Privacy Policy
Last updated: April 8th, 2024
Welcome to https://tixbase.com, a website (the “Website”) operated by tixbase, Co., 8 The Green STE A Dover, DE 19901, privacy@tixbase.com (“tixbase”, “Company”, “We” or “Us”) and all its associated content, products, and services (the “Platform”). This Privacy Policy may refer to users as “you” or “user”.tixbase takes the protection of your personal data very seriously and adheres strictly to the rules of the data protection regulations. Therefore, tixbase’s privacy policy (“Privacy Policy”) governs the types of personal data we process as a controller as defined by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and on the repeal of Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”) from users of the Website and the Platform. “Personal data” in this regard means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.Please read this Privacy Policy carefully to understand our policies and practices regarding your personal data, the kind of personal data we process, how we will treat it, and how we ensure the protection of your personal data.
1. PERSONAL DATA THAT WE PROCESS
When you visit our Website and visit and/or access the Platform, register on our Website and/or Platform, submit information to us (info@tixbase.com), or in order to provide you with the Platform, we process your personal data. We may process additional personal data about you upon your interaction with us electronically or in person. We also process your personal data in the purchase and sales processes of our products on the Platform.We, therefore, process the following personal data: your email address, name, surname, your physical address, digital wallet address used for Account administration and invoicing, your profile picture, emails you send to us, times of access to our Website and Platform, browser settings, your location, your system type, your phone number and preference settings used in purposes of better customer experience and customer support.
2. WHY WE PROCESS YOUR PERSONAL DATA
We process your personal data, i.e. your email address, name, surname, physical address, and digital wallet address because we have a contractual obligation with you regarding the sale and/or the purchase of tickets. We will also use the personal data to administer your account and provide you with our Platform, or to respond to your requests submitted by you via email or by using the chatbot. The legal basis for this processing is Art. 6 (1) lit. b) GDPR. We also will use your email address to send you newsletters upon your express consent. This processing of personal data is based on Art. 6 (1) lit. a) GDPR.We also process your email address, name, surname, physical address, and digital wallet address because we need to charge payments and invoice you, but also to comply with regulatory requirements, prevent fraud, and protect the security and integrity of our Platform. The legal basis for this processing is Art. 6 (1) lit. b) and f) GDPR. In addition, we process your times of access to our Website and Platform, browser settings, and preference settings to ensure a smooth connection for our Website and/or Platform, to ensure comfortable use of our Website and/or Platform, to ensure the basic functionality of our Website and/or Platform, to evaluate the system safety and stability, as well as for other administrative purposes. The legal basis for this processing is Art. 6 (1) lit. b) or f) GDPR. Without processing the personal data, our Website and/or Platform may not be displayed optimally.We may additionally process personal data such as your email address and any emails you send to us in order to answer inquiries/customer support requests and deliver reminder emails to you, to provide you with information regarding updates and changes to our Website and Platform and to send you newsletters about our Platform. In the case of pre-contractual measures, this personal data is processed in accordance with Art. 6 (1) lit. b) GDPR, otherwise due to mutual interest in processing in accordance with Art. 6 (1) lit. f) GDPR and re. sending you newsletters based on your express consent in accordance with Art. 6 (1) lit. c) GDPR. Without processing the personal data (with the exception of any voluntary information), it is not possible to process your request.We also process personal data such as your location and system type on the basis of your express consent to enable you the payment method of Stripe Payments Europe, Limited (SPEL).This processing of personal data is based on Art. 6 (1) lit. a) GDPR.We also process your profile picture, and phone number to improve our Website and Platform and to provide a personalized experience for you regarding the use of our Platform. This processing of personal data is based on Art. 6 (1) lit. a) GDPR.
