privacy policies | U19 | BVB-TicketShop

privacy policies

Data protection

Privacy Policy pursuant to Article 12 et seq. of the EU General Data Protection Regulation (GDPR) for ticketing marketing by the contractor Eventim on behalf of Borussia Dortmund GmbH & Co. KGaA (hereinafter: BVB) – for publication on the Eventimsports website

I. General information on data processing

We (CTS EVENTIM Sports GmbH, Hohe Bleichen 11, 20354 Hamburg, Germany) process your personal data on the basis of the data processing agreement entered into with Borussia Dortmund GmbH & Co. KGaA (the Controller). We are obligated to comply with all data protection provisions of the GDPR and the relevant amendment acts.

 

II. Name and address of the controller

The controller within the meaning of the European General Data Protection Regulation is Borussia Dortmund GmbH & Co. KGaA (hereinafter: BVB)

Rheinlanddamm 207–209

44137 Dortmund

Germany

Tel.: +49 (0)231 - 90 20 0

E-mail: datenschutz@bvb.de

Website: https://www.bvb.de/

III. Contact details for the data protection officer

You can contact the data protection officer at:

Ulf Haumann, RA, LL.M.

c/o Borussia Dortmund GmbH & Co. KGaA

Rheinlanddamm 207-209

44137 Dortmund

Germany

Tel.: +49 (0)231 - 90 20 0

E-mail: datenschutz@bvb.de

Website: https://www.bvb.de/

IV. Specific information about your data

When you buy your tickets, we collect and use the following personal data

  • Name
  • Date of birth
  • Address
  • E-mail address
  • Telephone number
  • Payment and billing data

 

The billing data relates only to the information on the invoice.

Your personal data is processed for the following specific purposes

  • General ticketing information
  • Purchase, dispatch, collection, holding of individual tickets
  • Payment terms and billing information
  • Adherence to policies on uniform enforcement of stadium bans
  • To verify whether a stadium ban can or must be imposed, including for reasons of unauthorised ticket selling
  • Enforcement of stadium bans
  • Important match day information by e-mail (service e-mail)

 

V. Legal basis

We process your personal data in order to perform our contract, to ensure that BVB events and matches go safely and smoothly, and to ensure that away match tickets are properly allocated.

 

1. Contract

 

The legal basis for the processing of your personal data by the controller in the course of handling ticket purchases is Article 6(1) first subparagraph (b) GDPR. Accordingly, your personal data may be processed if and to the extent that this is necessary to fulfil our contractual obligations to you. This also applies to the processing of data necessary to carry out pre-contractual measures at your request. Further information on the purchase and use of admission tickets for events at SIGNAL IDUNA PARK can be found in the General Ticket Terms and Conditions, which are available at https://www.bvb.de/Tickets/Infos-AGBs/AGB/Allgemeine-Ticket-Geschaeftsbedingungen.

 

Purchasing personalised tickets gives you a claim against BVB, which owes you access to the stadium, allocated standing room space or specific assigned seats and the staging of the event or football match in return for payment of the ticket price. The ticket documents your claim. Any ticket transfers are subject to the General Ticket Terms and Conditions and require the consent of BVB. Personalised tickets make it easier for us to restrict the sale of tickets on the secondary market and to better enforce stadium bans. We therefore have the right to require you to provide us with the data of persons to whom you transfer your tickets.

 

By contrast, away match tickets are issued on behalf of the away clubs, whose terms and conditions apply. The data we collect from you in this connection is transferred to the away clubs.

 

2. Legitimate interest

 

We make every effort to ensure the safety and smooth running of BVB events. Among other things, we must also comply with the guidelines for the uniform enforcement of stadium bans issued by the German Football Association ("DFB") or, in the case of an international match, by UEFA, and ensure safety and order in the stadium by banning persons from the premises. We have a legitimate interest in processing all information necessary for this and the processing is therefore lawful pursuant to Article 6(1) first subparagraph (f) GDPR provided that you do not have an overriding interest in keeping the data confidential. However, interests in safety and security generally have priority.

 

If the relevant circumstances satisfy the requirements, BVB will issue nationwide stadium bans in accordance with guidelines for the uniform enforcement of stadium bans in order to ensure the safety and smooth running of football matches. In such cases, the processing of data for the aforementioned purposes also includes transferring your personal data (name, address, date of birth) to Deutscher Fußballbund e.V. ("DFB"), Otto-Fleck-Schneise 6, 60528 Frankfurt a.M.

 

3. Consent

 

In accordance with Article 6(1) first subparagraph (a) GDPR, your data will only be disclosed for advertising purposes with your express consent, which you may withdraw at any time with effect for the future by sending an informal message to the aforementioned responsible office.

