Privacy Notice on Commercial Communications

Privacy Notice on Commercial Communications

As Gen-Z Entertainment GmbH (”Pickaseat”), “Controller"), we value the protection of your personal data, so we expect you to show the same attention. For this reason, it is very important for us that you read this text detailing which personal data we use for what purpose and to clearly understand the obligations of Pickaseat, who is responsible for the administrative and technical security of your personal data as “Controller”.  

With this privacy notice we aim to inform data subjects, persons whose personal data is processed (used), as the “Controller” who uses their data. As a Controller, we have to prove that you have been informed about your personal data we will process by explaining:

1.     What personal data we collect about you and how we obtain them

2.     How we use your personal data

3.     Who we share your personal data with.

4.     Which countries we transfer your personal data to. 

5.     How long we keep your personal data. 

6.     What rights you have in relation to your personal data and how to contact us. 

7.     How we will update this Privacy Notice. 

Please be kindly informed that through Privacy Notice, we provide links to certain areas on our website where your personal data may be collected, and additional privacy notices are provided in those areas.

Please note: This Privacy notice does not apply to, and Pickaseat is not responsible for, any third-party websites which may be accessible through links from this website. If you follow a link to any of these third-party websites, their own privacy policies may apply.

1.      What personal data we collect about you and how we obtain them

As Pickaseat, we collect your personal data listed below through digital means through you providing us with your personal data with your consent from the sections related to the sending of commercial electronic messages. The following information:

• Your identity data (including but not limited to your first name, surname),
• Your contact data (including but not limited to your phone number, e-mail address),
• Your marketing data (including but not limited to contents of commercial electronic messages sent to you, date and record of commercial electronic message sent)

are obtained through the sections related to the sending of commercial electronic messages, as you provide this information based on the necessity of processing for the purposes of the legitimate interests pursued by the data controller. These interests are balanced against the fundamental rights and freedoms of the data subject, which require the protection of personal data.

2.      How we use your personal data

As presented below, the purposes of personal data processing carried out within the scope of the activity in which the Privacy Notice is issued are detailed.

We will only use your personal data where we are permitted to do so by applicable law. Each personal data processing purpose is matched with the categories of personal data and the relevant legal reason relating to the purpose.

In the presence of your consent, your identity, contact and marketing data are processed for;

• Confirming that you have consented to receiving commercial messages from Pickaseat,
• Processing your consent and/or revoke records regarding the sending of commercial electronic messages,

Also, your contact and marketing data are processed for;

• Sending commercial electronic messages via SMS and e-mail,
• Keeping records of commercial electronic messages sent,

because processing is necessary for the purposes of the legitimate interests pursued by the controller provided that such interests are overridden by the interests or fundamental rights and freedoms of the user.

3.      Who we share your personal data with

We only transfer them for certain purposes with:

• Public authorities and courts for legal duty of disclosure and limited to only information, which was requested,
• Our service providers such as customer support teams, external contact centers handling inquiries, cloud hosting providers, secure data storage and platform infrastructure for the purpose of sending commercial electronic messages,
• Our legal consultants and lawyers for fulfillment of legal purposes.

4.      Which countries we transfer your personal data to 

If we process data in third countries (meaning countries outside the European Union or the European Economic Area) or this occurs in the process of utilising the services of third parties or transmitting data to third parties, this will only be done for the purpose of fulfilling our contractual obligations, on the basis of your consent, due to a legal obligation or based on our legitimate interests.

In doing so, we ensure that your personal data is processed in compliance with the European level of data protection, based on special guarantees or due to corresponding contractual obligation including adequate technical and organisational measures.

When transferring your data internationally, we implement strict safeguards to ensure your privacy and security, including:

·         Standard Contractual Clauses (SCCs) – We use legally binding agreements approved by the European Commission to ensure that data recipients outside the EU/EEA adhere to strict privacy standards.

·         Binding Corporate Rules (BCRs) – If we transfer data within our corporate group, we enforce internally regulated policies that guarantee strong data protection across all entities.

·         Binding Corporate Processor Rules – When working with third-party service providers, we require them to comply with contractual obligations ensuring high data security standards.

·         Localized Data Storage – Whenever feasible, we process and store data within the EU/EEA to minimize cross-border transfers.

·         Encryption & Security Measures – All transferred data is protected using advanced encryption protocols, access controls, and cybersecurity safeguards.

We may transfer your data internationally under the following circumstances:

·         Use of shared services within the Pickaseat group – Some of our technical, security, and customer support services are provided by affiliated companies outside your country of residence.

·         Event coordination across regions – When international events or ticketing operations require data sharing across borders, we ensure a seamless and secure experience.

·         Global service providers – We work with international third-party vendors, including cloud hosting, payment processors, fraud prevention, and customer support teams, which may process data in different countries.

If you require further information or a copy of the relevant documentation regarding data transfers, please contact us at privacy@pickaseat.com

5.      How long we keep your personal data

We will retain your personal data for as long as is necessary to fulfil the purpose for which this data was collected and any other permitted linked purpose (for example your correspondance and any information we provide in return may be retained until the time limit for claims in respect of the communication or in order to comply with regulatory requirements regarding the retention of such data).

If your personal data is used for two purposes we will retain it until the purpose with the latest period expires; but we will stop using it for the purpose with a shorter period once that period expires.

Once your data is no longer needed, we:

·         Securely delete the information; or

·         Anonymize the information, ensuring that it cannot be linked back.

6.      What rights you have in relation to your personal data and how to contact us

You have different rights listed under General Data Protection Regulation and if you wish to confirm processing of your personal data or to have access to your personal data we may have about you, you may contact us through the contact methods listed below.

You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside Pickaseat might have received the data from Pickaseat; what the source of the information was (if you didn’t provide it directly to Pickaseat); and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by Pickaseat if it is inaccurate. You may request that Pickaseat erase that data or cease processing it, subject to certain exceptions.

You may also request that Pickaseat cease using your data for direct marketing purposes. When technically feasible, Pickaseat will—at your request—provide your personal data to you or transmit it directly to another controller.

You also have a right to lodge a complaint with the a competent data protection supervisory authority (Article 77 of the GDPR in conjunction with Section 19 of the German Federal Data Protection Act, BDSG) if you have concerns about how the Pickaseat processes your personal data. A list of supervisory authorities (for the non-public sector) with addresses can be found here:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

If you have questions about this statement or about data protection at Pickaseat, you can contact our data protection officer directly:

Contact details for our data protection officer:

Gen-Z Entertainment GmbH

Schillingstr. 24 13403 Berlin Germany

info@pickaseat.de

Customer Service: +49 30 46699885

WhatsApp Hotline: +49 30 46699885

7.      How we will update this Privacy Notice

We may change the content of our websites and how we use cookies without notice and consequently our Privacy notice may change from time to time in the future. We therefore encourage you to review them when you visit the website to stay informed of how we are using personal data.

This Privacy notice was last updated in January 2025.