Privacy policy

Privacy Statement EVENTIM.Light Customers

This Privacy Statement informs you about the processing of your personal data by CTS Eventim Nederland B.V. in the context of the use of the EVENTIM.Light Online shop.

1.Scope, Controllers, and Definitions

1.1. Scope of this Privacy Statement

1. This Privacy Statement applies to the processing of personal data when visiting and using the EVENTIM.Light Online shop, hereinafter referred to as the “online shop” or “website.” You can access, store, and print this Privacy Statement at any time and free of charge on this website.

2. This Privacy Statement only applies to the processing of personal data as referred to in Article 1.1, Section 1. Other websites (e.g., the ticket shop on www.eventim.nl) are not covered by this Privacy Statement.

1.2. Contact

Eventim processes your personal data as the data controller. Below are our contact details:
CTS Eventim Nederland B.V., located at Marktplein 108, (2132 DD) Hoofddorp, registered in the trade register under number 34289210.
Email: info@eventim-light.nl
Phone number: 088-0112625.

1.3. Definitions

This Privacy Statement is based on the following legal terms concerning data protection, which we have defined below for clarity:

1. GDPR refers to the General Data Protection Regulation.

2. The EVENTIM Group includes all companies affiliated with CTS EVENTIM AG & Co. KGaA.

3. Recipient: a natural or legal person, a government agency, a service, or another body, whether or not a third party, to whom personal data is disclosed. Government agencies that may receive personal data in the context of a specific investigation under Union or member state law are not considered recipients; the processing of such data by these authorities must comply with the applicable data protection rules for the respective processing purpose. Depending on the payment method selected for ticket purchases, recipients of your personal data may include banks.

4. Personal Data refers to any information related to an identified or identifiable natural person ("the data subject"); an identifiable person is one who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. Personal data may include, for example, your name, contact details, user behavior, or bank information.

5. Controller: a natural or legal person, government agency, service, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or member state law, the controller may be designated based on specific criteria set out in that law.

6. Processing: any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, aligning or combining, restricting, erasing, or destroying data. Processing may include, for example, the collection and use of your order data for ticket sales.

2. Purposes, Legal Bases, and Categories of Data in the Processing of Your Personal Data.

2.1. Processing of Your Data During a Visit to the Online Shop, Even if You Do Not Make a Purchase

When you visit our online shop and use it solely for informational purposes, i.e., without actively providing us with information, we, CTS Eventim Nederland B.V., process your personal data for the following purposes and based on the following legal grounds:

2.1.1. Processing for IT Security Purposes

1. When you visit the online shop, we process your personal data (e.g., your IP address) that is technically necessary for us to offer you our online shop and to ensure stability and security while visiting our online shop.

2. For the identification and defence against threats (bot defence, DDoS attacks) and the delivery and acceleration of online applications, we use services from Akamai Technologies GmbH, Parkring 20-22, 85748 Garching, Germany, on our websites.

Akamai processes the IP address of your device. On behalf of EVENTIM, Akamai uses this information to prevent malware threats to our website and to ensure a high level of availability of our website. The IP address is generally sent to Akamai servers in the USA and processed there. This data transfer takes place based on EU model contractual clauses, ensuring adequate protection of your personal data.

We process your personal data based on Article 6(1)(f) of the GDPR, our legitimate interest in being able to technically offer you our online shop, ensuring the stability and operational security of the IT systems used, and preventing misuse of these systems.

2.1.2. Processing for Analytical Purposes

1. When you visit our online shop, we analyse and document how you use our online shop (e.g., to determine: the number of visitors to the online shop, your browsing behaviour, which events and areas you are interested in within our online shop, the origin of the visitors to the online shop, and if you purchase a ticket, your order and shopping cart data). For this purpose, we process the following personal data:

  • IP address
  • UU-ID
  • Web-ID
  • Device fingerprints
  • Browser fingerprints
  • Cookies
  • Geo IP location

We process your personal data based on Article 6(1)(f) of the GDPR, our legitimate interest in conducting these analyses and based on these analyses, improving our online shop and our products and services, and preventing fraud.

