(last changed May 25th 2018)
To use our website or the shop for the sale of event tickets and other goods, personal data is collected, processed and stored. This is necessary on the one hand to fulfill our contractual obligations towards you (the buyer) or on the other hand to fulfill the service (e.g. creation of tickets).
The following describes how we (mtms Solutions GmbH) collect and process data about you.
To which system of law are we subject to, regarding data protection?
Being based in Austria, mtms Solutions GmbH is subject to the european General Data Protection Regulation (GDPR) and the regulations of the telecommunications Act (§96 TKG). Therefore your data is protected on the basis of European and Austrian law. Data processing is normally carried out exclusively within the EU. If processing is carried out outside the EU in special cases, this is carried out according to the applicable legal norms and ensuring an adequate level of data protection through appropriate guarantees.
Validity of this Directive
If you have any questions or complaints regarding this policy or the use of your data, please contact firstname.lastname@example.org .
The use of our services is permitted only to persons who have reached the age of 14. Persons under the age of 14 are not able to give consent to our data protection regulations and therefore data transmission is not permitted. If you still want to use our service, your parents will have to agree to the data transmission, otherwise we will delete your data as soon as we know about it.
What data is processed and stored and for what purpose?
5.1 Personal data that is transmitted to us
In general, personal data are considered to be data which permit a conclusion on their person.
During an inquiry, a ticket purchase or a registration for an event, you may also announce further data in addition to your personal data such as address, name, email address and phone number. These may vary according to different actions and use cases, are usually related to the business relationship and are processed and stored for the purposes of this business relationship.
You may be asked to provide additional information when you purchase tickets or when registering for events to enable you to use our services and website.
Normally this data is collected on behalf of the event organizer and processed for the purpose of fulfillment of the service.
Requested data can e.g. be related to preferred menus (vegetarian, vegan, ...) or in regard of sports events level of fitness, memberships, etc. These questions are defined by the organizer for the particular event or ticket and the corresponding data are then processed by the organizer.
Note on payment data: The payment details (credit card number, CV code, account number) are entered on a web form of the PCI-certified payment service provider (currently Wirecard Technologies Germany) and are also transmitted directly to the latter. That means we are never in possession of your credit card information. The payment service provider only transmits the anonymous credit card number (last four digits) in the billing or, in the case of instant bank transfer, the account number.
Newsletter: The completion of a newsletter subscription usually takes place using a double opt-in. That means you must actively give your consent here (e.g. tick a checkbox). Additional data may be collected in order to provide you with the desired selection of information. This may be e.g. your taste in music, etc., in order to provide you with information on the relevant events in the future. Of course, you can always cancel your subscription from such a service.
The consent to receive marketing information (newsletters) is valid for both mtms and the respective event organizer. The organizer will distribute a newsletter either via the systems of mtms or via his own systems.
Furthermore, the data communicated by you is used so that we or the organizer can contact you. Die von Ihnen mitgeteilten Daten werden unter Umständen mit automatisiert erhobenen Daten zusammengefasst und verarbeitet.
The data you provide may be merged and processed with collected automated data. For product or support requests, which are made via the contact form on our website, your request will be transmitted to our internal CRM and processed.
5.2 Automated Data
What data is collected?
Data transmitted by the browser (version, screen size, operating system ...), IP address, order of pages accessed and interaction between the individual pages. In addition to cookies, we also use the services of third parties such as Google Analytics (see below).
Why is this data collected?
In order to ensure the security of our services, it is necessary to store all transaction data in the form of logfiles. Thus we are subject to certain retention obligations (e.g. retention obligation of keeping tickets according to tax law) or proof of obligations to the payment service provider and the organizer.
We also collect and process this data to ensure the technical operation, to measure and optimize the experience for our customers, to make interesting product proposals and to display relevant advertising for you.
Here, too, the principle of memory limitation applies by pseudonymizing the log files after a short period of time - that is to say, encrypting them and subsequently being able to view them only in justified individual cases.
Third party data:
Since we usually cooperate with third parties to deliver of our services, data about you, which have either been transmitted by you or are collected automatically, are transmitted to us by third parties.
Such third parties may be e.g. : the event organizer, technical service providers, logistics companies, payment service providers, analytic services, business partners, search engine providers, credit rating service providers.
In addition, information that is publicly accessible about you, in particular information which you have published yourself, may be used. This includes, in particular, data from social media networks.
Here, too, processing of the data is used to optimize our service, to provide you an ideal offer and experience, tailored to you, but only within the legal possibilities.
