Back

Information on data protection (incl. cookie info) Apps

 

The purpose of this information on data protection is to inform you on the processing of your personal data when using the "EVENTIM DE" app of CTS EVENTIM AG & Co.KGaA (hereinafter "EVENTIM", "we" or "us") in accordance with the General Data Protection Regulation (hereinafter "GDPR").

 

  1. Controller and definitions

 

1.1        Scope of this data protection information

  1. This information on data protection applies to the use of the EVENTIM mobile app where a customer account can be created, and tickets can be purchased or sold. This information also applies to our related marketing activities in our mobile app, third-party websites and in social networks. You can access, save and print this information on data protection at any time and free of charge in the mobile app.

 

  1. This information on data protection only concerns the processing of personal data within the meaning of Section 1.3, number 4. Other websites or mobile apps are not covered by this information on data protection and provide their own specific information on data protection.

1.2        Controller for the processing of your personal data

 

Unless otherwise stated in this information on data protection, the following is the controller for the processing of your personal data:

 

CTS EVENTIM AG & Co. KGaA 

Hohe Bleichen 11

20354 Hamburg

Germany

E-mail: kundenservice@eventim.de

Tel: +49 421 - 20 31 55 11

For processing related to marketing activities in our mobile app, third-party websites and in social networks that are carried out with the support of Eventim Media House GmbH – as specified in section 2.1.3, 2.1.4 and 2.1.5 – we are jointly responsible.

 

1.3        Definitions

 

This information on data protection is based on the following data protection terms, which we have defined for easier understanding:

 

  1. The GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

 

  1. Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. Authorities, however, which within the framework of a specific inquiry mandate may receive personal data under Union law or the law of the Member States shall not be considered recipients; the processing of such data by these said authorities is carried out in accordance with the applicable data protection directives in accordance with the purposes of the processing. Depending on the method of payment chosen while purchasing a ticket, the recipients of your personal data may be banks or the postal service providers via whom we send you your ticket by post.

 

  1. In accordance with Section 15 of the German Stock Corporation Act (AktG), the EVENTIM Group comprises of all companies associated with CTS EVENTIM AG & Co. KGaA. Further information is available at:

 

https://corporate.eventim.de/en/company/   

 

  1. Personal data is all information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. For example, personal data can be name, contact data, user behaviour or bank data.

 

  1. The Controller is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for his appointment may be laid down in accordance with Union law or the law of the Member States. CTS EVENTIM AG & Co. KGaA is controller of the data processing described in this information on data protection (Section 1.2).

 

  1. Processing is any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organising, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transfer, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Processing may include the collection and use of your order data for ticket sales.

 

  1. Purposes, legal bases and, if applicable, data categories for processing your personal data

 

2.1        Processing your data when using our app and as part of marketing measures on third-party websites and social networks

 

If you download and use our app to inform yourself about our products and services without buying a ticket in our ticket shop or otherwise actively providing us with information (purely informational use), we process your personal data. In addition, we process your personal data as part of marketing measures on third-party websites and social networks. Your personal data is processed for the following purposes and on the basis of the following legal bases:

 

2.1.1     Processing for IT security purposes

 

  1. When using our app, we process your personal data that is technically necessary for us to provide you with our app and to ensure stability and security when using it. For this purpose, we process the following personal data:

 

-              UU ID

-              IP address

 

  1. For the identification and defense against threats (bot defense, DDoS attacks), we use services of Akamai Technologies GmbH, Parkring 20-22, 85748 Garchin, Germany and services of Human Security Inc., a Delaware corporation, 841 Broadway, 2nd Floor, New York, NY 10003 on our websites. Akamai and Human Security process the IP address of your end device. Akamai and Human Security use this information on behalf of EVENTIM to prevent technical threats on our website. The IP address is usually transferred to Akamai and Human Security servers in the USA and processed there. This data transfer is based on EU standard contractual clauses. This ensures adequate protection of your personal data.

 

  1. We work with our partner Raintank, Inc. (Grafana Labs) to monitor the system availability and performance of our IT infrastructure. For the purpose of ensuring the operation, system integrity, availability and security of our IT systems, as well as for technical fault analysis, we process the following data on the basis of our legitimate interest within the meaning of Art. 6 Para. 1 Sentence 1 GDPR:

    - Technical usage and connection types (e.g. IP address, log and metric data, access and system logs
    - Online identifiers (e.g. device identifiers and device, browser and system information)

    Your data is generally processed on servers within the European Union. Access from a third country may occur in the context of support or maintenance activities. Processing and data transfer take place on the basis of EU Standard Contractual Clauses. This ensures an appropriate level of protection for your personal data. In addition, the partner is certified under the EU-US Data Privacy Framework.
  1. Due to our legitimate interest in providing you with the app and guaranteeing IT security for you when using it, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

 

  1. For the delivery and acceleration of online applications (content delivery network) we use services of Akamai Technologies GmbH. Akamai processes the IP address of your end device. On behalf of EVENTIM, Akamai uses this information to ensure the high availability of our website. The IP address is usally transmitted to Akamai servers in the USA and processed there. This data transfer takes place on the basis of EU standard contractual clauses. This ensures adequate protection of your personal data.

 

 

2.1.2     Processing for analytical purposes

 

  1. If you use our app, we may analyse and document how you use our app, e.g. your surfing behaviour, which events and areas in our app you are interested in and, if you purchase a ticket from us, your order and shopping cart data. Furthermore, we aggregate this data in order to be able to evaluate, for example, the number of app users and their origin. For this purpose, we process the following personal data:

 

-              IP address (shortened)

-              Device Advertising ID (IDFA on iOS and AID on Android)

-              Device ID

-              WEB ID

-              App Installations ID (see Cookie information Apps)

-              E-mail address (hashed)

 

  1. For app version 4.17 (iOS) / 3.21.1 (Android) and older, we process your personal data based on our legitimate interests to perform analytics in order to improve our app, to improve our products and services based on these analytics, and based on our legitimate interest in fraud prevention, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

    For app version 4.18 (iOS) / 3.22.1 (Android) and newer, we process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR and based on our legitimate interest in fraud prevention, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

    You always have the option to update to the latest app version.
  • If you would like to receive location-related recommendations for events, you can select this function and the respective location(s) in the app under the "Locations" function in the settings. We process your current position in order to be able to show you individual advertising. We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR, which you give us when selecting the function "Places".

    •  

    1. To object to data processing by the analysis providers named in this Privacy Notice, please use the following optout option: To Optout

      We would like to point out that the objection is always made by means of a cookie. If this cookie is erased or the App is reinstalled, you must click again on the Optout link to exercise your objection.

     

    1. For this analysis, we use Google Analytics 360, a web analysis service of Google Ireland Ltd. (“Google”), in our app. Google Analytics 360 uses cookies and similar technologies that enable us to analyse the use of our app. The information generated in this way about the use of our app is usually transferred to a server operated by us in Europe to Google Analytics 360 in the US and stored there. This data transfer takes place on the basis of the adequacy decision for the USA. This ensures adequate protection of your personal data.

    We usually shorten your IP address on the server we operate before it is transferred to a Google Analytics 360 server. An exception to this are websites that we operate under joint responsibility with our partners, there your information will be transferred to Google Analytics 360 after using IP anonymization on our websites. If you are in the European Union, this function shortens your IP address within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area.

    On behalf of EVENTIM, Google Analytics 360 will use this information to evaluate the use of our app, to compile reports on the app activities and to provide EVENTIM with further services associated with the use of the app and the internet.

     

    For more information on the terms of use and data protection of Google Analytics 360, please visit:

     

    - https://support.google.com/analytics/answer/12017362

     

    1. We also use the web analysis service Adjust.io to analyse the use of our websites. If you would like to object to data processing by Adjust.io, please use the optout option in section 2.1.2. paragraph 3.

     

    1. In order to investigate any errors in our app and to improve our app, we rely on anonymized crash reports. For this purpose, we use Firebase Crashlytics, a service provided by Google Ireland Ltd. Further information is available at

     

    -              https://firebase.google.com/support/privacy

     

    In the event of a crash, your personal data is transferred to the USA (status of the app at the time of the crash, installation UUID, crash trace, manufacturer and operating system of the mobile phone, last log message). This data transfer is based on the adequacy decision for the USA. This ensures an adequate protection of your personal data.

