Privacy Notice on the Protection of Personal Data

As Pickaseat / Gen Z Entertainment, ensuring the security of your personal data and processing this data in accordance with the highest privacy standards is our primary goal. In this regard, we place great importance on the principle of transparency when processing your personal data, and we are committed to maintaining the trust relationship we have with you. To ensure that you are fully informed about the purposes for which we collect your personal data, the processing procedures, and your rights regarding this data, we have prepared a detailed "Data Protection Declaration".

When you create an account on the Pickaseat platform or benefit from our services, you can find all the information regarding which institutions and organizations process your personal data, the legal grounds of these processes, and how this data is protected in our declaration. We have made every effort to present our explanations in a clear and understandable manner; however, if you wish to obtain more information about our privacy policies or have any questions, you can always contact us through our communication channels.

In the event of significant changes to our privacy policies, you will be notified, and if necessary, your consent will be requested.

Data Protection Declaration
As Pickaseat / Gen Z Entertainment (hereinafter referred to as "Pickaseat"), we place great importance on the protection of your personal data when you visit our website (https://pickaseat.de). This data protection declaration provides information about the personal data collected, processed, and used by Pickaseat and explains your rights.

Scope
This data protection declaration concerns the personal data collected and processed during the use of services provided by Pickaseat. It applies to the website https://pickaseat.de and all digital platforms offered by Pickaseat, as well as within the scope of event management and ticketing services. This declaration regulates the collection, processing, storage, and protection of personal data in relation to the following activities:

Website usage: Data collected via cookies and tracking technologies during your visits to our website.

Event ticketing services: Transactions related to purchasing event tickets, processing orders, payment processes, and the delivery of physical and digital tickets.

Marketing and advertising activities: Personalized marketing and retargeting advertisements via email and SMS based on consent.

Customer support: Handling support requests and processing feedback.

Social media logins: Use of data provided through social media platforms such as Facebook and Google.

Data sharing with organizers: Information shared with event organizers in relation to the tickets you purchase.

Legal and regulatory obligations: Data shared with relevant authorities in accordance with tax returns, audits, and official requests.

This declaration defines Pickaseat's obligations regarding the protection of personal data under the General Data Protection Regulation (GDPR) and other relevant data protection laws, as well as users' rights.

Definitions
The terms used in this data protection policy are used as defined under the General Data Protection Regulation (GDPR):

1. Personal Data: Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifiers, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
2. Data Subject: A natural person whose personal data is being processed.
3. Data Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
4. Data Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
5. Data Processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the data controller.

1. Data Controller
In accordance with data protection legislation, the data controller responsible for the processing of your personal data is:
Pickaseat / Gen Z Entertainment
Address: Schillingstr. 24 13403 Berlin, Germany
Email: info@pickaseat.de
Phone: +49 30 46699885

2. Collection and Processing of Personal Data

2.1. What Data Do We Collect?
Pickaseat collects and processes the following personal data of yours:

• Identity Information: First name, last name, date of birth, title, username.
• Contact Information: Email address, phone number, postal address.
• Payment Information: Credit card information, bank account details, billing address.
• Browsing and Device Information: IP address, device type, browser information, operating system information.
• Social Media Login Information: Data provided via social media platforms such as Facebook and Google.
• Event and Ticket Information: Purchased tickets, event preferences, attendance history.
• Cookie Data: Usage data collected through cookies and tracking technologies (IP address, device identifiers, browser information).
• Location Information: Physical location data, GPS data, approximate location determined by IP address.

2.2. Methods of Data Collection
Your personal data may be collected through the following methods:

• Information you provide through the account you create on our website or mobile application.
• Payment and billing information you provide during ticket purchases.
• Information provided during calls with our customer service center.
• Data automatically collected through cookies and other tracking technologies.
• Information provided through social media logins or integrations (such as Facebook, Google).

2.3. Purposes of Processing Personal Data
Pickaseat processes your personal data for the following purposes:

• Performance of the Contract: For the sale, delivery, and provision of event tickets and services.
• Customer Support Services: To respond to customer complaints and requests, and to process feedback.
• Legal Obligations: For tax filings, retention of commercial documents, and regulatory requirements.
• Legitimate Interests: To improve the performance of our website, prevent fraud, and enhance user experience.
• Marketing and Advertising: Based on the user's consent, to send marketing communications and personalized recommendations via email and SMS.

