Source: https://corporate.eventim.de/en/footer/rechtliches/data-protection/
Timestamp: 2020-02-19 05:05:08
Document Index: 511920062

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 26', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 26', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 49', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 6', 'Art. 77']

The purpose of this information on data protection is to inform you on the processing of your personal data when visiting and using the websites of CTS EVENTIM AG & Co.KGaA (hereinafter "EVENTIM", "we" or "us") and in reference to our marketing measures on our own websites as well the websites of third parties and on social networks in accordance with the General Data Protection Regulation (hereinafter "GDPR").
1 Scope, controller and definitions
This information on data protection applies to the visit and use of the EVENTIM websites on which a customer account can be created and tickets can be purchased in our online ticket shops, including online ticket shops that can be accessed via websites of Partners (so-called "Partnershops"). This information also applies to our related marketing activities on our websites, third-party websites and in social networks. You can access, save and print this information on data protection at any time and free of charge on our websites. This information on data protection only concerns the processing of personal data within the meaning of Section 1.1.1. Other websites are not covered by this privacy information and provide their own specific information on data protection.
1.2 Controller for the processing of your personal data
Unless otherwise stated in this data protection declaration, the following is the controller for the processing of your personal data:
Tel: +49 (0) 1806 533 933 (€ 0.20 /call incl. VAT from German landlines, max. € 0.60 /call incl. VAT from mobile networks).
For processing in connection with the execution of orders through certain Partnershops - we are jointly responsible, together with the respective operator of the partner site, as described in detail in section 2.6 below. You will find a list of Partnershops, which are operated under joint responsibility and the co-responsible partners here.
This information on data protection is based on the following terms on data protection, which we have defined for easier understanding:
The GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC). Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. Authorities, however, which within the framework of a specific inquiry mandate may receive personal data under Union law or the law of the Member States shall not be considered recipients; the processing of such data by these said authorities is carried out in accordance with the applicable directives on data protection in accordance with the purposes of the processing. Depending on the method of payment selected for ticket purchases, the recipients of your personal data may be banks or the postal service providers via whom we send you your ticket by post. In accordance with Section 15 of the German Stock Corporation Act (AktG), the EVENTIM Group comprises all of CTS EVENTIM AG & Co. KGaA's affiliated companies. Further information is available at
Personal data are all information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data can, for example, be name, contact data, user behaviour or bank data. The Controller is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for his appointment may be laid down in accordance with Union law or the law of the Member States. For the data processing described in this privacy policy, CTS EVENTIM AG & Co. KGaA is responsible; partly together with the operator of a partner-site (see section 1.2). Processing is any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transfer, disseminating or otherwise making available, aligning or combining, restricting, erasing or destroying. Processing can be, for example, the collection and use of your order data for ticket sales.
2. Purposes, legal bases and, if applicable, data categories for processing your personal data
2.1 Processing of your data when you visit our websites as well as part of marketing measures on third-party websites and in social networks
If you access our websites to obtain information about our products and services without registering in the customer account, purchasing a ticket in our ticket shop or otherwise actively providing us with information (purely informational use), we process your personal data. In addition, we process your personal data as part of marketing measures on third-party websites and social networks. Your personal data is processed for the following purposes and on the basis of the following legal bases:
2.1.1 Processing for IT security purposes
When using our websites, we process your personal data that is technically necessary for us to make our websites available to you and to ensure stability and security when visiting them. For this purpose, we process the following personal data:
Cookies (see Cookie Information Website)
Due to our legitimate interest in providing you with the websites and safeguarding IT security for you when using them, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. For this analysis, we use Google Analytics, a web analysis service of Google LLC ("Google"). Google Analytics uses cookies that enable an analysis of the use of our websites. The information generated by the cookie about the use of our websites is in general transferred to a Google server in the US and stored there. However, if IP anonymisation is activated on our websites, Google will reduce the IP address of the website visitor within member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. On behalf of EVENTIM, Google will use this information to evaluate the use of the websites, to compile reports on the website activities and to provide EVENTIM with further services associated with the use of the website and the Internet.
The IP address transferred by the user's browser within the scope of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of these websites.
You can also prevent Google from recording the data generated by the cookie and relating to your use of the websites (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:
Execute objection (opt-out) (Google Analytics Tracking will be disabled when you click on the link)
An opt-out cookie is set to prevent future recording of your data when using these websites. Our websites use Google Analytics with the extension "_anonymizelp()". As a result, IP addresses are processed further in abbreviated form; direct personal reference can thus be ruled out.
