Privacy policy

The purpose of this data protection information is to inform you about the processing of your personal data when visiting and using this website and with reference to our marketing measures that we use on this website, as well as on third party websites and social networks, in accordance with the provisions of Article 13 of the General Data Protection Regulation (hereinafter referred to as “GDPR”).

This data protection information is based on the following data protection terms, which we have defined for your ease of understanding:

1. The GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC).

2. A recipient is a natural or legal person, authority, institution or other body to whom personal data are disclosed, whether it is a third party. However, authorities which, within the framework of a specific investigation mandate, may receive personal data under Union or Member State law shall not be considered as recipients; the processing of such data by such authorities is carried out in accordance with the applicable data protection directives depending on the purposes of the processing.

3. Personal data is any information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified directly or indirectly, by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data can be, for example, name, contact details, user behavior or bank details.

4. The controller is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of the processing of personal data. Where the purposes and means of such processing are laid down by the law of the Union or its Member States, the controller or the specific criteria for its designation may be established in accordance with the law of the Union or its Member States.

5. Processing means any operation or set of operations, whether or not by automatic means, which is performed upon personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transfer, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. The processing may consist, for example, of the collection and use of your order data for the sale of tickets.

Below you will find:

A. PRIVACY POLICY ENTRADAS EVENTIM SAU (EVENTIM.Light)

1. Basic information

2. Additional information

3. Cookie Policy

B. PRIVACY POLICY OF THE PROMOTER OF THE EVENT

A. PRIVACY POLICY ENTRADAS EVENTIM SAU (EVENTIM.Light)

1. BASIC INFORMATION

1.1. Data Controller

ENTRADAS EVENTIM, S.A.U., with registered office at calle Serrano Anguita 8; 28004, Madrid. You can contact us through the form available here.

1.2. DPO

If you wish to contact our Data Protection Officer (DPO): you can do so via the following e-mail address: dpo@eventim.es , as well as at the postal address indicated.

We are jointly responsible for the processing of personal data while marketing activities that we carry out on our websites, third-party websites and social networks with the support of Edge Entertainment Digital GmbH, as specified in detail below.

1.3. Data processed

Name and surname, postal address, email address, telephone number and payment method. Information related to previous purchases made is also processed, as well as information obtained through cookies or similar technologies related to the connection, use or browsing of the EVENTIM.Light website.

1.4. Purposes of processing and bases of legitimacy

i. Manage web services (ticket sales, user registration, response to queries raised in each form) - Execution of the contractual relationship.

ii. Sending of notifications related to the service - Execution of the contractual relationship.

iii. IT security (identification and defense against threats such as bots or DDoS) - Legitimate interest and compliance with legal obligations.

iv. Fraud prevention - Legitimate interest and compliance with legal obligations.

v. Advertising actions in the form of remarketing, display advertising and ads on social networks (Legitimate interest or consent, depending on whether you are a customer or not, but have expressly consented).

vi. Sending of commercial communications - Legitimate interest or consent, in case you are not a customer, and you have requested it.

vii. Elaboration of a commercial profile (profiling of your data) - Consent.

1.5. Recipients of the information

Promoters and organizers of events, service providers, suppliers, law enforcement agencies, as appropriate. We may also share information about the use of the website with our advertising partners as reported in the “Cookies” section.

1.6. Rights of the interested parties

You can exercise the rights recognized in the current legislation on data protection by sending a written communication to the Data Controller at the postal address in calle Serrano Anguita 8; 28004 Madrid, as well as through the form available here. You can also exercise these rights by sending us an e-mail to the following address dpo@eventim.es.

1.7. Cookie Usage

We use our own and third party cookies and pixels for analytical purposes and to be able to offer you advertising related to your preferences, as detailed in the "Cookies" section.

2. ADDITIONAL INFORMATION

2.1. Data Controller:

Contact details of the Data Controller: ENTRADAS EVENTIM, S.A.U.; calle Serrano Anguita 8; 28004 de Madrid, as well as through the form available here.

Contact details of the Data Protection Delegate : you can contact him/her through the following e-mail address dpo@eventim.es , as well as at our postal address located at calle Serrano Anguita 8, 28004 Madrid.

2.2. Co-responsibility

When the User purchases a ticket for an event through the EVENTIM.Light website, a contractual relationship is established, on the one hand, between the user and ENTRADAS EVENTIM SAU for the purchase of the ticket and, on the other hand, a contractual relationship between the user and the organizer of the event for the provision and attendance of the event.