2. CTS Eventim Nederland B.V. uses Google Analytics, a web analytics service provided by Google LLC ("Google"), on our websites to perform the analyses. Google Analytics uses cookies that enable the analysis of the use of our websites. The information generated by the cookie about the use of our websites is generally transmitted to a server of Google in the USA and stored there. If IP anonymisation is activated on our websites, the IP address of the website visitor is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a server of Google in the USA and shortened there. On behalf of CTS Eventim Nederland B.V., Google will use this information to analyse the use of these websites, generate reports on website activity, and provide other services to CTS Eventim Nederland B.V. related to the use of the websites and internet usage.

The IP address transmitted by the user's browser to Google Analytics is not merged with other data held by Google.

You can prevent the storage of cookies by adjusting your browser software; however, we point out that in this case, some functions of these websites may not be fully usable.

You can also prevent the collection of data generated by the cookie regarding your use of the websites (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en .

An opt-out cookie will be set that prevents your data from being collected in the future when you visit these websites. The opt-out cookie is valid only in this browser and only for this online shop and is stored on your device. If you delete the cookies in this browser, you must reset the opt-out cookie.

More information about the terms of use and data protection can be found at:

• ENL version: https://policies.google.com/terms?hl=en&gl=en

In connection with the use of Google Analytics, your personal data will be transferred to the United States. This data transfer is based on EU standard contractual clauses, which ensure adequate protection of your personal data.

3. A Meta Pixel ("Facebook/Instagram") may be placed on our site, either by us or by the provider. This pixel collects information about the use of these websites (such as details about the visited pages) on behalf of Meta. For these purposes, a cookie may be stored on your computer. This cookie can be used to track your behaviour after you have viewed or clicked on a Meta advertisement. This process is used to evaluate the effectiveness of Meta advertisements for statistical and market research purposes in order to optimise advertising measures.

The data collected is anonymous to us, and we cannot draw any conclusions about you as a user. By using the pixel, we can show you interest-based advertisements for our offers on your Facebook/Instagram account. If we process your data with your consent, we do so based on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect. We also process personal data based on Article 6(1)(f) of the GDPR, reflecting our legitimate interest in providing you with relevant advertisements.

The data may also be used by Meta for its own advertising purposes and for third-party advertising purposes. For example, based on your visit to our websites, Meta may infer certain interests and use this information to display suitable third-party advertisements on your Facebook account.

In connection with the use of the Meta Pixel, your personal data will be transferred to the United States. This data transfer is based on EU standard contractual clauses, which ensure adequate protection of your personal data.

For more information about data processing by the Meta Pixel, please refer to Meta's data protection information:

• https://www.facebook.com/privacy/explanation

If you wish to object to data processing by the Meta Pixel, please click on the link (opt-out option):

• Facebook pixel: https://www.youronlinechoices.com/nl/jouw-advertentie-voorkeuren

4. This site uses the MapBox mapping service from Mapbox, Inc. ("MapBox"). MapBox uses user data (in particular, IP addresses and location data) solely for displaying map features and storing selected settings.

In connection with the use of MapBox, your personal data will be transferred to the United States. This data transfer is based on EU standard contractual clauses, which ensure adequate protection of your personal data.

Where necessary, we will request your consent for data collection via MapBox, which means we do so based on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect. We also process your data based on Article 6(1)(f) of the GDPR; the use of MapBox allows us to present our online offerings in an attractive way and facilitates the findability of locations specified on our websites.

For more information on data processing by MapBox, please refer to the corresponding Privacy Policy:

2.1.3. Use of cookies

Please check our cookie policy for the use of cookies in our online shop.

2.2. Collection of Personal Data When Purchasing a Ticket

1. If you want to purchase a ticket in the online shop, you must provide personal data to place the order. The mandatory fields in the input screen are marked accordingly. We process your personal data under Article 6(1)(b) of the GDPR to fulfil the specific order and use the data for the execution and processing of the agreement.