     

    1. We use the product analytics tool Mixpanel to analyse and improve the use of our websites and apps. Mixpanel Inc. supports us in better understanding user behaviour, replaying pseudonymised sessions, conducting A/B tests and feature experiments, connecting data with our internal systems, and analysing key figures in relation to business performance. The following information is processed using cookies and similar technologies:
      - Technical data about your device and browser
      - Usage interaction with the website and app (e.g., clicks, navigation, feature usage)
      - Session flows and derived statistics
      - Pseudonymised identifiers (e.g., hashed email address)

      The processing is carried out exclusively on the basis of consent within the meaning of Art. 6 Para 1 Sentence 1 lit. a) GDPR. As Mixpanel is based in the USA, data is transferred there. An adequate level of protection is ensured by the partner’s certification under the EU-US Data Privacy Framework and additional technical and organisational measures. Further information can be found here: https://mixpanel.com/legal/privacy-policy/

      You can prevent the collection of information by preventing the storage of cookies by selecting the appropriate settings in your browser software of by deactivating tracking in the cookie settings.

      To object to the data processing by the above-mentioned analysis providers, please use the optout option in section 2.1.2. paragraph 3.

     

    1. To help us evaluate and improve our websites, apps, products and services internally, we may use analytical tools based on artificial intelligence (AI) or large language models (LLMs). In this context, Mixpanel data, such as aggregated metrics, pseudonymous identifiers and derived analysis results, may be processed by our AI partners. In particular, services provided by OpenAI Ireland Ltd. and/or Amazon Web Services EMEA SARL may be used for this purpose. The processing is carried out exclusively to support internal analysis and product improvement purposes. We contractually prohibit our AI partners from using the transmitted data for their own training purposes, insofar as personal data is transmitted. Where possible, we restrict the processing to aggregated or pseudonymous data. The processing is carried out based on consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a) GDPR, insofar as you consent to analytical processing. Where the AI-supported evaluation serves exclusively to create aggregated analyses and improve products internally, processing is carried out on the bases of our legitimate interest pursuant to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    2.1.3     Processing for the purpose of individual recommendations in our app

     

    1. If you use our app, we analyse and document your user behaviour to display individual recommendations in the app based on this data. For this purpose, we process the following personal data:

     

    -              IP address (shortened)

    -              Device-ID

    -              Order and shopping cart data

    -              Favorites and bookmarks (if in use as defined in section 2.2 and 2.3)

    -              Cookies (see Cookie information Websites)

     

    1. For app version 4.17 (iOS) / 3.21.1 (Android) and older: Due to our legitimate interest in publishing product recommendations, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

      For app version 4.18 (iOS) / 3.22.1 (Android) and newer: We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

      You always have the option to update to the latest app version.

      If you wish to object to this processing of data in delivering product recommendations, please use the optout option in section 2.1.2. paragraph 3.

     

    2.1.4     Processing for purposes of advertising and re-targeting on third party websites and social networks

     

    1. If you use our app, we process your personal data for advertising measures in the form of remarketing and display advertising as well as with the help of social media plug-ins and for social media ads.
    1. As part of display advertising, we carry out various marketing campaigns using tags (pixels) and cookies from our retargeting providers. When you use our app, tags and cookies are set and associated with products you have viewed or purchased. This allows you to see in-dividual displays for EVENTIM products. We also play banner ads to users of Facebook, Instagram and Reddit who have a similar profile to our existing customers and app users. For this, we process:

      2.  

      -              Web page type called up,

      -              viewed product number,

      -              when purchasing a ticket: ordered product number, sales value and order number, as well as preferences and

      -              cookie Ids.

    2. We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR. If you do not want the retargeting function please click on the following link: Cookie Settings

      In connection with the use of tags and cookies from Google and Meta Platforms, Inc. (e.g. Facebook and Instagram) as well as Reddit your personal data is transferred to the US. This data transfer is based on EU standard contract clauses. This ensures an adequate protection of your personal data.

      3.  

      For further details on data processing by the retargeting providers, please refer to the corresponding data protection information:

      -              Google: https://policies.google.com/privacy?hl=en and further information: https://business.safety.google/intl/en/privacy/  

      -              Explanation of Google’s use of third party data: https://policies.google.com/technologies/partner-sites   

      -              Meta: https://www.facebook.com/privacy/policy   

      -              Reddit Netherlands B.V.: https://www.reddit.com/en-us/policies/privacy-policy   

    1. If you have finished a ticket purchase from us, a cookie is set by Google Ads, Google Analytics 360 and Microsoft Ads. If you enter corresponding search terms in Internet search engines after your purchase, individual recommendations for EVENTIM products and services can be displayed to you on the basis of your purchase with the help of this cookie (search engine marketing). Your personal data is processed in the process. We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

      If you would like to object to the data processing by Google Ads, Google Analytics 360 and/or Microsoft Ads, please click on the following link: Cookie Settings

      In connection with the use of Google Ads, Google Analytics 360 and Microsoft Ads, your personal da-ta is transferred to the US. This data transfer is based on EU standard contract clauses. This ensures an adequate protection of your personal data.

      For further details on data processing by Google Ads and Microsoft Ads, please refer to the corresponding information on data protection:

      2.  

      -              Google: https://policies.google.com/privacy?hl=en and further information: https://business.safety.google/intl/en/privacy/  

      -              Google Ads: https://policies.google.com/technologies/ads   

      -              Explanation of Google’s use of third party data: https://policies.google.com/technologies/partner-sites   

      -              Microsoft Ads: https://privacy.microsoft.com/en-us/privacystatement   

    1. We place advertisements, so-called social media ads, in social networks and apps from Meta like Facebook, Instagram and messenger. If you have an account on these social networks and agree to receive advertising through your account settings on the social network when using it, you receive recommendations on our products and services. The recommendations are generated based on your interests (e.g. "likes" of artists, "upvotes" of posts) stored in your public profile on Facebook or Instagram.

    We process your public profile data. Based on your public profile interests (e.g., "likes" of artists, "upvotes" of posts) we show you individual advertising. In particular, we process

     

    -              your IP address,

    -              your device / cookie ID,

    -              page/feed activity,

    -              internet speed,

    -              purchasing activities and

    -              social connections

    -              view port size

    -              operating system and

    -              user agent

     

    to measure ad success. For app version 4.17 (iOS) / 3.21.1 (Android) and older: We process your personal data due to our legitimate interest in being able to place advertisements effectively and carry out advertising campaigns, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

    For app version 4.18 (iOS) / 3.22.1 (Android) and newer: We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

    You always have the option to update to the latest app version.

    To object to this data processing, please use the optout option in section 2.1.2. paragraph 3.

     

    Your personal data transferred to the US. This data transfer is based on EU standard contract clauses. This ensures an adequate protection of your personal data.

     

    Please see the privacy information of Facebook, Instagram and Reddit for more details on data processing:

    -              Facebook: https://www.facebook.com/privacy/policy   

    -              Information about Facebook advertisement: https://www.facebook.com/about/ads/   

    -              Instagram: https://help.instagram.com/155833707900388

    -              Reddit: https://www.reddit.com/en-us/policies/privacy-policy

     

    1. In order to be able to show you and users who are similar to you in their purchasing behaviour suitable recommendations for products and services on advertising platforms from Google (e.g. YouTube and search or display network) and social networks from Meta (e.g. Facebook, Instagram), your encrypted e-mail address may be passed on to these networks after you have registered for our EVENTIM News. For this purpose your e-mail address will be encrypted in the hashing algorithm SHA-256 and transferred to the USA. This data transfer happens in accordance with the EU Standard Contractual Clauses. Thereby, appropriate protection of your personal data is ensured.

      The transmission of data is independent of the existence of a Google or Meta user account. As soon as the matching of the hashed data with the hashed user data on Google or Meta proceeded, Google and Meta delete the transferred data. As a result, Google or Meta don’t have access to the hashed e-mail addresses of people who are not registered on their networks beyond the matching process.