Google Analytics is used in accordance with the conditions on which the German data protection authorities have agreed with Google.
https://policies.google.com/privacy?hl=en&gl=d
In connection with the use of Google Analytics, your personal data is transferred to the US. Google LLC is subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:
To analyse the use of our websites, we also use the following web analysis services:
The Adex: http://www.theadex.com/privacy
If you wish to object to the data processing by these web analysis services, please click on the respective link of the analysis service (opt-out option). We would like to point out that the objection is always made by means of a cookie. If this cookie is erased, you must click again on the respective link of the analysis service to exercise your objection.
Technologies of ContentSquare S.A.S. are used on our website to collect interaction data of the web visitor in pseudonymised form. The information is used for reports on website usage and to optimise user friendliness. The information is collected using cookies.
You can prevent the collection of information by ContentSquare by clicking on this link. An opt-out cookie will be set to prevent your data from being collected in the future when you visit the website. The opt-out cookie will be stored on your device and is only valid in this browser and only for the respective website. If you delete the cookies in this browser, you must set the opt-out cookie again.
2.1.3 Processing for the purpose of individual recommendations on our websites
If you visit our websites, we analyse and document your user behaviour to display individual recommendations on the websites based on this data. For this purpose, we process the following personal data:
Due to our legitimate interest in displaying product recommendations and carrying out marketing measures, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. If you would like to object to the data processing due to our our legitimate interest in displaying product recommendations and carrying out marketing measures, please click on the following opt-out link:
https://www.eventim.de/tickets.html?affiliate=EVE&doc=info/dataProtectionOptout We use Google Adwords and Facebook Pixel for the processing. If you would like to object to the data processing by Google Adwords and/or Facebook Pixel, please click on the respective link (opt-out option):
Google Adwords: https://www.google.com/settings/ads/
In connection with the use of Google Adwords and Facebook Pixel, your personal data is transferred to the US. Google LLC and Facebook, Inc. are subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:
For further details on data processing by Google Adwords and Facebook Pixel, please refer to the corresponding information on data protection:
Google Adwords: https://policies.google.com/privacy?gl=GB&hl=en
Facebook Pixel: https://policies.google.com/privacy?gl=GB&hl=de
2.1.4 Processing for purposes of advertising and re-targeting on third party websites and social networks
If you visit our websites, we process your personal data for advertising measures in the form of remarketing and display advertising as well as with the help of social media plug-ins and for social media ads. Our partners use the RecoWidget on their websites for remarketing purposes. This tool allows us to show you individual advertising and recommendations for our products and services on our partner websites. At the same time, we add to your customer profile which partner website you have visited. We process for this:
Geo information provided by our partners
Due to our legitimate interest in advertising our products and services, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. If you do not wish to use the RecoWidget´s remarketing function, you can deactivate it by making the corresponding settings (Opt-Out function) at
For further details on data processing by the RecoWidget, we refer to the corresponding information on data protection:
As part of display advertising, we carry out various marketing campaigns using tags (pixels) and cookies from our retargeting providers. When you visit our websites, tags and cookies are set and associated with products you have viewed or purchased. This allows you to see individual displays for EVENTIM products. We also play banner ads to Facebook users who have a similar profile to our existing customers and website visitors. For this, we process:
Web page type called up
viewed product number
when purchasing a ticket: ordered product number, sales value and order number, as well as preferences and
Due to our legitimate interest in advertising our products and services with the aid of targeted marketing measures, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. If you do not want the retargeting function, you can basically deactivate it by making the appropriate settings (opt-out function) at the following link:
In connection with the use of tags and cookies from Google and Facebook, your personal data is transferred to the US. Google LLC and Facebook, Inc. are subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:
For further details on data processing by the retargeting providers, please refer to the corresponding data protection information:
If you have finished a ticket purchase from us, a cookie is set by Google Adwords and Bing. If you enter corresponding search terms in Internet search engines after your purchase, individual recommendations for EVENTIM products and services can be displayed to you on the basis of your purchase with the help of this cookie (search engine marketing).
Your personal data is processed in the process. Due to our legitimate interest in displaying product recommendations and carrying out marketing measures, processing is carried out on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
If you would like to object to the data processing by Google Adwords and/or Bing, please click on the respective link (opt-out option):
Bing: http://choice.microsoft.com/en-en/opt-out
In connection with the use of Google Adwords and Bing, your personal data is transferred to the US. Bing is a service of Microsoft Corporation. Microsoft and Google LLC are subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:
For further details on data processing by Google Adwords and Bing, please refer to the corresponding information on data protection:
Our websites contain social media plug-ins (e.g., Facebook "Like/Share-Button"). If you click on these on our websites and you have an account on the corresponding social network, a connection to the social network is established where the content you have "liked" appears. Besides the content that you have "liked", we process:
accessed web page and,
date and time of the end of your visit to the website
We process your personal data to increase the reach of our offer and to carry out marketing measures. Your personal data is processed on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR, which you grant us when activating the button and subsequently clicking the "Like/Share button" (so-called 2-click solution).
