Privacy and Cookie Statement Eventim (eventim.nl)

Privacy and Cookie Statement Eventim (eventim.nl)

Contents

I. Introduction
II. (Categories of) personal data, purposes and lawful bases
III. Special personal data and personal data relating to persons under the age of 16, automated decision-making
IV. Storage and deletion of your personal data
V. Sharing of personal data with third parties
VI. Cookies
VII. Social plug-ins
VIII. Software solutions, Mixpanel and Google Analytics
IX. Security
X. Exercising your rights under the GDPR
XI. Contact
XII. Changes

I. Introduction

EVENTIM Benelux B.V. (hereinafter “Eventim”, or “we” or “us”) is part of CTS Eventim AG & Co KGaA of Munich (Germany).

In these conditions:

Arrangement(s) An additional offer from a collaboration partner of Eventim, for which Eventim mediates.
Event The public or private event in which, by way of example, but not exclusively, a representation of an artistic and/or sporting nature is performed, being a leisure activity on a certain date, including, but not limited to, a musical theater-, theater or music performance, a concert, show or a sporting event.
Eventim EVENTIM Benelux B.V., also operating under the name Eventim, established in Groningen, with its visiting address at De Ruijterkade 113, 1011 AB Amsterdam (Chamber of Commerce no. 01140404
Customer The party that places the reservation with Eventim.
Location The place where the event takes place.
Organizer The party responsible for the organization of the event.
Agreement The agreement between the customer and the organizer or provider of an arrangement with regard to providing access to an event or arrangement.
Ticket The electronic (also "e-Ticket" or "Ticketdirect") or paper ticket to an event.

Eventim mediates in the sale of tickets (and related services / products) of our clients. The Client uses an (existing) Eventim customer account or creates a new client account and makes a reservation at Eventim. When creating a client account, the customer provides us with his or her Personal Data and gives Eventim explicit permission to process this Personal Data. This consent is, as stated in the provision, retractable at any time. In the event of a purchase, Eventim then establishes an agreement between the Customer and the Organizer of the event chosen by the Customer or the provider of the arrangement. and any additional services / goods Eventim is not a party to the final agreement (s). For the execution of the reservation and our legitimate interest to carry out the regular business activities, sharing of Personal Data with clients / partners is necessary.

This concerns, for example, the following goals:

  1. the confirmation of your presence;
  2. the delivery of your tickets and / or additional goods and services in connection with your visit including access to the event locations and changes or additions of products or services;
  3. sending information about the location, service e-mails or messages regarding the visit;
  4. assistance with online purchases, provision of online services and the use of mobile apps;
  5. communication with you (eg details about the show, answer to questions and complaints);
  6. statistical research;
  7. registration of complaints;
  8. fight against fraud.

We only share data for marketing purposes with your express consent.

Where this statement refers to website(s), this means all websites and apps on which Eventim’s products and services are sold. This may include the websites of third parties for which Eventim sells tickets.

We process your Personal Data for the purposes of these services. This data protection information applies to visits to and use of Eventim’s websites, on which a customer account can be created and tickets can be purchased, and to our activities on the websites of third parties/partners and social networks.

Personal Data is only processed by Eventim employees who are subject to a duty of confidentiality and for the purpose for which the data has been collected.

We process Personal Data in accordance with the applicable legislation and regulations. This includes the General Data Protection Regulation (hereinafter GDPR) and the related Implementation Act.

Under this legislation we are deemed to be the “Controller” (i.e. the (legal) entity who is responsible for the processing of Personal Data) in respect of all the data that we process about you whenever you use our services.

How and why does Eventim process Personal Data? When purchasing tickets or making a booking through the Eventim platform, for example, customers enter their details themselves or give them to an agent in our call centre. Customers are given the opportunity, through an opt-in facility, to specify whether they wish to receive information about Eventim, the events for which Eventim sells tickets and (other) Eventim products and services. Customers are usually also given the opportunity to specify, through an opt-in facility, whether they wish to receive information by email from the producer/organiser or the location owner, to which the privacy regulations (where available) of that party will apply.