      For further details on data processing by Google or Meta, please refer to the relevant data protection information:
      Meta: https://www.facebook.com/privacy/policy
      Google: https://policies.google.com/privacy?hl=en and further information: https://business.safety.google/intl/en/privacy/

      We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    2.1.5     Use of cookies

     

    1. When you use our app, cookies are stored on your terminal. Cookies are small text files that are stored in the device memory of your mobile device and assigned to the respective app when you access our app. Cookies allow certain information to flow to the controller that sets the cookie. These also contain personal data. This makes our app more user-friendly and effective. Cookies cannot run programs or transmit viruses to your mobile device.

     

    1. The EVENTIM Cookie information Apps applies to the use of cookies in our app.

     

    2.2        Registration and creation of a customer account

     

    1. If you visit our app, you can log in with your customer account which you have already created via our website. If you do not yet have a customer account with us, you can also create one via our app. Using your customer account, you can buy tickets, find out about events and leisure activities. You can also create lists of your favorite artists, venues and events, bookmark them and receive information about them. You can participate in exclusive pre-sales and take advantage of many other benefits relating to your ticket purchase. The registration and use of the customer account requires the provision of personal data. Mandatory fields are marked accordingly in the input mask. So-called session cookies are used for the technical realisation of the login.

     

    1. Due to our legitimate interest, we process your personal data to enable you to create and use your customer account, as well as to enable the sale of tickets, for user-verification in case of changes of personal data in the customer account, and to inform you about our products and services. Processing is carried out on the basis of Art. 6 Para. 1 Sentence 1 lit. b) and lit. f) GDPR.

     

    2.3        Registration and login using a single sign-on (SSO)

     

    1. To make it easier for you to create a customer account and log in later, we offer you the option of registering or logging in using a single sign-on (SSO) procedure. This involves authenticating yourself with your access data with the selected provider (e.g., Facebook, Apple or PayPal). After clicking the branded button, you will be redirected to the login page of the provider of your choice. We receive selected profile data (e.g., name, email address and potentially delivery address and data of birth) in order to create a customer account or link an existing one. The specific data that is received depends on your setting with the respective provider.

    2. The use of SSO is voluntary and allows you to log in directly via your chosen provider in the future without the need to register again.

    3. We process your personal data on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future. To do so, you can remove the respective link in your customer account or directly in the settings of the chosen provider. The lawfulness of the processing prior revoking remains unaffected.

    4. We are not responsible for the data processing for authentication by the respective SSO-provider. For further information on data processing in the context of registering via third parties, please refer to the respective data protection information of your chosen provider:

      Apple: https://www.apple.com/legal/privacy/en-ww/
      Facebook: https://www.facebook.com/privacy/explanation
      PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

     

    2.4        Ticket purchase

     

    1. When you purchase a ticket through our app, we process the personal information you provide during your purchase. Mandatory fields are marked accordingly and include, for example, your name and address. The processing is carried out for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. If you purchase a ticket for another person (third party), we process the third party's personal data (name and, if applicable, contact data) provided by you for ticket personalisation and, if applicable, for sending the ticket to the third party. These data are processed for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you provide data of a third party when purchasing a ticket, make sure that the third party is sufficiently informed by you about the processing of his/her data at EVENTIM and that you are entitled to provide the data.

     

    1. If you choose the payment methods "purchase on account" or "hire purchase", Klarna Bank AB (publ) uses tools to identify possible fraud cases. A corresponding check only takes place if you give your consent (opt-in). If the check is negative, the payment methods "purchase on account" or "hire purchase" are rejected. However, all other payment methods listed in the ticket shop are still available to you. When using the tools, it is possible to draw conclusions about your person. We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR and due to our legitimate interest and Klarna’s legitimate interest in fraud prevention on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. In order to offer you the payment method “direct bank transfer” on our website, we use the payment initiation service provider Tink AB. You will be redirected to the Tink website for payment processing and will find Tink’s applicable terms and conditions and privacy policy there. For payment processing, we process your personal data (e.g. name, contact and account information, amount) on the bases of contract fulfilment within the meaning of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. In some cases, account data such as the balance etc. may be used to carry out a risk assessment. This processing takes place due to the legitimate interest in fraud prevention on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. If you choose to pay by credit card, you can use the Click to Pay service to make the credit card use easier. If you decide to register with Click to Pay, your payment details will be available for your next order. Netcetera AG will process your email address and telephone number for this purpose. The provider's data protection information and terms are displayed directly in the payment process. Your data is processed on the basis of your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    1. If you pay with a credit card, the so-called 3D-Secure 2.0 procedure (hereinafter: 3DS 2.0) is usually applied. 3DS 2.0 is a worldwide standard of card networks (Visa, MasterCard, JCB, Diners, AMEX etc.) developed by EMVCo, an association of card networks. 3DS 2.0 is one of the methods used to perform strong customer authentication in accordance with the EU 2015/2366 directive (Payment Services Directive 2, PSD 23). PSD 2 is implemented in Germany in the Payment Services Supervision Act. The 3DS 2.0 process confirms that the person initiating an eCommerce transaction is also authorized to use the respective payment card, i.e. it is intended to prevent the misuse of your credit card. The processing of the data required for 3DS 2.0 in accordance with section 3.4 of our Terms and Conditions (see https://www.eventim.de/en/help/terms/) is carried out for the purpose of executing and handling the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. When issuing personalised tickets, we may also process special categories of personal data, such as your health data, if you provide such information when purchasing a ticket, or if you provide corresponding details at the admission control or provide any proof at the admission control and agree that we may process this data. This includes, for example, the statement that you are a wheelchair user, have an allergy or an intolerance to food or a severe disability. We process this data to provide you with special price categories, special access to an event and special seats during the event. Your data is processed on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

      If you decide to have your tickets sent by post, we will help you to avoid input errors and ensuring the successful delivery through address suggestions and validation. To do this, we use Loqate from our partner GB Group Plc and process your IP address and the address data you have entered. The processing is carried out on the basis of contact fulfilment within the meaning of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.
    1. When choosing to have your ticket sent by post or if you have purchased merchandise or fan articles, we and our partners will transfer your contact details (name, address and email address) to the relevant express delivery provider for the purpose of electronic delivery notifications and parcel tracking. These delivery provides (including, amongst others, United Parcel Service Deutschland S.à r.l & Co. OHG and Deutsche Post AG) process your data as independent controllers. Depending on the scope of the services offered by the respective provider, you may be able to influence the delivery time or location, as well as specify alternative delivery options. This data is transferred for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. If you receive and accept a digital ticket (EVENTIM.Pass) from a third person through forwarding, we process your personal data. The processing is carried out for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. When you buy a ticket in our app, you may be redirected to a virtual queue in situations with particularly high visitor numbers. This is to ensure that we do not overload our app. To determine your place in the queue and to enable you to buy tickets at the right time, your IP address and possibly browser data (e.g. user agent) are processed by Queue-it ApS. The access to the virtual queue is sometimes restricted, so that you can only enter it if you have already registered in advance for the on-sale with your e-mail address. In individual cases, we register you for the virtual queue on behalf of our partners, who share your e-mail address for this purpose with us and in their own. To gain access, you must enter the previously registered e-mail address in the virtual waiting room and will then receive a one-time code by e-mail. The virtual queue can only be entered once this code has been entered correctly in the virtual waiting room. This processing is based on our legitimate interest in providing our websites securely and efficiently, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR as well as providing you with a registration for the virtual queue on the basis of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    1. When you use a ticket sales registration, we possibly authenticate your registration to be able to exclude especially commercial buyers from the on-sale. In that case we will verify that you meet the requirement for the fair ticket purchase and thus for participation in the on-sale, we compare personal data from your Eventim customer account with your ticket sales registration, on the basis of contract initiation, execution and processing in accordance with Art. 6 Para. 1 Sentence 1 lit. b) GDPR. For example, this may involve your name and email address to ensure that you have only registered once for the respective on-sale. You will receive all information about the on-sale that you registered for via email(see section 2.11.1).

