Print

Privacy and Cookie Policy of entradas.com

1. Introduction

The purpose of this Privacy and Cookie Policy is to inform you clearly and transparently about the processing of your personal data when you visit and use the entradas.com website, as well as about the use of cookies, pixels and similar technologies on our website, on third-party websites and on social media.

This policy is provided in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter, the “GDPR”), Spanish Organic Law 3/2018 on the Protection of Personal Data and guarantee of digital rights, and the applicable regulations on cookies and information society services.

2. Basic concepts

To make this policy easier to understand, we use the following terms:

Personal data: any information relating to an identified or identifiable natural person. For example, first name, surname, postal address, email address, telephone number, payment details, IP address, online identifiers or information about previous purchases.

Processing: any operation or set of operations performed on personal data, such as collection, recording, organization, structuring, storage, consultation, use, modification, adaptation, disclosure, erasure or destruction.

Data Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Recipient: a natural or legal person, public authority, service or body to which personal data are disclosed.

Cookie: a text file or similar technology that is stored on your device when you access a website and that makes it possible to remember information about your browsing, preferences or device.

Similar technologies: pixels, tags, online identifiers, local storage, SDKs or other technologies that provide functions similar to cookies.

3. Data Controller

The data controller for your personal data is:

ENTRADAS EVENTIM, S.A.U.

Calle Serrano Anguita 8
28004
Madrid
Spain

You can contact us through the form available in the entradas.com help section.

4. Data Protection Officer

You can contact our Data Protection Officer at:

Email address: dpo@eventim.es

Postal address: Calle Serrano Anguita 8, 28004 Madrid, Spain

5. Personal data we process

We may process the following categories of personal data:

• Identification data: first name, surname, identification document where necessary, date of birth where applicable.
• Contact data: postal address, email address and telephone number.
• Account data: username, encrypted password, account preferences, favorites, saved artists, venues or events.
• Purchase data: purchase history, events purchased, ticket price, delivery method, order status and billing data.
• Payment data: selected payment method and the data required to process the payment, managed directly by payment providers where applicable.
• Data relating to named-ticket events: data required to personalize tickets where the promoter or organizer requires this.
• Customer service data: queries, complaints, incidents and communications maintained with us.
• Marketing and preference data: newsletter subscriptions, Ticket Alarm, communication preferences, interests and consent for commercial profiling.
• Technical and browsing data: IP address, cookie or device identifiers, browser, operating system, date and time of access, pages visited, interactions, clicks, session data and use of functionalities as well as technical logs, performance metrics, technical diagnostics, connectivity information, crashes and pseudonymized technical identifiers required for the monitoring, stability and improvement of our digital services and mobile applications.
• Data derived from cookies and similar technologies, in accordance with the provisions of the Cookie Policy.

Where the requested data are mandatory, this will be indicated in the relevant form. If you do not provide such data, we may be unable to provide the requested service, manage your purchase or comply with our legal obligations.

6. Main processing activities, purposes, legal bases and retention periods

The main personal data processing activities carried out by entradas.com are summarized below.

