Source: https://www.eventim-light.com/de/a/5a648d8d98014304df4ae47d/privacy
Timestamp: 2019-04-21 22:12:01+00:00

Document:
This data protection information provides information on the processing of your personal data within the framework of the use of the Ticket Shop under the joint responsibility of CTS EVENTIM AG & Co. KGaA and Interkunst e.V. Herxheim (referred to below as “Joint Controllers”).
1. This data protection information relates to the processing of personal data upon a visit or use of the Ticket Shop, including the setting up of a customer account. You can retrieve, store and print this data protection information at any time from this website at no charge.
2. This data protection information only relates to the processing of personal data as defined by Section 1.1.1. Other websites (e.g. the Ticket Shop hosted at www.eventim.de) are not within the scope of this data protection information and present their own specific data protection information.
CTS EVENTIM AG & Co. KGaA is the joint contact for any queries.
1. GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Data Protection Directive).
2. Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing. Dependent on the payment method chosen, the recipient of your personal data could be a bank, for instance.
4. Joint controllers are two or more controllers that jointly determine the purposes and means of the processing of personal data.
5. Personal data means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data could be the name, contact details, pattern of use, or bank details.
6. Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. The Controllers defined under Section 1.2 are responsible for the data processing described in this data protection information.
7. Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Processing may involve, for example, the collection and use of your order data when tickets are sold.
1. When you visit the Ticket Shop, we process your personal data (IP address) that are technically required for us to be able to offer you the services of our Ticket Shop and to ensure stability and security when visiting the Ticket Shop.
2. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue our legitimate interest to offer you the services of our Ticket Shop from a technical perspective, ensure the stability and operating security of the IT systems used and to avoid and track abuse.
2. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue our legitimate interest to conduct analyses and, on the basis of these analyses, improve our Ticket Shop and our products and services as well as to prevent fraud.
The IP address transmitted to Google Analytics by the browser of the user is not combined with other data held by Google.
You can prevent the storage of cookies by means of a corresponding adjustment of your browser software; we advise you, however, that in this case some functions of these websites may not be used to their full extent.
This creates an opt-out cookie that prevents the future collection of your data upon visiting the Ticket Shop. This opt-out cookie only applies to this browser and only for this website and is stored on your device. If you delete cookies from this browser, you must reset the opt-out cookie accordingly.
We use Google Analytics with the extension “_anonymizelp()”. As a result, IP addresses are processed in abbreviated form and a direct correlation to individuals can be ruled out.
The use of Google Analytics is based on the prerequisites that the German data protection authorities have agreed on with Google.
1. It is mandatory to create a guest account in order to buy tickets. The registration and use of the guest account requires disclosure of personal data. The mandatory fields in the input screen are marked accordingly.
2. Your personal data is processed in order to carry out the specific order with you on the basis of Art. 6 (1) Sentence 1 lit b) GDPR.
1. When you buy a ticket from the Ticket Shop, your personal data is processed to execute and settle your order. The processing is based on Art. 6 (1) Sentence 1 lit. b) GDPR in order to perform and settle the contract with you.
2. If you buy a ticket for another person (third party), the personal data of the third party provided by you is processed (name and contact data if applicable) in order to personalize the ticket. This data is processed on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR in order to perform and settle the contract with you. If you provide the data of a third party, please ensure that the third party is sufficiently informed that its data will be processed by the Joint Controllers defined in Section 1.2 and that you are entitled to divulge this data.
3. When personalized tickets are issued, it is possible that special categories of personal data are processed, such as your health details, if you make the corresponding disclosures when purchasing a ticket and agree to this data being processed. This can include, for example, information that you use a wheelchair, have an allergy, food intolerance or are severely disabled. This data is processed to provide you access to special price categories and accessibility to an event or special seats during the event, for example. Your data is processed on the basis of your consent in accordance with Art. 6 (1) Sentence 1 lit. a) GDPR.