    2.5        Offering, purchasing and selling of ticket via EVENTIM.Resale

     

    1. Via our secondary ticket market, a service integrated into EVENTIM’s general ticket sales (also available on a separate sub-page called fanSALE, accessible at www.fansale.de), you can offer and purchase all types of EVENTIM tickets. We process your personal data in your capacity as a person listing a ticket offer, a seller or a buyer for the purpose of initiating, executing and fulfilling of a contact on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you purchase a ticket listed on the secondary ticket market, the same provisions as in Section 2.4 apply.

     

    1. In connection with the sale or purchase of a ticket, you may receive instructions from us. In doing so, we process your personal data for the purpose of contract initiation, performance and fulfilment on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. If you sell tickets on our website, but do not fulfill your contractual obligation or any warranty claims, we may process your personal data after examining each individual case on the basis of § 24 Para. 1 2.V BDSG in conjunction with Art. 6 Para. 1 Sentence 1 lit. b) GDPR to take legal action. Your contractual obligations may include, but are not limited to, sending physical tickets back to EVENTIM.

     

    2.6        Credit assessment and profiling

     

    1. If the customer selects the SEPA direct debit payment method, CTS EVENTIM reserves the right to obtain credit information from SCHUFA or infoscore within the scope of this contractual relationship.

     

    1. Credit risk is assessed on the basis of mathematical-statistical procedures at the credit agency (SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany, or infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden, Germany), so-called scoring. For this purpose, your personal data which are necessary for the credit assessment (name, address, birthday) are transferred to the credit agency. We process your personal data for the purpose of credit assessment to avoid payment default. On the basis of the transferred personal data, including address data, a statistical probability of a credit default and thus your solvency is calculated. The credit agency then transfers your score value to us. Furthermore, CTS EVENTIM reserves the right to transmit data on non-contractual behaviour or fraudulent behaviour to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, or infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden in the event of continued non-payment of claims that are not substantiated and disputed. The data exchange with SCHUFA or infoscore also serves the fulfilment of legal obligations to carry out creditworthiness checks of customers (§§ 505a and 506 BGB). SCHUFA or infoscore process the data received and also use them for the purpose of creating a profile (scoring) in order to provide their contractual partners in the European Economic Area and in Switzerland as well as any other third countries (insofar as the European Commission has issued a decision on the appropriateness of such data) with information for the purpose of assessing the creditworthiness of natural persons, among other things. This personal data is processed for the preparation and execution of your contract with us on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interest in avoiding a default of payment on your part, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. If you choose the payment method installment purchase and invoice purchase, Klarna Bank AB reserves the right to obtain creditworthiness information within the scope of this contractual relationship. For further information please refer to the General Terms and Conditions and Privacy Policy of Klarna Bank AB (publ).

     

    1. The decision as to whether payment by direct debit, hire purchase and/or purchase on account is possible is based on an automated decision. If your customer and order data are similar to the data of an order with payment problems, one of our employees will check your order process separately and manually.

     

    1. If the credit check is positive, payment by direct debit, hire purchase and/or purchase on account is possible; if it is negative, we cannot offer you the payment method "direct debit", "hire purchase" and/or "purchase on account". Payment by another payment method is still possible.

     

    1. The scope of the scoring is limited to whether payment by direct debit, hire purchase and/or purchase on account is possible. We use the scoring exclusively to prepare and execute the contract with you and to protect ourselves against possible payment defaults.

     

    1. Further information on the activities of the SCHUFA can be found in the SCHUFA Information Sheet pursuant to Art. 14 GDPR or can be viewed online at https://www.schufa.de/en/data-privacy/. The same applies to the infoscore information sheet.

     

    2.7        Shopping cart canceller e-mails

     

    1. If you have started an order process in our app but have not completed it, we will send you a reminder e-mail to the e-mail address stored in your customer account or push notifications about the purchase process you have started. You can complete this purchase process by logging into your customer account in our app.

     

    1. We collect and store your personal data to identify unfinished shopping carts. The collection and storage of your personal data is based on Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    1. We process your personal data in order to remind you within the context of marketing measures of purchase processes not yet completed by you. If you have not yet purchased a ticket from us, we will process your data on the basis of your consent according to Art. 6 Para. 1 Sentence 1 lit. a) GDPR. If you have already purchased a ticket from us, we process your personal data provided in previous order processes due to our legitimate interest in carrying out marketing measures on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    2.8        FanBonus

     

    1. If you register for our FanBonus, you receive a refund depending on ticket sales (see Fan-Bonus Terms and Conditions after login: https://www.eventim.de/en/fanbonus/terms).

     

    1. We process your personal data from your orders and your annual turnover with us from the previous year for the purpose of executing the contract with you, on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    2.9        Fan reports

     

    1. After visiting a venue or event, you can write a review in our app and on our websites. Your review is taken in a separate form in which you are asked to provide further personal data in addition to your rating (e.g. name and email address). Your fan report will be published under your chosen name, which you can enter voluntarily; anonymous publication is also possible. We process your data to publish your review on the basis of Art. 6 Para. 1 Sen-tence 1 lit. b) GDPR.

     

    1. For fan reports, we work together with Bazaarvoice Inc, 10901 Stonelake Blvd, US, on whose servers the submitted reviews are stored. The data transfer to the US is based on EU standard contractual clauses. This ensures adequate protection of your personal data. For more information, you can read Bazaarvoice’s privacy policy at the following link: https://www.bazaarvoice.com/legal/privacy-policy/

     

    2.10        Customer surveys

      

    1. To continuously improve our products and services and adapt them to your needs, we regularly invite our customers to participate in customer surveys. In doing so, we will use the information you provide during the purchase process (Sections 2.4, 2.5) or during customer care requests (2.15) to contact you.

     

    1. To continuously improve our customer service, you can voluntarily give us feedback on your satisfaction via a smiley as part of your customer service requests (section 2.16). You can then also voluntarily take part in an anonymous and more detailed survey, to which you will be automatically forwarded.

     

    1. Due our legitimate interest in improving our products and services, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. You can object to this processing at any time (Section 5).
    1. When you receive our customer surveys, we analyse and document whether you open the customer surveys and how you use it. In doing so, we process your personal data on the basis of our legitimate interest in designing our customer surveys to meet your needs, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    2.11        Informations emails, mailings and newsletter

      

    1. When you visit our app, you can create a customer account. You can use this to purchase tickets and find out about events and leisure activities. You can also create lists of your favorite artists, venues and events, bookmark them and receive information about them. You can participate in exclusive pre-sales and take advantage of many other benefits relating to your ticket purchase. So-called session tokens are used for the technical realisation of the login.

     

    1. If you have purchased a ticket from us (Section 2.4) or have won tickets as part of our competitions (Section 2.14), we may send you personalised information e-mails to inform you, for example, about the how to get there, parking spaces and the organiser's specifications (such as bag size). For this purpose, we process your personal data for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. After purchasing a ticket, we send you individual mailings about similar events, services and promotions (by post in some cases) as well as birthday emails. We will send these individual mailings regardless of whether you have subscribed to a newsletter (Section 2.11.1). We process your personal data on the basis of our existing customer relationship with you, as well as our legitimate interest in informing you about changes to our products and services, in advertising our products and services and in carrying out marketing measures, in accordance with § 7 Para. 3 of the German Unfair Competition Act (UWG) and Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. After your order has been placed, we will send you an order confirmation by e-mail. We process your personal data for this purpose on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. When you subscribe to our newsletter and electronic mailins we analyse and document whether you open and how you use them. We process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR to pursue our legitimate interest of structuring our newsletter and mailings in accordance with your needs and to improve the range of our marketing campaigns.

     

    1. In individual cases, you have the option in our app to subscribe to newsletters and mailings (by post in some cases) from certain promoters, their service providers or other third parties (possibly based in a third country) by giving the corresponding consent. For this purpose, your personal data will be transmitted to the relevant promoter, its service providers or other third parties and processed by them under their own responsibility under data protection law. Your personal data will be processed on the basis of your consent defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    2.12        App notifications

     

    1. When you use the app and have given us your consent, we will send you push notifications, e. g., as notification on your lock screen. If you have created a customer account, we will also send you personalized information, e.g., about events and artists that you have marked as favourites or bookmarked. To send you these notifications, we place a so-called push token on your device. We process your personal data to keep your informed and to promote products and services. The processing of your personal data is based on your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.
    2. When you open the app, we may display in-app messages to you. We process your personal data in order to display, e. g., admission or technical information in maintenance windows. The display of technical necessary maintenance windows is based on our legitimate interest within the meaning of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. Insofar as you have given us your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR, these banners may also contain personalised and promotional content.
    3. To send you these app notifications, we work with Braze Inc., which is why your personal data may be processed within the USA. The transfer is based on the EU-US Privacy Framework. This ensures adequate protection of your personal data. You can object to this processing at any time by changing your settings. For push notifications, you can select and deselect three different types of information in your app setting; alternatively, you can disable push notifications in your device settings. To change your preferences for in-app messages, please do so here: Cookie Settings

     

    1. We process your personal data to inform you and to promote products and services. Your personal data is processed on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR, which you grant us when you "like" an artist or when you register for the ticket alarm.

