Privacy Policy for the PassPass Organizer Mobile App
Last updated: 13 September 2026
1. Data Controller
TLJ SRL, registered under company number 1008.206.815, with registered office at Tienne du Sarment 8, 1300 Wavre (Belgium).
Contact: contact@passpass.be
2. Scope of this policy
This privacy policy applies exclusively to the PassPass Organizer mobile application, available on iOS (App Store) and Android (Google Play). It explains what data is collected, how it is used, and what rights you can exercise under the General Data Protection Regulation (GDPR).
For the privacy policy of the PassPass web platform (dashboard.passpass.be and pro.passpass.be), please refer to our general privacy policy.
3. About the application
PassPass Organizer is a mobile application for event organisers who use the PassPass platform. It allows you to:
- View ticket sales tracking
- Monitor the number of registrants and their evolution over time
- Validate attendees at the door via the attendee list or by scanning QR codes
The application does not allow account creation. Users sign in with their existing organiser account credentials, created on the web platform dashboard.passpass.be.
4. Data collected
The application collects and processes only the data strictly necessary for its operation.
Authentication data
The organiser's email address and password, used to sign in to their existing account. These credentials are not stored in plain text on the device. An authentication token is retained to keep the session active.
Attendee data accessed
To validate attendees, the application displays the minimum data necessary to identify a participant and their ticket:
- First name and last name
- Email address
- Ticket type and validation status
This data is hosted on PassPass servers and accessed in real time via a secure connection. It is not permanently stored on the device.
Scan and validation data
When a QR code is scanned, the application sends the code content to PassPass servers to verify ticket validity and record the check-in. No image is captured, stored, or transmitted. Only the textual content of the QR code is read and sent to the server.
Ticket and attendee data (name, email, ticket type, validation time) is stored on PassPass servers so that the organiser can track and manage their attendees from their dashboard (dashboard.passpass.be). This data is necessary for the proper delivery of the ticketing service.
5. Data not collected
The application does not collect:
- Location data (GPS)
- Contacts from the address book
- Photos, videos, or files from the device
- Advertising identifiers
- Health, financial, or biometric data
- Behavioural analytics or advertising tracking data
The application does not integrate any tracking, analytics, or advertising SDK.
6. Device permissions
Camera
The application requests camera access to scan QR codes on attendee tickets. This permission is only requested when the user accesses the scanning feature. The camera is used exclusively to read QR codes. No image or video is captured, recorded, or transmitted.
Network connection
The application requires an Internet connection to communicate with PassPass servers: authentication, retrieval of event and attendee data, and recording of ticket validations. All communications are encrypted via HTTPS.
7. Purposes of data processing
Data is processed for the following purposes:
- Authenticate the organiser and grant access to their events
- Display sales and registration statistics
- Enable attendee validation (check-in) via list or QR scan
- Record each ticket's validation status on the server so the organiser can track attendance from their dashboard
8. Legal basis
Data processing is based on the performance of the contract between TLJ SRL and the event organiser. The organiser uses the application as part of their PassPass account to manage events and validate attendees.
9. Data sharing
Data accessed through the application is not shared with any third party. It is hosted on PassPass servers and accessible only to the authenticated organiser for their own events.
We do not sell any data. We do not share any data with advertising networks or commercial partners.
10. Hosting and transfers
Data is hosted on servers located in the European Union. No data transfer outside the European Economic Area takes place in connection with the use of this application.
11. Data retention
The application does not permanently store attendee data on the device. The authentication token is retained on the device as long as the user remains signed in. Signing out deletes the token.
Ticket and attendee data (name, email, ticket type, validation status and time) is retained on PassPass servers so that the organiser can view and track the history of their events from their dashboard. This data is retained in accordance with the general retention policy (5 years from the last use of the service).
12. Data deletion
Organisers can delete their account and associated data directly from the web platform dashboard.passpass.be, or by contacting contact@passpass.be. Account deletion results in the removal of the organiser's personal data. Event and attendee data is anonymised or deleted in accordance with applicable legal obligations.
13. Your rights
Under the GDPR, you have the following rights:
- Right of access to your data
- Right to rectification of inaccurate data
- Right to erasure of your data
- Right to restriction of processing
- Right to data portability
- Right to object to processing
To exercise these rights, contact us at contact@passpass.be.
You may also file a complaint with the Belgian Data Protection Authority.
14. Security
All communications between the application and PassPass servers are encrypted via HTTPS/TLS. Authentication relies on secure tokens. Attendee data is accessible only to authorised organisers for their own events.
15. Changes to this policy
This policy may be updated to reflect changes to the application or legal requirements. In the event of a material change, we will notify users via the application or by email.
16. Governing law
This policy is governed by Belgian law. In case of dispute, the courts of Brabant wallon have jurisdiction.
For any questions about this policy: contact@passpass.be