You will be informed via email when events are relocated or cancelled. This involves the processing of your personal data. Your personal data is processed on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR in order to perform and/or settle the contract with you.
1. If you have purchased a ticket from us (Section 2.3.), we – CTS EVENTIM AG & Co. KGaA – may, at our sole responsibility, send you emails to inform you, for example, about directions, parking and specifications of the event organizer (e.g., bag size). For this purpose, we process your personal data on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR in order to perform the contract with you.
2. After purchasing a ticket, we – CTS EVENTIM AG & Co. KGaA – may, at our sole responsibility, send you personalized newsletters on similar events, services and actions, we well as a birthday email. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue our legitimate interest of informing you of changes in our products and services, promoting our products and services and performing marketing campaigns.
1. You can contact us if you have queries relating to an event, your ticket purchase, wish to exercise your rights under this data protection information or would like to make a complaint. CTS EVENTIM AG & Co. KGaA is the joint contact for any queries (see the contact details in 1.2).
2. Depending on the nature of your request, we respond to your query using your personal data that we have stored in our systems within the framework of processing other data (e.g. data that you have disclosed when purchasing the ticket).
3. Your personal data is processed on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR in order to perform the contract with you. If you exercise your rights, we process your personal data to meet a legal obligation on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR. If you would like to obtain information or lodge a complaint, we process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interest of the Joint Controllers defined in Section 1.2 to respond to your complaint.
4. If you transmit health details to us in the course of your inquiry (e.g. information that you have a severe disability), we process this personal data only to the extent necessary to respond to your query and only when you have provided us with your express consent as defined by Art. 6 (1) Sentence 1 lit. a) GDPR.
1. It is possible that your order needs to be canceled. In this case, your personal data is processed on the basis of Art. 6 (1) Sentence 1 lit. b) GPDR.
2. If you have disclosed special personal data as defined by Section 2.3.3 relating to you or third parties, we will process this data on the basis of your consent as defined by Art. 6 (1) Sentence 1 lit. a) GDPR for the purpose of canceling your ticket purchase. Section 2.3.3 applies accordingly.
1. You will be informed by email, text message (SMS), by post, or by telephone of any open claims arising from the purchase of tickets. If necessary, you will be sent a reminder. To the extent that your payment remains outstanding, collection procedures will be initiated as a consequence.
2. Collection procedures are carried out by a collection agency commissioned for the purpose. Where required to execute the collection procedures, the collection agency will determine your address, access public registers for this purpose, and obtain other information about your person as necessary.
3. Your personal data will be processed on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR for the purpose of performing and settling the contract with you and on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interest of the Joint Controllers defined in Section 1.2 to prevent abuse of the Ticket Shop and exercise any legal claims, including the right of collection.
4. Within the course of a legal dispute with you, your personal data will be processed to exercise and/or defend the rights of the Joint Controllers defined in Section 1.2. To the extent necessary in the course of a legal dispute, data from other sources (e.g. public registers) will also be drawn on. Your personal data will be processed on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to fulfil a legal obligation and on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interests of the Joint Controllers defined in Section 1.2 to assert, exercise and/or defend their legal interests.
1. Your personal data may be processed in the course of internal audits within the EVENTIM Group in Germany and abroad. In this regard, CTS EVENTIM AG & Co. KGaA may, at its sole responsibility, also draw on data that can be obtained from other publicly accessible sources (such as credit reporting agencies).
2. In some circumstances, your data may be processed in the course of compliance programs and measures when we implement the requirements of the German Corporate Governance Code (GCGC), for example, or identify misconduct in the organization and attempt to remedy this.
3. In the course of such processing it is possible that your personal data may also be processed. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to fulfill our statutory duties. In addition, we process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR in order to pursue our legitimate interests of reviewing the processes and efficiency of the EVENTIM Group, remedy any misconduct and fraud and, where applicable, assert and/or defend our legal rights.