 

4. Data transfer

 

Your data will be transferred to us by BVB to process the ticket purchase. We generally will not transfer your data to third parties. However, in special cases (e.g., to enforce a nationwide stadium ban), this may be necessary and contractually stipulated in the General Ticket Terms and Conditions.We also transfer data to our service providers (e.g., software companies) on the basis of data processing agreements pursuant to Article 28 GDPR.

VI. Use of cookies

We use what are known as “cookies” on our website. Cookies are text files that are stored in/by your Internet browser on your computer system. When you access our website, a cookie may be stored on your system.

 

This makes navigation easier and ensures a high degree of user-friendliness. Cookies also help us to identify particularly popular areas of our website. Cookies are text files that are stored in/by your Internet browser on your computer system. When you access our website, a cookie may be stored on your system. These contain an individual character string that makes it possible to store information over a certain period of time and to identify an end device.

 

Sections 1 (“Necessary cookies”), 2 (“Statistics technologies”) and 3 ("Marketing technologies") below provide details on the types of cookies that we use and the data processed in each case. Unless the sections below refer to different deletion periods, the following applies in summary to the storage period, irrespective of the type and purpose of the cookies:

 

You have full control over the use of cookies. They are saved on your computer and the data is then transmitted from your computer to us. While most browsers are configured to accept cookies by default, you can change your browser settings to deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. You can also change your browser settings so that cookies are deleted automatically. If cookies are generally deactivated for our website, you may no longer be able to use all of the website functions in full. When you visit our website, an information banner will draw your attention to the aforementioned use of cookies and to this Privacy Policy. We would ask you to consent to the use of cookies by clicking on the “I agree” button. You can object to the use of cookies at any time. You can do this either by not agreeing to the use of cookies when the banner is displayed in the first place, or by changing your browser settings accordingly.

 

1. Necessary cookies

 

These services, technologies and cookies are necessary to ensure that key functions of the portal work as intended and that contracts with customers and cooperation partners can be performed. The cookies save and transmit the following data:

  1. Session ID
  2. Login ID
  3. Shopping basket ID

 

Cookies are a technical requirement for the following purposes:

  1. Personalisation
  2. The items in your shopping basket remain in your basket when you close and re-launch your browser. The data collected by technically necessary cookies is not used to create user profiles.

 

The legal basis for their use is Article 6(1) sentence 1 (b) (initiating or performing a contract), (c) (if legal obligations exist) and/or (f) GDPR (overriding legitimate interests). The latter interests are in particular the monitoring of the technical performance of the website and our interest in leveraging the economic benefits of partner sales channels. It is therefore not possible for them to be deactivated via our Consent Management System or by you as a website user. If you object to the use of these cookies or configure your browser accordingly, our website will not recognise your browser and you may not be able to access certain content, or data (e.g. from an input mask) may be lost. The information set out in section II. applies with regard to the storage period for technically necessary cookies.

 

1.1 Tag management system

 

The processing operations within this category control the delivery of services, technologies and cookies without storing the data collected in connection with these services. At the same time, no data is collected or stored by the tag management system itself. The system is used to technically implement your choice of privacy settings. The following technologies and service providers are used:

 

- Google Tag Manager

- easy.Marketing

 

1.2 Technically necessary website technologies

 

The processing operations within this category are used to ensure the smooth use of the website and its functions. Without them, it is not possible to use functions such as the shopping basket.

The following technologies and service providers are used:

 

- Own website cookies

 

1.3 Consent Management Platform (CMP)

 

The processing operations within this category allow users to individually control the transfer of their data. The Consent Management Platform is used to query and document the user's decision and transfer it to other systems.

The following technologies and service providers are used:

- e.g. Cookiebot ( https://www.cookiebot.com/de/privacy-policy/)

 

1.4 Basic web analytics (excl. customer IDs)

 

The processing operations within this category are used for the following purposes: anonymised traffic analysis, incident monitoring and alerting, fraud detection, IT management, reach measurement, product development and improvement and navigation tracking.

The following technologies and service providers are used:

- Google Analytics – https://policies.google.com/technologies/partner-sites?hl=de

 

2. Statistics technologies

 

Our website also uses cookies that allow your surfing behaviour to be analysed. Technical measures are in place to pseudonymise the data collected by these cookies. This means that the data can no longer be traced back to you. This data is not saved together with your other personal data.

 

The following data can be transmitted within this context:

(1) Frequency of page views

(2) Use of website functions

 

We use analytics cookies to improve the quality of our website and its content. Analytics cookies show us how the website is being used, allowing us to optimise the products and services we offer on an ongoing basis. These purposes also establish our legitimate interest in the processing of the personal data pursuant to Article 6(1)(f) GDPR.

 

If you object to the use of these cookies or configure your browser accordingly, this will not have any disadvantages for you. All of the website functions will remain available.