Time or service	Purpose	Data processed	Legal basis	Retention period
Registration and account creation	Create and manage your customer account, enable purchases, lists of favorite artists, venues and events, presales, newsletter, receipt of information and other associated functionalities.	Identification, contact, account, preferences, session cookies	Consent, performance of a contract and legitimate interest in verifying the user’s identity	For as long as the account remains active. Inactive accounts are reviewed and deleted, at the latest, after 24 months without access
Persistent login	Keep the session active on the device for a given period to facilitate access	Session, device and cookie identifiers	Consent	Up to 6 months or until you log out or withdraw your consent
Single sign-on or SSO	Enable registration or access through external third-party providers such as Apple or Facebook, where available. Such providers will process your data in accordance with their own privacy policies.	Profile data provided by the provider, such as name, email address or date of birth where applicable	Consent	For as long as the provider remains linked to your account or until you withdraw consent
Purchase process	Manage the purchase of tickets, issuance, postal delivery (address validation and suggestions): Loqate service from our provider GB Group Plc), delivery, billing, service communications and event incidents	Identification, contact, purchase, payment, billing and event	Performance of a contract and compliance with legal obligations	For the period necessary to complete the purchase and handle any complaints in accordance with the applicable statutory limitation periods
Event communications	Inform you about incidents, changes, cancellations, access, pre-event recommendations or information relevant to enjoying the event	Contact, event purchased, order	Performance of a contract and legitimate interest in improving the user experience	During the contractual relationship and for the period necessary to manage incidents or complaints
Basket or incomplete purchase	Remind you that you have a purchase process pending	Email address, session, basket data	Legitimate interest in facilitating completion of the purchase	For a limited period linked to the purchase process
Commercial communications to customers	Send information about products or services similar to those contracted	Email address, purchase history, preferences	Legitimate interest in sending customers communications about own events, products or services similar to those contracted, unless they object. In all other cases, consent.	Until you object or request to unsubscribe
Newsletter	Send news, events, competitions and promotions	Email address and preferences	Consent	Until you withdraw consent or request to unsubscribe
Ticket Alarm	Inform you of new on-sale dates for selected artists, events or categories	Email address and preferences	Consent	Until you withdraw consent or request to unsubscribe
Commercial profiling	Adapt commercial communications to your interests	Purchase history, preferences, events, artists, categories and browsing data if you have consented	Consent	Until you withdraw consent
Fraud prevention and fraudulent resale	Detect, prevent and pursue fraud, abuse, bots, fraudulent resale or misuse	Identification, purchase, IP, device, usage patterns, access data	Legitimate interest and, where applicable, compliance with legal obligations	For the period necessary to investigate and address any potential liabilities
IT security	Protect the website against bots, DDoS attacks, unauthorized access and other threats, as well as perform technical monitoring, error detection and resolution, stability analysis, troubleshooting and performance improvement of our digital services.	IP, browser, device, technical logs, identifiers, performance metrics, connectivity information, crashes, pseudonymized technical identifiers and diagnostic data.	Legitimate interest in ensuring the security of the website and compliance with legal obligations where applicable	For the period necessary for security, audit and incident management purposes
Virtual queue	Manage access at times of high demand and avoid website overload (Queue-it ApS)	IP, browser, email address if registration is required, access code	Legitimate interest in providing the service securely and efficiently; consent where prior registration is applicable	For the time necessary to manage the queue and any incidents
Postal address validation	Avoid errors in postal delivery addresses	IP and address data entered	Performance of a contract	For the time necessary to manage delivery and any complaints
Contact form and customer service	Respond to queries, manage incidents, complaints and requests	Identification, contact, query, documents provided	Consent, legitimate interest and compliance with legal obligations	For the period necessary to respond and address any complaints
Exercise of data protection rights	Process requests for access, rectification, erasure, objection, restriction, portability and withdrawal of consent	Identification, contact, request, supporting documentation	Compliance with legal obligations	For the applicable statutory period to evidence that the request has been handled
Opinions or reviews	Publish your opinion without displaying identifying personal data	Opinion, internal identifiers, contact data where applicable	Consent	For the publication period or until withdrawal, unless retention is necessary for complaints
Promotional competitions	Manage participation, communications, prize delivery and legal obligations	Identification, contact, participation, tax data if you are a winner	Consent and compliance with legal obligations	For the duration of the competition and for the period during which a claim may arise
Purchase of merchandising	Manage the purchase, delivery, billing and incident handling	Identification, contact, purchase, delivery address, payment	Performance of a contract and legal obligations	For the period necessary for the purchase and any complaints
Cookies and similar technologies	Manage technical functionalities, preferences, analytics, personalization, advertising and external content	IP, identifiers, browser, device, browsing, interactions	Consent, except for necessary technical cookies	According to the duration indicated in the cookie table or the provider’s settings

7. Commercial profiling

When you give us your consent, we may create a commercial profile to tailor communications and recommendations to your interests.

