Print

PRIVACY

PRIVACY POLICY ON PERSONAL DATA PROCESSING according to Article 13 of Regulation (EU) 2016/679, General Data Protection Regulation ('GDPR') and to Italian Legislative Decree No. 96/2003, Personal Data Protection Code ('Privacy Code').

 

Version - July 2024

 

This information is provided for T.O.S.C. TicketOne Sistemi Culturali S.r.l., a company subject to the direction and coordination of TicketOne S.p.A., with registered office in Rome (RM), via Giovanni Giolitti n. 287, CF and PIVA: 05185361002, website www.tosc.it.

This privacy policy is provided to users and users of T.O.S.C.'s services and is intended to describe the procedures for the collection and use of personal data that users provide through purchase on the website or by filling out the group and school reservation form.

 

Data controller

The data controller is T.O.S.C. TicketOne Sistemi Culturali S.r.l., (hereinafter referred to as the "Data Controller" or the "Company").

 

Data Protection Officer

The Company has appointed a Data Protection Officer (hereinafter 'DPO') based in Milan, Via Fabio Filzi, n. 29.

In accordance with Article 38, par. 4, you will be able to contact the DPO, for all matters relating to the processing of your personal data and the exercise of your rights under the GDPR, at the following address: dpo@ticketone.it.

 

Purpose and type of data processing carried out

The data provided are those related to navigation and those provided by the user when filling out the form for booking admission tickets for groups and schools.

Those relating to the purchasing process are processed by TicketOne S.p.A. with registered office in Milan, Via Fabio Filzi n. 29, a company subject to the management and coordination of CTS EVENTIM AG & Co. KGaA, whose Privacy Policy can be found at the following www.ticketone.it/help/data-protection/.

 

Purpose of processing

The processing of your personal data for the purposes and in the manner described in this notice, will be carried out for the purpose of the execution of the contract in accordance with Art. 6 para. 1 letter b) GDPR.

 

Communication and transfer of data

Your personal data will be processed exclusively by persons authorised to process them identified by the Controller pursuant to Article 29 of the GDPR, in their capacity as data processors and/or internal data controllers and/or system administrators.

Your data may be communicated to the following categories of subjects ("recipients"), which will be better described later in this policy:

a) to all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative measures;

b) to third-party companies whose services are offered or sold through the TicketOne Site (and, in particular, to companies or entities organizing concerts, shows, sporting or other events whose tickets are sold through the Site), for the performance of all services related to the admission and enjoyment of events;

c) to banking institutions and companies that manage national or international payment circuits through which online payments are made for products purchased through the Site, including, if necessary, for the reversal of transactions made by you on the Site;

d) to Eventim Group companies as part of an efficient work-sharing process when we provide, implement and manage our products and services;

e) to all those entities, public and/or private, natural and/or legal persons (Judicial Offices, Chambers of Commerce, Chambers and Offices of Labor, etc.), if the communication is necessary or functional to the proper fulfillment of contractual obligations undertaken, as well as obligations arising from the law.

In addition to the foregoing, for the pursuit of the purposes described above, personal data may be made known to third parties operating on behalf of TicketOne, as data controllers, such as, but not limited to:

- to companies or third parties in charge of printing, enveloping, shipping and/or delivery services of tickets purchased through the Website;

- to couriers or shippers engaged for the delivery of products purchased through the Site;

- to companies, consultants or professionals that may be entrusted with the installation, maintenance, updating and, in general, the management of TicketOne's hardware and software or which the Company uses for the provision of its services;

- to companies or Internet providers in charge of sending documentation and/or informative material;

- to companies in charge of processing and/or sending advertising and informative material on behalf of our Company.

A named and updated list of the individuals appointed as data processors is available at TicketOne's headquarters.

The transfer of data to the event organizer is based on the agreements concluded by TicketOne with the event organizer pursuant to art. 6 par. 1 lett. b) of the GDPR.

