Datenschutzrichtlinie
1. Controller (The person responsible)
Die für die Datenverarbeitung Verantwortliche im Sinne der Datenschutzgesetze, insbesondere der EU-Datenschutzgrundverordnung (DSGVO), ist:
Ticket24 SARL-S
111, rue Pierre Neiertz
L-4634 Differdange
Luxemburg
RCS: B266350
Genehmigung zur Errichtung: 10141351/0
Email: info@ticket24.lu
2. Your Rights as a Data Subject
You can exercise the following rights at any time by contacting our data protection coordinator or using our contact details:
* Information: Right to get information about your data stored by us and its processing (Art. 15 GDPR).
* Correction: Right to correct incorrect personal data (Art. 16 GDPR).
* Deletion: Right to delete your data stored by us (Art. 17 GDPR).
* Restriction: Right to restrict data processing if legal obligations prevent immediate deletion (Art. 18 GDPR).
* Data Portability: Right to receive your data in a structured format, provided you consented or concluded a contract (Art. 20 GDPR).
* Objection: Right to object to the processing of your data by us (Art. 21 GDPR).
Wenn Sie uns Ihre Einwilligung erteilt haben, können Sie diese jederzeit mit Wirkung für die Zukunft widerrufen.
You also have the right to lodge a complaint with a supervisory authority at any time. For Luxembourg, this is the National Commission for Data Protection (CNPD). For a list of supervisory authorities (e.g. in Germany), you can visit: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
3. Registration on Our Website
* Type and Purpose of Processing: When registering for our personalized services, we collect personal data such as name, address, and communication data (e.g., phone number and email address). This allows you to access exclusive content and services. Registered users can change or delete their data at any time.
* Legal Basis: Consent of the user (Art. 6 Para. 1 lit. a GDPR) or for the performance of a contract / pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).
* Recipients: Technical service providers acting as processors for web operation and maintenance.
* Storage Period: Data is processed only as long as consent is active or as required to fulfill the contract. It will then be deleted unless statutory retention requirements apply.
* Necessity of Provision: Providing data is voluntary but required to grant access to our registered services.
4. Provision of Chargeable Services
* Type and Purpose of Processing: For paid services, we request additional data such as payment details to execute your order.
* Legal Basis: Performance of a contract (Art. 6 Para. 1 lit. b GDPR).
* Recipients: Specialized contract processors (such as payment gateways and accounting services).
* Storage Period: We store this data until statutory retention periods expire (generally 6 to 10 years due to commercial and tax law requirements).
* Necessity of Provision: Providing your data is voluntary but strictly required to conclude and perform the contract.
5. Contact Form
* Type and Purpose of Processing: Data entered in the contact form (name, email address, and message) is processed for individual communication and answering your inquiry.
* Legal Basis: Legitimate interest to process your request easily (Art. 6 Para. 1 lit. f GDPR) or pre-contractual measures if you inquire about an offer (Art. 6 Para. 1 lit. b GDPR).
* Recipients: Contract processors for web hosting and IT support.
* Storage Period: Data will be deleted no later than 6 months after the request has been fully processed, unless a contractual relationship arises, which falls under statutory retention periods.
* Necessity of Provision: Voluntary, but we can only process your request if you provide your name, email address, and the reason for the contact.
6. Use of Google Analytics
* Type and Purpose of Processing: This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) or Google LLC (USA). Google uses “cookies” to analyze your use of the website. The information is generally transferred to a Google server in the USA. IP anonymization is active on this website, meaning your IP address will be shortened within the EU/EEA before transfer. On behalf of the operator, Google uses this data to evaluate website activity and provide related internet services.
* Legal Basis: Explicit consent of the user (Art. 6 Para. 1 lit. a GDPR).
* Recipients: Google as a data processor. We have concluded a standard data processing agreement with Google.
* Storage Period: Data is anonymized or deleted automatically as soon as it is no longer required for our analytics purposes.
* Third Country Transfer: For transfers to the USA, data processing is secured through EU Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework.
* Revocation of Consent / Opt-Out: You can prevent cookie storage through your browser settings or by installing the Google Analytics Opt-out Browser Add-on.