     

    2.13      Personalisation

    1. When you visit our websites and mobile apps, we collect data with your consent and link it to information that you provide to us, for example during the purchase process or when registering for our information channels (e.g. Eventim-News), in order to create and enrich pseudonymised user profiles and create target group segments on their basis. The profiles and target group segments are used for analysis purposes and to show you more personalised and interesting information on our websites, mobile apps, in the newsletter and on other communication channels (e.g. online advertising activities on third-party sites). This provides you with more personalised and interesting content (see sections 2.1.2, 2.1.3, 2.1.4, 2.11 and 2.12). This also includes the use of these profiles to carry out online advertising activities for third parties such as event organisers. For this purpose, we collect and process:
      - Information on the visit path
      - Search behaviour on our websites and apps
      - Order and shopping basket data (incl. order number)
      - Personal settings, such as Eventim favourites and bookmarks, ticket alerts, etc.
      - Geoinformation derived from shortened IP address
      - Browser and device information (user agent)
      - Pseudonymised IDs such as cookie IDs, mobile ad identifiers, hash values from email addresses and customer numbers

      The user profiles and target group segments created are transferred to our systems for onsite design, online advertising activities and newsletter or direct marketing communication (see sections 2.1.2, 2.1.3, 2.1.4, 2.11 and 2.12).

     

    1. The creation of profiles and target group segments and their use is based exclusively on your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR. If you do not wish to receive any personalised content, you can change this at any time with effect for the future. To do so, revoke the consent you have given in the Cookie Settings and your consent for EVENTIM news.

     

    1. We use Zeotap GmbH ("Zeotap") to link your information on the basis of generated pseudonymised IDs. The pseudonymised IDs include, for example, the hash value created from your email address that you have stored in your customer account. In hashing, the email address is converted into an unchangeable alphanumeric value or hash value using a protected encryption process. The encryption process ensures that the same hash value is always generated for an individual e-mail address. This value in turn cannot be converted back into the original e-mail address.

     

    1. Your data is processed and stored by Zeotap within the EU. In individual cases, Zeotap India Private Ltd. may access the data for technical support. This data transfer takes place on the basis of EU standard contractual clauses. This ensures adequate protection of your personal data. Further information can be found at https://zeotap.com/product-privacy-policy/.

     

    1. With the "Spotify Top Artists Import" feature, you can import your most-listened artists from Spotify to add them to your EVENTIM favourites and receive personalised recommendations based on them. As part of the feature, we and our technical service provider Dhimahi d.o.o. process your Spotify account information and the top artists (based on your Spotify listening behaviour) provided to us by Spotify AB. The import is based on your consent, pursuant to Art. 6 Para. 1 Sentence 1 lit. a) GDPR. You can withdraw your consent at any time by disconnecting your Spotify account in your EVENTIM account. The favourites added via the import will remain.

     

    2.14      Competitions

     

    You can participate in various competitions via our mobile app and social media platforms. For this we process your personal data to conduct the competition and to advertise our events. Your personal data is processed for the purpose of executing the contract with you and due to our legitimate interest in carrying out marketing measures, on the basis of Art. 6 Para. 1 Sentence 1 lit. b) and f) GDPR.

     

    2.15      Customer Service

     

    1. If you have any questions about events, your purchase (for example ticket purchase), your customer account, our chatbot and live chat or other EVENTIM products and services, or if you wish to exercise your rights under this data protection information or wish to make a complaint, you can contact us (see Section 1.2).

     

    1. Depending on the subject of your request, we may use your personal data stored in our systems in the course of other data processing (e.g. data that you have provided as part of the ticket purchase) to respond to your request. If and to the extent necessary to answer your inquiry, we also collect data from external sources (e.g. inquiry with the shipping service provider in the context of a shipment tracking or an inquiry order).

     

    1. Your personal data is processed for the purpose of executing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you exercise your rights towards us, we process your personal data for the purpose of fulfilling a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR. If you wish to inform yourself about our products and services or make a complaint, we process personal data due to our legitimate interests to carry out marketing measures and to respond to your complaint, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. If you send us health data within the scope of your inquiry (e.g. information that you have a severe disability), we process this personal data only and insofar as this is necessary to answer your information and you have given us your express consent for this as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    1. We are available to you with our customer service chatbot and live chat. You will receive answers to your booked events, your account and many other topics via the chatbot and live chat. Depending on the subject of your inquiry, we and our service provider Novomind AG process your personal data after authentication by means of a login (e.g. order data) or checking a selection of your personal data. Cookies are placed for the technical functioning of the chatbot and live chat. The placement of cookies is based on your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR. To answer your inquiries, we process your personal data for the purpose of contract fulfilment on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and on the basis of our legitimate interest in automated, effective customer service (Art. 6 Para. 1 Sentence 1 lit. f) GDPR). The customer care chatbot processes personal data using artificial intelligence.
    1. If you contact us by phone, we use automated systems provided by our partner Wonderful AI B.V. to support our services. These systems assist us with the pre-qualification, prioritisation, and partially automated handling of customer inquiries for the fulfilment of a contract within the meaning of Art. 6 Para. 1 Sentence 1 lit. b) GDPR, as well as on the basis of our legitimate interest in providing efficient, fast, and high-quality customer support within the meaning of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
      The systems used employ artificial intelligence technologies to analyse and process voice inputs and to automatically generate transcripts. In particular, voice and input data, conversation content, information about desired events, and technical connection data are processed. Personal data processed by the voice bots is stored for 30 days and then deleted. For orders, you will always be transferred to a human.

      If you call us using a mobile phone number and expressly request it during your conversation, we will send you an SMS containing requested information, such as details about signing up for ticket alerts or participating in a customer satisfaction survey. This processing is carried out solely for the one-time sending of the SMS and is based on your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    2.16      Reversed transactions on tickets

     

    1. If necessary, your transaction is reversed. Your personal data is processed on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. If you have not purchased your ticket from us yourself, but received it as a gift from the buyer, for example, and now send in the ticket due to the cancellation or relocation of the event, we process the data that you provide us with as a different sender informally or via the form on our website. We process your personal data for the purpose of returning your ticket and refunding on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. If you have provided special personal data as defined in Section 2.4.7 on yourself or a third party when purchasing a ticket, we process this data for the purpose of reversing the ticket transaction on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR. Section 2.4.7 applies accordingly.

                  

    2.17      Dunning, collection and enforcement and defence of legal claims

     

    1. In the case of outstanding receivables to us, we notify you by e-mail, SMS, post or telephone and, if necessary, send you a reminder. If and to the extent that no payment is made by you as a result, a collection procedure is initiated.

     

    1. The collection procedure is carried out by a collection service provider commissioned by us. As far as this is necessary for the execution of the collection procedure, the collection service provider carries out address investigations, accesses public registers and may collect further information about your person for the execution of the collection procedure.

     

    1. We process your personal data for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interests in preventing misuse of our services and enforcing our legal claims, including collection, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. In the context of a legal dispute with you, we process your personal data to enforce and/or defend our rights. If and insofar as this is necessary for executing the legal dispute, we also make use of data from other sources (e.g. public registers). We process your personal data on the basis of a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR and due to our legitimate interest in representing, enforcing and / or defending our legal interests, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    2.18      Other processing

     

    2.18.1      Execution of internal audits and compliance requirements

     

    1. If we implement compliance programs and measures, for example to implement the requirements of the German Corporate Governance Code (GCGC) and to identify and correct misconduct, corresponding processing of your data may also occur. Additionally, your personal data can be processed within the EVENTIM Group in Germany and abroad in connection of internal audits.

