Privacy Policy
1. DEFINITIONS AND GENERAL INFORMATION
These Privacy Policy of EVENTIM d.o.o., OIB 62317651193, Garićgradska ulica 18, Zagreb (hereinafter: EVENTIM or we) provide information on the processing of your personal data when you visit and use the EVENTIM website www.eventim.hr (hereinafter: Website), including which personal data EVENTIM collects, the purposes for which it is processed, the legal bases for processing, with whom it is shared, and your rights as a data subject.
EVENTIM processes your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) (hereinafter: GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation, the Electronic Communications Act, the Accounting Act, the General Tax Act, and other regulations applicable in the Republic of Croatia. Unless expressly stated otherwise in this Privacy Policy, the terms used herein have the same meaning as defined in the GDPR.
When processing personal data, EVENTIM applies the principle of data minimisation and collects and processes only the personal data necessary to achieve the specific purpose of processing.
2. DATA CONTROLLER
The controller of your personal data is:
EVENTIM d.o.o., OIB 62317651193, Garićgradska ulica 18, Zagreb, Croatia e-mail: privatnost@eventim.hr.
For any questions regarding the protection of personal data, you may contact us via e-mail at privatnost@eventim.hr.
3. DATA PROTECTION OFFICER
In accordance with Article 37 of the GDPR, EVENTIM has appointed a Data Protection Officer (DPO).
You may contact the Data Protection Officer at:
E-mail: privatnost@eventim.hr or by post: EVENTIM d.o.o., Data Protection Officer, Garićgradska ulica 18, 10000 Zagreb.
Your inquiries addressed to the Data Protection Officer will be treated as confidential.
4. COOKIE POLICY
Information about the cookies used on the EVENTIM website www.eventim.hr (hereinafter: Website), including their purposes, types of cookies, and methods for managing cookies, is available in the Cookie Policy, which forms an integral part of this Privacy Policy and is available at https://www.eventim.hr/#cmpbox
5. PURPOSES, LEGAL BASES, AND CATEGORIES OF PERSONAL DATA PROCESSED
5.1. Registration on the Website
To provide a better user experience, EVENTIM enables you to create and use a user account through the Website. To use certain services provided by EVENTIM, including the purchase of certain tickets and access to additional Website functionalities, you may be required to create a user account. The categories of personal data collected in this case are: first and last name, address (street, city, postal code, country), e-mail address, telephone number, and password (stored in hashed form). The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary for the performance of a contract and the provision of services under the General Terms and Conditions, or for taking steps at the request of the data subject prior to entering into a contract. Without accepting the General Terms and Conditions and providing the required data, registration and, in certain cases, the purchase of tickets will not be possible.
5.2. Browsing and Selecting Events – Favorites and Ticketalarm
As a registered user of the Website, you can mark events as your favorites, allowing you to collect your preferred artists, categories, venues, and locations in one place. In this case, in addition to your registration data, EVENTIM will process information about your favorites (performers, categories, venues, and locations) solely for display in your profile on the Website. You may also subscribe to the "Ticketalarm" service, in which case EVENTIM will process this information to notify you about upcoming events related to your favorites. For this purpose, EVENTIM will also process your e-mail address and information about your favorite performers. The purpose of this processing is to display your favorite events, performers, venues, and categories in your profile and to send event notifications via the "Ticketalarm" service for your selected performers and categories. The legal basis for processing these data is Article 6(1)(b) GDPR, namely the performance of the contract (General Terms and Conditions). Without accepting the General Terms and Conditions and allowing the processing of the above data, it will not be possible to use these EVENTIM services.
5.3. Purchases in the Online Store via the Website
When purchasing tickets through the Website, EVENTIM processes your e-mail address, delivery address, ticket type, payment method, and age. For personalized tickets (e.g., season tickets), EVENTIM processes your first and last name, age, nationality, and any other information required by the event organizer for admission control. When purchasing tickets by bank card, EVENTIM processes bank card information (card number, expiration date, and CVV) and the cardholder's details (name and address) in order to process payment through the payment service provider and issue tickets for the selected event. Bank card data are considered sensitive information and, for security reasons, are not stored in our systems but are transmitted directly to the online payment processor. Our systems retain only a partially masked card number, in accordance with applicable security standards and for the protection of user data, together with the cardholder's details. If tickets are purchased on behalf of a company requiring an R1 invoice, EVENTIM requires the company's name, registered office address, and tax identification number (OIB). The purpose of this processing is to carry out and manage the ticket purchasing process, including payment processing, ticket delivery, and order records. The legal basis for this processing is Article 6(1)(b) GDPR, namely the performance of a contract. Please note that ticket purchases cannot be completed without providing the requested data.
