Privacy policy

EVENTIM.Light Privacy and Cookie Policy

1. BASIC INFORMATION

1.1. Responsible for the treatment

ENTRADAS EVENTIM, S.A.U., with registered office at calle Serrano Anguita 8; 28004, Madrid. You can contact us through the form available in help (https://centrodeayuda.entradas.com/hc/es/requests/new).

1.2. DPO

If you wish to contact our Data Protection Officer (DPO): you can do so via the following e-mail address: dpo@entradas.com (mailto:dpo@entradas.com), as well as at the postal address indicated.

1.3. Data processed

Name and surname, postal address, email address, telephone number and payment method. Information related to previous purchases made is also processed, as well as information obtained through cookies or similar technologies related to the connection, use or browsing of the EVENTIM.Light website.

1.4. Purposes of processing and bases of legitimacy

Manage web services (ticket sales, user registration, response to queries raised in each form) - Execution of the contractual relationship.
Sending of notifications related to the service - Execution of the contractual relationship.
Fraud prevention - Legitimate interest.
Sending of commercial communications - Legitimate Interest or consent, in case you are not a customer and you have requested it.
Commercial profiling (Profiling of your data) - Consent.

1.5 Recipients of the information

Promoters and organizers of events, service providers, law enforcement agencies, as appropriate. We may also share information about the use of the website with our advertising partners as reported in the "Cookies" section.

1.6 Rights of the interested parties

You can exercise the rights recognized in the current legislation on data protection by sending a written communication to the Data Controller at the postal address in calle Serrano Anguita 8; 28004 Madrid, as well as through the form available in help (https://centrodeayuda.entradas.com/hc/es/requests/new).

1.7 Cookie Usage

We use our own and third party cookies and pixels for analytical purposes and to be able to offer you advertising related to your preferences, as detailed in the "Cookies" section.

2. ADDITIONAL INFORMATION

2.1 Responsible

Contact details of the Data Controller : ENTRADAS EVENTIM, S.A.U.; calle Serrano Anguita 8; 28004 de Madrid, as well as through the form available at: - help (https://centrodeayuda.entradas.com/hc/es/requests/new)

Contact details of the Data Protection Delegate : you can contact him/her through the following e-mail address: dpo@entradas.com, as well as at our postal address located at calle Serrano Anguita 8, 28004 Madrid.

2.2. Data

For the management of web services, identification data (name, surname, postal address, email address and telephone number), data relating to means of payment and the history of purchases made are processed. The data that we ask you for as compulsory are necessary to provide the service you request at all times and to execute the contract, or to comply with legal obligations. Otherwise, the contract could not be executed or signed, or EVENTIM.Light could not comply with its legal obligations.

All fields requested in the collection forms are mandatory. Optional fields are marked as such. For example, date of birth is marked as optional. The telephone number is marked as optional in the user registration and as mandatory in case of purchase, since in the latter case it is necessary for questions related to EVENTIM.Light services or the celebration of the event, including the sending of informative notifications related to the service or the event.

During the checkout process, please note that if you change your phone number or postal address, these details will be automatically changed in your user profile.

In those events in which the entrance tickets are nominative by requirements of the organizer of the event you must provide the necessary information to customize it. This will always be advised before the purchase.

In those events where it is necessary to collect data from minors under 14 years of age, we understand that the person providing the data is the holder of parental authority or legal guardian, directly responsible for providing the information and consent on behalf of the minor, and also has the authorization of the other holder.

We also use cookies and similar technologies that give us information about the connection, usage and navigation data that is performed from your device, browser or protocol, as detailed in the Cookies Section.

In those cases in which you authorize the profiling of your data to send commercial communications tailored to your interests, we will process the data related to your previous purchases (type of event and location, ticket prices and specific preferences (musical or film genre, specific sport, artist, team or player of interest), as well as the data you have provided when registering, which allow us to infer your commercial profile and learn more about the events that may be of interest to you.

This profile will be obtained according to objective criteria that allow us to infer your interests. In no case will the conclusions reached imply the assessment of behaviours, lifestyles, habits and customs, etc. by EVENTIM.Light, so no conclusions of any kind will be drawn in this sense.