2.4. For What Purposes Do We Use Your Personal Data?
We use your personal data for the following purposes in line with our main activities and in compliance with data security and GDPR regulations:

1. Traffic Monitoring and Security
We use your personal data to ensure the security of our systems and user information. In this context:

• Cybersecurity Measures: We monitor user traffic and system activities to detect, prevent, and minimize the impact of cyber-attacks on our website and applications.
• Access Control: We analyze information such as login attempts, session durations, and IP addresses to prevent unauthorized access to user accounts.
• Data Integrity: We conduct regular security scans and monitoring processes to protect the integrity of your data and prevent data loss.

2. Personalized Recommendations
We analyze your personal data to provide you with tailored recommendations based on your interests. For this purpose:

• Interest Analysis: We determine your interests based on your past event participation, searches, and interactions.
• Content Customization: We enhance your user experience by offering personalized event suggestions, content, and offers.
• Behavioral Analysis: We analyze your browsing behavior on our website to improve the user interface and experience.

3. Marketing and Retargeting
We use your personal data to improve our marketing strategies and deliver more effective campaigns to you:

• Campaign Management: We inform you about products and services that may interest you through email, social media, and digital advertising channels.
• Retargeting: In cases where you visit our website but do not complete a transaction, we aim to increase conversion rates by retargeting you with relevant ads based on your interests.
• Promotions and Special Offers: We provide loyal customers with special discounts, promotions, and offers to increase customer loyalty.

4. Customer Support
We use your personal data in customer support processes to provide better service:

• Responding to Questions and Requests: We need your personal data to respond to your support requests quickly and effectively.
• Post-Sales Support: We use your data to resolve any issues you encounter with purchased products or services and to ensure your satisfaction.
• Managing Communication Channels: We process your personal data to improve the quality of services provided through communication channels such as phone, email, and live chat.

5. Social Media Login
We use your personal data to enable quick and secure access to our platform through your social media accounts:

• Identity Verification: We process necessary data to verify your identity and ensure the security of your account when you log in with your social media accounts.
• Automatic Account Creation: We automatically create a user account on our platform based on your social media information.
• Data Synchronization: We synchronize your social media profile information to keep your data up to date and personalize your experience on our platform.

6. Ticket Purchase
We use your personal data to ensure secure ticket purchases for events:

• Order Processing: We process your personal and payment information to ensure that ticket purchases are completed smoothly and quickly.
• Payment Security: We use secure payment methods and encryption technologies to protect your financial data.
• Purchase History: We store your past purchases to facilitate future purchases.

7. Use of Cookies
We use cookies to improve the performance of our website and provide you with a better experience:

• Remembering User Preferences: We remember your language preferences, login information, and other personal settings to provide a faster and more personalized experience on each visit.
• Website Performance: We analyze data obtained from cookies to optimize page loading times and improve site navigation.
• Analytics and Reporting: We use cookie data to monitor user behavior and website traffic to improve our services.

8. Customer Feedback
We collect your feedback to improve our services and increase customer satisfaction:

• Surveys and Polls: We conduct surveys to measure your satisfaction with our services and identify areas for improvement.
• Feedback Analysis: We analyze collected feedback to develop strategies to enhance the user experience and service quality.
• Direct Communication: We aim to understand your needs and expectations by directly communicating with you to provide better service.

9. Newsletters and Marketing Emails/SMS
We use your personal data to inform you about events, opportunities, and updates that may interest you:

• Email Marketing: We regularly send email newsletters to inform you about the latest events and special offers in line with your subscriptions.
• SMS Notifications: We send short and instant notifications via SMS to keep you informed about opportunities.
• Content Personalization: We offer personalized content based on your interests and past interactions to make marketing messages more effective.