In some circumstances, CTS EVENTIM AG & Co. KGaA may, at its sole responsibility, conduct analyses of your data, which are processed as defined in Section 2 of this data protection information. These analyses serve CTS EVENTIM AG & Co. KGaA as a basis for business decisions, to improve our products and services, tailor the business to customer needs and carry out marketing campaigns. Your personal data is processed on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interest of CTS EVENTIM AG & Co. KGaA to improve its offering. The analyses conducted on this basis do not contain any reference to individuals. Thus it is not possible for conclusions to be drawn about your person.
1. Your personal data is stored for as long as, and to the extent necessary, it is required to realize the purposes for which it is processed (Section 2).
2. As soon as your data is no longer needed for the purposes stated in Section 2, CTS EVENTIM AG & Co. KGaA retains your personal data for the period in which you could exercise claims against the Joint Controllers defined in Section 1.2 and/or for the period in which Joint Controllers defined in Section 1.2 could establish claims against you (this is generally three years according to the statute of limitations, beginning at the end of the year in which the claim arises, e.g. the end of the year in which the ticket transaction took place).
3. In addition, your personal data is stored for as long as, and to the extent necessary, the Joint Controllers defined in Section 1.2 are legally obliged to store it. The corresponding obligations to provide evidence and retain it arise from the German Commercial Code (HGB), the German Fiscal Code (AO) and the Money Laundering Act (GWG), among others (e.g., Sec. 257 HGB, Sec. 147 AO). The associated retention obligations can range up to ten years.
1. If you purchase tickets in the Ticket Shop (Section 2.3) we process your personal data under the joint responsibility of our partners (Section 1.2). We transmit your personal data on the basis of the agreement entered into with our partners (Art. 26 in conjunction with Art. 6 (1) Sentence 1 lit. b) GDPR) and based on Art. 6 (1) Sentence 1 lit. b) GDPR, to perform our contract with you. Reference is made to the data protection information of our partners with regard to the processing of data by our partners that they perform at their own responsibility.
2. Your personal data is transmitted to other companies in the EVENTIM Group within the framework of a collaborative process relating to the provision, execution and management of the Ticket Shop, including the guest account. Such data transmission is performed on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interest of CTS EVENTIM & Co. KGaA to execute your order and perform internal administrative activities efficiently and in a collaborative process as well as improve our products and services.
3. In addition, your personal data will be transmitted to IT service providers who provide the platforms, databases and tools for the products and services (e.g. the Ticket Shop) and generate analyses of user patterns in the Ticket Shop. Your personal data is transmitted on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR for the purpose of performing the contract with you as well as on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interests of the Joint Controllers defined in Section 1.2 to improve the products, as well as on the basis of Art. 6 (1) Sentence 1 lit. a) GDPR in those cases where you have provided us with your consent to process your personal data.
4. Various payment methods are offered to you when you purchase a ticket. Depending on the payment method you choose, your personal data will be transmitted to banks, payment service providers, financial service providers and credit card companies in order to settle the payment and, if necessary, reimburse the purchase price. Your personal data is transmitted on the basis of Art. 6 (1) Sentence 1 lit. b) GPDR in order to settle the ticket purchase and reimburse it in the case of cancellation.
5. We transmit your personal data to KPS-Payment Verwaltungs-GmbH to perform the contract with you and, in particular, settle the payments. Your personal data is transmitted on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR to perform the contract with you and on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interests of the Joint Controllers defined in Section 1.2 to perform the contract efficiently, particularly the settlement of payments, and structure it in a collaborative manner.
6. If you have selected “PayPal” as a payment method, your personal data will be processed in accordance with the payment method you have selected to settle the payment. This involves transmission of your personal data to the USA. With regard to the USA, the EU Commission has not come to the conclusion that it has reached an appropriate level of data protection as defined by the GDPR. Such an adequacy decision (Art. 45 GDPR) does not exist. However, the transmission of your data is conducted on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR in conjunction with Art. 49 (1) Sentence 1 lit. b) and c) GDPR for the purpose of performing the contract with you.
