Privacidade

Privacy at a glance

This privacy policy explains how personal data is processed in the "Ticket Buddy" webshop. Personal data includes contact and order data, payment and invoice data, technical access data, customer account data, cart data, digital ticket and voucher data, and information submitted through support or contact channels.

Controller

The controller for purchases, order handling and customer communication is TB Demo UG (haftungsbeschränkt), support@ticket-buddy.com.

Technical system provider

Ticket Buddy provides the technical shop system and may process personal data on behalf of the provider, including hosting, operations, checkout, cart, ticket and voucher delivery, email delivery, support tools, security, logging and analytics infrastructure.

Hosting and technical operations

We host the content of our webshop at the following provider:

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter referred to as Hetzner). For details, please view the data privacy policy of Hetzner: https://www.hetzner.com/de/legal/privacy-policy/

We use Hetzner on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our webshop possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or the access to information in the user’s end device, for example device fingerprinting, within the meaning of the TDDDG. This consent can be revoked at any time.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that Hetzner processes personal data of our webshop visitors only based on our instructions and in compliance with the GDPR.

Server log files

Technical access data such as IP address, time of access, requested URL, referrer, browser, operating system, transferred data volume and server status may be processed to provide the webshop, ensure stability and security, analyze errors and prevent abuse.

General information and mandatory notices

Processing may be based on consent, contract performance, legal obligations or legitimate interests, depending on the specific function. Order, invoice and payment data are stored for as long as required for contract handling and statutory retention periods.

Customer account, orders and digital tickets

For orders we process customer, cart, ticket, voucher, billing, payment, transaction and delivery data needed to conclude and perform the contract, provide digital tickets and vouchers, support access control, prevent fraud and answer customer requests.

Payment providers

Depending on the payment methods offered in the shop, payment data may be transmitted to payment providers. The system can support, among others: PayPal, Stripe, Secupay. Only providers actually offered in the checkout are used for a given shop.

Analytics

If you consent, the first-party analytics system integrated into the webshop is used. Data control and reporting remain with the provider or organiser named above as controller. Ticket Buddy provides the analytics functionality as part of the shop system and processes the data in this respect as technical system provider or processor.

The purpose is to analyze webshop usage so the provider can better understand pages, events, campaigns, checkout steps and abandonment points, and continuously improve the user experience. We collect anonymous session IDs, page paths, event types, coarse device types, referrer domains, UTM campaign parameters and timestamps. Email addresses and clear-name customer data are not stored in analytics events. By default, no third-party analytics provider is embedded for this shop analytics.

Raw analytics events are retained for a limited period and then aggregated. Proposed retention: 180 days for raw events; daily or monthly aggregates may be retained for up to 24 months for product and business reporting.

Contact requests

If you contact us by email, phone, support form or another channel, we process the information you provide to handle the request and any follow-up questions.

Feedback voluntário de clientes

Se utilizar o formulário de feedback, tratamos a sua avaliação, o tipo e o tema do feedback, uma mensagem opcional e dados de contexto como o canal de entrada, o idioma e a categoria geral do dispositivo. A finalidade é avaliar a experiência e melhorar a loja online, o processo de encomenda e o apoio ao cliente.

A participação é voluntária. O nome e o endereço de e-mail não são guardados sem autorização expressa para contacto posterior. Uma ligação associada a uma encomenda pode identificar a resposta como proveniente de uma compra verificada; para esse efeito é guardado apenas um identificador derivado criptograficamente, e não os dados da encomenda no registo de feedback.

O feedback básico é tratado com base no interesse legítimo do operador da loja em melhorar a sua oferta e os seus serviços; quando se refere a uma relação contratual existente, o tratamento também pode ser necessário para executar o contrato. O contacto posterior, a partilha com o operador da plataforma Ticket Buddy e a utilização como testemunho dependem de consentimentos separados e voluntários. A Ticket Buddy trata a resposta completa como prestador técnico sob instruções do operador da loja. Sem consentimento separado, o conteúdo não é partilhado com o operador da plataforma para análise própria; os dados de contacto e o consentimento para testemunhos não são transferidos para o respetivo repositório de informação.

O feedback é eliminado automaticamente no prazo máximo de 24 meses, salvo eliminação antecipada. Os consentimentos podem ser retirados através da ligação de gestão de consentimentos. Os dados técnicos de curta duração, em especial o endereço IP usado para limitar pedidos, podem ser tratados durante até 24 horas para proteger o sistema e prevenir abusos.

Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, portability, withdrawal of consent, objection to certain processing, and the right to lodge a complaint with a competent supervisory authority.