Please note that we also have the right to make such a transfer if there is a suspicion that you have violated the general terms and conditions of the organizer, so that the organizer can take legal action or enforce its other legal rights against you. Such transfer is made on the basis of TicketOne's and/or the respective organizer's legitimate interests in enforcing its legal rights on the basis of article 6 par. 1 lit. f) of the GDPR.

Personal data will be processed within the territory of the European Union. Should it be necessary, for technical and/or operational reasons, to use subjects located outside the European Union, it is hereby guaranteed that the transfer to such subjects, limited to the performance of specific Processing activities, will be carried out in compliance with the GDPR.

 

Duration of processing

Your personal data will not be processed for longer than is necessary to achieve the purposes set out in this Policy. Your personal data will be processed for the entire duration of the employment relationship and also afterwards for the fulfilment of all legal obligations and in compliance with the statute of limitations provided for by the law, and in any case for no longer than 10 years from the termination of the relationship, except in the event of litigation.

 

Rights of data subjects

We remind you that you may exercise your rights under the GDPR and in particular obtain:

- confirmation as to whether or not personal data concerning you are being processed and to obtain access to the data and the following information (purpose of processing, categories of personal data, recipients and/or categories of recipients to whom the data have been and/or will be disclosed, storage period);

- the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data, including by providing a supplementary declaration;

- the deletion of personal data, in the cases provided for by the GDPR;

- limitation of processing in the cases provided for in the current Privacy Code;

- the portability of the data concerning you, and in particular to request the personal data concerning you provided to the Controller and/or request the direct transmission of your data to another controller;

- object at any time, for reasons related to your particular situation, to the processing of your personal data in full compliance with the current Privacy Code, as well as for marketing and profiling purposes.

- lodging a complaint with the Data Protection Authority.

In the aforementioned cases, where necessary, the Company shall inform the third parties to whom its data is communicated of the possible exercise of its rights, except in specific cases (e.g. when such fulfilment proves to be impossible or involves a manifestly disproportionate use of means compared to the right protected).

The rights listed above may be exercised by sending a request to the Data Protection Officer as per the contact details given in this Notice.

 

Amendments to this notice

The Controller reserves the right to update this policy at any time. You are therefore advised to check it periodically in order to keep up to date with the Company's Privacy Policy.

 

Finally, we would like to inform you that you can view the previous policy at the following link:

• Privacy Policy – December 2023
• Privacy Policy - June 2023

 

COOKIE POLICY

 

This Cookie Policy ("Cookie Policy") provides information about cookies and other similar tracking technologies that may be used in the course of our activities, when you interact with the website www.tosc.it of T.O.S.C. TicketOne Sistemi Culturali S.r.l., (hereafter, "TOSC"), owned and/or operated by TicketOne S.p.A. (hereafter, "Website"), with registered office in Milan, Via Fabio Filzi, 29 (hereafter, "TicketOne") and managed by the same.

This Cookie Policy does not apply to third-party websites that the user may consult via link.

 

What cookies are and what they are used for

Cookies are small text files that websites visited by users send to their terminals, where they are stored before being transmitted back to the same sites on their next visit.

Cookies are distinguished as follows:

- on the basis of the entity that installs them on the user's terminal, depending on whether it is the same operator of the Site that the user is visiting (so-called "first-party cookies") or a different Site that installs cookies through the first Site (so-called "third-party cookies");

- according to their duration, into persistent cookies, i.e. which remain stored, even after the browser is closed and until a predetermined expiry date, on the user's device, and into session cookies, which are not stored persistently, but are automatically deleted each time the browser is closed;

- depending on the purpose of each cookie: some cookies are necessary for the Sites to function properly (so-called "technical cookies" or "strictly necessary cookies"); others are designed to collect information on the number of users and how they interact with our sites and services. This data is collected in order to process statistical information on the use of the Sites and their functioning, with the aim of measuring their performance and to be able to act in order to improve their navigability and functionality (so-called "analysis and functional cookies"); other cookies allow the Site that has installed them to monitor the user's navigation also in order to send advertisements or offer services in line with the preferences expressed by the user while browsing the web and/or to assess the usefulness of advertising campaigns and content presented to the user (so-called "Profiling cookies" or "Targeting cookies"); other cookies, finally, allow the user to take advantage of multimedia contents linked, for example, to the location of the event venue as well as to videos and images related to the artist or event provided by third parties and incorporated on the TOSC website, in order to allow the user a better navigation (so-called "external multimedia cookies").