For this purpose, we may use information about your previous purchases, such as type of event, location, ticket price, music genre, sport, artist, team, venue or category of interest, as well as preferences that you have configured in your account.

This profile is created using objective criteria related to your cultural, sports or leisure interests. We do not use this profile to make decisions that have legal effects concerning you, nor to assess sensitive personal aspects such as lifestyle habits, financial situation, health, ideology or other special categories of data.

You may withdraw your consent at any time.

8. Processing carried out by promoters or organizers

In the context of the marketing and management of events, entradas.com may disclose certain personal data to the promoter, organizer, venue or authorized distributor of the event where this is necessary for the performance of the contract, event management or compliance with legal obligations.

As a general rule, entradas.com and the promoter or organizer will act as independent controllers with respect to the data processing activities that each party carries out within the scope of their respective activities and purposes.

These disclosures may be necessary, for example, to:

• • Manage ticket sales.
• • Issue named tickets.
• • Control access to the venue.
• • Manage cancellations, changes, incidents or relocations.
• • Comply with legal obligations related to the event.

During the purchase process, where applicable, you will be informed of the identity of the promoter or organizer and provided with access to their privacy policy.

Where the promoter or organizer processes your data to send its own commercial communications, it will do so as an independent data controller and on the legal basis applicable in each case. In particular, where the promoter or organizer is the provider of the event and there is a prior contractual relationship arising from the purchase of the ticket or from attendance at the event, entradas.com may disclose to it the contact data that are strictly necessary so that it can send you commercial communications about its own events, products or services similar to those initially contracted, provided that the legally established requirements are met and that you have been offered the possibility to object to such disclosure and/or processing easily and free of charge. The promoter or organizer must also offer you the possibility to object in each commercial communication it sends you. Where these requirements are not met, or where legally required, the disclosure and/or use of your data for the promoter’s or organizer’s own marketing purposes will be based on your specific consent.

9. Children’s data

In events where it is necessary to collect data from children under 14 years of age, we will understand that the person providing such data is the holder of parental authority or legal guardian, or has sufficient authorization to do so.

Where consent is required for the processing of children’s data, it must be given by their legal representative in accordance with the applicable regulations.

10. Third-party data

If you provide us with personal data of third parties, you warrant that you have sufficient legal authority to disclose them to entradas.com and that you have informed those individuals about the processing of their data in accordance with this policy.

This may occur, for example, when you purchase named tickets for another person, purchase a gift card, make an enquiry on behalf of a third party or purchase physical products for delivery to another person.

11. Data recipients

We may disclose your personal data to the following recipients where necessary:

• • Promoters, organizers, venues, access control providers or authorized distributors, to manage sales, access, incidents, cancellations or compliance with obligations related to the event.
• • Technology and IT service providers, technical monitoring, observability and digital infrastructure hosting.
• • Payment gateways, financial institutions and fraud prevention providers.
• • Courier, logistics or address validation companies.
• • Customer service providers.
• • Marketing, analytics and advertising providers, where applicable and in accordance with your consent preferences.
• • Law enforcement agencies, courts, tribunals, administrative authorities or public bodies where there is a legal obligation or valid request.

Providers that process data on behalf of entradas.com will act as processors and will be subject to contracts that guarantee the protection of your personal data.

12. International transfers

Some technology, analytics, advertising or external content providers may process personal data outside the European Economic Area, especially in the United States.

Where international data transfers take place, entradas.com will apply the safeguards provided for in the GDPR, including, as applicable:

• • Adequacy decisions of the European Commission.
• • Standard contractual clauses approved by the European Commission.
• • Provider certification under the EU-U.S. Data Privacy Framework, where applicable.
• • Additional technical and organizational measures to protect the data.

With regard to third-party providers, you can find additional information in their respective privacy policies.

13. Data subjects’ rights

You may exercise the following data protection rights, where applicable:

• • Access.
• • Rectification.
• • Erasure.
• • Objection.
• • Restriction of processing.
• • Portability.
• • Withdrawal of consent.