Data that customers provide us with, where appropriate in conjunction with their booking history, may be used to send them a newsletter based on their preferences.

Unsubscribing

Whenever we send an email for direct marketing purposes, you will be given the opportunity to remove yourself from the database that we use for this through an unsubscribe link. You can also unsubscribe at any time via www.eventim.nl. Or using the contact details at the end of this statement.

II. (Categories of) personal data, purposes and lawful bases

We process your Personal Data whenever you visit our websites (or those of our partners/clients) including social media on which we are active), even if you don’t register. The Personal Data that we may process includes:

Identity & contact Usage & technology Transaction & preferences
First and last name Data on activity on our website or in our app Opt in
Sex Data on cross channel behaviour Amount of purchased tickets
Date of birth WEB ID Sales conditions of the order
Address data UUID Order number
Telephone number Device fingerprints Customer number
E-mail address Browser fingerprints Preferences
Bank account Geo IP location Internet speed
IP address Browser and device type Social media connections
Cookies Other personal data you may offer

Note: The law (GDPR) only permits the processing of (ordinary) Personal Data if there is a lawful basis for such processing. The lawful bases are:

  1. Performance of a contract or taking steps to enter into such a contract to which you are a party, e.g. the purchase contract.
  2. Consent given by you; consent that has been given can be withdrawn at any time in respect of future processing by contacting Eventim’s customer services department. To comply with this request, we will have to process the Personal data.
  3. Complying with legal obligations, e.g. the deduction of tax.
  4. Necessary to protect vital interests (e.g. to protect someone’s life).
  5. Public task/official authority (not applicable).
  6. Legitimate interests in so far as the law and your privacy so permit (e.g. our legitimate interests in carrying out our business activities unless your rights and freedoms are more important). Where we use them as a lawful basis, our Legitimate Interests are set out below. Further information can be obtained from our customer services department. You can object to the processing of your Personal Data on the grounds of Legitimate Interests at any time, unless compelling grounds pursuant to Article 21 of the GDPR prevent this. If you wish to do so, please contact Customer Services.

We specify below the purposes for which we (may) process Personal Data and the lawful basis on which we do so.

2.1 Making personalised offers on our websites

Note: whenever you visit our websites, we analyse and document your user behaviour so we can display personalised recommendations on the website based on this data.With your permission, we can offer you suggestions for suitable additional services such as an overnight stay, parking or catering. Cookies are used for this that can process personal data.

The lawful basis is legitimate interest (displaying product recommendations and marketing our products and services).

2.2 Advertising and Retargeting on Third-Party Websites and Social Networks

To show our visitors relevant events and offers, Eventim uses advertising services provided by external partners such as Google Ads, Meta (Facebook and Instagram), TikTok, and other advertising networks. These partners help us to personalize ads, measure campaign results, and build audiences based on areas of interest.

With your consent, we place cookies and similar technologies that collect information about your use of Eventim.nl. This information may be combined with data we already hold about you (such as previous purchases or interests in certain artists or events) to display more relevant advertisements — both on Eventim.nl and on other websites.

We also use Google Analytics 4 with Google Signals to analyze website usage and further personalize advertising. This involves combining data from Eventim.nl with information from logged-in Google accounts, provided the user has given consent in their own Google settings.

For more information about how Google processes data in the context of advertising and measurement features, please refer to Google’s Privacy & Security Policy.

The lawful basis is our legitimate interest (displaying product recommendations and marketing our products and services).

2.3 Display advertising

Note: as part of our display advertising, we run various campaigns using tags (pixels) and cookies from our retargeting providers. Whenever you visit our websites, tags and cookies are set and linked to products that you have viewed. This allows you to see separate displays for Eventim products. We also place banner advertising on Facebook, for example. Users with a similar profile to our website visitors/customers are the target audience.

The lawful basis is our legitimate interest (advertising our products and services using targeted marketing).