In doing so, your personal data is transferred to the US. Facebook, Inc. is subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:
For further details on data processing, please refer to Facebook´s information on data protection:
We place advertisements, so-called social media ads, on the social networks Facebook and Instagram. If you have an account on these social networks and through your account settings on the social network agree to display advertising, you will receive corresponding recommendations on our products and services. The recommendations are generated based on your interests (e.g. "likes" of artists) stored in your public profile on Facebook or Instagram.
For this, we process your public profile data. Based on your public profile interests (e.g. "likes" of artists) we show you individual advertising. In particular, we process
your device / cookie ID,
page/feed activity,
purchasing activities and
to measure ad success. We process your personal data due to our legitimate interest in being able to place advertisements effectively and carry out advertising campaigns, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
For further details on data processing, we refer you to the information on data protection of Facebook and Instagram:
Use of the address matching technology for the determination of cross-media media use - your right to object
Our website uses the address matching technology of Deutsche Post AG for the determination of statistical parameters for the cross-media use of media. Your deposited delivery or billing address is assigned by a contracted service provider to a so-called micro cell of Deutsche Post Direkt GmbH (Ø 6.6 households) and this code number is stored in encrypted form with another service provider. The legal basis for this use of the address is Art. 6 (1) of the GDPR. IP addresses are not stored in the process and immediately anonymized.
With the help of the cookie, it can be recognized that you are visiting a website participating in the measurement. This information is then aggregated on the basis of the already mentioned micro cell of the Deutsche Post Direkt GmbH and is therefore no longer assignable to your person.
The goal is to first determine the activation performance of physical advertising on a website statistically. The specific purpose is to determine how many people who have been sent a catalog (or other advertising material) have subsequently visited the company's website. At no time will individual users be identified by name. Your identity remains protected.
Access to a website or other advertising material is stored by Deutsche Post Direkt GmbH as a feature of a microcell. This feature can be used by Deutsche Post Direkt GmbH as part of its otherwise offered address services to select target group segments at the microcell level and to use them for dialogue marketing campaigns.
You can object to the data processing in the context of the described method under the following link: https://pixel.consentric.de/optout
Please note: Only the cookie you have set can recognize that you do not want to be recorded in the future. If you delete all cookies, this cookie will also be deleted. In this case, we would like to ask you to refuse to participate in the procedure again.
2.1.5 Use of cookies
When using our websites, cookies are stored on your computer. Cookies are small text files that are assigned and stored on your hard disk by the browser you use. Cookies allow certain information to flow to the controller that sets the cookie. These also contain personal data. This allows us to make our websites more user-friendly and effective. Cookies cannot run programs or transmit viruses to your computer. For the use of cookies on the websites of our ticket shop, the Cookie Information websites of EVENTIM (see Cookie Information Website) apply.
2.2 Registration and creation of a customer account
When you visit our websites, you can create a customer account. You can use this to purchase tickets, find out about events and leisure activities and receive information about events of your favourite artists via our ticket alert. You can participate in exclusive advance sales, subscribe to newsletters and take advantage of many other benefits relating to your ticket purchase. The registration and use of the customer account requires personal data. Mandatory fields are marked accordingly in the input mask. Due to our legitimate interest, we process your personal data to enable you to create and use your customer account, as well as to enable the sale of tickets, and to inform you about our products and services. Processing is carried out on the basis of Art. 6 Para. 1 Sentence 1 lit. b) and lit. f) GDPR.
2.3 Registration for the customer account with Facebook login
To make it easier for you to create a customer account and log in later, we offer you the option of registering with your Facebook login data. For this, you need a Facebook account. In this respect, the terms of use and data protection of Facebook, Inc. apply. If you click on the button "Log in with Facebook" during registration, a new window opens with input fields for your Facebook login data. By entering your data, you consent to us receiving access to your public Facebook profile. Your data is returned according to the privacy settings you have selected on Facebook. After successful authentication via your Facebook login data, your Facebook profile and our customer account are linked to each other and you can use our customer account without having to register separately on our websites. When you register with your Facebook login data in our online customer portal, we process your first and last name and your e-mail address. The use of your Facebook login data by us for your registration is voluntary. We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR. For more information about your registration with your Facebook login details, please see the Terms of Use and information on data protection of Facebook, Inc:
