Privacy policy

This data protection information provides information on the procession of your personal data when visiting and using this website. If you access a promoters ticket shop via link, please inform yourself there about data processing by us and the specific partner (promoter).

1. Scope, controller and definitions

1.1. Scope of this data protection information

1. This data protection information relates to the processing of personal data upon a visit or use of this website. You can retrieve, store and print this data protection information at any time from this website at no charge.

2. This data protection information only relates to the processing of personal data as defined by Section 1.1.1. Other websites (e.g. the Ticket Shop hosted at www.eventim.de or any other ticket shop of our partners) are not within the scope of this data protection information and present their own specific data protection information.

1.2. Controller

Unless stated otherwise in this data protection declaration, the following is the controller for the processing of your personal data:

CTS EVENTIM AG & Co. KGaA
Contrescarpe 75 A
28195 Bremen
Email: service@eventim-light.de
Phone: +49 (0)40 - 555 558 826 (Local rate)

1.3. Definitions

This data protection information is based on the following legal terms found in data protection legislation that we have defined below to aid understanding:

1. GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Data Protection Directive).

2. Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing. Dependent on the payment method chosen, the recipient of your personal data could be a bank, for instance.

3. In accordance with Sec. 15 AktG [“Aktiengesetz”: German Stock Corporation Act], the EVENTIM Group comprises CTS EVENTIM AG & Co. KGaA and all its affiliated companies. More information can be found at

4. Personal data means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data could be the name, contact details, pattern of use, or bank details.

5. Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law. The Controller defined under Section 1.2 is responsible for the data processing described in this data protection information.

6. Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2. Purposes, legal framework and data categories when processing your personal data

2.1. Processing of your data during a visit of this website for purely informational purposes

If you visit this website to obtain information about products and services without actively transferring any other information to us in some other way (purely informational use) we, CTS EVENTIM AG & Co. KGaA, process your personal data at our sole responsibility.

Your personal data are processed for the following purposes and on the basis of the following legal framework.

2.1.1. Processing for the purpose of IT security

1. When you visit this website, we process your personal data (e.g. IP address) that are technically required for us to be able to offer you the services of our website and to ensure stability and security when visiting this website.

2. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue our legitimate interest to offer you the services of our website from a technical perspective, ensure the stability and operating security of the IT systems used and to avoid and track abuse.

2.1.2. Processing for analytical purposes

1. When you visit our website, in some circumstances we analyze and document how you use our website, e.g. by identifying the number of website visitors, your surfing patterns, which events of our website you are interested in and the origin of website visitors. To this end we process the following personal data:

  • IP address
  • UU-ID
  • WEB-ID
  • Device fingerprints
  • Browser fingerprints
  • Cookies (see cookie information )
  • Geo IP-location

2. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue our legitimate interest to conduct analyses and, on the basis of these analyses, improve our website and our products and services as well as to prevent fraud.

3. We use Google Analytics, a web-analytics service from Google LLC (“Google”) on our websites to perform the analyses. Google Analytics uses cookies which allow an analysis of the use of our websites. The information generated by the cookie on the use of our websites is generally transmitted to a server of Google in the USA and stored there. We use Google Analytics only including IP anonymization („_anonymizeIp()“).

As a result, IP addresses are processed in abbreviated form and a direct correlation to individuals can be ruled out. When using our websites, the IP address of the visitors to the website is abbreviated by Google beforehand within the member states of the European Union or other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and abbreviated there. Google, working under contract for CTS EVENTIM AG & Co. KGaA, uses this information to analyze the use of the Ticket Shop, generate reports about Ticket Shop activities and render other services to EVENTIM related to the use of the Ticket Shop and internet use.

The IP address transmitted to Google Analytics by the browser of the user is not combined with other data held by Google according to Google.

You can prevent the storage of cookies by means of a corresponding adjustment of your browser software; we advise you, however, that in this case some functions of these websites may not be used to their full extent.

