INFORMATION PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679
This information is provided pursuant to art. 13 of Regulation EU 2016/679 (General Regulation on Data Protection), hereinafter “GDPR” to those who interact with the web services of the site vivaticket.com and vivaticket.it.1 - DATA CONTROLLER
- 1.1 The Data Controller for the use of the Vivaticket platforms is: VIVATICKET S.p.A. a sole shareholder company – via Antonio Canova, 16/20 – 40138 Bologna, Tel. +39 051 5881511, Fax +39 051 6014383, mail: privacy@vivaticket.com.
Vivaticket S.p.A. has appointed Francesca Fonda as its Data Protection Officer (DPO), who can be reached through dpo@vivaticket.com, as well as the telephone numbers listed above. - 1.2 In case of purchase of admission tickets for an event, a further Data Controller is the Organizer of the event, who will be indicated in the event card during the purchase procedure.
2 - PURPOSE OF PERSONAL DATA PROCESSING
We hereby inform you of the purposes of the collection, storage and processing of your personal data by the Data Controller:- 2.1 VIVATICKET S.p.A. will process your personal data for:
- The user registration to vivaticket.it and vivaticket.com, which is required to use the services of the sites (as specified in the General Conditions for the use of the Vivaticket Service), including any requests for assistance and the submission of complaints; this processing is necessary for the performance of a contract (ref. Art. 6 paragraph 1 letter b) Reg. 2016/679).
- the application of service fees, where applicable, for the ticket pre-sale service, necessary for the performance of the purchase contract (Art. 6 paragraph 1 letter b) Reg. 2016/679), including administrative and accounting purposes, and possible e-mail transmission of commercial invoices;
- sending the weekly newsletter of VIVATICKET S.p.A., in full compliance with the principles of lawfulness and correctness and the provisions of the law; this processing is based on the consent given by the data subject, and the ticketing service is guaranteed even in case of lack of consent;
- marketing purposes, which involves the sending, by automatic means such as e-mail and sms, of Direct Email Marketing communications regarding services and/or products that are similar, related or connected to the activity of VIVATICKET S.p.A. This purpose might include communications carried out in favour of other companies (mainly event organizers or commercial partners). The Data Subject personal data will not be transmitted to the aforementioned companies. This processing is based on the consent given by the data subject, and the ticketing service is guaranteed even in case of lack of consent;
- marketing purposes, which involves the sending of invitations, offers, services, products and events related or connected to previous purchases made by the user; this purpose is pursued on the basis of the legitimate interest of the Data Controller (art. 6 paragraph 1 letter F) Reg. 2016/679) and may also be carried out in favor of other companies (mainly event organizers or business partners). The Data Subject personal data will not be transmitted to the aforementioned companies. The Data Subject always has the right to object to this type of processing by following the instructions given in the communications.
- the user navigation on vivaticket.it and vivaticket.com through the use of cookies. Please see the Cookie Policy for details.
- 2.2 The event Organizer will process your personal data for:
- a.the issue of the admission ticket and for participation in the event, as well as for the organizational and security requirements related to the event for which the admission tickets are purchased. This processing is necessary for the performance of the purchase contract (art. 6 paragraph 1 letter b) Reg. 2016/679).
3 - GEOLOCATION INFORMATION
Based on the configuration of your browser, vivaticket platforms may be authorized to receive data about your geographical location through an IP control. This information is always approximate and is automatically deleted at the end of the browsing session. The vivaticket platforms do not store geolocation data, which is only used to improve the user's browsing experience.4 - INFORMATION RECEIVED FROM THIRD PARTIES
If you register for our platforms through your Facebook or Google account, VIVATICKET will be authorized to collect, store and use all information relating to your email, which will be processed in accordance with this privacy policy. We also receive information from users when they interact with our pages, groups, accounts or posts on social media platforms. Users may log out of vivaticket platforms accessed through third parties accounts at any time.5- MODALITIES OF PROCESSING
Your data will be mainly processed by electronic means, in the ways and within the limits necessary to pursue the above purposes, in compliance with the principles set out in art. 5 of EU Regulation 2016/679. The data will be stored in electronic files with full assurance of the appropriate security measures required by the GDPR..6 - DURATION
VIVATICKET will keep your data for the time necessary to carry out the administrative, accounting and fiscal purposes related to the purchase and also arising from the legal duties, in any case within the prescribed time limits set for the rights and obligations underlying the processing.The registration to the sites vivaticket.it and vivaticket.com and the related data processing is carried until cancellation by the user.
The personal data collected for marketing and promotional purposes will be stored in our database until the Data Subject exercises the right to object or cancel through the methods made available for this purpose and indicated in the sites vivaticket.it and vivaticket.com and in this notice.
7 - DATA COMMUNICATION
The personal data are in any case communicated by VIVATICKET to the Organizer of the event for which you buy the tickets, for the purpose referred to in paragraph 2.2.a. The same data may be processed by persons in charge of processing connected to VIVATICKET, or by professionals and staff that have to process them for organizational and functional needs, as well as third parties appointed as data processors, that must participate in the processing to ensure the provision of services vivaticket. The treatment will be limited only to the purposes related to the performance of the offered services. The data will be communicated, for example, to any server provider, components of the sales network, forwarding agents and carriers involved in the delivery of the purchased tickets, contact and call center companies for the management of the related services managed through the platforms vivaticket.it and vivaticket.com.The updated list of Data Processors can be requested to the Data Controller.
The Data Processors have been instructed on security and protection of personal data, and are not allowed to disclose or communicate personal data to other third parties, if not within the limits of the services.
The data may be also communicated to the Judicial Authority where required, for organizational and security purposes related to the event, as well as for other lawful controls, such as the verification of subjective requirements for the purchase of the Fan Card, the purchase of tickets to football events, etc. The data will not be disseminated.
8 - MINORS OF YEARS 16
The vivaticket.it and vivaticket.com platforms do not contain information or functionality or services directly intended for users minors of years 16.VIVATICKET S.p.A. therefore invites all users minors of years 16 not to communicate their personal data under any circumstances without the prior authorization of a parent or parental authority operator. Should Vivaticket become aware of the fact that personal data has been provided by a person under the age of 16, we will immediately destroy such data, maintaining the right to prevent access to the services available on the sites to any user who has concealed his or her minor age or who has in any case communicated his or her personal data without the consent of the person exercising parental authority.
In case of violation of the above by a child under the age of 16 years, VIVATICKET will not be held responsible for the event and will not be liable for claims for direct and/or indirect damages resulting from such violation.
9 - TRANSFERS OF DATA TO THIRD COUNTRIES
The personal data collected through the sites vivaticket.it and vivaticket.com are not transferred outside the European Union, in case of transfer outside the European Union the Data Controller ensures compliance with articles 44 and following articles of EU Regulation 2016/679.10 - RIGHTS OF THE DATA SUBJECTS
The subject to whom the personal data refer are entitled to the rights under Regulation (EU) 2016/679 (art. 12 and subsequent amendments), which are:- right to access their personal data (once they have confirmation that their data are subject to processing by the owner);
- the right to obtain rectification and integration of their data;
- the right to obtain the cancellation of their data;
- the right to have the processing of their personal data limiter under certain conditions;
- the right to receive personal data provided to the owner in a structured and commonly used format, and to transmit them to another owner;
- the right to object to the processing of personal data where there are reasons relating to their personal situation;
- the right not to be subject to automated decision-making;
- the right to be informed in the event of a serious breach of their data;
- the right to withdraw consent to processing at any time;
- the right to lodge a complaint with a supervisoty authority.
privacy@vivaticket.com