2.3. Purpose

For what purpose do we process your data, on the basis of what legitimacy and for how long? It will depend on when you provide it to us, but we will give you all the information below:

Registration process on our website and creation of events - this data is collected in order to assist you in the process of purchasing or creating an event, in case you are a Promoter and Organizer. The legal basis for this processing is the consent of the data subject. We periodically review and update this information and delete the information of users who have not logged in to their account or who have no active events in the last 24 months (at most).
Contact form - Complete management of the ticket sales process, including (i) sending you information about incidents at the event; (ii) a welcome email; (iii) in the event that your purchase process is not completed, we will also inform you of this. (iv) We will use your email address to send you commercial communications by electronic means, but before the end of the purchase process you will have the option to tell us that you do not want to receive them; (v) also, if you so request, these communications will be tailored to your interests, for which we will make a commercial profile that allows us to better understand what interests you. In this way, we will only send you information about what we think you are really interested in; (vi) prevent potential fraud against you or EVENTIM.Light during the purchase process. The prevention of fraud will be carried out according to objective criteria that allow us to infer certain situations or behaviours constituting fraud, in no case will the conclusions reached involve the assessment of behaviours, lifestyles, habits and customs, etc. and therefore no conclusions of any kind will be drawn in this sense. (vii) invoicing; (viii) experiential emails to buyers with recommendations prior to the event. The legal basis for this treatment depends on what section you are in the purchase process (i) send you information about incidents in the event: contractual compliance; (ii) welcome email: contractual compliance (iii) in the event that your purchase process is halfway we will also inform you of this: legitimate interest in the purchase is made (iv) send you commercial communications by electronic means: legitimate interest in informing you of our products or services although the option to oppose and configure the customer area in this regard is provided.(v) profiling: explicit consent (vi) fraud prevention: legitimate interest in ensuring the proper marketing of events, avoiding damage to our users and EVENTIM.Light (vii) billing: contractual compliance (viii) communications with recommendations prior to the event based on our legitimate interest in improving the user experience. We store your data for as long as necessary for the purposes described above. Where it is not necessary for these purposes, we will store your data for the time during which any claims may be received, depending on the legal limitation period (e.g. 5 years). In addition, we collect and hold your data for as long as we are obliged to do so (e.g. record keeping, for tax purposes, money laundering regulation, etc.). The maintenance period will be a maximum of 10 years.
Write an opinion - the purpose of the processing is (i) to be able to answer your query (ii) customer service (iii) to answer a request to exercise a data protection right. For this purpose, the basis of legitimacy will be (i) Consent of the data subject (ii) Legitimate interest of defence in case of a claim (iii) Compliance with legal obligations. Depending on the type of query, we review and delete queries that have already been answered, and will endeavour to delete them periodically. In other cases, we retain queries for as long as a complaint may arise (e.g. 5 years).
Write an opinion - your data will be processed in order to publish your opinion, but your personal data will not be made public, with the legitimacy of the consent of the person concerned. The personal data associated with this review will be deleted periodically.
Connection, usage and navigation (cookies) - When you visit our websites or as part of marketing measures on third party websites and social networks, we use information regarding the connection, usage and navigation made from your device, browser or protocol. This information is collected through Cookies or similar technologies for the following purposes: (i) for technical reasons (ii) for functional purposes (iii) for marketing purposes. This information does not allow us to identify you by name and is not linked to your personal data, so it is not possible to draw any conclusions about you. However, it may be recorded on our systems relating to the type of browser or IP address and therefore your acceptance is requested for the installation of cookies (see more information in the "Cookies" section). The legal basis for the processing of this information is the consent of the user, except for technical cookies based on the execution of a contract. The retention periods for cookies are defined in the "Cookies" section of this Policy.

2.4. Revocation of consent

In the event that the legal basis for the processing of your data is your consent, you can revoke your consent to the processing of your data at any time. If you wish to unsubscribe from our commercial communications, you can do so by logging in as a user.

You can also contact us through our form available at: help ( https://centrodeayuda.entradas.com/hc/es/requests/new).

2.5. Legitimation

The legal basis for processing your data varies depending on when we collect your personal data.

2.6. Addressees

The identification data of the buyers may be provided to the promoter/organizer of the event, to manage the sale of tickets and issues strictly related to the execution or celebration of the event, being the enjoyment of the event the ultimate purpose of the purchase of tickets, for example, manage access control to the site, resolve any incident, relocation of seats, cancellation of events, etc..

Upon request of the promoter/organizer of the event, it may be necessary to provide identification data for compliance with legal obligations, for example, when it is mandatory to issue a ticket or invoice to the user in accordance with the applicable regulations.