Transfer of data to third parties
In the sense of fulfilling the contract with the event organizer, it is necessary to pass on your data to the respective event organizer. This applies to ticket purchases as well as to registrations to events or to purchase other goods for both data transmitted by you, and automatically collected data. The organizer can and will also use your data in the course of completing the contract and possibly optimizing its services and / or marketing purposes.
Data can also be passed on to third parties such as technical service providers, logistics companies, payment service providers, credit rating service providers, mtms affiliates, partner companies, subcontractors.
Data protection regulations of the event organizer and third parties
Links to other websites and links to third-party content and pages, are beyond our sphere of influence and are therefore not subject to our privacy regulations. Such links are purely informative and it is your responsibility to access these pages.
In case of a ticket purchase or registration for an event, it should be noted that the data protection regulations of the event organizer are also applied and the data protection regulations of mtms are extended. These will be made available to you in the course of the ticket purchase, or on the website of the organizer, or will be linked to some tickets (electronic tickets) by link.
Google Analytics und Cookies
This website uses Google Analytics, a web analytics service provided by Googe Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and which allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there.
Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to web usage and internet usage. Google may also transfer this information to third parties, provided this is required by law or if third parties process this data on behalf of Google. Google will under no circumstances associate your IP address with other Google data.
You can prevent the installation of cookies by setting your browser software accordingly; however, we would point out that in this case you may not be able to fully utilize all the functions of this website. By using this website, you agree to the processing of the data collected by you in the manner described above and for the aforementioned purpose. In addition, you can prevent Google from collecting and processing the data (including your IP address) related to your use of the website (including your IP address), as well as the processing of this data by Google, by clicking on the following link (http://tools.google.com/dlpage/gaoptout?hl=en) and downloading and installing the available browser plugin.
Weiters You can also prevent Google Analytics tracking by clicking on the following Link .
An opt-out cookie will be set which prevents the future collection of your data when you visit this website.
Google Analytics Terms and Conditions or Google Analytics overview.
Duration of storage, deletion, information and correction
Wherever possible we are following the principle of data parsimony. That means that the data stored about you will only be kept as long as is necessary for our business purposes or due to legal or contractual requirements. In order to meet our legal retention requirements (such as tax retention obligations), it is possible that data may remain stored about you even though you are no longer in a business relationship with us. Name, address, purchased goods and date of purchase are further stored until the end of product liability (10 years).
Data is processed on the basis of the statutory provisions of § 96 (3) TKG and Art. 6 (1) lit a (consent) and / or lit b (necessary for fulfillment of the contract) of the GDPR.
After aborting the shopping process there is no storage of the data.
In general, you have the right on information, correction, deletion, restriction, data portability, revocation and to file an objection.
This right applies only to data contained in structured data collections, namely, data contained in computer-aided data applications or manual files. In order to ensure that no unauthorized person can obtain access to your data, such requests for information must be made in writing, accompanied by an up-to-date copy of your ID, in order to be able to determine your identity. It is best to use the corresponding application form of the Data Protection Commission.
In the course of such a request for information you also have the right to correct incorrect data or to delete inadmissible data. Permission for data that is processed on the basis of your consent (GDPR Art. 6 (1) lit a - e.g. Newsletters), can be revoked informally at any time. In this case we will delete the corresponding data.
Where possible, you may correct your personal data yourself, or you can take insight on your stored personal data or delete it.
For information / deletion or correction requests, please contact our data protection officer at: email@example.com . Further contact details can also be found on our website in the imprint.
Security of the data
We take all necessary measures to protect your data against loss and unauthorized access. For this purpose we use a wide range of security installations.
If you have access to our system (user account), it is your responsibility to keep the access data securely or not to pass it on to third parties. This includes, in particular, the choice of secure passwords.
Right on your own image
By purchasing the ticket or registration for an event, the purchaser irrevocably grants the organizer the right to publish and use his picture and his voice free of charge for all present and future media. This applies to all recordings made by the organizer or by a person appointed by him.
Social Plugins/ Share Buttons
On our website we sometimes offer the possibility to share content via social media. However, these are links to the respective social media services and no data related to you will be transmitted to those services when you visit our website. Only by following the respective link you leave our side and under certain circumstances you transmit data to the respective social media service. This happens outside our sphere of influence and participation. For privacy reasons, we waive the use of so-called social media plugins, or if we use them, then exclusively on server side without any transmission of IP addresses, social media identifiers or cookies (so-called Shariff solution).
Data Protection Officer:
Max Riese, firstname.lastname@example.org, Tel: +43 6225 29010