Privacy
Privacy & cookies
The data we process, why, for how long, and how to exercise your rights.
Last updated: 29 September 2026
Data controller
Unisphère ASBL, Place du Vingt-Août 24, 4000 Liège, Belgium (company no. 1034.813.123), organiser of the Bal ULiège. For any question about your data: bal@uliege.be.
When you visit the website
There is no account to create and no form to fill in. Meta’s advertising pixel and external content only load with your consent (see Cookies).
Like any web server, our host’s (ULiège) keeps technical logs: IP address, requested page, date and time, browser type. They are used for security, to keep the website running and to produce aggregate traffic statistics (legitimate interest), and are kept according to the host’s policy.
When you buy a ticket
Online ticketing runs on Luma (Luma Labs, Inc.). When you buy a ticket, we receive in particular:
- your first name, last name and email address;
- the ticket type, amount and date of purchase;
- your answers to any optional questions (for instance your school or university).
Payment is handled by Luma’s payment provider: we never have access to your full card details.
Why? To sell and send you your ticket, check tickets at the door, send you practical information (shuttles, times, changes), keep our accounts, prevent fraud and understand who attends the Ball. Legal basis: performance of the sales contract, our accounting obligations and our legitimate interest.
Future editions. As a buyer, you will receive emails about future editions of the Ball and our similar events (Article XII.13 of the Belgian Code of Economic Law; legitimate interest). You may object at any time, free of charge, through the unsubscribe link in every email or by writing to us.
Luma processes this data on our behalf, and on its own behalf if you have a Luma account (Luma privacy policy). Luma is based in the United States, so your ticketing data is transferred there.
If you arrive through one of our ads or a campaign link, its origin (“utm” parameters, for instance utm_source=instagram) goes with your purchase, so we know which channels bring in sales. These parameters do not identify you.
Measuring our ads (Meta pixel)
We promote the Ball with ads on Facebook and Instagram. To find out which ones work and show them to the right people, we use the Meta pixel, only if you accept it (“Ad measurement” in the cookie banner).
It then sends Meta Platforms Ireland Ltd the pages you view on this website, the opening of the tickets page and the ticket type you click on (name and price), along with technical data: IP address, browser, _fbp and _fbc cookies and, if you come from one of our ads, the ID of that click (fbclid). Meta may link this information to your Facebook or Instagram account.
On the Luma sales page, the same pixel tells Meta which tickets were bought (type and amount), under Luma’s settings.
Meta gives us aggregate statistics on how our ads perform (visits, sales).
Legal basis: your consent, which you can withdraw at any time (“Manage cookies”, at the bottom of every page). For collecting and sending this data, Meta and we are joint controllers; Meta then processes it on its own behalf and may transfer it to the United States (Meta’s privacy policy).
When you write to us
If you write to bal@uliege.be or apply at recrutement.bal@uliege.be, we use your message and contact details only to reply or to consider your application (legitimate interest; pre-contractual steps for recruitment). These mailboxes are provided by ULiège.
Photos and videos of the night
Photographers and videographers cover the Ball. The images, mainly atmosphere and group shots, may be published on this website, on our social media, in the aftermovie and in our promotional material, including advertising, to keep a record of the event and promote future editions (legitimate interest).
Rather not be photographed? Let the photographer know. Want a published photo removed? Email us the link: we review every request and remove the image where your situation warrants it.
Our social media
On our Instagram and Facebook pages, Meta processes your data under its own rules; for the page audience statistics, Meta and we are joint controllers. See Meta’s privacy policy.
Who can access your data
Team members who need it and our service providers, within the scope of their task: ticketing and payment, hosting and email, email delivery, security and, with your consent, ad measurement. Your data may also be disclosed to the authorities where required by law. We do not sell your data.
How long we keep it
- Ticketing data: up to three years after your last purchase, then deleted or anonymised, except accounting records, kept for the period required by law.
- Emails: as long as needed to handle your request, at most three years after our last exchange.
- Applications: until the end of recruitment for the edition concerned.
- Meta pixel cookies (_fbp, _fbc): 90 days at most, deleted if you withdraw consent; your cookie choices: six months.
- Published photos: as long as they illustrate the history of the Ball, unless you ask for removal.
Your rights
Under the conditions set by the GDPR, you may ask to access, correct, erase or port your data, restrict or object to its processing, or withdraw your consent. Email bal@uliege.be; we may ask you to prove your identity and reply within the legal time limits.
If you believe your rights are not respected, you may lodge a complaint with the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels · www.dataprotectionauthority.be.
Changes
We may update this page, for instance if we change service provider. The date of the last update is shown at the top.