https://facebook.com/legal/terms/update
2.4 Ticket purchases in the online ticket shop, in our reservation offices and via the ticket hotline.
We process your personal data when you buy a ticket on our websites in the ticket shop, in our reservation offices or via our ticket hotlines and provide personal data. The processing is carried out for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you purchase a ticket for another person (third party), we process the third party´s personal data (name and, if applicable, contact data) provided by you for ticket personalisation and, if applicable, for sending the ticket to the third party. These data are processed for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you provide data of a third party when purchasing a ticket, make sure that the third party is sufficiently informed by you about the processing of his/her data at EVENTIM and that you are entitled to provide the data. When you purchase a ticket through our websites and choose either "purchase on account" or "hire purchase" payment methods, BillPay uses tools to identify potential fraud. A corresponding check only takes place if you give your consent (opt-in). If the check is negative, the payment methods "purchase on account" or "hire purchase" are rejected. However, all other payment methods listed in the ticket shop are still available to you. When using the tools, it is possible to draw conclusions about your person. We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR and due to the fact of our legitimate interest and BillPay´s legitimate interest in fraud prevention on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. When issuing personalised tickets, we may also process special categories of personal data, such as your health data, if you provide such information when purchasing a ticket and agree that we may process this data. This includes, for example, the information that you are a wheelchair user, have an allergy or intolerance to food or a severe disability. We process this data to provide you with special price categories, special access to an event and special seats during the event. Your data is processed on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
2.5 Purchasing and selling tickets via fanSALE
As a private person, you can offer and purchase tickets and related EVENTIM services via our ticket exchange fanSALE (available under www.fanSALE.de). In your capacity as buyer or seller of a ticket, we process your personal data for the purpose of contract initiation, execution and processing on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you provide the delivery address of another person (third party) when purchasing a ticket on fanSale, we process the contact data of this third party on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. In this constellation, make sure that the third party is sufficiently informed by you about the processing of his/her data at EVENTIM and that you are entitled to provide the data.
2.6 Ticket sales via websites of special cooperation partners
If you purchase tickets through the websites of our cooperation partners ("Partner Sites"), your personal data will be processed in the respective Partnershop for the purpose of executing your order. As mentioned in section 1.2, certain cooperation partners are jointly responsible with us (Art. 26 GDPR) for processing your personal data in the context of ticket purchase within the meaning of this section. We process your personal data as joint controllers with our special cooperation partners as defined in section 1.2, for the purposes and on the legal basis as described in detail in sections 2.4, 2.7, 2.12, 2.13, 2.15, 2.16, 2.17 and 2.18 of this Privacy Policy. Please contact us if you have any inquiries regarding sections 2.15, 5, 6 and 7 (see contact details in section 1.2). Upon request, we would also provide you with the essentials of the agreement on shared data protection responsibility with our respective cooperation partner. The processing of data about users of a Partnershop in connection with the use of an Internet offer and its functions outside of order processes (including processing for the purposes of IT security, usage analysis and the display of advertising - if necessary using cookies) - as detailed in sections 2.1 - 2.3 - is not subject to the common data protection responsibility with the cooperation partner. EVENTIM is solely responsible for these processing activities.
2.7 Credit assessment and profiling
When purchasing tickets, we may carry out a credit check if you choose the payment methods "direct debit", "hire purchase" and "purchase on account". Credit risk is assessed on the basis of mathematical-statistical procedures at the credit agency (SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany), so-called scoring. For this purpose, your personal data which are necessary for the credit assessment are transferred to the credit agency. We process your personal data for the purpose of credit assessment to avoid payment default. On the basis of the transferred personal data, including address data, a statistical probability of a credit default and thus your solvency is calculated. The credit agency then transfers your score value to us. This personal data is processed for the execution of your contract with us on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR as well as due to our legitimate interest in avoiding a default of payment on your part, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR. The decision as to whether payment by direct debit, hire purchase and/or invoice purchase is possible is based on an automated decision. If your customer and order data are similar to the data of an order with payment problems, one of our employees will check your order process separately and manually. If the credit check is positive, payment by direct debit, hire purchase and/or purchase on account is possible; if it is negative, we cannot offer you the payment method "direct debit", "hire purchase" and/or "purchase on account". Payment by another payment method is still possible. Die The scope of the scoring is limited to whether payment by direct debit, hire purchase and/or purchase on account is possible. We use the scoring exclusively to prepare and execute the contract with you and to protect ourselves against possible payment defaults.
