Privacy and Security
Effective Date: [●]
Introduction
Welcome to Ticketline, where you can find information about events and shows and purchase tickets for them.
In this document, the website user (hereinafter “User” or “Data Subject”) will find information regarding the processing of personal data carried out by Ticketline in connection with the use of its website, located at https://ticketline.pt/, both in its capacity as a controller and as a processor, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) (“GDPR”) and other applicable data protection legislation.
Controller and Processors
TICKET LINE S.A., headquartered at Edifício Arcis, Rua Ivone Silva, No. 6, 8th Floor, 1050-124 Lisbon, with NIPC 504691031 (hereinafter referred to as “Ticketline” or “we”), is the entity responsible for managing and operating the Ticketline Online Store at https://ticketline.pt/.
As described in the Terms and Conditions of Sale, the Ticketline Online Store allows Users to purchase tickets for events organized by the Promoters. In the case of ticket purchases and sales, Ticketline operates on behalf of and for the account of the Promoters. As such, the Promoters are responsible for defining the purposes and means of processing personal data associated with the online ticket purchasing process.
In this context, Ticketline processes Users’ personal data as a processor of the Promoters for the purposes of completing the ticket purchase process and billing the base price of the ticket.
If you would like more information regarding the processing of your personal data in connection with ticket purchases, please refer to the information provided by the event Promoter on its website, as indicated on the event page.
Additionally, if you wish to exercise any of your rights as a data subject regarding the processing operations carried out by Ticketline as a processor, you should submit your request through the contact information provided on the event Promoter’s website. Notwithstanding the foregoing, if you direct your request to exercise your rights to Ticketline, we will immediately forward the request to the relevant Promoter.
In parallel, Ticketline also pursues its own purposes in processing the User’s personal data. In this Privacy Policy, you can find information regarding the processing of personal data carried out by Ticketline in its capacity as the controller.
Purpose of Personal Data Processing, Legal Bases, and Retention Period
We will collect and process the personal data you provide to us in connection with electronic transactions and arising from your use of our website, in accordance with the following terms:
| Purpose of Processing | Legal Basis | Retention Period |
|---|---|---|
| Purchase and sale of gift certificates. | Performance of a contract. | Personal data will be retained for a period of 1 year after the gift certificate expires. |
| Billing and accounting processing of the transaction fee. | Contract performance Compliance with legal obligations under tax legislation, specifically regarding VAT. |
Personal data will be retained for a period of 10 years. |
| Sending communications and responding to requests for information related to the event for which tickets were purchased. | Ticketline’s legitimate interest in providing after-sales support. | Personal data will be retained for a period of 1 year after the event takes place. |
| Sending direct marketing communications. | Prior consent from the User. | Personal data will be retained until the data subject withdraws their consent. However, after 2 years of inactivity by the data subject on the Online Store, Ticketlinewill delete their data for the purpose of sending marketing communications. |
| Creation of User’s profile. | Ticketline’s legitimate interest in creating a profile of its Users to better understand their preferences, using software powered by artificial intelligence. If the User has provided consent for this purpose, to send more relevant and tailored marketing communications, reducing the number of generic or irrelevant communications and allowing the Data Subject to receive personalized information about events, offers, and content likely to be of interest to them. | After 2 years of inactivity by the Data Subject on the Online Store, Ticketline will delete the respective profile. Notwithstanding the foregoing, if the Data Subject objects to the creation of their profile, Ticketline will cease the processing in question and/or delete the respective profile. |
| Responding to requests for information directed to Ticketline through its contact channels. | Ticketline’s legitimate interest in ensuring the quality of its customer support service. | Personal data will be retained for a period of 1 year after the requested information has been provided. |
| Analysis of complaints submitted to Ticketline - whether general or -via the Complaints Book. | Ticketline’s legitimate interest in analyzing complaints from Users and consumers. Compliance with a legal obligation under the legal framework governing the Complaints Book (Decree-Law No. 156/2005, of September 15). |
For complaints submitted to Ticketline via the contact address ticketline@ticketline.pt , your personal data will be retained until the complaint resolution process is complete. In any case, this period may be extended by the statutory limitation period for the rights and obligations related to the subject matter of the complaint. For complaints submitted to Ticketline’s Complaints Book, the retention period will be 3 years. |
| Response to the request to broadcast the event on Ticketline Live Stage. | Ticketline’s legitimate interest in responding to requests for information. Contract performance and pre-contractual measures. |
Personal data will be retained for a period of 1 year following Ticketline’s response to the request for information. If this contact leads to the conclusion of a contract, this data processing may be classified as a pre-contractual measure, and the data will therefore be retained until the expiration of the statute of limitations for the judicial enforcement of rights arising from the contract. The processing of personal data collected through the Ticketline Live Stage service will be governed by the respective privacy notice provided to you at the time of signing the contract. |
| Compliance with accessibility obligations. | Compliance with the legal obligation under the legal framework governing the accessibility of products and services (Decree-Law No. 82/2022, of December 6). | Personal data will be retained for a period of 5 years from the date of collection. |
| Sending the subscribed newsletter. | Prior consent from the User. | Personal data will be retained until the data subject withdraws their consent. However, two years after the data subject provides consent, Ticketlinewill ask you to confirm that you wish to remain subscribed to its database. |
The Website places cookies on the device used to access it, which will be used to fulfil some of the purposes identified here. For more information about the cookies we use and the data processing carried out through them, please see our Cookie Policy.