You may exercise your rights by contacting:

ENTRADAS EVENTIM, S.A.U.

Calle Serrano Anguita 8 28004 Madrid

Spain

Or by email at:

dpo@eventim.es

You may also use the form available in the entradas.com help section.
Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal. You may also lodge a complaint with the Spanish Data Protection Agency: https://www.aepd.es/agencia/contacto.html

14. Commercial communications and unsubscribe

You may unsubscribe from our commercial communications at any time using the link enabled in each communication or by accessing your user area.

If you are a registered user, you can manage your subscriptions from the corresponding section of your account, including newsletter, Ticket Alarm and other communication preferences.

15. Cookie Policy

15.1 Use of cookies on entradas.com

This website uses first-party and third-party cookies to ensure the proper functioning of the website, personalize content, improve site functionality, analyze browsing and display advertising related to your preferences.

We may also use pixels, tags and similar technologies to measure campaigns, carry out retargeting actions, display personalized advertising and analyze the performance of our services, provided that you have given your consent where necessary.

15.2 Consent management

When you access our website, you can accept, reject or configure non-necessary cookies.

Technical or necessary cookies are essential for the operation of the website and do not require your consent. All other cookies will only be installed if you give your consent.

You can modify or withdraw your consent at any time using the “Cookie settings” option available in the footer of our website.

Withdrawal of consent will not affect the lawfulness of processing carried out before its withdrawal.

15.3 What cookies are

Cookies are text files that contain small amounts of information related to your user, your preferences or your device, and that are downloaded to your device when you access certain websites.

Cookies may enable, among other things, the proper functioning of the website, remembering preferences, keeping the session active, analyzing browsing, personalizing content or displaying advertising based on your interests.

The term “cookies” also includes similar technologies, such as pixels, tags, online identifiers, local storage or equivalent tracking technologies.

Categories of cookies used

The cookies on this website may be used for technical, functional or advertising purposes. These categories include both first-party and third-party cookies, as well as pixels, tags, online identifiers and similar technologies where they serve an equivalent purpose.

Category	Description	Consent
Technical cookies	Necessary for the operation of the website, security, session, basket, forms, virtual queue and privacy settings.	They do not require consent.
Functional cookies	They improve the user experience, allow preferences to be remembered, browsing and performance to be analyzed, content to be personalized and embedded content or services to be displayed.	They require consent where they are not strictly necessary.
Advertising cookies	They enable campaign measurement, audience creation, retargeting, display of personalized advertising, affiliate management and optimization of marketing investments.	They require consent.

Technical cookies

These cookies are necessary for the website to function properly and cannot be disabled from our systems. They are generally set in response to actions taken by the user, such as setting privacy preferences, logging in, completing forms, managing the basket or accessing requested services. They are not used for advertising purposes.

The technical cookies used are detailed below:

Owner	Purpose / Use
Consent Manager	Tool for regulatory compliance and cookie consent management. It allows cookies to be configured, accepted, rejected or modified by category.
Google Tag Manager	Technical container that enables tags to be managed and tracking codes to be updated. Non-necessary tags are only activated if consent exists.
Google reCAPTCHA	Protection of forms against bots, spam and abusive automated uses.
Akamai	Security, performance, attack prevention, website availability and protection against threats.
Queue-it ApS	Access management at times of high demand and overload prevention through a virtual queue.
CTS EVENTIM AG & Co. KGaA	Technical services of the EVENTIM group necessary for the provision of the service.
The Revenue Labs	Allows access to the combined ticket + hotel service where available and requested by the user.

Note: this list must be kept updated with the cookies that are actually active in Spain.

Functional cookies

This category includes personalization, analytics, optimization and embedded external content cookies. These cookies make it possible to improve the functionality of the website, analyze how users interact with the website, optimize our services, remember preferences and offer additional services such as chat, maps, videos or embedded music content.

If you do not allow these cookies to be used, some services or functionalities may not work properly or the experience may be less personalized.