2.8 Shopping cart canceller e-mails
If you have started an order process in our ticket shop on our websites but have not completed it, we will send you a reminder e-mail to the e-mail address stored in your customer account regarding the purchase process you have started. You can complete this purchase process by logging into your customer account on our websites. We process your personal data in order to remind you within the context of marketing measures of purchase processes that you have not yet completed. If you have not yet purchased a ticket from us, we will process your data on the basis of your consent according to Art. 6 Para. 1 Sentence 1 lit. a) GDPR. If you have already purchased a ticket from us, we process your personal data provided in previous order processes due to our legitimate interest in carrying out marketing measures on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
2.9 Memos and wish lists
You can save events on your "memo" in your customer account. You also have the option of adding events to a "wish list" and sending this list by e-mail to any person. When doing so, we process your personal data and the e-mail address of the recipient specified by you for marketing purposes. When providing the recipient´s email address, make sure that the recipient is sufficiently informed by you about the processing of his/her data at EVENTIM and that you are entitled to provide the data. Due to our legitimate interest in advertising our products and raising the reach of our products, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
If you register for our FanBonus, you receive a refund depending on ticket sales (see FanBonus Terms and Conditions after login:
Due to our legitimate interest in carrying out marketing measures and giving you discounts for your loyalty to our company, we process your personal data from your order processes and your annual turnover with us from the previous year on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
2.11 Fan reports
After visiting an event, you can create a report on the event on our websites or let us and other visitors to our websites know whether you enjoyed the event. Your report is published on our websites. When you create and publish a fan report on our websites, we process your personal data to publish your report on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interest in increasing our reach through marketing measures and in informing other customers about your experiences at the event, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
2.12 Customer surveys
To continuously improve our products and services and adapt them to your needs, we regularly invite our customers to participate in customer surveys. In doing so, we will use the information you provide during the ticket purchase process (Sections 2.4, 2.5, 2.6 to contact you. Due our legitimate interest in improving our products and services, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
2.13 Information e-mails, newsletters and web browser pushes
If you visit our websites for information purposes only (Section 2.1) or if you create a customer account (Sections 2.2 and 2.3), you can register for our newsletter. If you would like to be informed as soon as your favourite stars and events are scheduled, you can register for our ticket alert. If you enter your date of birth when registering, we will send you a birthday e-mail. Via the newsletter and the ticket alert, we inform you about products and services and also advertise them, if necessary, personalised. In doing so, we process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR. If you have purchased a ticket from us (Section 2.4) or have won tickets as part of our competitions (Section 2.14), we may send you information e-mails in order to inform you, for example, about the directions, parking spaces and specifications of the promoter (such as bag size). For this purpose, we process your personal data for the purpose of contract execution on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. After purchasing a ticket, we send you individual newsletters about similar events, services and promotions as well as birthday e-mails. Due to our legitimate interests in informing you about changes to our products and services, in advertising our products and services and in carrying out marketing measures, we process your personal data on the basis on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. When you subscribe to our newsletter (Section 2.13.1 and Section 2.13.3) we analyse and document whether you open the newsletter and how you use it. We process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR to pursue our legitimate interest of structuring our newsletter in accordance with your needs and to improve the range of our marketing campaigns. If you make the appropriate settings in your browser, we will send you personalised push notifications, so-called web browser pushes, from our website https://www.eventim.de/. For this, we use the Google service Firebase Cloud Messaging (FCM). We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
In connection with the use of the Google service Firebase Cloud Messaging (FCM), your personal data is transferred to the US. Google LLC is subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:
For further details on data processing by the Google service Firebase Cloud Messaging (FCM), we refer to the corresponding information on data protection:
2.14 Competitions
You can participate in various competitions on our websites and social media platforms. For this, we process your personal data to conduct the competition with you and to advertise our events. Your personal data is processed for the purpose of executing the contract with you and due to our legitimate interest in carrying out marketing measures, on the basis of Art. 6 Para. 1 Sentence 1 lit. b) and f) GDPR.