 

The information set out in section II. applies with regard to the storage period for cookies to analyse surfing behaviour.

 

2.1 Website statistics and analytics

 

In addition to the basic web analytics, pseudonymised user profiles are also collected in the extended web analysis with your consent. The term "pseudonymous user profiles" refers to profiles which have been pseudonymised by anonymising IP addresses; such profiles can be linked to online transaction data from the online shop.

 

2.1.1 Google Analytics

 

We use Google Analytics, a web analytics service provided by Google, 1600 Amphitheatre Parkway , Mountain View, CA 94043, USA (hereinafter referred to as: “Google”). This service uses cookies. Data generated by the cookie about your use of the website is usually transmitted to a Google server in the U.S. and stored there.

 

Google will use this information on our behalf to evaluate the use of our website, to compile reports on the activities within this website and to provide us with further services relating to the use of this website and the use of the Internet. Pseudonymous user profiles can be created using the data that is processed within this context.

 

We only use Google Analytics with IP anonymisation enabled. This means that Google truncates your IP address within Member States of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the U.S. and truncated there. The IP address transmitted from your browser is not merged with other data from Google.

 

You can prevent the storage of cookies by configuring your browser software accordingly; you can also prevent Google from storing the data relating to your use of the website generated by the cookie and from processing this data by downloading and installing the browser plug-in that is available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

 

You can find further information on how Google uses data for advertising purposes, as well as on your options for configuring your settings and for raising objections, on Google’s website: https://www.google.com/intl/de/policies/privacy/partners/ (“How Google uses information from sites or apps that use our services”), http://www.google.com/policies/technologies/ads (“How Google uses cookies in advertising”), http://www.google.de/settings/ads (“Manage the information Google uses to show you ads”) and http://www.google.com/ads/preferences/ (“Choose which ads Google shows you”).

 

As an alternative to the browser add-on or within browsers on mobile devices, please follow this link to prevent Google Analytics from collecting data on this website in the future. This will store an opt-out cookie on your device. The opt-out cookie stores the information that we are not allowed to use your data for Google Analytics. If you delete the cookies you have saved, you will need to click on this link again.

 

The information set out in section II. applies with regard to the storage period for the cookies.

 

2.1.2 Easy Marketing

 

On this website, we use the tracking technology of easy Marketing GmbH, Asselner Hellweg 124, 44319 Dortmund, Germany, to measure and visualise insights into partnerships and advertising channels. This is a function for measuring the efficiency of the corresponding advertising measures. Furthermore, the information enables us to assign the success of an ad for billing with corresponding advertising partners. When you click on an ad, cookies are stored in your browser, which are read in the event of a transaction. At each touchpoint, your browser sends an HTTP request to the easy Marketing server with which certain information is transmitted. This information includes the URL of the website on which the ad is placed (referrer URL), the browser ID (user agent) of your end device (including information about the device type and operating system), the IP address of the end device (this IP address is anonymised and hashed by us before storage), HTTP headers (data packet automatically transmitted by your browser containing various technical information), the time of the request and, if previously stored on the end device, the cookie with its content. A cookie is a small data packet that is exchanged between your browser and the server. The information relevant to the web application can be stored and transmitted in this data packet, e.g. the contents of a virtual shopping basket.

 

The tracking technology stores cookies on your end device to document actions. A 24-digit, anonymous ID is stored in the cookie. Linked to this ID, the data is stored in encrypted form in our database on the server. This contains information about the last touchpoints (i.e. when a specific ad was displayed or clicked on by an end device). The stored touchpoints can be combined into a sequence chain (user journey) if necessary. With a action request, the order number and the shopping basket value of your order are usually also transmitted and stored by us. In addition, the following data can be transmitted and saved: Your customer number, new customer feature, your age and gender as well as the information you provided in a customer survey. The cookies stored by easy Marketing are deleted after 30 days at the latest. The information transmitted to us and the cookies serve the sole purpose of correctly assigning the success of an ad and the corresponding billing and is justified by our legitimate interests pursuant to Article 6(1) sentence 1 (f) GDPR.

 

If you do not wish cookies to be stored in your browser, you can prevent this by changing your browser settings accordingly. You can disable the storage of cookies in your browser under Tools/Internet Options, restrict them to certain websites or set your browser to notify you as soon as a cookie is sent. Please note, however, that if you restrict cookies, the online offers displayed and user interface will be limited. You can also delete cookies at any time. In this case, the information stored therein will be removed from your end device.

 

The collection and processing of tracking data can also be deactivated by clicking on this tracking opt-out link:

https://trck.easy-m.de/privacy-optout.do

Access to your data:

https://trck.easy-m.de/privacy-mydata.do

The overview below indicates which specific cookies are used by our tracking technology:

TRS: Unique, 24-digit identifier (ID) for tracking partnerships. This cookie is stored in the client browser and identifies database records that contain the touchpoint data.