In addition, you can prevent the transmission of the data generated by the cookie and relating to your use of the Ticket Shop (including your IP address) to Google and the processing of this data by Google, by downloading the browser plug-in from the following link and installing it accordingly:

This creates an opt-out cookie that prevents the future collection of your data upon visiting the Ticket Shop. This opt-out cookie only applies to this browser and only for this website and is stored on your device. If you delete cookies from this browser, you must reset the opt-out cookie accordingly.

More information on the terms and conditions of use and data protection can be found at:

Due to the use of Google Analytics your personal data can be under certain circumstances transmitted to the USA. Google LLC is subject to the EU-U.S. Privacy Shield. This provides adequate protection to your personal data. The full text of the EU-U.S. Privacy Shield Framework can be obtained from the following link:

2.1.3. Use of cookies

1. Cookies are stored on your computer when using this website. Cookies are small text files that are stored on your hard drive and are allocated to and saved by your browser. With the use of cookies, certain data flows to the party that set up the cookie. This also includes personal data. They are used to make our website easier to use and structure it more effectively. Cookies cannot run any programs or transmit any viruses to your computer. This website can be used without cookies. However, this may restrict the functionality of the website.

2. The cookie information (see cookie information ) applies to the use of cookies at our website.

2.2. Customer service

1. You can contact us if you have queries relating to an event, your ticket purchase from one of our partners ticket shops, wish to exercise your rights under this data protection information or would like to make a complaint. CTS EVENTIM AG & Co. KGaA is the contact for any queries (see the contact details in 1.2).

2. Depending on the nature of your request, we respond to your query using your personal data that we have stored in our systems within the framework of processing other data (e.g. data that you have disclosed when purchasing the ticket).

3. Your personal data is processed on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR in order to perform the contract with you. If you exercise your rights, we process your personal data to meet a legal obligation on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR. If you would like to obtain information or lodge a complaint, we process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interest of the Joint Controllers defined in Section 1.2 to respond to your complaint.

4. If you transmit health details to us in the course of your inquiry (e.g. information that you have a severe disability), we process this personal data only to the extent necessary to respond to your query and only when you have provided us with your express consent as defined by Art. 6 (1) Sentence 1 lit. a) GDPR.

2.3. The exercise and defense of legal claims

Within the course of a legal dispute with you, your personal data will be processed to exercise and/or defend the rights of the Joint Controllers defined in Section 1.2. To the extent necessary in the course of a legal dispute, data from other sources (e.g. public registers) will also be drawn on. Your personal data will be processed on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to fulfil a legal obligation and on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interests of the Joint Controllers defined in Section 1.2 to assert, exercise and/or defend their legal interests.

2.4. Other processing

2.4.1. Executing internal audits and observing compliance regulations

1. Your personal data may be processed in the course of internal audits within the EVENTIM Group in Germany and abroad. In this regard, CTS EVENTIM AG & Co. KGaA may, at its sole responsibility, also draw on data that can be obtained from other publicly accessible sources (such as credit reporting agencies).

2. In some circumstances, your data may be processed in the course of compliance programs and measures when we implement the requirements of the German Corporate Governance Code (GCGC), for example, or identify misconduct in the organization and attempt to remedy this.

3. In the course of such processing it is possible that your personal data may also be processed. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to fulfill our statutory duties. In addition, we process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR in order to pursue our legitimate interests of reviewing the processes and efficiency of the EVENTIM Group, remedy any misconduct and fraud and, where applicable, assert and/or defend our legal rights.

2.4.2. Analyses

In some circumstances, CTS EVENTIM AG & Co. KGaA may, at its sole responsibility, conduct analyses of your data, which are processed as defined in Section 2 of this data protection information. These analyses serve CTS EVENTIM AG & Co. KGaA as a basis for business decisions, to improve our products and services, tailor the business to customer needs and carry out marketing campaigns. Your personal data is processed on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interest of CTS EVENTIM AG & Co. KGaA to improve its offering. The analyses conducted on this basis do not contain any reference to individuals. Thus it is not possible for conclusions to be drawn about your person.

3. Retention and erasure of your personal data

1. Your personal data is stored for as long as, and to the extent necessary, it is required to realize the purposes for which it is processed (Section 2).

