the scope of the Service. It will announce any amendment on the Website at least 14 days in advance. A User who does not accept the amendment may discontinue the Service within that period in the manner described in § 5(3).
Should any provision of these Terms prove invalid or unenforceable, the remaining provisions stay in force.
These Terms, version 1.0, are effective from 27 August 2026.