10. Defense of Legal Claims
We use your personal data to comply with legal processes and defend claims:

• Legal Obligations: We process necessary data to make legal notifications, prepare official documents, and participate in legal processes in accordance with regulations.
• Protection of Rights: We need your personal data to fulfill user claims and defend in potential legal disputes.
• Compliance with Regulations: We store and process your data to comply with legal regulations related to the sector in which we operate.

11. Analytics and Reporting Tools
We use analytics and reporting tools to analyze website traffic and improve our services:

• User Behavior Analysis: We use data on your browsing paths, click rates, and other interactions on our website to improve the user experience.
• Performance Reports: We regularly prepare reports to evaluate the performance of our website and applications, and we optimize accordingly.
• Trend Analysis: We identify changes in user behavior and new trends to shape our future service development strategies.

12. Organizer Reports
We use your personal data to provide event organizers with reports on business results such as ticket sales data:

• Sales Data Analysis: We analyze ticket sales trends and user preferences to provide comprehensive reports to organizers.
• Market Research: We use data to measure the success of events and provide strategic recommendations for future events.
• Performance Indicators: We prepare reports based on specified performance indicators to evaluate the performance of organizations.

13. Verification Services
We use your personal data to verify user accounts and ensure the security of transactions:

• Identity Verification: We conduct necessary verification processes to confirm users' true identities and ensure account security.
• Transaction Security: We verify identity information to ensure the accuracy and security of transactions.
• Fraud Prevention: We analyze user data to detect and prevent potential fraud attempts.

14. Physical Ticket Delivery
We use your address information to securely deliver your tickets:

• Address Verification: We verify your address information to ensure the ticket delivery reaches the correct location.
• Shipping Tracking: We track the delivery process of physical tickets to ensure they are delivered on time and without issues.
• Delivery Notifications: We keep you informed about the status of your ticket shipment to make the delivery process transparent.

15. Payment Processes
We use your personal data to complete the sale of event tickets and process payments:

• Payment Processing: We ensure that payments made through credit cards, bank transfers, or other payment methods are processed securely.
• Invoicing: We use your data to issue the necessary invoices and receipts for your purchases.
• Financial Records: We store your transaction history to facilitate future purchases and keep our financial records up to date.

16. Value-Added Services
We use your personal data to enrich the user experience by offering additional products and services:

• Additional Product Recommendations: We offer additional products and services tailored to your interests, providing more comprehensive solutions to your needs.
• Special Services: We use your data to offer value-added options such as VIP events, special sessions, or personalized services.
• Membership and Loyalty Programs: We aim to increase customer loyalty by offering special advantages and rewards to our loyal customers.

17. Marketing Automation Tools
We use automation tools to manage marketing campaigns and increase their effectiveness:

• Campaign Management: We manage marketing activities such as automated email campaigns, social media posts, and advertising campaigns.
• Segmentation and Targeting: We analyze user data to develop customized marketing strategies for specific user segments.
• Performance Monitoring: We monitor the performance of marketing campaigns in real time and make necessary optimizations.

18. Organizer Personal/Company Information
We process personal and corporate data to manage our collaboration with event organizers and organize sales processes:

• Collaboration Management: We use necessary personal and company information to maintain effective communication and coordination with our organization partners.
• Event Management: We provide organizers with the necessary data during the planning, organization, and execution of events.
• Sales and Reporting: We offer our organization partners detailed reports on ticket sales performance, participant demographics, and other important business results.

2.5. Cookies and Tracking Technologies
Pickaseat uses cookies to analyze data collected through the website, improve the user experience, and optimize marketing activities. For detailed information about the use and management of cookies, please visit our Cookie Policy page.

3. Sharing Personal Data with Third Parties
Your personal data may be shared with third parties in certain cases to provide our services effectively and securely. This sharing only occurs when necessary and in compliance with GDPR regulations. The following explains the purposes and the third parties to whom your personal data may be shared:

a) Service Providers and Business Partners
We may share your personal data with third-party vendors and business partners with whom we collaborate to provide our services. These third parties may be companies providing event ticket sales, payment processing, logistics services, marketing, customer support, and technical infrastructure. For example:

• Payment Service Providers: During ticket purchases, your credit card details and payment-related information are shared with payment service providers to complete the transaction securely.
• Logistics and Delivery Companies: To deliver physical tickets or products, your name, address, and contact details may be shared with the respective logistics companies.
• Technology Service Providers: Your personal data may be processed by cloud services, data storage systems, and infrastructure providers that we use to operate our website and apps.

b) Event Organizers
Depending on the event tickets you purchase, we may share your personal data with the respective event organizers. This sharing is necessary to manage the event better and create participant lists. The shared data generally includes basic information about your participation, such as your name, surname, email address, and ticket information.

