Information about the processing of your data in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR)
1. General Information
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
This Privacy Policy explains what data we collect when you use our website and for what purposes it is processed.
As a general rule, our website can be used without providing personal data.
2. Controller
The controller responsible for data processing on this website is:
Ticket AG
Schaanerstrasse 99
9490 Vaduz
Liechtenstein
Phone: +423 239 7000
Email: info@ticket.ag
3. Contact Details of the Data Protection Officer
HSDK Consulting UG (haftungsbeschränkt)
Eschersheimer Landstraße 42
60322 Frankfurt am Main
Germany
Phone: +49 69 870092860
4. Access Data (Server Log Files)
When you access our website, information is automatically collected by the web server and stored in so-called server log files.
The following data may be processed:
IP address (where applicable, shortened or anonymized)
Date and time of access
Page accessed
Amount of data transferred
Browser type and browser version
Operating system
Referrer URL
This data is used exclusively for the technical provision of the website and to ensure the security and stability of our systems.
This data is not combined with data from other sources.
The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).
5. Cookies and Consent
Our website uses technically necessary cookies as well as — only after your explicit consent and currently only on the "Festival-Ticketing" page — cookies and similar technologies for marketing and analytics purposes (Meta Pixel and HubSpot tracking, see Sections 10 and 11).
Technically necessary cookies are required to provide basic functions of the website and to ensure its proper operation. The legal basis for this processing is Art. 6(1)(f) GDPR in conjunction with Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Cookies and similar technologies requiring consent are only used after you have clicked "Accept" in our cookie notice. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can revoke your consent at any time with effect for the future by clicking "Cookie settings" on the relevant page and selecting "Decline".
Your choice (consent or refusal) is stored in your browser's local storage so that the cookie notice does not reappear on every page view. This storage is technically necessary for the operation of the consent management (Section 25(2) TDDDG).
6. Disclosure of Data
As a general rule, we do not disclose your personal data to third parties unless:
you have expressly given your consent;
disclosure is necessary for the performance of a contract; or
we are legally required to disclose the data.
Where service providers are engaged to operate our website, data is processed on the basis of a data processing agreement pursuant to Art. 28 GDPR.
7. Retention Period
Personal data is stored only for as long as necessary to fulfil the respective purpose or for as long as statutory retention obligations apply.
Newsletter data is stored until you withdraw your consent.
8. Your Rights
Under the applicable statutory provisions, you have the right at any time to:
obtain information about the personal data stored about you;
have inaccurate data corrected;
have your data deleted;
restrict the processing of your data;
data portability; and
object to the processing of your data.
You also have the right to withdraw any consent you have given at any time with effect for the future.
If you believe that the processing of your personal data violates applicable data protection law, you also have the right to lodge a complaint with a supervisory authority.
9. Data Security
We use technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized access.
Our security measures are continuously improved in line with technological developments.
10. Meta Pixel (Reach Measurement and Conversion Tracking)
On individual pages of our website — currently only on the "Festival-Ticketing" page — we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). The Meta Pixel helps us measure and improve the reach and effectiveness of our advertisements and to determine whether visitors reached our website via our ads and performed a desired action there (e.g., submitting a contact request).
The Meta Pixel is used only if you have previously given your explicit consent via our cookie notice. The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Without your consent, the Meta Pixel is not loaded and no data is transferred to Meta.
If consent has been given, information about your device, your browser, your IP address and your usage behavior is collected and transmitted to Meta. In particular, the following events are recorded: page views ("PageView"), views of specific content ("ViewContent") and the successful submission of our contact form ("Lead"), each where applicable with additional details such as the name of the form and an estimated flat-rate inquiry value.
If you have given consent and submit our contact form, individual form entries — in particular your email address, phone number, first and last name — may additionally be transmitted to Meta in pseudonymized form (as hash values) in order to improve the attribution of conversions to our ads ("Advanced Matching"). The conversion into hash values takes place in your browser; no plain-text data is transmitted to Meta as part of Advanced Matching.
Data may be transferred to the USA. Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework; in addition, Standard Contractual Clauses of the EU Commission are used. Insofar as Meta processes the data for its own purposes, Meta is independently responsible for this; for the collection and transmission of the data, joint controllership exists pursuant to Art. 26 GDPR.
You can revoke your consent at any time with effect for the future by clicking "Cookie settings" on the relevant page and selecting "Decline".
The information set by the Meta Pixel is stored for the duration of the respective cookie lifetimes.
Further information on data processing by Meta can be found in Meta's Privacy Policy at https://www.facebook.com/privacy/policy/.
11. HubSpot (Contact Form)
We reserve the right to amend this Privacy Policy in order to reflect changes in legal requirements or changes to our website.
For our contact form (currently on the "Festival-Ticketing" page) and the processing of incoming inquiries, we use services of HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland, a subsidiary of HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA ("HubSpot").
a) Processing of your inquiry: When you contact us via the contact form, we process the data you enter (e.g., name, email address, phone number, company and the content of your inquiry) in order to handle your inquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR insofar as your inquiry is aimed at the conclusion or performance of a contract, and otherwise our legitimate interest in the efficient handling of incoming inquiries (Art. 6(1)(f) GDPR). The contact form can be used without consenting to cookies.
b) HubSpot tracking (only with consent): HubSpot may additionally use cookies and similar technologies to analyze your usage behavior on our website and to link your inquiry to your visit. This tracking takes place only if you have previously given your explicit consent via our cookie notice (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without your consent, we activate HubSpot's "do not track" feature: the contact form remains fully usable, but no HubSpot tracking cookies are set and your inquiry is not linked to your usage behavior.
Our HubSpot account is operated in data centers within the European Union. Nevertheless, personal data may be transferred to HubSpot, Inc. in the USA in the course of service provision (e.g., support, maintenance). HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework; in addition, Standard Contractual Clauses of the EU Commission are used. We have concluded a data processing agreement with HubSpot pursuant to Art. 28 GDPR.
Your data will be deleted as soon as it is no longer required for processing your inquiry and no statutory retention obligations apply.
You can revoke your consent to HubSpot tracking at any time with effect for the future by clicking "Cookie settings" on the relevant page and selecting "Decline".
Further information on data processing by HubSpot can be found at https://legal.hubspot.com/privacy-policy.
11. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy in order to reflect changes in legal requirements or changes to our website.