Data protection information for EVENTIM.CheckIn

Data protection information for entradas.CheckIn visitor data collection

Due to official orders to prevent the spread of the Covid-19 some event organizers may need to collect visitor data. For these purposes, we provide you with a service to check in online and book your seat for you and the persons with whom you will attend an event together.

The purpose of this information on data protection is to inform you on the processing of your personal data when visiting and using "entradas.CheckIn" (visitor data collection) of ENTRADAS EVENTIM, S.A.U., a company belonging to CTS Eventim group of companies (hereinafter "ENTRADAS.COM", "we" or "us") in accordance with the General Data Protection Regulation (hereinafter "GDPR"). If you have purchased tickets through “ENTRADAS.COM” (Ticket Shop) the data protection information for ENTRADAS.COM can be found here.

BASIC INFORMATION

Controller: ENTRADAS EVENTIM, S.A.U.
Data: seating information, first name, last name, street and house number, zip code, city, country, email, phone either from you or other persons with whom you will attend an event together. UU-ID, IP address

Purposes and legal basis:

- Processing and storage of personal data in “entradas.CheckIn” so that we can transmit them to the relevant organiser or promoter at a later time at the entrance of an event location for the purpose of tracing chains of infection in connection with Covid-19 based on the performance of entradas.CheckIn service.

- Processing of personal data for security purposes based on our legitimate interest in ensuring IT Security for you when using "entradas.CheckIn"

- Storage and erasure of personal data in our servers as Data Processor of the respective organiser or operator of the event location.

- Transmission of personal data to the extent that we are legally obliged to do so on the basis of the compliance with legal obligations.

Any transmission by the respective organizer/operator of the event location to a health authority for the purpose of tracing chains of infection in connection with Covid-19 will be directly made by the organiser/operator as Data Controller under the data protection information of the respective responsible organiser or operator of the event venue. Such transmission will be based on the compliance with legal obligations.

Recipients: Promoters and Organisers of the events, CTS EVENTIM AG & Co. KGaA, service providers

Rights: You can exercise the rights recognised in the current legislation on data protection, as detailed in Section 6.
Cookies: no cookies are stored on your device.

1. RESPONSIBLE BODY

For the processing of personal data is responsible:

ENTRADAS EVENTIM, S.A.U.

C/Serano Anguita, 8, 2ª planta

28004 Madrid, Spain

https://centrodeayuda.entradas.com

Data Protection Officer: you can contact the Data Protection Officer through the email: dpo@entradas. com, and through our postal address at C/Serrano Anguita 8, 2^ªplanta, 28004 Madrid, Spain.

2. PURPOSES, LEGAL BASES AND, IF APPLICABLE, DATA CATEGORIES FOR PROCESSING YOUR PERSONAL DATA

2.1 PROCESSING OF PERSONAL DATA WHEN USING "ENTRADAS.CHECKIN"

You can use "entradas.CheckIn" to enter personal data (contact data) - and if necessary, data of other persons with whom you are attending an event together - so that these data can be transmitted at a later time at the entrance of an event location at your instigation for the purpose of tracing chains of infection in connection with Covid-19, e.g. in electronic form. We process personal data for the provision of this service.

It is expressly pointed out that ENTRADAS.COM does not assume any responsibility for the collection and processing of contact data at the respective event location that you or other persons wish to enter; this also applies to any forwarding of contact data to health authorities.

In this respect, the respective organiser or operator of the event location is the person responsible for data protection in the sense of Art. 4 No. 7 GDPR; please note the data protection information provided by them.

2.1.1 STORAGE OF DATA IN "EVENTIM.CHECKIN"

1. When using "entradas.CheckIn", we only process the personal data provided by you, which enable the tracing of infection chains in connection with Covid-19. In this respect, the legal regulations of the individual Spanish regions make different demands, over which we have no influence. The following data can be entered for the respective event visitor:

Seating Information
First Name
Last Name
Street and House Number
Zip Code
City
Country
Email
Phone

If you collect data from other visitors, make sure that they have been sufficiently informed by you about the processing of their data and that you are authorized to provide the data.

2. We process the personal data entered by you so that it can be transmitted in electronic form at a later date at your instigation for the purpose of tracing chains of infection in connection with Covid-19 at the entrance to an event location. The processing is carried out within the framework of the provision of our "entradas.CheckIn" service on the basis of Art. 6 para. 1 Sentence 1 lit. b) GDPR.