The above-mentioned first- and third-party cookies are installed on the Site in the manner specified in the categories described below.

 

Acceptance and Management of Cookies

Strictly necessary cookies

Pursuant to Directive 2009/136/EC, implemented by Legislative Decree No. 69 of 28 May 2012, cookies that are essential for the use of a website may be used even without the user's consent, since they are cookies necessary for the proper functioning of the Website or the services enabled or requested by the user. For this reason, such cookies are always active and cannot be deactivated by the user. In the event of removal of this type of cookie through the browser settings, navigation on the Sites may not be possible, in whole or in part.

 

Analysis and functional cookies, targeting cookies and external media cookies

Users may give their consent to the use of both of these categories of cookies and similar tracking technologies by clicking on the "Accept all cookies" button in the banner displayed when they first access the Site. Alternatively, the user may express his or her preferences, granting or denying consent to the installation of all or only some categories of cookies, by accessing the Cookie Preference Centre from the "Cookie Settings" button in the banner.

The user may also subsequently change his or her preferences at any time by accessing the Cookie Preference Centre via the 'Cookie Settings' button in the footer of all pages on the Site.

In order to express your preferences with regard to categories of cookies, you can use the Cookie Preference Centre:

- the 'On/Off' button next to the individual cookie categories described, to manage your preferences at category level. To make the choices made effective, it will be necessary to click on the 'Save choices and close' button.

- the general 'Accept all cookies' button to accept all categories of cookies.

For more information on how to change your preferences or to change your preferences directly at any time, we invite you to access the Cookie Preference Centre via the 'Cookie Settings' button in the footer of the Site pages.

Following the expression of consent, the duration of the processing may be minutes, hours, days, depending on what is determined by the provider of the individual cookie in accordance with the law.

In any case, the user may refuse consent to cookies via the browser settings, as described here.

In addition, and for the sake of better clarification of the foregoing, TOSC, in its capacity as data controller, specifies the following with regard to information collected by cookies installed directly through the Site:

• data are collected only for the purposes indicated in the Cookie Preference Centre, in relation to each category, and are processed electronically;

• the data collected may be disclosed to parties who act on behalf of TOSC as data processors and/or as co-processors, for purposes related to those described in the Cookie Preference Centre. This also includes the possibility of processing data outside the EEA/EU area. With respect to such data, you may exercise your rights under Articles 15-22 of the GDPR, as set out in the Privacy Policy accessible via the "Privacy" link in the footer of the Site.

Finally, with reference to third-party cookies, please note that the purposes of these cookies, the logic behind their processing as well as the management of user preferences with respect to these cookies are not determined and/or verified by TOSC but by the third party that provides them, as supplier and data controller.

We do not control the placement of these cookies and we encourage you to consult the relevant third party's website or mobile app for more information about these cookies or how to withdraw consent. However, regardless of whether TOSC believes that you have validly consented to the installation of cookies, including third party cookies, TOSC will endeavour to provide support to you if you request it at this address.

At the following link the main Suppliers of the cookies installed on the Site are summarised. By clicking on the link provided in the space dedicated to each Supplier, you will be redirected to their Privacy Policy.

Notwithstanding the foregoing, the user may also make use of the information provided by the main services that provide useful information on most advertising tools.

We recommend using these resources in addition to the information provided above.

MAIN SERVICES

EDAA (EU)

Network Advertising Initiative (USA)

Digital Advertising Alliance (USA)

DAAC (Canada)

This Cookie Policy may change over time.

We therefore invite you to consult this page periodically.

 

Last modified: December 2023

To view previous versions of the Cookie Policy access the following link:

• Cookie Policy - June 2023