2. If you purchase a ticket for another person (third party), the personal data you provide about the third party (name and, if applicable, contact details) will be processed for ticket personalization. The processing of this data is done for the execution and processing of the agreement under Article 6(1)(b) of the GDPR. If you provide data for a third party when purchasing a ticket, please ensure that you are authorized to share this information and that the third party is sufficiently informed about the processing of their data. We are not able to verify this, and we ask that you do not make purchases if you do not have the person’s permission to provide their personal data.

3. For certain events, there may be special categories of tickets, such as for wheelchair users. Booking such tickets may indicate a person’s health or certain beliefs. We only process the fact that a certain category of tickets has been booked to provide access to the corresponding places or services.

2.3. Informative emails in case of postponement/cancellation of events

If an event is postponed or cancelled, you will be notified via email. Your personal data will be processed based on Article 6(1)(b) of the GDPR for the purpose of executing and processing the agreement with you.

2.4. Other Informative Emails and Newsletters

1. If you have purchased a ticket from us (Article 2.3), we, CTS Eventim Nederland B.V., may send you informative emails about the route, parking, and any requirements from the organizer (e.g., permitted bag sizes). Your personal data will be processed based on Article 6(1)(b) of the GDPR for the purpose of executing and processing the agreement with you.

2.5. Customer Care

1. You can contact us if you have questions regarding an event and your ticket purchase, wish to exercise your rights under this Privacy Statement, or want to file a complaint (see the contact details in 1.2).

2. Depending on the nature of your request, we will respond to your inquiry using your personal data stored in our systems as part of other data processing (e.g., data you provided during your ticket purchase).

3. The processing of your personal data takes place based on Article 6(1)(b) of the GDPR for the purpose of executing and processing the agreement with you. If you exercise your rights as a data subject, we process your personal data based on Article 6(1)(c) of the GDPR. If you wish to obtain information or file a complaint, we process personal data based on Article 6(1)(f) of the GDPR; the interest in responding to your complaint.

2.6. Cancellation of Order

1. It is possible that your order needs to be cancelled. In this case, your personal data will be processed based on Article 6(1)(b) of the GDPR.

2.7. Reminders, Debt Collection, Enforcement of Legal Claims

1. We will inform you by email, SMS, post, or phone about any outstanding claims related to the purchase of tickets and will send you a reminder if necessary. If payment is not received, we may initiate a debt collection procedure.

2. The debt collection procedure will be carried out by a designated contractor or debt collection agency. To the extent necessary for the execution of the procedure, the contractor or debt collection agency will conduct address investigations, use publicly accessible registers, and collect additional information about you if necessary.

Your personal data will be processed for the execution and processing of the agreement with you based on Article 6(1)(b) of the GDPR and based on our legitimate interest in preventing abuse of the online shop and, if necessary, exercising legal claims, including debt collection, based on Article 6(1)(f) of the GDPR.

3. During a legal dispute with you, your personal data will be processed to exercise and/or defend our rights. If necessary, during a legal dispute, data from other sources (e.g., public registers) will also be used for this purpose. Your personal data will be processed to comply with a legal obligation based on Article 6(1)(c) of the GDPR or to protect, enforce, and/or defend our legal interests based on Article 6(1)(f) of the GDPR.

2.8. Other Processing

2.8.1. Interne audits and Compliance Requirements

1. Your personal data may be processed in the context of audits within the EVENTIM Group (see Article 1.3.2.) both domestically and internationally. In this regard, CTS Eventim Nederland B.V., as the sole data controller, may also utilize data obtained from other public sources.

2. Corresponding processing of your data may also occur when we implement compliance programmes and measures, including those related to the Corporate Governance Code, and to identify and rectify misconduct within the company.

3. As part of such processing, your personal data may also be processed. We process your personal data based on Article 6(1)(c) of the GDPR to fulfil our legal obligations. Additionally, we process your personal data based on Article 6(1)(f) of the GDPR, which serves our legitimate interest in assessing the processes and efficiency of the EVENTIM Group, addressing misconduct, preventing fraud, and, if necessary, enforcing and/or defending our legal rights.

2.8.2. Analyses

Based on the data we process as outlined in Article 2 of this Privacy Statement, CTS Eventim Nederland B.V. may conduct analyses as the sole data controller. These analyses serve as the basis for business decisions. We process your personal data based on our legitimate interest in improving our offerings in accordance with Article 6(1)(f) of the GDPR. The analyses generated in this context do not contain any references to individuals, making it impossible to draw conclusions about you.