     

    1. We process your personal data to comply with our statutory obligations, on the basis of Art. 6 Para. 1 Sentence. 1 lit. c) GDPR. In addition, due to our legitimate interests in reviewing the processes and efficiency in the group of companies, correcting any misconduct and preventing fraud and, if necessary, in enforcing and/or defending our rights, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    2.18.2      Preparation of analyses

     

    On the basis of your data, which we process as defined in point 2 of this information on data protection, we may prepare analyses. These serve as the basis for business decisions to improve our products and services and to adapt them to the needs of our customers. Due to our legitimate interest in improving our offer, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. The analyses created on this basis no longer contain any personal references, meaning it is no longer possible to draw any conclusions about your person.

     

    2.18.3      eventimcard applications

     

    1. Once you file an application for an eventimcard - a free of charge Mastercard Gold provided by Advanzia Bank S.A., 9, Rue Gabriel Lippmann L-5365 Munsbach, Luxembourg - under https://www.eventim.de/campaign/eventimcard, your personal data, i.e. salutation, name, surname, nationality, address, email address, mobile phone number, date and place of birth, as well as your IP address, will be processed for providing the requested credit card and the ensuing contractual communication according to article 6, paragraph 1, sentence 1 b) DS-GVO. Your data will be provided to Advanzia Bank S.A. to check your application and, in case of approval, providing the card and performing the contractual relationship. Providing the said personal data is voluntary, although not providing any of the data will prevent a contract from coming into force.

     

    1. Furthermore, you may register for our newsletter for exclusive offers and specials for eventimcard holders, and offers from EVENTIM; Section 2.11 is applied accordingly.

     

    1. Storage and erasure of your personal data

     

    1. We store your personal data for as long and as far as it is necessary for the purposes for which they are processed (Section 2).

     

    1. As soon as the data is no longer required for the purposes stated in Section 2, we store your personal data for the period in which you can assert claims against us or we against you (statutory limitation period usually of three years, beginning at the end of the year in which the claim arises; e.g. at the end of the ticket transaction).

     

    1. In addition, we store your personal data for as long as and insofar as we are legally obliged to do so. Corresponding proof and storage obligations result, inter alia, from the German Commercial Code and the German Fiscal Code (e.g., Section 257 HGB; Section 147 AO). The retention period is up to ten years.

     

    1. Categories of recipients of personal data

     

    1. When providing, implementing and managing our products and services, we collaboratively transfer your personal data to companies within the EVENTIM Group as part of a work-sharing process. The transfer is based on our legitimate interest in carrying out internal administrative activities efficiently and collaboratively, for fraud prevention to ensure the security of our customer accounts, as well as in improving our products and services on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. If you purchase our products and services via our app or register for newsletters, we will transfer your personal data to Eventim Media House GmbH for the purpose of carrying out advertising measures if you give us your consent to do so within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    1. If you subscribe to newsletters from certain promoters, their service providers or other third parties on our websites, we will transmit your personal data to the respective promoter, its service provider or other third parties. Your personal data will be processed on the basis of your consent defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    1. In addition, your personal data is transferred to service providers who provide the platforms, databases and tools for our products and services (e.g., our app, the sending of newsletters and push notifications), create analyses of user behaviour in our app, play out marketing campaigns and process your personal data on our behalf as part of ticket purchases. The transfer of your personal data takes place for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR, due to our legitimate interest in improving and promoting our products, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR and provided that you have given us your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR for the processing of your personal data.

     

    1. If you buy a ticket via our app, we offer you various payment options. For the processing of the payment and, if necessary, a refund of the purchase price, we transfer your personal data to banks, payment service providers, financial service providers and credit card companies, depending on the selected payment method. We transfer your personal data for the processing of your ticket purchase and, if necessary, the reverse transaction on the basis of Art. 6 Para. 1 S. 1 lit. b) GDPR. In addition, we may (see Section 2.6) transfer your personal data to credit agencies in order to check your creditworthiness. The transfer is made to execute the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interest in avoiding payment defaults on your part, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. If we send you your ticket or merchandise by postal services, we transfer your personal data to shipping service providers. The transfer takes place for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

     

    1. If you fail to meet your payment obligations, we initiate a collection procedure (Section 2.17). For the execution of the collection procedure, we transfer your personal data to collection service providers who carry out the procedure for us. We process your personal data for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interests in enforcing our legal claims, including collection, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. In the context of legal disputes, we transfer your data to the competent court and, if you have appointed a lawyer, to him/her to carry out the legal dispute. We process your personal data on the basis of a legal obligation according to Art. 6 Para. 1 Sentence 1 lit. c) GDPR and due to our legitimate interest in representing, enforcing and / or defending our legal interests, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

    1. We are entitled to transfer your personal data to the Event Organizer if there is a suspicion that you have violated the Organizer's general terms and conditions, so that the organizer can take legal action or assert other legal claims against you. The processing of your personal data is carried out for the purpose of implementing and executing the contract on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR as well as on the basis of the legitimate interests of the respective organiser for the purpose of legal prosecution on the basis of Art. 6 Para. 1 Sentence lit. f) GDPR.

     

    1. For some events we create so-called guest lists on behalf of the respective organizer and transmit them to the organizer so that he can carry out the allocation of seats and take into account menu requests. We transfer your personal data for the purpose of contract execution with you and with our contractual partners on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If and as far as this is necessary for the event, we also transfer health data (e.g. information on allergies at food events), if you have provided this information when purchasing a ticket and given us your consent for the transfer of the data as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

     

    1. Information emails, mailings and newsletters (Section 2.11) are sent by service providers commissioned by us and, in some circumstances we may analyse and document your use of them. For this purpose, we transfer your personal data to the service providers. In doing so, we process your personal data as follows:

      2.  

      -              If you give us your consent to send you newsletters when visiting our app for in-formation purposes only (Section 2.1) or when creating a customer account (Sections 2.2), we transfer your data on the basis of your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

      -              After purchasing a ticket (Sections 2.4) or after successful participation in a competition (Section 2.14), we transfer your personal data in order to provide you with in-formation on the event, for the purpose of executing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

      -              In addition, after purchasing a ticket (Sections 2.3) or after participating in one of our competitions (Section 2.14), we transfer your personal data to inform you about changes to our products and services and to promote our products. The transfer of your personal data occurs due to our legitimate interest in carrying out marketing measures, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

      -              In order to analyse the use of our newsletter and mailings, we transmit your per-sonal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR to pursue our legiti-mate interest of structuring our newsletter and mailings in accordance with your needs and to improve the range of our marketing measures.

     

    1. If we transfer data to recipients in a third country (located outside the European Economic Area), you can find a description under section 2. Some third countries are certified by the European Commission through so-called adequacy decisions to have a data protection standard that is comparable to the level in the European Economic Area. A list of these countries can be found here (link to https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en). If a country does not have a comparable data protection standard, we ensure that data protection is adequately guaranteed by other measures, e.g. by means of standard contractual clauses of the European Commission for the protection of personal data (link to https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX:32021D0914&locale=en) or binding internal data protection regulations (so-called Binding Corporate Rules).

     

    1. Beyond this, we transfer your personal data only and in so far a legal obligation exists on our part to pass it on. The transfer takes place on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR (e.g., to the police authorities in the context of criminal investigations or to the data protection supervisory authorities).