In the context of its own contractual relationship with users, the ORGANIZER will treat, independently of ENTRADAS EVENTIM SAU, as Data Controller, your personal data as indicated in its own privacy policy. The ORGANIZER shall be solely responsible for the content of that Privacy Policy.

2.3. Data

For the management of web services, identification data (name, surname, postal address, email address and telephone number), data relating to means of payment and the history of purchases made are processed. The data that we ask you for as compulsory is necessary to provide the service you always request and to execute the contract, or to comply with legal obligations. Otherwise, the contract could not be executed or signed, or EVENTIM.Light could not comply with its legal obligations.

We also use cookies and similar technologies that give us information about the connection data, use and navigation that is performed from your device, browser or protocol, as detailed in the Cookies Section.

On the other hand, in those cases in which you authorize the profiling of your data to send commercial communications tailored to your interests, we will process the data you have provided, allowing us to infer your commercial profile and learn more about the events that may be of interest to you.

The obtaining of this profile will be carried out according to objective criteria that allow us to infer your interests. In no case will the conclusions reached imply the assessment of behaviors, lifestyles, habits and customs, etc. by EVENTIM.Light, so no conclusions of any kind will be drawn in this regard.

2.4. Purpose

For what purpose do we process your data, based on what legitimacy and for how long? It will depend on when you provide it to us, but we will give you all the information below:

i. In the purchase process - Complete management of the ticket sales process, including (i) sending information about incidents at the event; (ii) welcome email; (iii) in the event that a sales process is left halfway through, we will also inform you of this. (iv) We will use your email address to send you commercial communications by electronic means, but at any time you will have the option to indicate that you do not want to receive them; (v) also, if you so request, these communications will be tailored to your interests, for which we will make a commercial profile that allows us to better understand what interests you. In this way, we will only send you information about what we think you are really interested in; (vi) prevent potential fraud or computer attacks against you or EVENTIM.Light during the purchase process. Fraud prevention will be carried out according to objective criteria that allow inferring certain situations or behaviors constituting fraud or computer attack, in no case, the conclusions reached will involve the assessment of behaviors, lifestyles, habits and customs, etc. so no conclusions of any kind will be derived in this regard. (vii) invoicing; (viii) experiential emails to buyers with recommendations prior to the event. The legal basis for this treatment depends on which section of the purchase process you are in (i) send you information about incidents in the event: contractual compliance; (ii) welcome email: contractual compliance (iii) in case a purchase process is left halfway: legitimate interest in the purchase is made (iv) send you commercial communications by electronic means: (v) profiling: explicit consent (vi) prevention of fraud or computer attack: legitimate interest in ensuring the proper marketing of events, avoiding damage to our users and EVENTIM.Light as well as compliance with legal obligations (vii) billing: contractual compliance and legal obligations (viii) communications with recommendations prior to the event based on our legitimate interest in improving the user experience. We store your data for the time necessary for the purposes described above. When it is not necessary for these purposes, we will store your data for the time during which any claims may be received, depending on the legal limitation period (e.g. 5 years). In addition, we collect and maintain your data for as long as we are obliged to do so (e.g., record keeping for documentation, tax purposes, money laundering regulation, etc.). The maintenance period will be a maximum of 10 years.

ii. Contact form - the purpose of the processing is (i) to be able to answer your query (ii) Customer service (iii) To answer a request to exercise a data protection right. For this purpose, the basis of legitimacy will be (i) Consent of the data subject (ii) Legitimate interest of defense in case of a claim (iii) Compliance with legal obligations. Depending on the type of query, we review and delete queries already answered and will endeavor to delete them periodically. In other cases, we retain queries for as long as a claim may arise (e.g., 5 years).

iii. Connection, usage and navigation (cookies) - When you visit our websites or as part of marketing measures on third party websites and social networks, we use information regarding the connection, usage and navigation performed from your device, browser or protocol. Such information is collected through Cookies or similar technologies for the following purposes: (i) for technical reasons (ii) for functional purposes (iii) for marketing, advertising and social media advertising purposes. We conduct marketing campaigns using tags (pixels) and cookies from our retargeting providers. When you visit our websites, tags and cookies are set that are associated with the content you have accessed. This allows us to document whether you have accessed our website through our advertising campaigns. In addition, we play advertising banners and display ads to users of Meta platforms (e.g. Facebook and Instagram) who have a similar profile to our customers and website visitors. If you have an account on these social networks and agree to the display of advertisements through your account settings on those social networks, you will be shown recommendations about our products and services on those social networks. The recommendations are generated based on your interests (e.g. “likes” of artists) stored in your public profile on these social networks. For this, we process your public profile data. In connection with the use of Google Ads and Meta Platforms, Inc. (e.g., Facebook and Instagram), the data we process is your IP address, your device ID/cookie, the activity on your page/wall, the pages you visit or the interactions made with advertising, services and products displayed on those social networks. In these cases of use of Google Ads and Meta Platforms Inc. your personal data is transferred to the U.S. This data transfer takes place based on EU standard contractual clauses. This ensures adequate protection of your personal data.