In case you access your account through your FACEBOOK social network account, you must know that the operator of this social network is the entity Facebook Inc. with headquarters at 1601 S. California Ave, Palo Alto, CA 94304, USA. When you access through this social network or you click on the "Like" button, the user's browser will connect to Facebook servers and the social network receives information about the user's web access, date and time of access, IP address of the user and may retain information about such access in the user's Facebook account. If the user clicks on the "Like" button in the purchase process, this information is also transferred to Facebook and stored in the user's account. In any case EVENTIM.Light has no influence on the plug-ins that collect such information, being in such case necessary to access such information through the Privacy Policy of such social networks.

In case you give a "Like" of any social network, you will be directed to it, and you must know at all times that when you enter your browsing space you must take into account its privacy policy.

Occasionally, we are asked for information about transactions and users by law enforcement agencies for investigative purposes, or by judicial or administrative authorities in inspection processes.

Personal data is also provided to EVENTIM.Light's service providers in the context of contracting or subcontracting services such as, for example, payment gateways and financial institutions, IT or technology service providers, venue access control companies, courier companies, customer service providers, marketing and advertising service providers and partners.

2.7. Rights

You can exercise the rights recognized in the current legislation on data protection (access, rectification, deletion, opposition, limitation of processing and portability, as appropriate), by sending a written communication to the Data Controller to the postal address at Calle Serrano Anguita 8; 28004 Madrid, as well as through the form available at: help (https://centrodeayuda.entradas.com/hc/es/requests/new). The interested User must attach a copy of his/her national identity card, passport or other valid document that identifies him/her. If you wish to unsubscribe from commercial communications you can do so by the means mentioned above or by accessing your user area and managing your subscriptions yourself in "Notifications and Newsletter Sending".

You also have the possibility to file a complaint with the Spanish Data Protection Agency: https://www.aepd.es/agencia/contacto.html

2.8. Third party data

If you provide us with personal data of third parties, for example, in the context of customer service queries, you guarantee that you have obtained the consent of the owners of the personal data for the communication of their data to EVENTIM.Light, as well as having informed them about the purposes and the way in which we need to process their personal data. If you provide us with such data in the field of Social Networks remember not to disclose personal data of third parties in public messages, always do it by private message.

3. COOKIES

This EVENTIM.Light website uses its own and third party cookies for analytical purposes and to be able to offer you, based on your browsing profile, advertising related to your preferences. We also share information about the use of the website with our advertising partners.

In EVENTIM.Light we have implemented a tool that allows you to modify the default settings and choose what type of cookies you want to enable / disable. Therefore, when you access our website you can accept the installation of cookies or you can change the default settings. Please note that, depending on the category of cookies you disable, it is possible that some services or functionalities that we offer may be affected.

You can also, at any time, revoke your consent to the use of cookies by configuring your own permissions. If you wish to change the settings to enable/disable cookies, you can do so in the Privacy Preference Center.

What are cookies?

Cookies are text files containing small amounts of information related to your user, preferences or device that are downloaded to your computer when you access certain websites, such as this one. The cookies are then sent back to the originating website (first-party cookies) or to other websites (third-party cookies). The information generally does not identify you directly and can provide you with a more personalised web experience.

Cookies allow these websites, among other things, the proper functioning of the website, personalize your user experience, improve the functionality of the website, store and retrieve information about your browsing habits or those of your computer, show you advertising based on your browsing profile and, in certain cases, recognize your device.

The term "cookies" can include other similar technologies such as "pixels". A pixel is a piece of code that is placed on the website to activate a cookie that provides information about the visit.

What types of cookies does this website use?

Cookies on this website may be used for technical, functional or advertising purposes.

Technical cookies: These cookies are necessary for the website to function properly and cannot be disabled from our systems. Therefore, they are mandatory. They are usually only set in response to your actions when you request services, such as setting your privacy preferences, logging in or completing forms. You can set your browser to block or alert you to these cookies, but some areas of the site will not function. These cookies do not store any personally identifiable information.

The technical cookies used are listed below:

- Consent Manager: Tool for regulatory compliance and cookie consent management. Thanks to this tool you can configure your cookies and enable/disable them by category.

Functional cookies : This category includes personalization and analytical cookies. These cookies allow us to improve the functionality of the website, improve your user experience, adapt content and advertisements to your browsing profile, capture and remember your user preferences, enable social interactions, analyse traffic and browsing habits, as well as perform statistics. They may be set by our company or by external providers whose services we have added to our pages. If you do not allow the use of these cookies, it is possible that some of these services may not work properly (e.g. shopping basket, access to secure areas, online billing).