     

    1. Justified interests in data processing and objection

     

    1. We process your personal data as defined in Section 2 due to our legitimate interests in ensuring IT security in our app, carrying out analyses and marketing measures, informing you about our products and services, increasing the scope of our products and marketing measures, preventing fraud and misuse, avoiding payment defaults, representing, enforcing and defending our legal interests (possibly also in court) and carrying out internal administration efficiently and collaboratively. Information on the balance of interests carried out can be obtained from:

     

    -              kundenservice@eventim.de  

     

    1. To the extent, we process your personal data on the basis of these legitimate interests (Art. 6 Para. 1 Sentence 1 lit. f) GDPR), you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. Notwithstanding the above, in cases of direct advertising (such as newsletters or retargeting measures) you have the right to object at any time to the processing of your personal data without giving reasons. We will then no longer process your data for this/these purpose(s) unless our legitimate interests in processing overweight or the processing serves to establish, exercise or defend legal claims. Please send your request to

     

    - by e-mail to kundenservice@eventim.de

    - by tel. to +49 421 - 20 31 55 11 or

    - in writing to CTS EVENTIM AG & Co. KGaA, Data Protection, Hohe Bleichen 11,

    20354 Hamburg, Germany.

     

    1. If you object to the data processing, we process your personal data collected in this context to answer your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

     

    1. Consent and revocation of your consent

     

    1. If you have given us your consent for the processing of your personal data, you can revoke this at any time. The revocation of your consent is effective for the future. The legality of the processing of your personal data up to the time of revocation remains unaffected. Please address your revocation

     

    - by e-mail to kundenservice@eventim.de,

    - by tel. to +49 421 - 20 31 55 11 or

    - in writing to CTS EVENTIM AG & Co. KGaA, Data Protection, Hohe Bleichen 11, 20354 Hamburg, Germany.

     

    1. If you revoke your consent, we will process your personal data collected in this context to respond to your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

     

    1. Your rights

     

    1. You may at any time, in accordance with the GDPR, request that we

     

    - provide you with information about the personal data concerning you that we process (Art. 15 GDPR), 

    - rectify any personal data concerning you that is inaccurate (Art. 16 GDPR) and/or

    - erase (Art. 17 GDPR), block (Art. 18 GDPR) and/or release (Art. 20 GDPR) your personal data stored by us. 

     

    1. Please direct your request

     

    - by e-mail to kundenservice@eventim.de ,

    - by tel. to +49 421 - 20 31 55 11 or

    - in writing to CTS EVENTIM AG & Co. KGaA, Data Protection, Hohe Bleichen 11,

    20354 Hamburg, Germany.

     

    1. If you assert your rights against us, we process your personal data collected in this context to answer your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

     

    1. Without prejudice to your rights under Section 7, you may lodge a complaint with a data protection supervisory authority if you believe that EVENTIM's processing of personal data concerning you is in breach of the GDPR (Art. 77 GDPR).

     

    1. Other

     

    1. The provisions of this data protection information (available free of charge in our app), including the cookie information of CTS EVENTIM AG & Co. KGaA (available free of charge in our app) apply in the version valid at the time of use of our app.

     

    1. We reserve the right to supplement and amend the content of the information on data protection. The updated privacy information is effective from the time it is published in our app.

     

    1. Contact details of the Data Protection Officer

     

    Please direct any questions regarding data protection:

     

    Data Protection Officer

    CTS EVENTIM AG & Co. KGaA 

    Hohe Bleichen 11

    20354 Hamburg

    Germany

    E-mail: datenschutz@eventim.de

    Incoming messages are handled confidentially by the Data Protection Officer or the data protection team assigned to them. Access to this mailbox is restricted to individuals who have been specifically authorised for this purpose.

     

     

     

    Cookie information Apps

     

    Scope of application

     

    This cookie information provides more specific data protection information as required by Section 2.1.5 (2) about the use of cookies and similar technologies in apps of CTS EVENTIM AG & Co. KGaA and affiliates of CTS EVENTIM AG & Co. KGaA as defined by Sec. 15 AktG [“Aktiengesetz”: German Stock Corporation Act], referred to here as “EVENTIM”, “we” or “us“).

     

    General information

     

    Cookies and similar technologies can be small text files which are filed in the internal memory of your mobile end device when you access our app and allocated to the respective app. Cookies can save and track your actions and settings in our apps for the duration of use and, in some cases, beyond this. Cookies and similar technologies also enable the recognition of your mobile end device. For instance, after leaving the app, the content of your basket is reconstructed or events recently viewed are displayed again.

     

    Types of cookies used

     

    First-party

    On the one hand, we use first-party cookies, i.e. cookies placed by our server and which can only be accessed via our server.

     

    Third-party

    On the other, our apps also contain third-party cookies and similar technologies which are placed by servers of other providers and in some cases our server and that can be read by other providers. These technologies can be used by third-party providers to track your mobile end device.

     

    Storage period

     

    Session

    Some of the cookies and similar technologies we use are session-based cookies, i.e. cookies and similar technologies which are only stored for the duration of the app usage. When the app is closed or when you log off, the cookies are deleted automatically.

     

    Persistent

    We also use persistent cookies and similar technologies which stay saved on your mobile end device after the usage of the app and are automatically deleted after a predefined expiry date.

     

    Purposes

    Essential

    We use cookies and similar technologies which are needed to operate the app and which facilitate certain functions to be able to use the app. This includes, for example, automatic language recognition and setting, restoring the content of completed forms or the shopping cart after leaving and then returning to our app. These cookies and similar technologies do not store any personal information.

    Statistical and Comfort

    These cookies and similar technologies enable our app to provide advanced functionality, personalization and web analytics. They are set either by us or by third parties whose services we use on our pages. If you disable these cookies and similar technologies, it is possible that some or all of our services will no longer function properly.

    Marketing

    These cookies and similar technologies are placed on our app by our advertising partners. They may be used to create a profile of your interests and to display relevant advertising content to you on other sites. They do not store any personal data but are based on a unique identification of your browser and device. If you disable these cookies and similar technologies, you will see less relevant advertising content.

     

    Cookie settings

    Via the system settings of your mobile end device, you can limit or completely prevent the storage of (certain) cookies and similar technologies for all apps and delete any cookies and similar technologies that have already been saved. For more information about this please consult the instruction manual or help functions of your mobile end device.

     

    Our app can in principle still be used after restricting/deactivating cookies and similar technologies in the system settings of your mobile end device. However, please note that the complete deactivation of cookies and similar technologies can limit the functionalities of our app.

     

    As of: 16.10.2026

     

     

    Data protection information for EVENTIM.CheckIn visitor data collection

     

    The purpose of this information on data protection is to inform you on the processing of your personal data when visiting and using "EVENTIM.CheckIn" (visitor data collection) of CTS EVENTIM AG & Co.KGaA (hereinafter "EVENTIM", "we" or "us") in accordance with the General Data Protection Regulation (hereinafter "GDPR"). The data protection information for "EVENTIM DE" (Ticket Shop) can be found above.

     

    1. Responsible body and definitions

     

    1.1        Responsible body

     

    For the processing of personal data is responsible:

     

    CTS EVENTIM AG & Co. KGaA 

    Hohe Bleichen 11

    20354 Hamburg, Germany

    Email: kundenservice@eventim.de

    Tel.: +49 421 - 20 31 55 11

     

    1.2        Definitions

     

    This information on data protection is based on the following terms on data protection, which we have defined for easier understanding:

     

    1. The GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

     

    1. Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. Authorities, however, which within the framework of a specific inquiry mandate may receive personal data under Union law or the law of the Member States shall not be considered recipients; the processing of such data by these said authorities is carried out in accordance with the applicable directives on data protection in accordance with the purposes of the processing. Depending on the method of payment selected for ticket purchases, the recipients of your personal data may be banks or the postal service providers via whom we send you your ticket by post.

     

    1. In accordance with Section 15 of the German Stock Corporation Act (AktG), the EVENTIM Group comprises all of CTS EVENTIM AG & Co. KGaA's affiliated companies. Further information is available at

    https://corporate.eventim.de/en/company/ 

     

    1. Personal data are all information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data can, for example, be name, contact data, user behaviour or bank data.

     

    1. The Controller is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for his appointment may be laid down in accordance with Union law or the law of the Member States. For the data processing described in this privacy policy, CTS EVENTIM AG & Co. KGaA is responsible; partly together with the operator of a partner-site (see section 1.2).

     

    1. Processing is any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transfer, disseminating or otherwise making available, aligning or combining, restricting, erasing or destroying. Processing can be, for example, the collection and use of your order data for ticket sales.