Recipients of the Data
We may share your personal data with third-party service providers who help us operate our website, manage our communications, and fulfil our contractual and legal obligations.
In particular, we may share your data with technical and IT support service providers, as well as service providers who help us implement features of the Online Store (namely, providers of digital marketing tools, such as Salesforce).
Ticketline may also transfer your data to Redion – Portugal Branch if you have purchased a Ticketline Insurance policy. Please note that Redion will process your data as an independent controller. For more information on the processing of your personal data by Redion, please refer to Article 29 of the General Insurance Conditions, available here.
Your personal data will also be transferred to the payment service provider you selected at the time of ticket purchase. For more information on available payment methods, please see our Terms and Conditions of Sale.
Your personal data may also be shared with third parties in the context of corporate transactions, such as mergers or acquisitions.
In addition, in order to expand the scope of its business activities, Ticketline establishes partnerships with physical ticket sales outlets with which we may share your data.
Finally, for the purpose of complying with legal obligations, Ticketlineinforms you that Users’ personal data may be disclosed to any other public or judicial authority to which, under applicable law, Ticketline is required to disclose such personal data.
Cross-Border Transfers of Personal Data
In connection with the contracting of services from Rapid Web Services, LLC and Intuit Inc. (MailChimp), we inform you that your personal data will be transferred to these companies, headquartered in the United States of America.
In this regard, please be advised that these entitiesparticipate in and are certified under the EU-U.S. Privacy Shield Framework, as available here, in strict compliance with the GDPR.
Your Rights
Users of the Ticketline websitehave the following rights regarding the personal data processed by Ticketline:
- When the processing of personal data is based on your consent, you have the right to withdraw your consent at any time, without this affecting the processing operations carried out in the meantime.
- The right to access your personal data, that is, to obtain confirmation from Ticketline as to whether or not it processes your personal data, and to request a copy thereof;
- The right to rectify your personal data when it is inaccurate or incomplete;
- In certain limited situations, the right to have your personal data erased;
- In certain limited situations, you have the right to restrict the processing of your personal data, in which case Ticketlinewill mark the User’s personal data and will only use it again with the User’s consent or if such data is necessary for legal proceedings;
- In certain limited situations, you may request Ticketlineyour personal data in a structured, commonly used, and machine-readable format and, if possible, that Ticketline transfer it directly to a third party designated by you (“right to data portability”);
- In certain limited situations, you have the right to object, at any time and for reasons related to your particular situation, to the processing of your personal data, in which case Ticketlinewill cease processing your personal data, unless it can demonstrate compelling and legitimate grounds for such processing that override your interests, rights, and freedoms, or for the purpose of establishing, exercising, or defending a legal claim in court proceedings.
The User may exercise the above-mentioned rights in writing to the address of Ticketline’s headquarters or via email at protecaodados@ticketline.pt.
The User is also informed that, if they believe their personal data has been processed in violation of applicable data protection laws, they have the right to file a complaint with the National Data Protection Commission (www.cnpd.pt).
Changes to This Privacy Notice
We may occasionally update this Privacy Notice. If we do so, we will indicate the date of the change in the version history table below.
Additionally, if a change to this Privacy Notice substantially affects its key provisions, we will, in accordance with the Guidelines of the European Data Protection Board, notify you of this change via the email address you have provided to us.
Please note that, if we do not process your email address, we suggest that you review the Privacy Notice at least once a year.
Ticketline Contact Information
If you have any questions regarding this Privacy Notice or the processing of your personal data, you may contact us at:
TICKET LINE S.A.
Arcis Building, Rua Ivone Silva, No. 6, 8th Floor, 1050-124 LisbonEmail: protecaodados@ticketline.pt