Privacy Policy

Last updated: 02 August 2026

1. Who we are

This website (the "Website") is operated by the company indicated in the footer of this Website (the "Operator", "we", "us", "our"). We are the data controller for the personal data collected through this Website, as defined in Article 4(7) of the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

2. Data we collect

We collect the following categories of personal data:

Booking data: name, email address, phone number, city, event and seat selection, order number.
Payment data: payment is processed by our third-party payment service provider; we do not store card numbers or payment credentials ourselves.
Technical data: IP address, browser type and version, device type, pages visited, timestamps (see Section 5 on cookies).
Contact data: any message you send us through the Website.

3. Purposes and legal bases of processing

We process personal data only for specific, legitimate purposes and rely on the following legal bases under Article 6 GDPR:

Performance of a contract (Art. 6(1)(b)): issuing tickets, managing bookings, sending confirmations and tickets.
Legal obligation (Art. 6(1)(c)): tax, accounting and consumer-protection obligations.
Legitimate interests (Art. 6(1)(f)): security, fraud prevention, improving the Website, statistical analysis.
Consent (Art. 6(1)(a)): marketing communications and non-essential cookies, where applicable. You may withdraw consent at any time.

4. Sharing of data

We do not sell personal data. We may share personal data with:

payment service providers, solely for processing your payment;
hosting and IT service providers that operate the Website;
analytics providers (in anonymised form);
public authorities, where required by applicable law.

All recipients are bound by appropriate contractual and technical safeguards.

5. Cookies

This Website uses cookies. Cookies are small text files stored on your device. We use:

Strictly necessary cookies (e.g. session, booking and security cookies) — these are required for the Website to function and cannot be disabled;
Functional cookies (e.g. remembering your selected city and language);
Analytics cookies (e.g. anonymised statistics about visits) — these are used only with your consent.

You can manage or delete cookies through your browser settings at any time. Where consent is required for certain cookies, we request it before placing them, in accordance with the ePrivacy Directive (Directive 2002/58/EC as amended).

6. International transfers

Where personal data is transferred outside the European Economic Area (EEA), we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs), adequacy decisions, or equivalent mechanisms recognised under the GDPR.

7. Retention

We retain personal data only as long as necessary for the purposes described in this Policy: booking data is kept for the duration required by applicable law (including tax and consumer-protection periods), and technical data for a shorter period. After that, data is securely deleted or anonymised.

8. Your rights

Under Articles 15–22 GDPR, you have the following rights:

Right of access (Art. 15) — obtain a copy of your personal data;
Right to rectification (Art. 16) — correct inaccurate data;
Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten");
Right to restriction of processing (Art. 18);
Right to data portability (Art. 20) — receive your data in a machine-readable format;
Right to object (Art. 21) — object to processing based on legitimate interests or to direct marketing;
Right not to be subject to automated decision-making (Art. 22) — where such decisions produce legal or similarly significant effects.

To exercise any of these rights, contact us using the details in Section 11. We will respond within one month, as required by Article 12 GDPR.

9. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration, in accordance with Article 32 GDPR. All traffic to and from this Website is encrypted using TLS/HTTPS.

10. Complaints

You have the right to lodge a complaint with a supervisory authority in the EU/EEA country of your habitual residence, place of work, or place of the alleged infringement. In particular: if you are located in the EEA, you may contact the data protection authority of your country. We kindly ask you to contact us first so we can resolve any concern.

11. Contact

For any questions, requests or complaints regarding this Privacy Policy or the processing of your personal data, contact us using the contact details provided on the Website. We will respond to your request as soon as possible and no later than one month.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the "Last updated" date shown above. Significant changes will be notified on the Website.

This Privacy Policy is prepared in accordance with the General Data Protection Regulation (EU) 2016/679 and Directive 2002/58/EC.