2.4 Making personalised recommendations/search engine marketing

Note: when you have finished making a purchase with us, a cookie is set by Google Adwords and Bing. If you subsequently enter similar search terms in search engines, personalised recommendations for Eventim products and services may be displayed.

The lawful basis is our legitimate interest (displaying product recommendations and marketing our products and services).

2.5 Facebook

Note: our websites include plug-ins for social media (e.g. Facebook "Like/Share button"). If you click on these and you have an account, a connection to the social network is established with the content that you have “liked”.

The lawful basis is consent, which you have given by activating and using the like/share button.

2.6 Advertising on Facebook and Instagram

Note: we place adverts on Facebook and Instagram. If you have an account with them and have agreed that adverts can be displayed, you will receive recommendations from us. These recommendations are generated on the basis of your interests (e.g. artist “Likes”), which are stored in your public profile on Facebook or Instagram. We process your public profile data for this.

The lawful basis is our legitimate interest (in being able to place adverts effectively and market our products and services).

2.7 Registration and creation of a customer account

Note: whenever you visit our websites, you can create a customer account. You can use this to purchase tickets, products and services, to find out more and to receive information about your favourite events/artists. You can take part in exclusive presales, subscribe to newsletters and take advantage of many other benefits relating to your ticket purchase. Personal data is required to register and use your customer account. Mandatory fields are marked as such in the entry field.

The lawful basis is the performance of a contract to which you are a party.

2.8 Registration and login using a single sign-on (SSO)

Note: Registration with Single Sign-On (SSO); access to your public profile from your provider (for example, Facebook, PayPal, or Apple); the terms and conditions of this provider apply.

To make it easier for you to create a customer account and log in later, we offer you the option of registering or logging in using a single sign-on (SSO) procedure. This involves authenticating yourself with your access data with the selected provider (e.g.Apple, Facebook or PayPal). After clicking the branded button, you will be redirected to the login page of the provider of your choice. We receive selected profile data (e.g., name, email address and potentially delivery address and data of birth) in order to create a customer account or link an existing one. The specific data that is received depends on your setting with the respective provider.

The use of SSO is voluntary and allows you to log in directly via your chosen provider in the future without the need to register again.

We process your personal data on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future. To do so, you can remove the respective link in your customer account or directly in the settings of the chosen provider. The lawfulness of the processing prior revoking remains unaffected.

We are not responsible for the data processing for authentication by the respective SSO-provider. For further information on data processing in the context of registering via third parties, please refer to the respective data protection information of your chosen provider:

  1. Apple: https://www.apple.com/legal/privacy/de-ww/
  2. Facebook: https://www.facebook.com/privacy/explanation
  3. PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

The lawful basis is consent, which you give by activating and using this option.

2.9 Purchases in our online ticket shops, (directly or through a third party) or via our call centre

Note: we process Personal Data whenever you make a purchase through our websites or via our call centre. We also forward this data to our client, amongst others for access control purposes. If you are making a purchase for a third party, you will provide us with their Personal Data, which we will also process. If you do this, please ensure that this third party is fully aware of how his/her data will be processed by Eventim and that you have the right to provide us with this data.

The lawful basis is the performance of a contract to which you are a party. If you have given your consent, this will apply for marketing purposes.

2.10 Address validation with Loqate

Note: If you choose to have tickets delivered by post, we may verify and complete the address details you provide in order to prevent input errors and ensure correct delivery. Additionally, if you voluntarily provide address details for digital delivery, we may validate this information to improve the accuracy of the address data you have provided. For this address validation, we use Loqate from our partner GB Group plc. In this context, we process the address you entered and your IP address.
The lawful basis is the performance of a contract insofar as address validation takes place in connection with postal delivery; legitimate interest insofar as address validation takes place with regard to voluntarily provided address details.

2.11 Shopping basket reminder email

Note: if you have started placing an order but have not yet completed the process, we will send a reminder email to the email address that is stored in your customer account. You can then complete your purchase.

The lawful basis is our legitimate interest (advertising our products and services using targeted marketing).

2.12 Fan Report

Note: Note: if you write a Fan Report, we will process your Personal Data in order to publish it.