2.15 Customer Service
If you have any questions about events, your ticket purchase, your customer account or other EVENTIM products and services, if you wish to exercise your rights under this information on data protection or if you wish to make a complaint, you can contact us (see contact details under Section 1.2). Depending on the subject of your request, we may use your personal data stored in our systems in the course of other data processing (e.g. data that you have provided when purchasing tickets) to answer your questions. If and to the extent necessary to answer your inquiry, we also collect data from external sources (e.g. inquiry with the shipping service provider in the context of a shipment tracking or a request for investigation). Your personal data are processed for the purpose of executing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you exercise your rights towards us, we process your personal data for the purpose of fulfilling a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR. If you wish to inform yourself about our products and services or to make a complaint, we process personal data due to our legitimate interests in carrying out marketing measures and responding to your complaint on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. If you send us health data within the scope of your inquiry (e.g. information that you have a severe disability), we process this personal data only and insofar as this is necessary to answer your request and you have given us your express consent for this as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
2.16 Reversed transactions on tickets
If necessary, it comes to a reversed transaction of your order. Your personal data will be processed on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you have not purchased your ticket from us yourself, but received it as a gift from the buyer, for example, and now send in the ticket due to the cancellation or relocation of the event, we process the data that you as a different sender provide us with informally or via the form on our website. We process your personal data for the purpose of returning your ticket and making a refund on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you have provided special personal data as defined in Section 2.4.4 on yourself or a third party when purchasing a ticket, we process this data for the purpose of reversing the ticket transaction on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
2.17 Dunning, collection and enforcement and defence of legal claims
In the case of outstanding receivables to us, we notify you by e-mail, SMS, post or telephone and, if necessary, send you a reminder. If and to the extent that no payment is made by you as a result, a collection procedure is initiated. If and to the extent that no payment is made by you as a result, a collection procedure is initiated. The collection procedure is carried out by a collection service provider commissioned by us. As far as this is necessary for the execution of the collection procedure, the collection service provider carries out address investigations and accesses public registers for this purpose. We process your personal data for the purpose of executing and processing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interests in preventing misuse of our services and enforcing our legal claims, including collection, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. In the context of a legal dispute with you, we process your personal data to enforce and/or defend our rights. If and insofar as this is necessary for executing the legal dispute, we also make use of data from other sources (e.g. public registers). We process your personal data on the basis of a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR and due to our legitimate interest in representing, enforcing and / or defending our legal interests, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
2.18 Other processing
2.18.1 Performance of internal audits and compliance
If we implement compliance programs and measures, for example to implement the requirements of the German Corporate Governance Code (DCGK) and to identify and correct misconduct, corresponding processing of your data may also occur. Additionally, your personal data can be processed within the Eventim Group in Germany and abroad in connection of internal audits. We process your personal data to comply with our statutory obligations, on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR. In addition, due to our legitimate interests in reviewing the processes and efficiency in the group of companies, correcting any misconduct and preventing fraud and, if necessary, in enforcing and/or defending our rights, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
2.18.2 Preparation of analyses
On the basis of your data, which we process as defined in Section 2 of this information on data protection, we may prepare analyses. These serve as the basis for business decisions to improve our products and services, to adapt them to the needs of our customers and to carry out marketing measures. Due to our legitimate interest in improving our offer and carrying out marketing measures, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. The analyses created on this basis no longer contain any personal references, meaning it is no longer possible to draw any conclusions about your person.
3 Storage and erasure of your personal data
We store your personal data for as long and as far as it is necessary for the purposes for which they are processed (Section 2).
As soon as the data is no longer required for the purposes stated in Section 2, we store your personal data for the period in which you can assert claims against us or we against you (statutory limitation period usually of three years, beginning at the end of the year in which the claim arises; e.g. at the end of the ticket transaction).
In addition, we store your personal data for as long as and insofar as we are legally obliged to do so. Corresponding proof and storage obligations result, inter alia, from the German Commercial Code, the German Fiscal Code and the German Money Laundering Act (e.g. Section 257 HGB; Section 147 AO). The retention period is up to ten years.
4 Categories of recipients of personal data
When providing, implementing and managing our products and services, we collaboratively transfer your personal data to companies within the EVENTIM Group as part of an work-sharing process. The transfer is based on our legitimate interest in carrying out internal administrative activities efficiently and collaboratively as well as in improving our products and services on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
If you purchase tickets on the websites of our partners, we transfer your personal data to them for marketing purposes if you give us your consent for this within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
When you purchase tickets on the websites of our special cooperation partners (Section 2.6), we process your personal data as joint controllers with our partners. On the basis of the agreement concluded with our partners (Art. 26 in conjunction with Art. 6 Para. 1 Sentence 1 lit. b) GDPR), we transfer your personal data for the purpose of contract execution and, if applicable, processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. We also transfer your personal data to our partners for statistical evaluations due to our legitimate interest in improving our products and services together with our partners on the basis of these analyses and carrying out marketing measures. Your personal data is processed on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.
If you purchase tickets on the websites of our loyalty partners who have integrated our online shop on their websites, we transfer personal data to them as part of the bonus programmes. Your data is transferred when you purchase a ticket, so that the Loyalty Partner can assign the purchase to a specific person, the customer. The customer then receives bonus points (such as Miles and More, PAYBACK, etc.). We transfer your data on the basis of our legitimate interest and the legitimate interest of our loyalty partners in carrying out marketing measures and in sending you discounts for your loyalty, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
In addition to this, your personal data is transferred to IT service providers who provide the platforms, databases and tools for our products and services (e.g. our website, the sale of tickets, sending of newsletters and information e-mails), create analyses of user behaviour on our websites, display marketing campaigns and process your personal data on our behalf as part of ticket purchases. The transfer of your personal data takes place for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR, due to our legitimate interest in improving and promoting our products, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR and provided that you have given us your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR for the processing of your personal data.