2.1.2 PROCESSING FOR IT SECURITY PURPOSES

1. When using "entradas.CheckIn", we process personal data that is technically necessary for us to provide you with "entradas.CheckIn" and to guarantee the stability and security when using "entradas.CheckIn". For this purpose, we process the following personal data:

UU-ID
IP address

2. We process personal data on the basis of our legitimate interest in providing you with "entradas.CheckIn" and ensuring IT security for you when using "entradas.CheckIn" and to carry out the internal administration efficiently and collaboratively on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

2.1.3 COOKIES

1. When using "entradas.CheckIn", no cookies are stored on your end device.

3. STORAGE AND ERASURE OF YOUR PERSONAL DATA

1. If you enter personal data in "entradas.CheckIn", these are initially stored exclusively locally on your device; we have no access to them in this respect. You have the option of deleting this data at any time.

2. If you transmit personal data in "entradas.CheckIn" at your instigation for the purpose of tracing chains of infection in connection with Covid-19, e.g. at the entrance to an event location in electronic form, this data will be stored on servers of CTS EVENTIM AG &Co. KGaA for a certain period of time (see clause 3 below). The storage is carried out on behalf of the respective responsible organiser or operator of the event location; ENTRADAS.COM is in this respect a processor in the sense of Art. 4 Paragraph 8 GDPR.

3. In the event of a transmission according to the above item 2, the respective organiser or operator of the event location is obliged to delete the data after a certain statutory period of time depending on the relevant region and regulations in force in each moment (it is estimated a period of four weeks); ENTRADAS.COM does not assume any responsibility in this respect. With regard to the details in this regard, we refer to the data protection information of the respective responsible organiser or operator of the event location.

4. CATEGORIES OF RECIPIENTS OF PERSONAL DATA

1. A transmission of personal data by means of "entradas.CheckIn" for the purpose of tracing infection chains in connection with Covid-19 by ENTRADAS.COM to the respective organiser or operator of the event location is on the basis of the performance of the CheckIn services provided by “entradas.CheckIn” (in accordance with Art. 6 para. 1 sentence 1 lit. b) GDPR).

2. Any transmission by the respective organiser or operator of the event location to a (health) authority for the purpose of tracing chains of infection in connection with Covid-19 is on the basis of the compliance with a legal obligation to which the organiser or operator is subject (in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR).Regarding the details, we refer to the data protection information of the respective responsible organiser or operator of the event venue.

3. In addition, we transmit personal data only to the extent that we are legally obliged to do so. In such a case, the transfer is made on the basis of Art. 6 para. 1 sentence 1 lit. c) GDPR.

5. CONSENT AND REVOCATION OF YOUR CONSENT

1. If the legal basis for processing your data is your consent, you can revoke this at any time. The revocation of your consent is effective for the future. The legality of the processing of your personal data up to the time of revocation remains unaffected. Please direct your revocation either by email to https://centrodeayuda.entradas.com or in writing to ENTRADAS EVENTIM, S.A.U. Data Protection, C/Serrano Anguita 8, 2ª planta, Madrid 28004, Spain

2. If you revoke your consent, we will process your personal data collected in this context to answer your inquiry. The processing of your personal data is carried out to fulfil a legal obligation on the basis of Art. 6 Paragraph 1 S. 1 lit. c) GDPR.

6. RIGHTS

1. You may at any time, in accordance with the GDPR, request that we

provide you with information about the personal data concerning you that we process (Art.15 GDPR),

rectify any personal data concerning you that is inaccurate (Art. 16 GDPR) and/or
erase (Art. 17 GDPR), block (Art. 18 GDPR) and/or release (Art. 20 GDPR) your personal data stored by us.

2. Please send your request:

by email to https://centrodeayuda.entradas.com
in writing to ENTRADAS EVENTIM, S.A.U. Data Protection, C/Serrano Anguita 8, 2ª planta, Madrid. 28004, Spain

3. If you assert your rights against us, we process your personal data collected in this context to answer your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

4. Without prejudice to your rights under this Section, you may lodge a complaint with a data protection supervisory authority such as the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

7. OTHER

1. The provisions of this data protection information of "entradas.CheckIn" shall be applicable in the version valid at the time of use.

2. We reserve the right to supplement and amend the content of the information on data protection. The updated data protection information is valid from the time it is published on our websites.

3. We will inform you in good time about these amendments and supplements on our websites. You will be given the opportunity to view, print and save the amended information on data protection free of charge.

As of: 01.10.2020