The lawful basis is our legitimate interest (telling other Customers about your experiences during the event, thereby expanding our reach).

2.13 Customer surveys

We may use Personal Data to conduct customer surveys.

The lawful basis is our legitimate interest (improving our products and services).

2.14 Information emails, newsletters and web browser push

Note: you can subscribe to our newsletter or Ticket Alert service. If you subscribe to the newsletter, we will analyse and document whether you open the newsletter and how you use it.

The lawful basis is consent, which you give by activating and using this option.

If you have made a purchase with us or have won tickets, we may send you information emails to provide you with practical details relating to this, for example.

The lawful basis is performance of a contract to which you are a party (the purchase or participation contract).

After you have purchased a ticket, we may send you newsletters about similar events, services and promotions. If you enter your date of birth during registration, we will send you an email on your birthday.

The lawful basis is our legitimate interest (informing you about changes to our products and services and marketing our products and services).

2.15 Security

Note: to enable the use of our websites and to guarantee the stability and security of their use. In an effort to minimise fraud and illegal trading and to conduct investigations (where necessary), we also ask you to provide your address details, even when purchasing electronic tickets.

The lawful basis is our legitimate interest (operating the websites, keeping visitors to these websites secure and preventing fraud).

2.16 Analytical purposes

Note: we may analyse and document how our websites are used (number of visitors, browsing behaviour, interests/origin of visitors, order and shopping basket details).

The lawful basis is our legitimate interest (performing analyses in order to improve our websites, products and services, preventing fraud and presenting you with personalised recommendations for our products and services when you visit our websites).

2.17 Customer Services

Note: if you contact our customer services department, we may process Personal Data; the lawful basis for this depends on the reason for the contact:

Information about our products and services, making a purchase or submitting a complaint.

The lawful basis is performance of a contract to which you are a party.

2.18 Complying with legal obligations

Exercising your rights with regard to the protection of your Personal Data is a statutory right. Sometimes, there are legal reasons why we must process your Personal Data.

The legal basis is a legal obligation.

III. Special Personal Data and Personal Data relating to persons under the age of 16, automated decision-making

3.1 Special Personal Data

Note: we occasionally process Personal Data that might provide information regarding your health. The fact that you are a wheelchair user, for example, or that you have allergy or food intolerance. We only process this data with your consent in order to offer you special price categories, special access to an event and special chairs during the event.

The lawful basis is consent, which you give when making the relevant purchase.

3.2 Data of persons under the age of 16

Our website(s)/app and/or services don’t intentionally collect data on visitors under the age of 16. However, we cannot check a person’s age. Users under the age of 16 must only use our services with the consent of their parents or guardian. We recommend that parents monitor their children’s online activities. If you believe that we have collected the Personal Data of a minor without consent, please contact us using our contact form. We will then check the situation and, if necessary, delete this information.

3.3 Automated decision-making

Eventim does not make decisions about matters that could have (significant) consequences for individuals on the basis of automated processing.

IV. Storage and deletion of your Personal Data

  1. We store Personal Data for as long as and in so far as we use it for the purposes specified in Section II.
  2. As soon as the data is no longer necessary for the specified purposes, we will retain it for the period within which you can make claims against us or we against you (statutory limitation period).
  3. We also store Personal Data in order to comply with statutory retention times. Statutory retention times always take priority over other retention times.

V. Sharing of Personal Data with third parties

We never sell Personal Data to third parties.