For further details on data processing by retargeting providers, please refer to the relevant data protection information:

Google:

- General Information: https://policies.google.com/privacy?hl=es&fg=1

- Explanation on the use of third-party data: https://policies.google.com/technologies/partner-sites

Meta: https://www.facebook.com/privacy/policy/?entry_point=about_fb

Instagram: https://help.instagram.com/155833707900388

In any case, this information does not allow us to identify the user by name and is not linked to your personal data, so it is not possible to draw conclusions about the person. However, it may be recorded in our systems regarding the type of browser or IP address and therefore your acceptance is requested for the installation of cookies (see more information in the “Cookies” section).

The legal basis for the processing of this information is the consent of the user, except for technical cookies based on the execution of a contract.

In these cases, your personal data will be transferred to the United States. This data transfer takes place based on EU standard contractual clauses. This ensures adequate protection of your personal data.

2.5. Revocation of consent

In the event that the legal basis for the processing of your data is your consent, you can revoke your consent to the processing of your data at any time. In case you want to unsubscribe from our commercial communications you can do so by logging in as a user or by contacting us at our postal address (C/Serrano Anguita 8, 28004, Madrid), email address (dpo@eventim.es) or through the form you can find here .

2.6. Legitimation

The legal basis for processing your data varies depending on when we collect your personal data.

2.7. Addressees

Your personal data may be transferred to technical and IT service providers who provide and maintain the platforms, databases and tools for providing our services (e.g. our website and sending newsletters), analyzing user behavior on our websites, conducting marketing campaigns and processing your personal data on our behalf as part of the performance of the contract we have with you. In this case the purpose of the processing is our legitimate interest in improving and promoting our services and ensuring IT and network security or, where applicable, if you are not a customer, that you have given us your consent.

We also transfer your personal data to other suppliers and service providers such as, for example, payment gateways and financial institutions, venue access control companies, courier companies, customer service providers, marketing and advertising service providers and partners to fulfill our contractual obligations to you.

If you visit the websites of ENTRADAS EVENTIM SAU and/or register to use our services, whenever possible, we will also transmit your personal data to Edge Entertainment Digital GmbH for advertising purposes if you give us your explicit consent.

At times, law enforcement agencies request transaction and user information for investigative purposes, or judicial or administrative authorities may require it in inspection processes.

2.8. Rights

You can exercise the rights recognized under the current data protection legislation (access, rectification, erasure, objection, restriction of processing, and portability, as applicable) by sending a written request to the Data Controller at the postal address Calle Serrano Anguita 8, 28004 Madrid, by email to dpo@eventim.es, or through the form available here.

The interested User must include a copy of their national identity document, passport, or another valid document that verifies their identity.

Additionally, you have the right to file a complaint with the Spanish Data Protection Agency: https://www.aepd.es/agencia/contacto.html

2.9. Third party data

If you provide us with personal data of third parties, for example, in the context of customer service queries, you guarantee that you have obtained the consent of the owners of the personal data for the communication of their data to EVENTIM.Light, as well as having informed them about the purposes and the way in which we need to process their personal data. If you provide us with such data in the field of Social Networks remember not to disclose personal data of third parties in public messages, always do it by private message.

3. COOKIES USAGE

This EVENTIM.Light website uses its own and third party cookies for analytical purposes and to be able to offer you, based on your browsing profile, advertising related to your preferences. We also share information about the use of the website with our advertising partners.

In EVENTIM.Light we have implemented a tool that allows you to modify the default settings and choose what type of cookies you want to enable / disable. Therefore, when you access our website you can accept the installation of cookies or you can change the default settings. Please note that, depending on the category of cookies you disable, it is possible that some services or functionalities that we offer may be affected.

You can also, at any time, revoke your consent to the use of cookies by configuring your own permissions. If you wish to change the settings to enable/disable cookies, you can do so in the Privacy Preference Center.

What are cookies?

Cookies are text files containing small amounts of information related to your user, preferences or device that are downloaded to your computer when you access certain websites, such as this one. The cookies are then sent back to the originating website (first-party cookies) or to other websites (third-party cookies). The information generally does not identify you directly and can provide you with a more personalised web experience.