When you purchase a ticket on our websites, we offer you various payment options. For the processing of the payment and, if necessary, a refund of the purchase price, we transfer your personal data to banks, payment service providers, financial service providers and credit card companies, depending on the selected payment method. We transfer your personal data for the processing of your ticket purchase and, if necessary, the reverse transaction on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. In addition, we may also transfer your personal data to credit agencies to check your creditworthiness (see Section 2.7). The transfer is made to execute the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interest in avoiding payment defaults on your part, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
If you select "PayPal" as payment option when purchasing tickets, we transfer your personal data. Your personal data is transferred based on your selected payment method and in order to process the payment with you. In doing so, your personal data is transferred to the US. In the case of the US, the EU Commission has not decided that an adequate level of data protection within the meaning of the GDPR exists; there is no such adequacy decision (Art. 45 GDPR). However, we transfer your data for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) in conjunction with Art. 49 Para. 1 Sentence 1 lit. b) and c) GDPR.
If we send you your ticket by postal services, we transfer your personal data to shipping service providers. The transfer takes place for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.
If you fail to meet your payment obligations, we initiate a collection procedure (Section 2.17). For the execution of the collection procedure, we transfer your personal data to collection service providers who carry out the procedure for us. We process your personal data for the purpose of executing and processing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interests in enforcing our legal claims, including collection, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
In the context of legal disputes, we transfer your data to the competent court and, if you have appointed a lawyer, to him/her to carry out the legal dispute. We process your personal data on the basis of a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR and due to our legitimate interest in representing, enforcing and / or defending our legal interests, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
Guest lists are created for some events and sent to the organiser to check your eligibility to participate in the event, to allocate seats and to take menu requests into account. If you take part in our competitions (Section 2.14), we transmit the personal data of the winner to the respective promoter of the competition for this purpose. We transfer your personal data for the purpose of contract execution with you and with our contractual partners on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If and as far as this is necessary for the event, we also transfer health data (e.g. information on allergies at food events), if you have provided this information when purchasing a ticket and given us your consent for the transfer of the data as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
Information e-mails and newsletters (Section 2.13) are sent by service providers commissioned by us and, in some circumstances we may analyse and document your use of them. For this purpose, we transfer your personal data to the service providers. In doing so, we process your personal data as follows:
If you give us your consent to send you newsletters when visiting our websites for information purposes only (Section 2.1) or when creating a customer account (Sections 2.2 and 2.3), we transfer your data on the basis of your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR..
After purchasing a ticket (Sections 2.4, 2.5 and 2.6) or after successful participation in a competition (Section 2.14), we transfer your personal data in order to provide you with information on the event, for the purpose of executing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.
In addition, after purchasing a ticket (Sections 2.4, 2.5 and 2.6) or after participating in one of our competitions (Section 2.14), we transfer your personal data to inform you about changes to our products and services and to promote our products. The transfer of your personal data occurs due to our legitimate interest in carrying out marketing measures, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
In order to analyze the use of our newsletter, we transmit your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue our legitimate interest of structuring our newsletter in accordance with your needs and to improve the range of our marketing measures.
We transfer your personal data to the Google service Firebase Cloud Messaging (FCM) to send the web browser pushes. Your data is processed on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
We conduct customer surveys and customer evaluations. For this purpose, your contact details are sent to our mailing service providers, via whom we invite you to our surveys and evaluations. We process your personal data on the basis of our legitimate interest in improving our products and services on the basis of your evaluation and conducting surveys and evaluations efficiently, on the basis of Art. 6 Para. 1 Sentence 1 letter f) GDPR.
Beyond this, we transfer your personal data only and insofar a legal obligation exists on our part to pass it on. The transfer takes place on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR (e.g. to the police authorities in the context of criminal investigations or to the data protection supervisory authorities).