TRSCJ: Fallback cookie with the rudimentary touchpoint data for tracking partnerships. This cookie contains all touchpoint data on the client browser in encrypted form.

trs_db_optout: When the tracking opt-out link is clicked, a special cookie is written, which disables tracking in the current web browser of the end device. However, tracking is enabled again as soon as you delete the tracking opt-out cookie.

 

3. Marketing technologies

 

We use third-party cookies to learn more about your surfing behaviour (web tracking), so that we only show you the advertisements that you actually want to see. Within this context, the processing of your data is based on a legitimate interest and on Article 6(1)(f) GDPR.

 

When you access our website, you will see a banner asking for your consent. This means that Article 6(1)(a) GDPR is an additional legal basis.

 

3.1 Personalised advertising and remarketing on third-party websites, social channels, search engines or websites of cooperation partners

 

The processing operations within this category are used to display interest-based advertising to the user on third-party websites, social media, search engines or websites of cooperation partners. This is intended to increase the relevance of the ad content for our visitors.

 

3.1.1 Google Ads

 

Our website uses Google AdWords, an online advertising tool developed by Google that enables what is known as “remarketing”. This enables customised advertising based on your surfing habits on other websites in the Google Display Network (Google, “Google Ads” and other websites).

 

Your surfing behaviour on our website is analysed so that advertisements matching your interests can be displayed on other websites. In order to achieve this, Google uses cookies to identify your browser on a specific computer, but not a specific individual or user. No personal data is stored.

 

We only use Google AdWords with IP anonymisation enabled. This means that Google truncates your IP address within Member States of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the U.S. and truncated there. The IP address transmitted from your browser is not merged with other data from Google.

 

You can prevent the storage of cookies by configuring your browser software accordingly; you can also prevent Google from storing the data relating to your use of the website generated by the cookie and from processing this data by downloading and installing the browser plug-in that is available at the following link: https://policies.google.com/technologies/ads?hl=de.

 

We also use what is known as “conversion tracking”, which is also part of Google AdWords. When you click on an ad placed by Google, a corresponding cookie is stored on your system. Once again, this does not involve the processing of any personal data or other data that can be used to identify the specific user or an individual.

 

The cookie is used to generate statistics on “conversion rates”, which, to put it simply, show how visits to a page relate to successful sales.

 

Cookies for conversion tracking by Google AdWords become inactive after 30 days.

 

3.1.2 Facebook

 

We use another conversion tracking and "remarketing" tool to analyse our advertising measures on Facebook, the Facebook pixel, a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.

 

The service allows us, as well as Facebook, to track users' actions after they have clicked on a Facebook ad. This enables us to record and evaluate the effectiveness of ads for statistical and market research purposes in order to optimise future advertising measures.

 

The data collected is anonymous for us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with Facebook's Privacy Policy ( https://www.facebook.com/about/privacy/). You can enable Facebook and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes.

 

We only use Facebook pixels if and insofar as you have given us your express consent to use them. Consent to the use of the visitor action pixel may only be given by users over the age of 13. If you are younger, please ask your parent or guardian for permission. If you give your consent, the data is processed on the basis of Article 6(1)(a) GDPR.

 

You have the right to withdraw your consent at any time with effect for the future.

VII. Storage period

We delete your personal data once we no longer need it for compliance with our contractual and/or legal obligations. For instance, billing data must be retained for at least 10 years.

VIII. Your rights

You generally have the following rights as data subject:

  • right of access to your data being processed (Article 15 GDPR);
  • right to rectification of your data (Article 16 GDPR) insofar as your personal data we process is incorrect;
  • right to erasure of your data (Article 17 GDPR) to the extent that we no longer require the data and there are no overriding statutory retention purposes;
  • right to restrict the processing of your data (Article 18 GDPR) if and for as long as your objections to the data processing have not yet been clarified; and
  • right to object to the processing of your data (Article 21 GDPR) if we process your data based on our overriding interest. In the case of processing for direct marketing purposes, you can do so without giving grounds. Otherwise, you can successfully object to the data processing if in your particular situation your personal interests override our interests and those of public safety.

 

You also have the right

  • to lodge a complaint with the supervisory authority (Article 77 GDPR), i.e., the State Commissioner for Data Protection and Freedom of Information (Landesbeauftragten für Informationsfreiheit und Datenschutz, "LDI") (https://www.ldi.nrw.de/).

 

 

We uphold these rights at all times. Should you require any further information, please do not hesitate to contact our data protection officer (contact details provided above).

 

The full text of the GDPR is available at https://gdpr-info.eu/.