2.8.3. Storage and Deletion of Personal Data

1. Your personal data will be retained as long as necessary for the purposes (Artikel2) for which they are processed.

2. Once your data is no longer required for the purpose mentioned in Article 2, CTS Eventim Nederland B.V. will retain your personal data for the period during which you can assert claims against us or for the period during which we can assert claims against you.

3. Additionally, your personal data will be retained as long as we are legally obligated to do so.

2.8.4. Receiving personal data

1. If you purchase tickets in the online shop (Article 2.3), we process your personal data as the data controller. We transfer your personal data based on the contract concluded with our contracting partners for the purpose of executing the agreement with you (Article 6(1)(b) GDPR). The organiser becomes independently responsible for further processing of the data upon receipt. For more information, please consult the privacy statement of this organiser.

2. In the setup, implementation, and management of the online shop, your personal data is shared with companies within the EVENTIM Group (see Article 1.3 No. 2) as part of the collaboration process. The transfer is based on Article 6(1)(f) GDPR, our legitimate interest in ensuring that your order and our internal administrative activities are carried out efficiently and to improve our products and services.

3. Additionally, your personal data is shared with IT service providers that supply platforms, databases, and tools for the products and services (for example, the online shop) and analyse user behaviour in the online shop. The transfer of your personal data takes place based on Article 6(1)(b) GDPR for the purpose of executing the agreement with you and based on Article 6(1)(f) GDPR due to our legitimate interest as the data controller in improving the products.

4. When you purchase a ticket, depending on the payment method you choose, your personal data is shared with banks, payment service providers, financial service providers, and credit card companies to process the payment and, if necessary, to refund the purchase price. Your personal data is shared based on Article 6(1)(b) GDPR to process the ticket purchase and refund it in the event of cancellation.

5. For the execution of the agreement with you, particularly for payment processing, we share your personal data with KPS-Payment Verwaltungs-GmbH. The transfer of your data takes place for the purpose of executing the agreement with you based on Article 6(1)(b) GDPR and based on Article 6(1)(f) GDPR, due to our legitimate interest in ensuring that the execution of the agreement, particularly payment processing, is carried out efficiently and collaboratively.

6. In the context of legal disputes, we share your data with the competent court and, if you have engaged a lawyer, with that lawyer to pursue the legal dispute.
We process your personal data to comply with our legal obligations under Article 6(1)(c) GDPR as well as due to our legitimate interest in protecting, enforcing, and/or defending our legal interests, based on Article 6(1)(f) GDPR.

7. In the event the ownership of our company (in part) changes, we will provide your personal data, where legally permitted, to the successor of our company for use for the purposes mentioned in this statement.

8. In addition to the cases mentioned above, we only transfer your personal data to the extent that there is a legal obligation to do so. The transfer takes place based on Article 6(1)(c) GDPR.

2.8.5. Legitimate Interests and Right to Object

1. We process your personal data based on legitimate interests, particularly to ensure the IT security of the online shop, to carry out any marketing campaigns, to prevent fraud and misuse, to prevent defaults on payments, to protect, enforce, and defend our legal interests (if necessary, through legal action), and to efficiently conduct internal administrative activities in a collaborative process with the organiser.
Information regarding the balancing of interests can be obtained via:

When your personal data is processed based on legitimate interests (Article 6(1)(f) of the GDPR), you have the right to object to the processing of your data at any time. We will respect your objection unless there are compelling reasons, as defined under Article 21 of the GDPR, not to do so. When personal data is processed for the purposes of direct marketing, you have the right to object to the processing of the relevant personal data for such marketing at any time (Article 21(2) of the GDPR).
Direct your request to:

  • by e-mail: info@eventim-light.com
  • By telephone: 088-0112625
  • In writing to: CTS Eventim Nederland BV, att. EVENTIM.Light, Marktplein 108, 2132 DD Hoofddorp

2. If you object to data processing in accordance with Article 5(1), we will process the personal data collected in this context to comply with your request. In this case, your personal data will be processed to fulfil a legal obligation based on Article 6(1)(c) of the GDPR.