The functional cookies used are listed below:

- Google analytics: This is a tool owned by Google Inc. that helps us measure how users interact with the content of the site. So, when you browse our website, Google Analytics provides us with JavaScript tags (libraries) to record information about the pages you have viewed, for example, the URL of the page. These libraries use HTTP cookies to "remember" what you have done on the pages or in your interactions with our website. You can read more about how Google Analytics uses cookies here (https://support.google.com/analytics/answer/6004245).

- Amazon Web Service: This is a tool owned by Amazon that helps us measure how users interact with site content. When you browse our website, Amazon Web Service provides us with JavaScript tags (libraries) to record information about the pages you have viewed, such as the URL of the page. These libraries use HTTP cookies to "remember" what you have done on the pages or in your interactions with our website.

Advertising Cookies : These cookies may be set through our site by our advertising partners. They may be used by those companies to create a profile of your interests and show you relevant advertisements on other sites. They do not directly store personal information, but are based on the unique identification of your browser and Internet device. If you do not allow these cookies to be used, you will see less targeted advertising.

The advertising cookies used are listed below:

- DoubleClick: They are also owned by Google, Inc, which provides us with information about the date and time, type of hardware and software used, search history, as well as the IP address of the user. This type of cookies are used to improve advertising. They are often used to target advertising to content that is relevant to a user, improve campaign performance reports and avoid showing ads that the user has already seen.

- Amazon Adsystem: They are also owned by Amazon, which provides us with information about the date and time, type of hardware and software used, search history, as well as the IP address of the User. This type of cookies are used to improve advertising. They are often used to target advertising to content that is relevant to a user, improve campaign performance reports and avoid showing ads that the user has already seen.

In some occasions the ticket sale process is part of a web page whose owner can be (1) the company that owns a venue, (2) the promoter, organizer or distributor of an event, (3) a distributor authorized by entradas.com for the sale of tickets. In these cases, whether the sale of tickets is integrated into the navigation or through a new window, some pixels may be used that provide information that is shared with the owner of the website, and whose purpose is to optimize their marketing investments for the sale of tickets:

- Google - Tracking of the pages through which the user passes and purchases made through the tool.

- Facebook - Tracking of the pages through which the user passes and purchases made through the tool.

- Twitter - Tracking of the pages the user goes through and the purchases made through the tool.

- Buekai - Tracking of the pages the user goes through and the purchases made through the tool.

- Sizmek - Tracking of the pages the user goes through and the purchases made through the tool.

What is the cookie retention period?

There are cookies that only remain stored during the session (session cookies) and others that remain stored for a certain period of time or indefinitely (persistent cookies). If you want to know the period of persistence of cookies you can do it here (https://www.entradas.com/obj/media/ES-eventim/pdf/es/persistencia-cookies-julio19.pdf) .

The persistence period of each cookie depends on the company that designed it and is not related to EVENTIM.Light. Therefore, if you wish to shorten the persistence periods of the same, remember that you can do so through your browser as indicated below.

How can I disable cookies from my browser?

We remind you that, if you wish, you can also disable cookies through your Internet browsers. These are the links to the most common browsers on the market:

For more information about Internet Explorer, click here (https://support.microsoft.com/es-en/help/17442/windows-internet-explorer-delete-manage-cookies) . For more information about Google Chrome, click here (https://support.google.com/chrome/answer/95647?hl=es) .

For more information about Opera, click here (https://help.opera.com/en/latest/web-preferences/#cookies) . For more information about Mozilla firefox, click here (https://support.mozilla.org/es/kb/habilitar-y-deshabilitar-cookies-sitios-web-rastrear- preferences?redirectlocale=en&redirectslug=enable-and-disable-cookies-that-we-sites) . For more information about Safari, click here (https://support.apple.com/es- en/guide/safari/sfri11471/mac) .

Last updated: 21/07/2022

Privacy Policy

1. Responsible for the treatment

The entity responsible for the processing of personal data is La Sonrisa de Vigo S.L. (hereinafter, the "Promoting Entity"), domiciled in Rogelio Abalde 22 bj 36201 Vigo.