2. As soon as your data is no longer needed for the purposes stated in Section 2, CTS EVENTIM AG & Co. KGaA retains your personal data for the period in which you could exercise claims against the Controller defined in Section 1.2 and/or for the period in which Joint Controllers defined in Section 1.2 could establish claims against you (this is generally three years according to the statute of limitations, beginning at the end of the year in which the claim arises).

3. In addition, your personal data is stored for as long as, and to the extent necessary, the Controller defined in Section 1.2 is legally obliged to store it. The corresponding obligations to provide evidence and retain it arise from the German Commercial Code (HGB), the German Fiscal Code (AO) and the Money Laundering Act (GWG), among others (e.g., Sec. 257 HGB, Sec. 147 AO). The associated retention obligations can range up to ten years.

4. Categories of recipients of personal data

In addition, your personal data will be transmitted to IT service providers who provide the platforms, databases and tools for the products and services and generate analyses of user patterns on the website. Your personal data is transmitted on the basis of Art. 6 (1) Sentence 1 lit. b) GDPR for the purpose of performing the contract with you as well as on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interests of the Joint Controllers defined in Section 1.2 to improve the products, as well as on the basis of Art. 6 (1) Sentence 1 lit. a) GDPR in those cases where you have provided us with your consent to process your personal data.

In the case of legal disputes, we transmit your data to the applicable court and, if you engage a lawyer, to the lawyer as well in order to conduct the litigation. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to fulfil a legal obligation and on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue the legitimate interests of the Joint Controllers defined in Section 1.2 to establish, exercise and/or defend their legal interests.

Other than the cases listed above, your personal data will be transmitted only when there is a legal obligation to do so. Transmission is based on Art. 6 (1) Sentence 1 lit. c) GDPR (e.g. to the police authorities during a criminal investigation or to the data protection supervisory authorities).

5. Legitimate interests to data processing and right to object

1. CTS EVENTIM AG & Co. KGaA processes your personal data as defined by Section 2 on the basis of legitimate interests, in particular to ensure IT op, to prevent fraud and abuse, to assert, exercise and defend legal interests (if necessary, also by taking court action) and to carry out internal administrative activities efficiently and in a collaborative process. Information about the weighing up of interests can be obtained via:

Where your personal data are processed on the basis of these legitimate interests (Art. 6 (1) Sentence 1 lit. f) GDPR) you have the right to object to data processing at any time. We will respect your objection unless there are overriding reasons as defined by Art. 21 GDPR not to do so. Please address your request:

  • by email: service@eventim-light.de
  • by phone: +49 (0)40 - 555 558 826 (Local rate)
  • in writing to CTS EVENTIM AG & Co. KGaA, Data privacy, Contrescarpe 75 A, 28195 Bremen.

2. If you object to processing of your data pursuant to Section 5.2., we will process your personal data collected in this context to the extent needed to address your request. In this case your personal data are processed on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to meet a legal obligation.

6. Consent and withdrawal of consent

1. If you have provided us with your consent to the processing of your personal data, you may withdraw this consent at any time. The withdrawal applies to the future. The lawfulness of the processing of personal data prior to the date of withdrawal remains unaffected. Please address your withdrawal of consent:

  • by email: service@eventim-light.de
  • by phone: +49 (0)40 - 555 558 826 (Local rate)
  • in writing to CTS EVENTIM AG & Co. KGaA, Data privacy, Contrescarpe 75 A, 28195 Bremen.

2. If you withdraw your consent to processing of your data, we will process your personal data collected in this context to the extent needed to address your request. In this case your personal data are processed on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to meet a legal obligation.

7. Your rights

1. Under the terms of the GDPR, you have the right to demand, at any time, that we

  • inform you of the personal data relating to you that we are processing (Art. 15 GDPR)
  • rectify personal data relating to you that is inaccurate (Art. 16 GDPR) and/or
  • erase your personal data (Art. 17 GDPR), restrict it (Art. 18 GDPR) and/or release it (Art. 20 GDPR).