3. COOKIES AND OTHER TRACKING TECHNOLOGIES
We use cookies and related technologies such as Log Files, session tokens, or Pixels on our Website. These are small (text) files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site and/or use our services. Cookies fundamentally do not cause any damage to your end device and do not contain any viruses, Trojans, or other malware to the best of our knowledge and will.Cookies are used to store information that is generated in connection with the specific end device used. This does not mean, however, that we will gain immediate knowledge of your identity. We use different categories of cookies for the following purposes:to statistically record the use of our Website and/or Platform and to evaluate it; to optimize our Platform; to improve the Website and to better achieve Website goals; to enable you to reach out to us through our Website; as well as for marketing and more personalized services.For further information on each cookie used, please see our Consent Management Tool on our Website. However, our use of necessary cookies is based on Section 25 (2) of the German Telecommunications-Telemedia Data Protection Act (“TTDSG”) and Art. 6 (1) lit. f) GDPR. We additionally use statistics cookies based on your consent according to Section 25 (1) TTDSG and Art. 6 (1) lit. a) GDPR. We also use preferences and marketing cookies based on Section 25 (1) TTDSG and Art. 6 (1) (a) GDPR.You can withdraw your consent to the storage of cookies (and similar technologies), except in relation to “strictly necessary cookies”, at any time by changing your cookie settings by going to the tixbase website footer, on the bottom right site and clicking on the “Change cookie consent” button.Most browsers and devices automatically accept cookies. However, you can configure your browser or end device so that no cookies are stored on your end device or a message always appears before a new cookie is created. If you disable cookies completely, you may not be able to use all the functions of our Website.If you use several devices/browsers, you must carry out the opt-out/deletion of cookies on each individual device/browser. If you delete all cookies in your browser, this will also delete the opt-out cookies, so it may be necessary to carry out the opt-out again. Further, if you delete all cookies, your experience on the Website may be degraded.To the extent the providers of the cookies/similar technologies are considered as our processors or joint controllers, we have entered into the according agreements with these providers to the extent available. Upon request, we will provide you with a description of the material provisions of any joint controller agreements we have entered into with a cookie provider to the extent required by law.
4. HOW AND TO WHOM YOUR PERSONAL DATA MAY BE SHARED
Your personal data will generally only be transmitted if you have given us your consent, if it is necessary for the establishment, execution or termination of a contractual or quasi-contractual obligation, or if it is necessary to safeguard the legitimate interests of us and there is no reason to assume that your interests worthy of protection in the exclusion of the processing or use outweigh or there are statutory transmission obligations.We share your personal data with third parties and third-party providers for assistance in improving our products and the Platform, but also for the purposes of provision of technical support, provision of age verification mechanisms, hosting services, testing, network security, or statistical services.We may also share your personal data with third parties in order to:Take legal action; Protect against fraud or for risk management purposes;Insure your purchase; Comply with the law or legal processes;Respond to requests from the public and government authorities.We may additionally share your personal data with third party payment processors including Stripe Payments Europe, Limited (SPEL), Klarna Bank AB (publ.), PayPal (Europe) S.à.r.l. et Cie, S.C.A. and MetaKeep for payment transactions. If you pay with a credit card, the so-called 3D-Secure 2.0 procedure is usually applied. 3DS 2.0 is a worldwide standard of card networks (Visa, MasterCard, JCB, Diners, AMEX, etc.) developed by EMVCo, an association of card networks. 3DS 2.0 is one of the methods used to perform strong customer authentication in accordance with the EU 2015/2366 directive (Payment Services Directive 2, PSD 23). With 3DS 2.0, browser data, credit card data, address data (billing address, email address), as well as the transaction amount and currency will be transferred to the credit card issuer via the credit card organizations. This data is used by the card-issuing institute to determine the fraud risk of the transaction; depending on the amount and calculation result, an authentication of the payment transaction e.g. via TAN or app may be required.However, if we share your personal data with the third parties listed above, we have entered into agreements with them in accordance with applicable law, in particular in accordance with Art. 26 and 28 GDPR. Under this provision, the other personal data processing third party undertakes to guarantee an adequate level of data protection.