5.4. Notification in the Event of Extraordinary Circumstances
In certain extraordinary circumstances, including but not limited to event cancellations, changes to the event date or venue, or other circumstances relating to the event itself, EVENTIM may contact you to provide the necessary information regarding the event. In such cases, EVENTIM will use your e-mail address together with information about your purchased tickets and the relevant event. The purpose of this processing is to notify you of cancellations, postponements, venue changes, or other significant changes relating to your purchased tickets. The legal basis for this processing is Article 6(1)(b) GDPR, as processing is necessary for the performance of a contract, and Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation (for example, in the case of refunds or similar statutory obligations).
5.5. Rating an Event or Venue
After attending a venue or event, you may submit your rating through a dedicated form on the Website. In addition to the event rating, you will be required to provide your name or nickname (at your discretion), your e-mail address, and the text of your review. The purpose of this processing is to publish your review on the Website. The review will be published under the name or nickname you choose, and anonymous publication is also possible. The legal basis for this processing is Article 6(1)(b) GDPR, namely the performance of a contract pursuant to the General Terms and Conditions.
5.6. Direct Marketing – E-Newsletter
EVENTIM may send you marketing communications by e-mail in two ways:
a) Based on a Previous Business Relationship (Soft Opt-In)
EVENTIM may send direct marketing communications to your e-mail address if you have previously purchased tickets through EVENTIM or used EVENTIM services, and the content relates to similar events, offers, and promotional materials provided by EVENTIM. The legal basis for this processing is Article 50(2) of the Croatian Electronic Communications Act, which provides an exception for direct marketing to existing customers who have not objected to receiving such communications. The soft opt-in exception is applied exclusively for the promotion of EVENTIM's own similar ticket sales services and event notifications, in accordance with Article 50(2) of the Croatian Electronic Communications Act. You may unsubscribe at any time in one of the following ways:
· in your user profile under the section "Your Newsletter Profile"
· by clicking the unsubscribe link at the end of each marketing message
· by sending a request to the following e-mail address: privatnost@eventim.hr.
b) Based on Consent (Opt-In)
You may also receive direct marketing communications if you have voluntarily subscribed to the e-Newsletter. If you have explicitly subscribed to the e-Newsletter or selected the categories for which you wish to receive notifications in your user profile and provided your date of birth, the processing is based on your consent. The legal basis for such processing is Article 6(1)(a) GDPR, namely your consent. The data are processed for the purpose of preparing and sending the e-Newsletter and providing special benefits. You may withdraw your consent at any time in one of the following ways:
· in your user account
· by clicking the unsubscribe link at the end of a marketing message
· by sending a request to the following e-mail address: privatnost@eventim.hr.
Withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Following the withdrawal of consent or your unsubscribe request, you will no longer receive marketing communications.
5.7. Prize Competitions
When participating in any prize competition organized by EVENTIM, you are required to provide certain personal data as part of the registration process. The categories of personal data processed include: first and last name, address, e-mail address, telephone number, year of birth, and personal identification number (OIB) or tax identification number (only if you win a prize, in accordance with applicable tax regulations). The purpose of the processing is to conduct the prize competition, contact winners, and award prizes. The legal basis for processing is Article 6(1)(a) GDPR, namely the consent of the data subject given upon entering the prize competition. You may withdraw your consent at any time by sending a message to privatnost@eventim.hr. By withdrawing your consent, you withdraw from further participation in the prize competition; however, such withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.
5.8. FanBonus Club
If you have joined our FanBonus Club, through which you collect bonus points and receive various benefits, EVENTIM processes the following categories of personal data: first and last name, address, telephone number, information about purchased tickets, and selected categories of interest. The purpose of this processing is to manage your FanBonus Club membership, award bonus points, and send special benefits and offers to club members. The legal basis for this processing is Article 6(1)(b) GDPR, namely the performance of a contract (General Terms and Conditions).