2. Please address your request:

  • by email: service@eventim-light.de
  • by phone: +49 (0)40 - 555 558 826 (Local rate)
  • in writing to CTS EVENTIM AG & Co. KGaA, Data privacy, Contrescarpe 75 A, 28195 Bremen.

3. If you assert your rights towards us, we will process your personal data collected in this context to the extent needed to address your request. In this case your personal data are processed on the basis of Art. 6 (1) Sentence 1 lit. c) GDPR to meet a legal obligation.

4. Notwithstanding your rights under Section 7, you have the right to lodge a complaint with a supervisory authority for data protection if you are of the opinion that the processing of your personal data in accordance with this data protection information breaches the terms of the GDPR (Art. 77 GDPR).

8. Miscellaneous

1. The provisions of this data protection information (which can be accessed free of charge on this website) including the cookie information (which can be accessed free of charge on this website) apply in the version valid at the time of using the website.

2. We reserve the right to supplement and amend the contents of this data protection information. The updated data protection information applies from the date on which it is published on this website.

3. You will be informed in good time of such supplements and amendments on this website and, if your contact data are already on our files, you will be informed via email or by standard mail. You will be given the opportunity to view, print and store the amended data protection information at no charge.

9. Contact details of the data protection officer

For CTS EVENTIM AG & Co. KGaA:

Data protection officer
CTS EVENTIM AG & Co. KGaA
Contrescarpe 75 A
28195 Bremen
Email: datenschutz[at]eventim[dot]de

With regard to the ticket shops of our partners, we refer to the data protection information of our partner on the specific websites.

Cookie Information

Scope of application

This cookie information provides more specific data protection information as required by Section 2.1.3. about the use of cookies of CTS EVENTIM AG & Co. KGaA on this website, referred to here as “Eventim”, “we” or “us“.

General information on cookies

“Cookies” are small text files which are saved in the browsers of your end devices when you visit this website. Cookies can save and track your actions and settings in our website for the duration of the browser session and, in some cases, beyond this. Cookies also enable the recognition of your browser. For instance, after leaving the website, the content of your shopping basket is reconstructed or events recently viewed are displayed again.

Types of cookies used

First-party cookies:

On the one hand, we use first-party cookies, i.e. cookies placed by our server on our websites and which can only be accessed via our server.

Third-party cookies:

On the other, this website also incorporates third-party cookies which are placed by servers of others and/or this website or domains and that can be read by third parties. With these cookies, your browser can be tracked beyond this website, for instance so as to be able to display Eventim advertisements on the websites of our partner companies.

Storage period of cookies

Session cookies:

Some of the cookies we use are session cookies, i.e. cookies which are only stored for the duration of your visit to this website.

Persistent cookies

We also use persistent cookies which stay saved on your browser after the session and are automatically deleted after a predefined expiry date.

Purposes of using cookies

Necessary cookies:

We use cookies that are necessary for the operation of the website and that enable you to use certain functions in order to use the website. In addition, we use cookies to enable you to perform certain functions by automatically detecting your browser. These include, for example, the automatic recognition and setting of the language and the restoration of the content of completed forms.

Analytical Cookies

These cookies enable us to count visitors and traffic sources so that we can measure the use of our website and thus improve performance. They help us to analyze which pages are viewed most frequently and least frequently, and how visitors move around our website. If you are logged into your personal Google profile while surfing on our website, we also analyze demographic data such as age, gender and interests based on Google search behavior. This helps us to optimize the website for you and to provide relevant content for you. All information these cookies collect is aggregated and is therefore anonymous.

Marketing Cookies

These cookies are used to display personalized advertising based on your surfing behavior on our website. By deactivating these cookies, you may see advertisements that are less interesting for you.

Cookie settings by users

Via your browser settings you can limit or completely prevent the storage of (certain) cookies for all websites and delete any cookies that have already been saved. For more information about this please consult the instruction manual or help functions of your browser.

This website can in principle still be visited and used after restricting/deactivating cookies in the browser settings. However, please note that in particular the complete deactivation of cookies can limit the functionalities of this website.

Date: 09.04.2020