Data Protection Policy for Eventim Brasil São Paulo Sistemas e Serviços de Ingressos Ltda. (hereinafter “Eventim Brasil São Paulo”)
1. When you visit our website, you can create a customer account. You can use this to purchase tickets and find out about events and leisure activities. You can also create lists of your favorite artists, venues and events, bookmark them and receive information about them. You can participate in exclusive pre-sales and ticket sales registration, subscribe to newsletters and take advantage of many other benefits relating to your ticket purchase. The registration and use of the customer account requires the provision of personal data such as name, telephone number, e-mail address, home address, CPF registration number and identity card number, in one or more stages of the client’s registration procedure with the Website or of any giver purchase made by the client. Mandatory fields are marked accordingly in the input mask. So-called session cookies are used for the technical realization of the login.
- 1.1. Eventim Brasil Sao Paulo may use and process the client’s personal information for purposes of (i) registering the client and allowing him/her to access the Website for purpose of purchasing tickets; (ii) concluding a ticket purchase order; (iii) analyze and document the user behavior in order to present recommendations on the Website and on partners’ websites, and (iv) any other feature of the Website, such as registering the client in any promotional campaign. Based on the premises of execution of a contract and legitimate interest, we also use this data to inform you about our products and services and for user-verification in case of changes to personal data in your account. With your consent, we will provide you with a persistent login. Processing is carried out on the basis of Art.7, I (execution of a contract) and Art. 7, V (legitimate interest), of the General Data Protection Law (Lei Geral de Proteção de Dados – LGPD), as applicable.
- 1.2. Eventim Brasil Sao Paulo may use personal information provided by the client to develop and improve its services, benefits, promotional campaigns, Website content or for internal research and audit purposes.
- 1.3. Eventim Brasil Sao Paulo shall not disclose, by any means, the personal information provided by the client, unless otherwise stated in the registration.
- 1.4. When using our products You have the option to select a “persistent” login for the device you are using. In this case, you will not be asked for your password for a period of up to 6 months. This allows you to complete your ticket purchase faster and more conveniently, as well as to use many other functions and advantages faster. To enable this login, cookies are set on your end device. For some functions, such as downloading tickets, additional authentication via your password may be required.
- 1.5. EVENTIM Brasil São Paulo also uses various software solutions to optimize its online services. These solutions analyze website usage behavior and collect user data to improve navigation ease, service quality, and continuous enhancements. For these analyses, anonymous statistical data may be captured. These data are anonymous connections and clickstream related to the browser in use (e.g., Chrome or Safari), page impressions on EVENTIM Brasil São Paulo’s website, and Visitor browsing behavior. The visitor's shortened IP address can also be viewed during the data assimilation process. This anonymization process is carried out in order to prevent direct references to the user.
Data is analyzed for the following purposes:
- count the number of visitors
- track the areas of the website that are particularly attractive to the visitor
- analyze where visitors come from in order to improve the services offered
- adapt recommendations to a specific target audience
This process relies on the permanent use of “cookies”, files that are stored on the user’s computer that allow the analysis of website usage. By adjusting the browser settings, users can block these cookies at any time, or stipulate that cookies may only be set when they are explicitly accepted by the user. At any time, users can block the use of their data in general, for all implemented solutions, by selecting the “opt-out” option presented in the respective solution. If the user opts out, it is possible that personalized recommendations and system functionality can no longer be made.
EVENTIM Brasil São Paulo implements the following software solutions (by clicking on each option, the user will be redirected to the opt-out page:
AT Internet: https://www.xiti.com/de/optout.aspxCriteo: https://www.criteo.com/de/datenschutzrichtlinie
Google: https://www.google.com/settings/ads
Facebook: https://www.youronlinechoices.com/de/praferenzmanagement/
CTS EVENTIM AG & Co. KGaA: perform opt-out
Google Analytics: perform opt-out
TagCommander: https://www.tagcommander.com/de/datenschutz/
Stay22: perform opt-out
- 1.6 Note: The opt-out is done through the use of a cookie. If the cookie is deleted, the opt-out option must be reactivated. The opt-out can be done here.
This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies". The information about your use of the website generated by the cookie is usually transferred to a Google server in the United States and stored there.
The IP address transmitted by your server as part of Google Analytics will not be merged with other Google data. In addition, EVENTIM Brasil São Paulo has implemented a tool on its website that ensures that the user's IP address is masked so that all data collected is anonymous. Only in exceptional cases will the user's full IP address be transferred to a Google server in the United States and abbreviated there.
On behalf of EVENTIM Brasil São Paulo, Google will use this information to evaluate your use of the website in order to compile reports on website activity and to provide other services related to website activity and internet usage. The user can prevent the storage of cookies by configuring their browser software accordingly; in this case, not all functions of the website may be fully usable.
The user can also prevent the collection of data generated by the cookie (including the IP address) and the use of the website (including the IP address) by Google Analytics and the processing of this data by Google by downloading the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=pt.
EVENTIM Brasil São Paulo also uses Google Analytics to evaluate cookie and AdWords data (sponsored links) for statistical purposes. If the user does not wish to participate, they can disable the option via the Ad Manager (https://www.google.de/settings/ads/).