7. If you fail to satisfy your payment obligations, collection procedures may be initiated (Section 2.7). In this case, your personal data will be transmitted to the collection agency commissioned to carry out the collection procedure. Your personal data will be processed on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR for the purpose of performing and settling the contract with you and on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interest of the Joint Controllers defined in Section 1.2 to exercise legal claims, including the right of collection.
8. In the case of legal disputes, we transmit your data to the applicable court and, if you engage a lawyer, to the lawyer as well in order to conduct the litigation. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to fulfil a legal obligation and on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interests of the Joint Controllers defined in Section 1.2 to establish, exercise and/or defend their legal interests.
9. Other than the cases listed above, your personal data will be transmitted only when there is a legal obligation to do so. Transmission is based on Art. 6 (1) Sentence 1 lit. c) GDPR (e.g. to the police authorities during a criminal investigation or to the data protection supervisory authorities).
To this extent, CTS EVENTIM AG & Co. KGaA is a joint contact for any queries.
in writing to CTS EVENTIM AG & Co. KGaA, Data privacy, Contrescarpe 75 A, 28195 Bremen.
2. If you object to processing of your data pursuant to Section 5.2., we will process your personal data collected in this context to the extent needed to address your request. In this case your personal data are processed on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to meet a legal obligation.
2. If you withdraw your consent to processing of your data, we will process your personal data collected in this context to the extent needed to address your request. In this case your personal data are processed on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to meet a legal obligation.
erase your personal data (Art. 17 GDPR), restrict it (Art. 18 GDPR) and/or release it (Art. 20 GDPR).
3. If you assert your rights towards us, we will process your personal data collected in this context to the extent needed to address your request. In this case your personal data are processed on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to meet a legal obligation.
4. Notwithstanding your rights under Section 7, you have the right to lodge a complaint with a supervisory authority for data protection if you are of the opinion that the processing of your personal data in accordance with this data protection information breaches the terms of the GDPR (Art. 77 GDPR).
1. The provisions of this data protection information (which can be accessed free of charge on this website) including the cookie information (which can be accessed free of charge on this website) apply in the version valid at the time of using the Ticket Shop.
2. We reserve the right to supplement and amend the contents of this data protection information. The updated data protection information applies from the date on which it is published on this website.
3. You will be informed in good time of such supplements and amendments on this website and, if your contact data are already on our files, you will be informed via email or by standard mail. You will be given the opportunity to view, print and store the amended data protection information at no charge.
With regard to Interkunst e.V. Herxheim, we refer to the data protection information of our partner.
“Cookies” are small text files which are saved in the browsers of your end devices when you visit this website. Cookies can save and track your actions and settings in our website for the duration of the browser session and, in some cases, beyond this. Cookies also enable the recognition of your browser. For instance, after leaving the website, the content of your shopping basket is reconstructed or events recently viewed are displayed again.
On the one hand, we use first-party cookies, i.e. cookies placed by our server on our websites and which can only be accessed via our server.
On the other, this website also incorporates third-party cookies which are placed by servers of others and/or this website or domains and that can be read by third parties. With these cookies, your browser can be tracked beyond this website, for instance so as to be able to display Eventim advertisements on the websites of our partner companies.
Some of the cookies we use are session cookies, i.e. cookies which are only stored for the duration of your visit to this website.
We also use persistent cookies which stay saved on your browser after the session and are automatically deleted after a predefined expiry date.
Via your browser settings you can limit or completely prevent the storage of (certain) cookies for all websites and delete any cookies that have already been saved. For more information about this please consult the instruction manual or help functions of your browser.
This website can in principle still be visited and used after restricting/deactivating cookies in the browser settings. However, please note that in particular the complete deactivation of cookies can limit the functionalities of this website.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 49
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6