We may share your Personal Data with:

  1. Parent companies, sister companies and subsidiaries for all of the purposes specified in this Privacy Statement.
  2. Organizers and / or cooperation partners concerned in the sales agreement with you (e.g. producers / organizers, theaters and other locationowners, caterers, transport and hotel companies, delivery partners, suppliers and / or product support), so that they can organise the event for which you have tickets and / or additional goods and services and the can carry out the purchase agreement with you. Sometimes we deliver guestlists for this. These parties are independent Processors and their own Privacy Statement applies, we advise you to always consult them. You can exercise your rights with regard to the protection of personal data where it concerns a processing of this party. You can also adjust your marketing preferences with these partners (eg unsubscribe to receiving marketing emails).
  3. Parties involved in the formation of the agreement with you who do not become contractual partners. These can include ticketing partners who (also) offer tickets via Eventim's platform (such as See Tickets), loyalty partners, or media partners.
  4. Our partners (producers/organisers, location owners, caterers, transport and hotel companies, delivery partners, suppliers or product support, loyalty partners or media partners), so they can organise the event for which you have booked tickets and fulfil the purchase contract. Sometimes, we provide guest lists for this purpose. These partners are independent Data Controllers and their own Privacy Statement will apply. We recommend that you always consult this Statement. Where your Personal Data is processed by one of these partners, you can exercise your rights with regard to the protection of your Personal Data with the partner concerned. You can also modify your marketing preferences for these partners (e.g. you can unsubscribe from marketing emails).
  5. Third parties. If you have consented to this, selected third parties may contact you for their marketing or advertising purposes.
  6. Third parties who are (joint) organisers of competitions, if you win a prize.
  7. Processors, i.e. parties who process Personal Data for us in accordance with the General Data Protection Regulation. E.g. email delivery partners, payment partners, data management platforms, media and advertising bureaus, research bureaus, mail delivery companies, couriers, our chatbox, market research companies, IT service providers. In order to ensure that your Personal Data is protected, we enter into contractual agreements with these partners.
  8. Third parties that fulfil your purchase, e.g. the cancellation insurer or fan merchandise supplier.
  9. Social Media (only with a lawful basis).
  10. Government bodies: in some situations that are prescribed by law, we are required to share Personal Data with these bodies. E.g. in the event of (suspected) fraud.
  11. In the event of a legal dispute, with the competent court and our legal department or the lawyer who is representing us.
  12. Our legal successor. In the event of a change in ownership of our business, provided that this is permitted by law, we will share your Personal Data with our successor for use in accordance with the purposes specified in this Statement.

Transfer within or outside of the European Economic Area

Eventim only transfers Personal Data (where necessary) to recipients in a country outside of the European Economic Area (EEA) or an international organisation in accordance with agreements that have been approved by the European Commission.

Eventim is a global business and has databases in different jurisdictions. Eventim may forward your data to one of its databases outside of the country in which you are resident for all of the purposes specified in this Statement. If the privacy protection level in a country does not meet internationally recognised standards, we will ensure that data transfers to databases in that country are sufficiently secure and that on no account is data transferred to these third parties without the Customer’s express prior consent.

Eventim is aware of the judgment of the Court of Justice of the EU of 16 July 2020 with implications for the transfer of personal data to the United States. We are currently investigating how we can best overcome this. We try to find a suitable solution. If we have these, we will inform you about this via this privacy statement.

VI. Cookies

Cookies are small text files that are stored on the user’s hard disk. Cookies make browsing the internet easier because websites that you have visited before already ‘know’ your computer, so you don’t have to re-enter certain data on the website every time you visit. In order to make the website as user-friendly as possible and to continuously improve products and services for users, Eventim uses cookies for the ticket shop in order to recognise customers on their next visit to the website and to collect statistical data.

Eventim doesn’t use technologies that link cumulative information via cookies to user data in order to detect the identity of the user. In principle, the ticket shop can be used without cookies. However, use without cookies may restrict the functionality of the ticket shop. Web browsers may be set to accept or reject cookies in general or in specific cases.

Eventim uses the customer’s IP address in so far as this is necessary for the technical functioning of the website. In addition, Eventim stores the customer’s IP address for a maximum of seven working days for security reasons, to guarantee the stability and reliability of the IT systems used and to prevent or detect misuse.

Eventim uses various software solutions to optimise its online services. These solutions enable the use of the website to be analysed and valuable information about users’ needs to be collected in order to improve the user-friendliness and quality of the online services on an ongoing basis. For the purposes of these analyses, collected statistical data is logged in anonymised form. This data is anonymous data about connections and clickstreams relating to the browser used, the number of visits/page displays and the browsing behaviour of the relevant visitor to a ticket shop website. When collecting and processing data, the visitor’s short IP address may be visible.