2.8.6. Your Rights

1. In accordance with the provisions of the GDPR, you have the right to request at any time that we:

  • inform you about the personal data concerning you that we process (Article 15 GDPR),
  • correct any personal data concerning you that is inaccurate (Article 16 GDPR), and/or
  • delete (Article 17 GDPR), block (Article 18 GDPR), and/or transfer (Article 20 GDPR) your personal data.

2. Send your request:

  • by e-mail: info@eventim-light.com
  • by telephone: 088-0112625
  • In writing to:: CTS Eventim Nederland BV, att. EVENTIM.Light, Marktplein 108, 2132 DD Hoofddorp

3. If you exercise your rights against us, we will process the personal data collected in this context to the extent necessary to comply with your request. In this case, your personal data will be processed based on Article 6(1)(c) of the GDPR to fulfil a legal obligation.

4. Without prejudice to your rights under Article 7, you have the right to file a complaint with a data protection supervisory authority if you believe that the processing of your personal data under this Privacy Statement is in violation of the GDPR (Article 77 of the GDPR).

2.8.7. Other Provisions

1. The provisions of this Privacy Statement (available free of charge on this website) apply in the version that is valid at the time of using the online shop.

2. We reserve the right to supplement and amend the content of the Privacy Statement. The updated statement will apply from the date it is published on this website.

2.8.8. Contact details of the Data Protection Officer

For CTS Eventim Nederland B.V.:

Data Protection Officer CTS Eventim Nederland B.V., Marktplein 108, 2132 DD Hoofddorp, persoonsgegevens@eventim.nl .

For matters related to the organizer, please refer to the Privacy Policy of the organizer.

Cookie-information

Scope

In this cookie information, details are provided about the use of cookies by CTS EVENTIM Nederland B.V. on this website, in accordance with article 2.1.3 of the Privacy Policy.

General Information about cookies

"Cookies" are small text files stored in the browsers of your devices when you visit this website. Cookies can be used to save and track your actions and settings on this website during your browsing session and, if necessary, afterward. Additionally, cookies ensure that your browser is recognized. For example, the contents of your shopping cart can be restored after you have left the website.

Types of cookies used

When operating this website, we use different types of cookies:

  • Essential cookies are always set and cannot be refused.
  • Analytical and comfort cookies as well as Marketing cookies are only placed after you have enabled them (consent).

First-party Cookies:

On the one hand, we use first-party cookies, meaning cookies set by the servers of this website that are only accessible to our servers.

Third-party cookies:

Additionally, this website also incorporates third-party cookies , which are placed by servers of others and/or this website or domain and are read by third parties.

Duration of storage Cookies

Session cookies:

Some of the cookies used are session cookies, meaning they are only stored for the duration of your visit to this website.

Persistent cookies:

Additionally, we also use persistent cookies, which are stored in your browser beyond a single session and are automatically deleted after a specified expiration date (for detailed information, see the Cookie Table)

Purposes of Cookie Usage

Strictly Necessary Cookies

We use cookies that are essential for the operation of the website and that enable you to use certain functions in order to access the website. Additionally, we use cookies to allow you to perform specific functions by automatically recognizing your browser. These include, for example, automatic detection and setting of the language and the recovery of the content of filled-out forms.

Analytical Cookies

These cookies allow us to count visitors and traffic sources so that we can measure the usage of our website and improve its performance. They help us analyse which pages are most and least viewed, and how visitors navigate our website. If you are logged into your personal Google profile while browsing our website, we also analyse demographic data such as age, gender, and interests based on Google's search behavior. This helps us optimize the website for you and provide relevant content. All information collected by these cookies is aggregated and therefore anonymous.

Cookie settings by users

You can use your browser settings to limit or completely prevent the storage of (certain) cookies across websites and to delete already stored cookies. For more detailed information, refer to the instructions or help function of your browser.

In principle, this website can still be visited and used even after limiting or disabling cookies in the browser settings. However, please note that a complete deactivation of cookies may particularly lead to limited functionalities of this website.

Date: 12-02-2025