• Participant Lists: To ensure your participation in the event and resolve any potential issues during the event, we may transmit your name, surname, ticket number, and participation details to the organizers.
• VIP or Special Events: For events where you enjoy special privileges, additional personal data may be shared with organizers to enable these privileges.

c) Legal Requirements and Authorities
In certain cases, your personal data may be shared with authorities and relevant governmental bodies due to legal obligations. This may occur in response to legal requests, court proceedings, official investigations, or regulatory requirements. The shared data is limited to the information requested.

• Tax and Audit Requirements: Your personal data may be shared with relevant authorities as needed for legal audits, tax regulations, and financial reporting.
• Court and Legal Requests: Your personal data may be transmitted to competent legal authorities in connection with court orders, legal proceedings, or requests from government agencies.

d) Marketing and Advertising Partners
Your personal data may be shared with our marketing and advertising partners to present you with personalized advertisements for events and offers that may interest you. These partners may include social media platforms, digital advertising agencies, or direct marketing service providers. The data shared in this context generally includes your name, email address, interests, and selected information based on your previous interactions.

• Retargeting and Personalized Advertising: When you visit our website or view events that interest you, your cookie data may be shared with marketing and advertising partners to provide you with more targeted advertisements.

e) Data Analytics and Optimization Providers
We may share your personal data with data analytics providers to improve our services and optimize the user experience. These providers analyze user behavior and help us enhance the quality of our services. In this process, the shared data may be anonymized or adjusted only for specific analytical purposes.

• Analysis of User Behavior: To analyze website traffic, user interactions, and purchase behavior, we may share data with partners.
• Reporting and Performance Monitoring: We share specific data sets with analytics platforms to create performance reports and improve the user experience.

f) Third-Party Services (APIs and Integrations)
Our platforms work with integrated third-party services where it may be necessary to share personal data for you to use these services. For example, if you log in via your social media accounts, we share the required data with the social media platforms for authentication purposes.

• Social Media Integrations: When you log in via social media, we share the necessary information with the platforms to complete the login process.
• Third-Party App Integrations: When we provide services integrated with specific third-party apps, it may be necessary to share personal data for these services to function.

4. International Transfer of Personal Data
Pickaseat processes your personal data exclusively within the European Economic Area (EEA). Your personal data is not transferred outside the EEA. However, when working with certain service providers, there may be a transfer of personal data to countries outside the EEA. In such cases, the necessary security measures are taken in accordance with Articles 44 and following of the GDPR (e.g., EU Standard Contractual Clauses).

5. Retention Period for Personal Data
Your personal data is stored for as long as necessary for the purposes for which it is processed and within a reasonable scope. The retention periods below are set for various data categories and legal obligations:

1. User Account Information: Your personal data will be retained as long as your user account is active. If you close your account, this data will only be stored for as long as legal obligations exist. After closing your user account, the data may be retained until the end of the statutory limitation period. The statutory limitation period in Germany is usually 3 years and begins at the end of the year in which the claim arose (e.g., from the completion of the ticket transaction).
2. Billing and Payment Information: Billing and payment information will be retained for up to 10 years, in accordance with legal provisions such as the Commercial Code (HGB) and the Tax Code (AO). At the end of this period, the respective data will be deleted or anonymized. For example, the retention of commercial and financial documents is required under § 257 HGB and § 147 AO.
3. Marketing Data: Data processed for marketing activities is retained until the user revokes their consent. Users can withdraw their marketing consents at any time, and in this case, the data will be deleted or anonymized.
4. Cookie Data: Data collected through cookies is stored for specific periods depending on the user's browser settings and the type of cookie. More information about cookie retention periods can be found in [our Cookie Policy].
5. Call Center Recordings: Personal data collected during calls with the call center may be retained for up to 3 years to improve customer service quality and fulfill legal obligations. In cases of legal disputes, this period may be extended.
6. Legal Obligations: Your personal data will only be stored as long as we are legally required to do so. The retention obligations are particularly governed by the Commercial Code (HGB) and the Tax Code (AO). These laws require the retention of commercial books and financial documents for a period of 6 to 10 years.