The functional cookies used are detailed below:

Owner	Purpose / Use
Google Analytics 4 / Google Analytics 360	Website usage analytics service. It allows activity reports to be prepared, performance to be measured, browsing to be analyzed and services to be improved. It may involve international transfers in accordance with the applicable safeguards.
Google Fonts	Loading and display of fonts.
Google General	General Google services linked to website functionalities, measurement or improvement.
Google Maps	Location of venues and events through interactive maps.
YouTube	Playback of videos of artists, events or related content.
Vimeo	Playback of embedded videos.
Apple Music	Playback of music samples or related content.
Mixpanel Inc.	Product analytics tool to understand user behavior, replay pseudonymized sessions, run A/B tests, connect data with internal systems and analyze performance metrics.
Optimizely Web Experimentation	A/B testing, experimentation and optimization of website content and functionalities.
novomind AG	Chatbot or automated customer service and online assistance services.
The Revenue Labs	Personalization of content linked to complementary services.
Embrace Mobile, Inc.	Detection of errors, crashes, technical incidents, stability analysis, performance and diagnostics of the mobile application.
Grafana Labs	Visualization, analysis and technical monitoring of metrics, logs and operational diagnostics of the mobile application and digital services.
AT Internet	Analysis of user interaction with website content and generation of browsing statistics.
Olark Inc.	Visitor identification, access remembering and tracking of chat sessions.
New Relic, Inc.	Technical browser and performance measurements.
Frosmo	Content personalization.

Advertising cookies

These cookies may be set through our site by our advertising partners. They may be used to create interest profiles, display relevant ads, measure campaigns, create audiences, carry out retargeting, manage affiliation and optimize marketing investments. They do not directly store personal information, but are based on the unique identification of the browser and device. If you do not allow these cookies, you will see less targeted advertising.

The advertising cookies used are detailed below:

Owner	Purpose / Use
Google Ads	Google advertising platform that makes it possible to create, manage, measure and optimize campaigns on Google and associated networks.
DoubleClick / Google Advertising Products	Personalized advertising, measurement, frequency, campaign performance and prevention of repeated ads.
Meta Ads	Conversion measurement, creation of lookalike audiences, retargeting and advertising on Meta, Facebook and Instagram.
TikTok Ads / TikTok Analytics	Creation, management and measurement of advertising campaigns on TikTok.
Microsoft Advertising / Bing Ads	Advertising, measurement and campaign optimization on Microsoft and Bing.
AWIN AG / Awin	Measurement and attribution of affiliate campaigns.
Webloyalty	Providing access to purchase-related programs or clubs, such as Privilegios en compras.
The Trade Desk	Programmatic advertising, tracking, measurement and optimization of advertising campaigns.
Adroll / Netroll Inc.	Tracking of browsing and purchases for retargeting and advertising actions.
The Revenue Labs	Tracking of browsing and purchases linked to complementary services.

Pixels in embedded sales or third-party channels

On some occasions, the ticket sales process forms part of a website whose owner may be a venue, promoter, organizer, authorized distributor or other commercial partner. In these cases, whether the sale takes place as part of the browsing experience or through a new window, pixels may be used to share information with the owner of the website for the purpose of optimizing its marketing investments for ticket sales.

Owner	Purpose / Use
Google	Tracking of browsing and purchases for advertising measurement and optimization.
Meta	Tracking of browsing and purchases for advertising measurement and optimization.
TikTok	Tracking of browsing and purchases for advertising measurement and optimization.
X / Twitter	Tracking of browsing and purchases for advertising measurement and optimization.
Buekai	Tracking of browsing and purchases for advertising measurement and optimization.
Sizmek	Tracking of browsing and purchases for advertising measurement and optimization.
The Revenue Labs	Tracking of browsing and purchases linked to complementary services.

These pixels will only be activated where there is a sufficient legal basis and, in particular, where the user has given the necessary consent for cookies or advertising technologies.

16. Personalized advertising and content through IAB TCF

Where applicable, entradas.com may use the IAB Europe Transparency and Consent Framework (IAB TCF) to manage the use of cookies and the processing of personal data for personalized advertising and content purposes.