The data is mainly used for the following purposes:

  1. To count the number of visitors;
  2. To monitor which parts of the website are of particular interest to the visitor concerned;
  3. To find out where visitors come from in order to optimise the services provided;
  4. To make targeted recommendations to specific target audiences.

This process involves the use of permanent cookies.

Some cookies are always placed by us in order to ensure the proper functioning of the website, so customers can stay logged in, for example. Also, we always place a cookie to enable us to analyse the use of our website fully anonymously. Our website uses multiple cookies which are not necessary but which are useful. So you can give feedback or share reports on social media. Or so we can display more relevant adverts on third-party websites. These cookies may collect data outside of our website.

Users can block cookies or stipulate that cookies can only be set if they have been expressly accepted by the user at any time by adjusting their browser settings. Users can also block the use of their data for all implemented solutions at any time by selecting the opt-out option offered by the solution concerned.

VII. Social plug-ins and media content

Eventim’s websites include social plug-ins of the social network facebook.com. The operator of this network is Facebook inc, 1601 s. California ave, Palo Alto, CA 94304, USA (hereinafter called "Facebook").

Whenever a user accesses a page of a web shop using a social plug-in (also known as a 'like’ button), the user’s browser connects with Facebook’s servers in order to download the data that is required for the social plug-in(s). Facebook then receives information on the web address of the web shop that the user is visiting, the date and time of access and the user’s IP address.

Moreover, if the user has a Facebook account, Facebook can link the user’s visit to this page of the web shop to the user’s Facebook page.

If the user clicks on the ‘like’ button displayed on a page of the web shop, this information will also be sent to Facebook and stored by it.

If the user doesn’t want this information to be sent to Facebook, he/she must log out of Facebook before visiting the web shop. If the user of the web shop doesn’t have a Facebook account, Facebook may store the user’s IP address.

Eventim has no control over the content of the plug-ins or the information that is forwarded to Facebook. The purpose and scope of data collection and the further processing and use of the data by Facebook, and the user’s rights and other options to protect the user’s privacy can be found in Facebook’s privacy policy via this link.

External media contents These cookies enable us to play relevant embedded media content for you when you visit our website. For the display of the media content, the cookies of third-party providers are loaded after retrieval. If you disable these cookies, we will not be able to display the content that is relevant to you.

VIII. Software solutions, Mixpanel and Google Analytics

When you visit our websites, we analyse and document how you use our websites, such as your surfing behaviour on our websites, which events and components of our website you are interested in, and, if you buy a ticket with us, your order and your shopping behaviour and shopping cart details. In addition, we aggregate these data, for example for the purpose of evaluating the number of website visitors and their origin. To this end, we process the following personal data:

  1. IP address (shortened)
  2. cookies (see information on cookies on our website);
  3. e-mail address (hashed)

Hashing uses a function that irreversibly pseudonymises your email address.

The data are used for the following purposes:

  1. keeping track of the number of visitors;
  2. monitoring which pages on our websites are particularly attractive to our visitors;
  3. analysing where our visitors originate from, to be able to offer them more relevant services;
  4. determining which special offers are suitable for certain target groups.

Eventim uses software solutions in relation to what is described above (click the link to go to the cookie settings page): Cookie Settings EVENTIM Benelux. Please note: The opt-out uses a cookie. If is this cookie is deleted, you will have to complete the opt-out again.

Mixpanel

We use Mixpanel (Mixpanel Inc.) to analyze and improve the use of our websites and (where applicable) software functionalities. In this context, data may be processed via cookies and similar technologies, such as technical information about your device and browser, data about interactions (e.g. clicks and navigation), and pseudonymized identifiers (such as a hashed email address).

Processing takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR) and can be withdrawn at any time via the cookie settings. Mixpanel is established in the United States; where necessary, data transfers take place with appropriate safeguards, including certification under the EU-US Data Privacy Framework. More information: https://mixpanel.com/legal/privacy-policy/.