6. User Rights
Under the GDPR, you have various rights regarding your personal data. To exercise these rights, you can contact us through the "Contact Information for Submitting Your Request" below. Your rights include:

• Right of Access: You have the right to request access to your personal data.
• Right of Rectification: You may request the correction of incorrect or incomplete personal data.
• Right of Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data.
• Right to Object: You have the right to object to the processing of your personal data.
• Right to Withdraw Consent: You have the right to withdraw your consent to the processing of marketing and cookie data at any time.

Under the GDPR, you may submit the following requests to us at any time:

• You can request that we provide information about the personal data we process (Article 15 GDPR).
• You have the right to request the correction of incorrect or incomplete personal data (Article 16 GDPR).
• You can request the deletion (Article 17 GDPR), the restriction of processing (Article 18 GDPR), and/or the release of your data (Article 20 GDPR).

Contact Information for Submitting Your Request:
Pickaseat / Gen Z Entertainment
Address: Schillingstr. 24, 13403 Berlin, Germany
Email: info@pickaseat.de
Phone: +49 30 46699885

When you submit your request, we process your personal data collected in this context solely to respond to your request. This processing is carried out in accordance with Article 6 Paragraph 1 Sentence 1 lit. c) GDPR to fulfill a legal obligation.

Exercising your rights under the GDPR will not affect your other rights. You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR if you believe that the way we, Pickaseat / Gen Z Entertainment, process your personal data violates the GDPR.

7. Security Measures
Pickaseat implements both technical and organizational security measures to protect your personal data from unauthorized access, data breaches, and misuse. These measures are designed in accordance with ISO 27001 Information Security Management System (ISMS) standards and are applied to ensure the highest level of security against risks such as data loss, unauthorized access, and data breaches.
Pickaseat's security measures are continuously improved and updated through regular risk assessments and security checks. The measures used include:

• Encryption (SSL/TLS): Advanced encryption technologies are used in all data transmission processes to ensure the secure transfer of data.
• Regular Security Audits: Our systems are regularly subjected to security audits and continuously monitored for potential vulnerabilities. Internal and external security audits are conducted in compliance with ISO 27001 requirements.
• Access Restrictions: Access to personal data is limited to authorized personnel only, and authorization is granted based on the principle of least privilege.
• Data Masking and Anonymization: Data masking and anonymization methods are applied to protect sensitive personal data.
• Backup: It is ensured that your data is securely backed up against potential data loss, and backup processes are regularly tested.
• Monitoring and Updates: Our systems are continuously monitored, and the most up-to-date measures are taken against security vulnerabilities. Security updates and patches are regularly applied.

Our ISO 27001 certification demonstrates that we comply with international standards in information security management and that our security measures are continuously improved to ensure the highest level of data security. Our security policies are regularly reviewed and updated based on legal requirements and best practices.

8. Cookie Usage
Our website uses cookies to improve the user experience and optimize marketing activities. For detailed information about cookies and to change your settings, please visit our Cookie Policy page.

9. Changes to the Data Protection Policy
Pickaseat may update this data protection statement from time to time. All updates will be published on our website, and users will be notified in case of significant changes.

10. Right to File a Complaint
If you believe that your personal data has not been processed in accordance with the GDPR, you have the right to file a complaint with your local data protection authority. The competent authority in Germany is the Federal Data Protection Commissioner (BfDI).

11. Data Protection Officer Contact Information
You can address all your questions related to data protection to the address below:

Data Protection Officer
Pickaseat / Gen Z Entertainment
Address: Schillingstr. 24, 13403 Berlin, Germany
Email: info@pickaseat.de
Phone: +49 30 46699885