EVENTIM Brasil São Paulo uses Google Analytics, including the capabilities of Universal Analytics. Universal Analytics allows us to analyze the activities on our websites across devices (for example, when using a laptop and then a tablet). This is possible by associating the user ID with another user. For example, when the user registers for a consumer account or logs into his/her own account. However, no personal information will be passed on to Google. Despite the features of Google Analytics with Universal Analytics, this does not mean that there are no measurable privacy limitations such as IP masking or additional browser settings.
2. Eventim Brasil Sao Paulo may ask for and store discount codes, when applicable, in order to prevent a second purchase by the same client with the same discount, whenever such restriction is established by the rules of each promotional campaign or event or Eventim has reason to believe the discount codes are being used inappropriately.
- 2.1. In the event of promotional campaigns with participating banks, the discounted prices of exclusive pre-sales periods may be applicable exclusively to such banks’ clients and the initial 6 (six) digits of the credit card used by the client to make the purchase will be required to allow Eventim Brasil Sao Paulo to verify the client’s relationship with the relevant participating bank before the client can conclude his/her order.
3. Eventim Brasil Sao Paulo requires from its clients financial information such as credit card number and related information such as the expiration date. The use of such information by Eventim Brasil Sao Paulo will always be limited to the extent necessary to obtain payment for tickets ordered by the client, with the use of all normal commercially available means of ensuring appropriate data protection.
- 3.1. Eventim Brasil Sao Paulo may elect at any time to use payment gateways or other intermediaries to process payments relating to ticket purchase orders from its clients. In such case, the client will be forwarded to the website of the relevant payment gateway or payment intermediary, which shall be fully responsible for (i) obtaining any and all financial information from the client, (ii) processing and receiving the payment for the tickets being ordered by the client, and (iii) for the protection of such information and data. Eventim Brasil Sao Paulo has no control over any transactions which occur through the website of any payment gateway or payment intermediary and, accordingly, accepts no responsibility to the client for the same.
4. The Website may contain links to websites of other companies, products and/or services, and personal information provided by the client in any of such websites will be regulated by the owner of each such website’s policies. The client shall be responsible for ensuring that he / she reads and is aware of such policies before providing any personal information in any such website.
5. Eventim Brasil Sao Paulo undertakes to use its best efforts, in accordance with international market practices, to protect all of the client’s personal information stored in Eventim Brasil Sao Paulo’s database. However, provided that Eventim Brasil Sao Paulo has used its best efforts, Eventim Brasil Sao Paulo shall not be responsible in the event third parties succeed in obtaining unauthorized access to Eventim Brasil Sao Paulo’s systems, and as such shall not be liable, in any way, for any damages incurred by the client arising from such unauthorized access or the resulting unauthorized use and/or disclosure of the client’s personal information.
6. Eventim Brasil Sao Paulo has a legal obligation to disclose personal information of the client in the event such disclosure in determined by law or a decision by a Court of competent jurisdiction, or an administrative decision which may be binding upon Eventim Brasil Sao Paulo. In such cases, disclosure shall not be considered a violation of the data protection obligations of Eventim Brasil Sao Paulo, but Eventim Brasil Sao Paulo assures its clients that, in such cases, it will always (i) notify the client about the mandatory disclosure, if possible prior to the disclosure itself, but if not, as soon as practicable thereafter, and (ii) restrict such disclosure to the minimum possible to strictly satisfy the disclosure determination. 6.1. Eventim Brasil Sao Paulo may disclose personal information of the clients to its successor in case of any corporate restructuring transaction (merger, acquisition, disposal or spin off).
7.The client has unrestricted access to his/her own personal information when accessing the EVENTIM Brasil São Paulo's system and may freely edit it whenever deemed necessary.
8. Rights of Personal Data Holders According to the LGPD, personal data holders have the following rights, which can be exercised upon request:
1. Confirmation of the existence of data processing: Right to confirm whether we process your personal data.
2. Access to personal data: Request a complete copy of your personal data processed by Eventim.
3. Correction of incomplete, inaccurate or outdated data: Request the update or correction of information.
4. Anonymization, blocking or deletion of unnecessary, excessive or non-compliant data: Ensure that inadequate or excessive data is processed appropriately.
5. Data portability: Request the transfer of your data to another provider, in accordance with regulations.
6. Deletion of personal data processed based on consent: Request the deletion of data obtained through consent, apart from exceptions provided for by law.
7. Information about data sharing: Obtain details about entities with whom we share data.
8. Information about the possibility of not providing consent: Understand the consequences of not providing consent for processing.
9. Revocation of consent: Withdraw consent for processing activities based on this consent.
10. Objection to data processing: Object to the use of data for specific purposes, such as direct marketing.
11. Review of automated decisions: Request a review of decisions taken solely on the basis of automated systems that affect your interests.
9. How to exercise your rights?
In case of any doubts in relation to the way we process you personal data or in case of requests you may contact us on the following channels:
Access https://help.eventim.com.br/hc/pt-br/requests/new
In the “Reason for Contact”, box select option "5. Privacy and Data Protection".
2. Via the Data Protection Officer VISEU SOCIEDADE DE ADVOGADOS (CNPJ/MF sob o n.º 01.113.450/0001-53), represented by Antonielle Freitas: encarregado@eventim.com.br