Cookies allow these websites, among other things, the proper functioning of the website, personalize your user experience, improve the functionality of the website, store and retrieve information about your browsing habits or those of your computer, show you advertising based on your browsing profile and, in certain cases, recognize your device.

The term "cookies" can include other similar technologies such as "pixels". A pixel is a piece of code that is placed on the website to activate a cookie that provides information about the visit.

What types of cookies does this website use?

Cookies on this website may be used for technical, functional or advertising purposes.

Technical cookies:These cookies are necessary for the website to function properly and cannot be disabled from our systems. Therefore, they are mandatory. They are usually only set in response to your actions when you request services, such as setting your privacy preferences, logging in or completing forms. You can set your browser to block or alert you to these cookies, but some areas of the site will not function. These cookies do not store any personally identifiable information.

The technical cookies used are listed below:

- Consent Manager: A tool for regulatory compliance and cookie consent management. With this tool, you can configure your cookies and enable/disable them by category.

- Google Tag Manager: A cookie container that allows you to manage tags and quickly update tracking codes on the website. Without it, tracking cookies would not function, making it an essential or technical cookie.

Functional cookies:This category includes personalization and analytical cookies. These cookies allow us to improve the functionality of the website, improve your user experience, adapt content and advertisements to your browsing profile, capture and remember your user preferences, enable social interactions, analyse traffic and browsing habits, as well as perform statistics. They may be set by our company or by external providers whose services we have added to our pages. If you do not allow the use of these cookies, it is possible that some of these services may not work properly (e.g. shopping baskets, access to secure areas, online billing).

The functional cookies used are listed below:

- Google Analytics: This is a tool owned by Google Inc. that helps us measure how users interact with the website's content. When you browse our website, Google Analytics provides us with JavaScript tags (libraries) to record information about the pages you have viewed, such as the page URL. These libraries use HTTP cookies to "remember" your actions on the pages or your interactions with our website. You can find more information about the use of cookies in Google Analytics here.

Marketing Cookies: These cookies may be set through our site by our advertising partners. They may be used by these companies to create a profile of your interests and show you relevant ads on other sites. They do not directly store personal information but are based on the unique identification of your browser and internet device. If you do not allow these cookies, you will see less targeted advertising.

In some cases, the ticket sales process is part of a website owned by: (1) The company that owns a venue, (2) The promoter, organizer, or distributor of an event, or (3) An authorized distributor by entradas.com for ticket sales. In these cases, whether the ticket sale is integrated into the navigation or opens in a new window, certain pixels may be used to share information with the website owner. The purpose of this is to optimize their marketing investments for ticket sales.

- Google: Tracks the pages visited by the user and purchases made through the tool. Includes YouTube as a company owned by Google LLC.

- Google Ads: An advertising platform owned by Google Ireland Ltd. ("Google") that allows advertisers to create, manage, and optimize ad campaigns on Google and its partner networks. Its main goal is to help businesses attract traffic, generate conversions, and increase online visibility through paid ads. For more information, you can check [here].

- Facebook and Instagram (META): Tracks the pages visited by the user and purchases made through the tool.

Recipients and international transfer of personal data

The personal data collected using first-party cookies will not be transferred by ENTRADAS EVENTIM SAU outside the European Union, nor will it be shared with third parties, except for public authorities and agencies, to comply with a required legal obligation. Regarding the identified third-party cookies, please note that the information collected is managed by these third parties. You can review how they handle your data in their privacy policies, which should be published on their respective websites.

What is the cookie retention period?

Some cookies are only stored during a session (session cookies), while others remain stored for a specific period or indefinitely (persistent cookies).

The persistence period of each cookie depends on the company that designed it and is beyond the control of EVENTIM.Light. Therefore, if you wish to disable cookies or withdraw your consent for their use, remember that you can do so through your browser, as explained in the next section.

How can I disable cookies from my browser?

Users can exercise their rights of access, rectification, erasure, portability, restriction, or objection, as well as withdraw the consent given, by submitting a written request to our DPO at dpo@eventim.es.

Additionally, with the Cookie Settings tool, you have the option to accept or reject cookies that require your consent and to withdraw your consent for optional cookies at any time. The withdrawal of consent will not affect the lawfulness of processing based on prior consent before its withdrawal.

You can also block and delete cookies by modifying your internet browser settings. Most browsers allow you to reject or accept all cookies or accept only certain types of cookies. The process for managing and deleting cookies can be found in the “settings” function of your browser. If you choose to limit cookies generally, you may not be able to use all the interactive features of our website.

Here are links to manage cookies in the most used browsers:

- For more information on Internet Explorer, click aquí .