This system makes it possible to manage your preferences in a granular manner with respect to the purposes and providers of the digital advertising ecosystem.

With your consent, providers participating in the IAB TCF may process data to:

• • Store and/or access information on a device.
• • Use limited data to select ads.
• • Create profiles for personalized advertising.
• • Use profiles to select personalized advertising.
• • Create profiles to personalize content.
• • Use profiles to select personalized content.
• • Measure ad performance.
• • Measure content performance.
• • Analyze audiences through statistics or a combination of data from different sources.
• • Develop and improve products and services.

To manage these preferences, a technical identifier known as the TC String is used, which records your consent choices and allows them to be communicated to participating providers.

The data processed may include:

• • Browsing activity.
• • Interactions with ads and content.
• • Information about your device.
• • Online identifiers.
• • Aggregated or pseudonymized audience data.

In some cases, these data may be combined across different devices to provide personalized advertising or content.

The storage of or access to information on your device through cookies, identifiers or similar technologies for non-necessary purposes —including analytics, measurement, personalized advertising, profile creation, retargeting or content personalization— will only take place if you give your consent. Certain operations that are strictly necessary to ensure security, prevent fraud, store your privacy preferences or provide a service requested by you may remain active without consent where legally applicable.

IAB TCF purpose	Activation status	Legal basis
Ensure security, prevent and detect fraud, and fix errors	Always active where strictly necessary	Legitimate interest / legal obligation where applicable
Store and transmit privacy preferences	Always active	Necessary to comply with legal obligations
Store and/or access information on a device	Only with consent, except for necessary technical cookies	Consent
Use limited data to select ads	Only with consent	Consent
Create profiles for personalized advertising	Only with consent	Consent
Use profiles to select personalized advertising	Only with consent	Consent
Create profiles to personalize content	Only with consent	Consent
Use profiles to select personalized content	Only with consent	Consent
Measure ad performance	Only with consent	Consent
Measure content performance	Only with consent	Consent
Analyze audiences through statistics or a combination of data	Only with consent	Consent
Develop and improve products or services	Only with consent, except for strictly necessary technical improvement	Consent / limited legitimate interest

IAB TCF provider	Main purpose
Google Advertising Products	Personalized advertising, measurement and attribution
Microsoft Advertising	Personalized advertising, measurement and attribution
AWIN AG	Affiliation and campaign measurement

17. Retargeting campaigns and social media

We may carry out marketing campaigns using tags, pixels and cookies from retargeting providers.

When you visit our websites, these technologies may be associated with the content you have accessed, allowing us to document whether you accessed the site from an advertising campaign, whether you registered or whether you performed certain actions.

We may also display ads on platforms such as Google, Meta, TikTok or other social media, including campaigns targeting users with profiles similar to our customers or visitors.

In these cases, the data processed may include:

• • IP address.
• • Device or cookie ID.
• • Pages visited.
• • Interactions with ads.
• • Activity on the page or social profile, where applicable.
• • Public information from your social media profile, in accordance with the settings you have established on those platforms.

Our website may include links or functionalities from social media and other third-party platforms. If you access them or interact with their functionalities, those third parties may process your data in accordance with their own policies. Where they involve non-necessary cookies or technologies, they will only be activated with your consent.

18. Cookie retention period

There are session cookies, which are deleted when you close the browser, and persistent cookies, which remain for a given period.

The retention period will depend on the purpose of each cookie and on the settings established by entradas.com or by the relevant provider.

The cookie table must be kept updated, indicating, for each cookie or provider, its specific duration or the criterion used to determine it.

19. How to withdraw consent or disable cookies

You may withdraw your consent or modify your preferences at any time using the “Cookie settings” option available in the footer of our website.

In addition, you can block or delete cookies by modifying your browser settings. Most browsers allow cookies to be rejected or accepted, existing cookies to be deleted, or warnings to be configured before they are installed.

Please note that, if you block certain cookies, some website functionalities may not be available or may not work properly.

 

 

Last updated: June 2026