5 Justified interests in data processing and objection
We process your personal data as defined in Section 2 due to our legitimate interests particularly in ensuring IT security on our websites, carrying out analyses and marketing measures, informing you about our products and services, increasing the scope of our products and marketing measures, preventing fraud and misuse, avoiding payment defaults, representing, enforcing and defending our legal interests (possibly also in court) and carrying out internal administration efficiently and collaboratively. Information on the balance of interests carried out can be obtained from:
To the extent, we process your personal data on the basis of these legitimate interests (Art. 6 Para. 1 Sentence 1 lit. f) GDPR), you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. Notwithstanding the above, in cases of direct advertising (such as newsletters or retargeting measures) you have the right to object at any time to the processing of your personal data without giving reasons. We will then no longer process your data for this/these purpose(s) unless our legitimate interests in processing overweight or the processing serves to establish, exercise or defend legal claims. Please send your request to:
by e-mail to kundenservice@eventim.de,
by tel. to +49 (0) 1806 533 933 (€ 0.20 /call incl. VAT from German landlines, max. € 0.60 /call incl. VAT from German mobile networks).
in writing to CTS EVENTIM AG & Co. KGaA, Data Protection, Contrescarpe 75-A, D-28195 Bremen, Germany.
If you object to the data processing according to Section 5.2, we process your personal data collected in this context to answer your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.
6 Consent and revocation of your consent
If you have given us your consent for the processing of your personal data, you can revoke this at any time. The revocation of your consent is effective for the future. The legality of the processing of your personal data up to the time of revocation remains unaffected.
https://www.eventim.de/tickets.html?affiliate=EVE&doc=feature/login&language=en
Otherwise, please address your revocation:
by tel. to +49 (0) 1806 533 933 (€ 0.20 /call incl. VAT from German landlines, max. € 0.60 /call incl. VAT from German mobile networks) or
If you revoke your consent, we will process your personal data collected in this context to respond to your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.
You may at any time, in accordance with the GDPR, request that we
provide you with information about the personal data concerning you that we process (Art. 15 GDPR),
rectify any personal data concerning you that is inaccurate (Art. 16 GDPR) and/or
erase (Art. 17 GDPR), block (Art. 18 GDPR) and/or release (Art. 20 GDPR) your personal data stored by us.
If you assert your rights against us, we process your personal data collected in this context to answer your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.
Without prejudice to your rights under Section 7, you may lodge a complaint with a data protection supervisory authority if you believe that EVENTIM's processing of personal data concerning you is in breach of the GDPR (Art. 77 GDPR).
The provisions of this information on data protection (available free of charge on our websites), including the cookie information of CTS EVENTIM AG & Co. KGaA (available free of charge on our websites) apply in the version valid at the time of use of our websites.
We reserve the right to supplement and amend the content of the information on data protection. The updated data protection information is valid from the time it is published on our websites.
We will inform you in good time about these amendments and supplements on our websites. You will be given the opportunity to view, print and save the amended information on data protection free of charge.
9 Contact details of the Data Protection Officer
Please direct any questions regarding data protection to:
Cookie Information Websites
This cookie information provides more specific data protection information as required by Section 2.1.5 (2) about the use of cookies on websites of CTS EVENTIM AG & Co. KGaA and affiliates of CTS EVENTIM AG & Co. KGaA as defined by Sec. 15 AktG [“Aktiengesetz”: German Stock Corporation Act], referred to here as “EVENTIM”, “we” or “us“).
“Cookies” are small text files which are saved in the browsers of your end devices when you visit our websites. Cookies can save and track your actions and settings in our websites for the duration of the browser session and, in some cases, beyond this. Cookies also enable the recognition of your browser. For instance, after leaving the website, the content of your shopping basket is reconstructed or events recently viewed are displayed again.
On the other, our websites also incorporate third-party cookies which are placed by servers of others and/or our websites or domains and that can be read by third parties. With these cookies, your browser can be tracked beyond our website, for instance so as to be able to display EVENTIM advertisements on the websites of our partner companies.
We use cookies which are needed to operate the webshop and which facilitate certain functions to be able to use the website.
In addition to this, we use cookies in order to allow you to use certain “convenience” functions through the automatic recognition of your browser. This includes, for example, the automatic recognition and setting of language, the restoration of the content of completed forms or the shopping basket after leaving and subsequent return to our websites.
Advertising and (re-)marketing cookies
Finally, (third-party) cookies are also used on our websites for advertising/marketing purposes. These help us, for example, to be able to display EVENTIM advertising on the websites of partner companies.
Via your browser settings you can limit or completely prevent the storage of (certain) cookies for all websites and delete any cookies that have already been saved. For more information about this please consult the instruction manual or help functions of your browser. Our websites can in principle still be visited and used after restricting/deactivating cookies in the browser settings. However, please note that in particular the complete deactivation of cookies can limit the functionalities of our websites.
To save the Information on Data Protection, please click on the following link using the right mouse button and then select "Ziel Speichern unter..." or "Save target as...". Open Information on Data Protection as PDF