2. Data processed

For the management of web services, identification data (name, surname, postal address, email address and telephone number), data relating to means of payment and the history of purchases made are processed. The data that we ask you for as compulsory are necessary to provide you with the service you request at all times and to execute the contract, or to comply with legal obligations. Otherwise, it would not be possible to execute or sign the contract, or the Promoting Entity would not be able to comply with its legal obligations.

When you visit our Ticket Shop, in some circumstances we and, as the case may be, Promoting Entity analyze and document how you use our Ticket Shop, e.g. by identifying the number of Ticket Shop visitors, your surfing patterns, which events and parts of our Ticket Shop interest you, the origin of Ticket Shop visitors and, if you buy a ticket, your order and shopping basket data. To this end we process the following personal data:

IP address
UU-ID
WEB-ID
Device fingerprints
Browser fingerprints
Cookies (see cookie information)
Geo IP-location

All fields requested in the collection forms are mandatory. Optional fields are marked as such.

3. Purpose and legitimacy

The Promoter will process your personal data based on the execution of the contractual relationship derived from your acceptance of the terms and conditions in the purchase of the tickets for the following purposes:

Management of the sale of tickets for the event.
Event management, including access control to the event, resolving any incident, relocation of seats, event cancellation, etc.
Sending notifications related to the event, such as schedole information or updates.

If we obtain your consent, the processing of your data is based on Art. 6 Para. 1 S. 1 lit. a GDPR. You can revoke your consent at any time with future effect. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR furthermore to pursue our legitimate interest to conduct analyses and, on the basis of these analyses, improve our Ticket Shop and our products and services as well as to prevent fraud.

4. Addressees

The buyers' identification data may be provided to companies involved in the management of the event, based on the execution of the contract.

In case of request, personal data of transactions and users may be shared with the State Security Forces and Corps for investigation purposes, or with judicial or administrative authorities in inspection processes.

Personal data are also provided to service providers of the Promoting Entity, who will process them in the name and on behalf of the Promoting Entity, in the context of contracting or subcontracting services such as, for example, IT or technology service providers, access control companies, or courier companies.

5. Conservation period

The Promoting Entity will keep your personal data for the period necessary to comply with the purposes stated, and even afterwards, duly blocked, for the period of limitation of any possible liabilities derived.

6. Cookies and Analytics

The Promoter Entity uses Google Analytics, a web-analytics service from Google LLC (“Google”) on our websites to perform the analyses. Google Analytics uses cookies which allow an analysis of the use of our websites. The information generated by the cookie on the use of our websites is generally transmitted to a server of Google in the USA and stored there. We and, as the case may be, the organizer La Sonrisa de Vigo S.L. use Google Analytics only including IP anonymization („_anonymizeIp()“).

As a result, IP addresses are processed in abbreviated form and a direct correlation to individuals can be ruled out. When using our websites, the IP address of the visitors to the website is abbreviated by Google beforehand within the member states of the European Union or other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there. Google, working under contract for CTS EVENTIM AG & Co. KGaA, uses this information to analyze the use of the Ticket Shop, generate reports about Ticket Shop activities and render other services to EVENTIM related to the use of the Ticket Shop and internet use.

The IP address transmitted to Google Analytics by the browser of the user is not combined with other data held by Google according to Google.

You can prevent the storage of cookies by means of a corresponding adjustment of your browser software; we advise you, however, that in this case some functions of these websites may not be used to their full extent.

In addition, you can prevent the transmission of the data generated by the cookie and relating to your use of the Ticket Shop (including your IP address) to Google and the processing of this data by Google, by downloading the browser plug-in from the following link and installing it accordingly:

https://tools.google.com/dlpage/gaoptout?hl=de

This creates an opt-out cookie that prevents the future collection of your data upon visiting the Ticket Shop. This opt-out cookie only applies to this browser and only for this website and is stored on your device. If you delete cookies from this browser, you must reset the opt-out cookie accordingly.

More information on the terms and conditions of use and data protection can be found at:

https://www.google.de/intl/de/policies/terms/regionali.html
https://www.google.de/intl/de/policies/privacy

Due to the use of Google Analytics your personal data can be under certain circumstances transmitted to the USA. Google LLC is subject to the EU-U.S. Privacy Shield. This provides adequate protection to your personal data. The full text of the EU-U.S. Privacy Shield Framework can be obtained from the following link:

https://www.privacyshield.gov/servleli/servlet.FileDownload?file=015t00000004qAg

7. Rights

You can also file a complaint with the Spanish Data Protection Agency.