Google Analytics 360

We use Google Analytics 360 to monitor how users use the website and how effective our Adwords ads are on the Google search results pages. Google Analytics 360 uses cookies that enable an analysis of the use of our websites. The information on the use of our websites generated by the cookie is generally sent via a server operated by us in Europe to Google Analytics 360 in the US and stored there. This data transfer takes place on the basis of EU model contracts. This ensures that your personal data are adequately protected. See here for more information: https://business.safety.google/adsprocessorterms/sccs/p2p-intra-group/

We shorten your IP address on the server we manage before it is transferred to a Google Analytics 360 server, except when you visit websites that we operate together with our partners under joint responsibility; on these websites, your information is first anonymised by means of IP anonymisation and then transferred to Google Analytics 360. If you are located in a member state of the European union or in another contractual state of the Agreement on the European Economic Area, this function shortens your IP address.

Under a contract with EVENTIM, Google Analytics 360 uses this information to evaluate the use of the website, to compile reports on the website activity, and to offer EVENTIM other services that relate to the use of the website and the internet. For more information on the terms of use and data protection of Google Analytics 360, go to: https://support.google.com/analytics/answer/6004245

IX. Security

Eventim will keep your personal data secure. We value the trust that customers place in us and will therefore treat personal data with the utmost care.

Eventim has implemented technical and organisational security measures to protect the data that we process from unintentional or malicious modification, loss or destruction and from access by unauthorised parties.

We cannot guarantee, however, that these security measures will always be sufficient to prevent incidents occurring. Whenever you place an order or consult your Eventim account, Secure Socket Layer will be used. You can recognise this technology by the green bar that appears above in the address bar of your browser.

X. Exercising your rights under the GDPR

The law gives you a number of rights with regard to how we process your Personal Data:

  1. The right to data portability, i.e. the right to have your Personal Data transferred.
  2. The right to erasure, i.e. the right to be ‘forgotten’.
  3. The right of access, i.e. the right to consult your Personal Data.
  4. The right to rectification and completion, i.e. the right to have your Personal Data corrected.
  5. The right to restrict processing, i.e. the right to reduce the amount of data that can be processed.
  6. Rights related to automated decision-making and profiling, i.e. the right to human intervention in decisions.
  7. The right to object to the processing of your Personal Data.

To exercise these rights, we must establish your identity, you can do this by emailing your request from the email address registered in your “My Eventim” account, you can also contact our customer service. We only process requests that we receive directly from the person concerned.

Opt-out

Eventim uses the following software solutions in relation to Personal Data. Clicking on the relevant provider below directs the user to the opt-out function:

* CTS EVENTIM AG & Co. KGaA:

  1. Google Analytics: unsubscribe.
  2. Google: https://adssettings.google.com/authenticated .
  3. Facebook: http://www.youronlinechoices.com/nl/uw-advertentie-voorkeuren .
  4. TagCommander: https://www.commandersact.com/en/privacy/ .
  5. Adroll: https://www.adroll.com/about/privacy .

NB: opt-out uses a cookie. If this cookie is deleted, the opt-out option will have to be re-activated.

XI. Contact

If you have a query about the protection of your Personal Data by Eventim or if you wish to exercise your rights, please contact Eventim’s Customer Services Department.

EVENTIM Benelux B.V.
De Ruijterkade 113
1011 AB, Amsterdam
Netherlands
+31 (0)88 011 2610 (local call charges apply)

www.eventim.nl .

The Data Protection Officer can be contacted directly via Persoonsgegevens@eventim.nl

To find out how to manage your cookie settings, see:

https://www.consumentenbond.nl/internet-privacy/cookies-verwijderen .

You can submit a complaint about how we protect your Personal Data to the national supervisory body, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

XII. Changes

This Privacy Statement may be amended by Eventim. The modified Privacy Statement will apply from the date of publication on Eventim’s website and replaces the version of January 1, 2026.

Version January 7, 2026

© EVENTIM Benelux B.V.