- For more information on Google Chrome, click aquí .

- For more information on Opera, click aquí .

- For more information on Mozilla Firefox, click aquí .

- For more information on Safari, click aquí .

B. PRIVACY POLICY OF THE PROMOTER OF THE EVENT

1. Data Controller

The entity responsible for processing your personal data is Ataque 360 SL (hereinafter, the "Promoter Entity"), with its registered address at Marqués de San Esteban, 2, 33206 Gijón and VAT ID number B52545787.

2. Data processed

For the management of web services, identification data (name, surname, postal address, email address and telephone number), data relating to means of payment and the history of purchases made are processed. The data that we ask you for as compulsory is necessary to provide you with the service you always request and to execute the contract, or to comply with legal obligations.

The Promoter Entity analyses and documents visits to the online shop, e.g. by identifying the number of visitors to the online shop , their browsing patterns, which events and parts of the online shop interest them, the origin of the online shop visitors and, if they purchase a ticket, their order and shopping cart data.

For this purpose, the Promoter Entity processes the following personal data:

- IP address

- UU-ID

- WEB-ID

- Device fingerprints

- Browser fingerprints

- Cookies (see cookie information)

- Geo IP-location

All fields requested in the collection forms are mandatory. Optional fields are marked as such.

In those events where it is necessary to collect data from minors under 14 years of age, we understand that the person providing the data is the holder of parental authority or legal guardian, directly responsible for providing the information and consent on behalf of the minor, and also has the authorization of the other holder.

3. Purpose and legitimacy

The Promoter Entinty will process your personal data based on the execution of the contractual relationship derived from your acceptance of the terms and conditions in the purchase of the tickets for the following purposes:

- Management of the sale of tickets for the event.

- Event management, including access control to the event, resolving any incident, relocation of seats, event cancellation, etc

- Sending notifications related to the event, such as schedule information or updates.

- Sending commercial communications. Consent may be revoked at any time.

4. Recipients

The buyers' identification data may be provided to companies involved in the management of the event, based on the execution of the contract.

In case of request, personal data of transactions and users may be shared with the State Security Forces and Corps for investigation purposes, or with judicial or administrative authorities in inspection processes.

Personal data are also provided to service providers of the Promoting Entity, who will process them in the name and on behalf of the Promoting Entity, in the context of contracting or subcontracting services such as, for example, IT or technology service providers, access control companies, or courier companies.

5. Conservation period

The Promoter Entity will keep your personal data for the period necessary to comply with the purposes stated, and even afterwards, duly blocked, for the period of limitation of any possible liabilities derived.

6. Cookies and Analytics

The Promoter Entity uses Google Analytics, a web analysis service provided by Google LLC ("Google"), on the websites to carry out analyses. Google Analytics uses cookies that enable the analysis of the use of the websites. The information generated by the cookie about the use of the websites is generally transmitted to a Google server in the United States and stored there. The Promoter uses Google Analytics only including IP anonymization ("_anonymizeIp()").

As a result, IP addresses are processed in abbreviated form and a direct correlation with persons can be ruled out. When using the websites, the IP address of website visitors is previously abbreviated by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the United States and abbreviated there.

The IP address transmitted to Google Analytics by the user's browser is not combined with other data from Google, according to Google.

You can prevent the storage of cookies by means of a corresponding adjustment of your browser software; we advise you, however, that in this case some functions of these websites may not be used to their full extent.

In addition, you can prevent the transmission of the data generated by the cookie and relating to your use of the online shop (including your IP address) to Google and the processing of this data by Google, by downloading the browser plug-in from the following link and installing it accordingly: https://tools.google.com/dlpage/gaoptout?hl=es

This creates an opt-out cookie that prevents the future collection of your data upon visiting the online shop. This opt-out cookie only applies to this browser and only for this website and is stored on your device. If you delete cookies from this browser, you must reset the opt-out cookie accordingly.

More information about the terms of use and data protection of Google can be found at https://policies.google.com/privacy?hl=es

Due to the use of Google Analytics, your personal data may in certain cases be transmitted to the United States. Google LLC is subject to the EU-US Privacy Shield. This provides adequate protection for your personal data. The full text of the EU-US Privacy Shield Framework can be obtained under the following link: https://www.privacyshield.gov/ps/WELCOME

7. Rights

You can exercise the rights recognized in current legislation on data protection (access, rectification, deletion, opposition, limitation of processing and portability, as appropriate), by sending a written communication to the Data Controller to the email address info@ataque360.com, proving your identity.

You can also file a complaint with the Spanish Data Protection.