5. HOW LONG WE KEEP YOUR PERSONAL DATA
Automatically collected log data is deleted after the purpose of the processing has been fulfilled, usually 7 days after it has been collected unless longer storage is necessary in individual cases for reasons of data and system security or for error identification and correction. We will retain personal data that we process for answering your inquiries only for as long as it is necessary for the transmission of the information you have requested from us and the establishment of a possible business relationship with you. We will retain your personal account data as long as you use the account. That means, if you delete your account, your data is also deleted instantly. However, we will not keep your personal data longer than you will use our Platform except if applicable law requires longer retention periods.
6. INTERNATIONAL TRANSFER
We also might transfer your personal data to the U.S. as we are based there. If you are accessing the Website and/or Platform from outside of the U.S., please be aware that personal data processed through the Website and/or Platform may be transferred to, processed, stored, and used in the U.S. and other jurisdictions Data protection laws in the U.S. and other jurisdictions may be different from those of your country of residence. Your use of the Website and/or Platform or provision of any personal data therefore constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of your personal data in the U.S. and other jurisdictions as set out in this Privacy Policy. If your personal data is collected in Europe, we will transfer your personal data subject to appropriate safeguards, such as Standard Contractual Clauses.
7. YOUR CHOICE
You are not obliged to give us your personal data or consent for the processing of your personal data. You have moreover certain choices about personal data, e.g. where you have consented to the processing of your personal data, you may withdraw that consent at any time and prevent further processing by contacting us as described above. Even if you opt-out, we may still collect and use non-personal data regarding your activities on our services and for other legal purposes as described above. You can also use our cookie banner on our website to pre-select the use of cookies. Please note that if you do not want to share your personal data for the purposes described above, we may not be able to perform some of our services properly.
8. YOUR RIGHTS
You have the right:to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or to object to processing, the existence of a right to object, the origin of your data if it has not been collected from us, as well as the existence of an automated decision-making process including profiling and, if applicable, meaningful information on their details;in accordance with Art. 16 GDPR to immediately request the rectification of incorrect or incomplete personal data stored by us;to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims;to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the accuracy of the data is disputed by you, the processing is unlawful but you refuse its erasure and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;in accordance with Art. 20 GDPR, to receive your personal data which you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller;in accordance with Art. 7 (3) GDPR to withdraw your consent once given to us at any time. The consequence of this is that we may not continue the data processing based on this consent in the future; andto lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our place of business.
You have also the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 (1) lit. f) GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions.If we use personal data for direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.If you object to the processing for the purpose of direct marketing, the personal data will no longer be processed for these purposes.If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
You may send us an e-mail at privacy@tixbase.com to request any or all of the above.
9. SECURITY OF YOUR PERSONAL DATA
We make use of suitable technical and organizational security measures – also via our service providers, which we contractually commit to comply with data protection – to protect your personal data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorized access by third parties. Our and the service providers’ security measures are continuously improved in line with technological developments. We therefore reserve the right to change these security and data protection measures if this becomes necessary due to technical changes.
10. YOUR CALIFORNIA PRIVACY RIGHTS
We welcome residents of the State of California to use our Website and Platform and comply with the California Business and Professions Code §§ 22575-22579. If you are a California resident, you may request certain information regarding our disclosure of personal information to any third parties for their direct marketing purposes. Please send us a written request totixbase, Co.8 The Green STE ADover, DE 1990111. AUTOMATED DECISION-MAKING Automated decision-making does not take place.
12. CONTACT INFORMATION
If you have any questions, comments, complaints, or concerns regarding this Privacy Policy, you can contact us anytime at the following address: 8 The Green STE A Dover, DE 19901 and/or privacy@tixbase.com. We take complaints very seriously and will respond shortly after receiving your complaint.
13. CHANGES TO THIS PRIVACY POLICY
Due to the further development of our Website and/or Platform or due to changed legal or official requirements, we may change our Privacy Policy. In this case, we will notify you via email sent to the email address you provided at the time of registration as well as post an updated version of this Privacy Policy on our Website so that you are always aware of the processing of your personal data.
