Privacy

Privacy at a glance

This privacy policy explains how personal data is processed in the "Oelsnitz Ticket" webshop. Personal data includes contact and order data, payment and invoice data, technical access data, customer account data, cart data, digital ticket and voucher data, and information submitted through support or contact channels.

Controller

The controller for purchases, order handling and customer communication is Paulus Development ENI (Empresário em Nome Individual), info@oelsnitz-ticket.de.

Technical system provider

Ticket Buddy provides the technical shop system and may process personal data on behalf of the provider, including hosting, operations, checkout, cart, ticket and voucher delivery, email delivery, support tools, security, logging and analytics infrastructure.

Hosting and technical operations

We host the content of our webshop at the following provider:

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter referred to as Hetzner). For details, please view the data privacy policy of Hetzner: https://www.hetzner.com/de/legal/privacy-policy/

We use Hetzner on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our webshop possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or the access to information in the user’s end device, for example device fingerprinting, within the meaning of the TDDDG. This consent can be revoked at any time.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that Hetzner processes personal data of our webshop visitors only based on our instructions and in compliance with the GDPR.

Server log files

Technical access data such as IP address, time of access, requested URL, referrer, browser, operating system, transferred data volume and server status may be processed to provide the webshop, ensure stability and security, analyze errors and prevent abuse.

General information and mandatory notices

Processing may be based on consent, contract performance, legal obligations or legitimate interests, depending on the specific function. Order, invoice and payment data are stored for as long as required for contract handling and statutory retention periods.

Customer account, orders and digital tickets

For orders we process customer, cart, ticket, voucher, billing, payment, transaction and delivery data needed to conclude and perform the contract, provide digital tickets and vouchers, support access control, prevent fraud and answer customer requests.

Payment providers

Depending on the payment methods offered in the shop, payment data may be transmitted to payment providers. The system can support, among others: PayPal, Stripe, Secupay. Only providers actually offered in the checkout are used for a given shop.

Analytics

We use first-party Ticket Buddy analytics only after consent. The purpose is to analyze webshop usage, improve navigation, checkout, performance and product decisions. We collect anonymous session IDs, page paths, event types, coarse device types, referrer domains, UTM campaign parameters and timestamps. Email addresses and clear-name customer data are not stored in analytics events.

Raw analytics events are retained for a limited period and then aggregated. Proposed retention: 180 days for raw events; daily or monthly aggregates may be retained for up to 24 months for product and business reporting.

Contact requests

If you contact us by email, phone, support form or another channel, we process the information you provide to handle the request and any follow-up questions.

Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, portability, withdrawal of consent, objection to certain processing, and the right to lodge a complaint with a competent supervisory authority.