     

    1. Purposes, legal bases and, if applicable, data categories for processing your personal data

     

    2.1        Processing of personal data when using "EVENTIM.CheckIn"

     

    You can use "EVENTIM.CheckIn" to enter personal data (contact data) - and if necessary, data of other persons with whom you are attending an event together - so that these data can be transmitted at a later time at the entrance of an event location at your instigation for the purpose of tracing chains of infection in connection with Covid-19, e.g. in electronic form. We process personal data for the provision of this service.
    It is expressly pointed out that CTS EVENTIM AG & Co. KGaA does not assume any responsibility for the collection and processing of contact data at the respective event location that you or other persons wish to enter; this also applies to any forwarding of contact data to health authorities.
    In this respect, the respective organiser or operator of the event location is the person responsible for data protection in the sense of Art. 4 No. 7 GDPR; please note the data protection information provided by them.

     

    2.1.1     Storage of data in "EVENTIM.CheckIn"

     

    1. When using "EVENTIM.CheckIn", we only process the personal data provided by you, which enable the tracing of infection chains in connection with Covid-19. In this respect, the legal regulations of the individual German federal states make different demands, over which we have no influence. The following data can be entered for the respective event visitor:

     

    - Seating Information

    - First Name

    - Last Name

    - Street and House Number

    - Zip Code

    - City

    - Country

    - Email

    - Phone

     

      If you collect data from other visitors, make sure that they have been sufficiently informed by you about the processing of their data and that you are authorized to provide the data.

     

    1. For the identification and defense against threats (bot defense, DDoS attacks) and the delivery and acceleration of online applications, we use services of Akamai Technologies GmbH, Parkring 20-22, 85748 Garchin, Germany on our websites. Akamai processes the IP address of your terminal device. Akamai uses this information on behalf of EVENTIM to prevent technical threats and to ensure high availability of our website. The IP address is usually transferred to Akamai servers in the USA and processed there. This data transfer is based on EU standard contractual clauses. This ensures adequate protection of your personal data.

     

    1. We process the personal data entered by you so that it can be transmitted in electronic form at a later date at your instigation for the purpose of tracing chains of infection in connection with Covid-19 at the entrance to an event location. The processing is carried out within the framework of the provision of our "EVENTIM.CheckIn" service on the basis of Art. 6 para. 1 Sentence 1 lit. b) GDPR.

     

    2.1.2     Processing for IT security purposes

     

    1. When using "EVENTIM.CheckIn", we process personal data that is technically necessary for us to provide you with "EVENTIM.CheckIn" and to guarantee the stability and security when using "EVENTIM.CheckIn". For this purpose, we process the following personal data:

     

    - UU-ID

    - IP address

     

    1. We process personal data on the basis of our legitimate interest in providing you with "EVENTIM.CheckIn" and ensuring IT security for you when using "EVENTIM.CheckIn" on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

     

     

    2.1.3     Cookies

     

    1. When using "EVENTIM.CheckIn", no cookies are stored on your end device.

     

    1. Storage and erasure of your personal data

     

    1. If you enter personal data in "EVENTIM.CheckIn", these are initially stored exclusively locally on your device; we have no access to them in this respect. You have the option of deleting this data at any time.

     

    1. If you transmit personal data in "EVENTIM.CheckIn" at your instigation for the purpose of tracing chains of infection in connection with Covid-19, e.g. at the entrance to an event location in electronic form, this data will be stored on servers of CTS EVENTIM AG & Co. KGaA for a certain period of time (see clause 3 below). The storage is carried out on behalf of the respective responsible organiser or operator of the event location; CTS EVENTIM AG & Co. KGaA is in this respect a processor in the sense of Art. 4 Paragraph 8 GDPR.

     

    1. In the event of a transmission according to the above item 2, the respective organiser or operator of the event location is obliged to delete the data after a certain statutory period of time (four weeks in most federal states); CTS EVENTIM AG & Co. KGaA does not assume any responsibility in this respect. With regard to the details in this regard, we refer to the data protection information of the respective responsible organiser or operator of the event location.

     

    1. Categories of recipients of personal data

     

    1. A transmission of personal data by means of "EVENTIM.CheckIn" for the purpose of tracing infection chains in connection with Covid-19 by CTS EVENTIM AG & Co. KGaA to the respective organiser or operator of the event location is exclusively at your instigation on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR.

     

    1. Any transmission by the respective organiser or operator of the event location to a (health) authority for the purpose of tracing chains of infection in connection with Covid-19 is in most federal states on the basis of Art. 6 para. 1 sentence 1 lit. c) GDPR, in some federal states possibly also Art. 6 para. 1 sentence 1 lit. a) GDPR. Regarding the details, we refer to the data protection information of the respective responsible organiser or operator of the event venue.

     

    1. In addition, we transmit personal data only to the extent that we are legally obliged to do so. In such a case, the transfer is made on the basis of Art. 6 para. 1 sentence 1 lit. c) GDPR.

     

    1. Legitimate interests in data processing and objection

     

    1. We process personal data in the sense of item 2 on the basis of our legitimate interests to ensure the IT security of "EVENTIM.CheckIn" and to carry out the internal administration efficiently and collaboratively. Information on the balance of interests carried out can be obtained from:

     

    - kundenservice@eventim.de  

     

    1. Insofar as we process personal data on the basis of legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR.), you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. We will then no longer process your data for this/these purpose(s), unless our legitimate interests worthy of protection outweigh this/these or the processing serves to assert, exercise or defend legal claims. Please direct your request:

     

    - by email to kundenservice@eventim.de,

    - by tel. to +49 421 - 20 31 55 11 or

    - in writing to CTS EVENTIM AG & Co. KGaA, Data Protection, Hohe Bleichen 11, 20354 Hamburg, Germany.

     

    1. If you object to the data processing, we will process your personal data collected in this context to answer your inquiry. The processing of your personal data is carried out to fulfil a legal obligation on the basis of Art. 6 Paragraph 1 S. 1 lit. c) GDPR.

     

    1. Consent and revocation of your consent

     

    1. If you have given us your consent for the processing of your personal data, you can revoke this at any time. The revocation of your consent is effective for the future. The legality of the pro-cessing of your personal data up to the time of revocation remains unaffected. Please direct your revocation:

     

    - by email to kundenservice@eventim.de ,

    - by tel. to +49 421 - 20 31 55 11 or

    - in writing to CTS EVENTIM AG & Co. KGaA, Data Protection, Hohe Bleichen 11, 20354 Hamburg, Germany.

     

    1. If you revoke your consent, we will process your personal data collected in this context to answer your inquiry. The processing of your personal data is carried out to fulfil a legal obligation on the basis of Art. 6 Paragraph 1 S. 1 lit. c) GDPR.

     

    1. Your rights

     

    1. You may at any time, in accordance with the GDPR, request that we

     

    - provide you with information about the personal data concerning you that we process (Art. 15 GDPR),  

    - rectify any personal data concerning you that is inaccurate (Art. 16 GDPR) and/or

    - erase (Art. 17 GDPR), block (Art. 18 GDPR) and/or release (Art. 20 GDPR) your personal data stored by us. 

     

    1. Please send your request:

     

    - by email to kundenservice@eventim.de ,

    - by tel. to +49 421 - 20 31 55 11 or

    - in writing to CTS EVENTIM AG & Co. KGaA, Data Protection, Hohe Bleichen 11, 20354 Hamburg, Germany. 

     

    1. If you assert your rights against us, we process your personal data collected in this context to answer your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

     

    1. Without prejudice to your rights under Section 7, you may lodge a complaint with a data protection supervisory authority if you believe that EVENTIM's processing of personal data concerning you is in breach of the GDPR (Art. 77 GDPR).

     

    1. Other

     

    1. The provisions of this data protection information including the cookie information of CTS EVENTIM AG & Co. KGaA of "EVENTIM.CheckIn" in the version valid at the time of use.

     

    1. We reserve the right to supplement and amend the content of the information on data protection. The updated data protection information is valid from the time it is published on our websites.

     

    1. We will inform you in good time about these amendments and supplements on our websites. You will be given the opportunity to view, print and save the amended information on data protection free of charge.

     

    1. Contact details of the Data Protection Officer

     

    Please direct any questions regarding data protection to:

     

    Data Protection Officer

    CTS EVENTIM AG & Co. KGaA 

    Hohe Bleichen 11

    20354 Hamburg, Germany

    Email: datenschutz@eventim.de

     

    As of: 19.08.2026