5.9. Data Analysis and Business Reporting
EVENTIM also carries out data analysis and research into purchasing habits for the purpose of making business decisions, such as preparing offers for our partners, organizing events and related services, developing business strategies and individual activities, as well as verifying the effectiveness of business decisions and planning new initiatives. The categories of data collected include pseudonymized data relating to ticket purchases, payment methods, responses to marketing activities, and steps taken during the purchasing process. The purpose of this processing is the internal analysis of business performance, preparation of offers for partners and event organizers, service planning and optimization, and verification of business decisions. The legal basis for this processing is Article 6(1)(f) GDPR, namely the legitimate interests of the controller. Our legitimate interest consists of understanding business performance and improving our services. As only pseudonymized data are processed, the risk to your rights and freedoms is minimal and does not override your interests. You have the right to object at any time to processing based on legitimate interests (see Section 9).
5.10. Cookies and Web Analytics
When you visit the Website, certain data are processed through cookies and similar technologies. More detailed information about the cookies used, the purposes of processing, and methods for managing cookies is available in our Cookie Policy at https://www.eventim.hr/campaign/politika-kolacica
EVENTIM uses the following analytics and marketing tools involving the processing of personal data:
a) Google Analytics
Google Analytics is a website traffic analysis tool. The data processed include: IP address (shortened), browser and device information, visited pages, anonymized user identifier, and conversion data. The purpose of processing is to analyze Website traffic, including the number of visitors, visited pages, duration of visits, and traffic sources. The legal basis for processing is Article 6(1)(a) GDPR, namely the data subject's consent. More information is available at https://policies.google.com/privacy.
b) Mixpanel
Mixpanel is a user behavior analytics tool used for A/B testing and key performance indicator analysis. Through cookies and similar technologies, the following data are processed: technical information about the device and browser, user interactions with the Website (e.g., clicks and navigation), session flows and derived statistics, and pseudonymized identifiers. Since Mixpanel Inc. is established in the United States, personal data are transferred to a third country. An adequate level of protection is ensured through certification under the EU–US Data Privacy Framework (DPF), together with additional technical and organizational safeguards. More information is available at: https://mixpanel.com/legal/privacy-policy/. The legal basis for processing is Article 6(1)(a) GDPR, namely the data subject's consent. You may disable cookie storage through your web browser settings or via the cookie management tool available on our Website.
To help us evaluate and improve our websites, apps, products and services internally, we may use analytical tools based on artificial intelligence (AI) or large language models (LLMs). In this context, Mixpanel data, such as aggregated metrics, pseudonymous identifiers and derived analysis results, may be processed by our AI partners. In particular, services provided by OpenAI Ireland Ltd. and/or Amazon Web Services EMEA SARL may be used for this purpose. The processing is carried out exclusively to support internal analysis and product improvement purposes. We contractually prohibit our AI partners from using the transmitted data for their own training purposes, insofar as personal data is transmitted. Where possible, we restrict the processing to aggregated or pseudonymous data. The processing is carried out based on consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a) GDPR, insofar as you consent to analytical processing. Where the AI-supported evaluation serves exclusively to create aggregated analyses and improve products internally, processing is carried out on the bases of our legitimate interest pursuant to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.
c) Microsoft Office (Microsoft 365)
EVENTIM uses Microsoft Office solutions for internal business communication and document management. Transfers of personal data to the United States are based on the European Commission's Adequacy Decision under the EU–US Data Privacy Framework.
d) Google Ads
EVENTIM uses Google Ads for advertising purposes. The data processed include hashed e-mail addresses, IP addresses, and transaction data (for conversion measurement). The purpose of processing is conversion tracking, i.e., measuring the effectiveness of Google advertising campaigns (for example, whether a user who clicked on an advertisement completed a purchase). The legal basis for processing is Article 6(1)(a) GDPR, namely the data subject's consent. Transfers of personal data to the United States are based on the European Commission's Adequacy Decision under the EU–US Data Privacy Framework.
e) LinkedIn
EVENTIM uses LinkedIn to analyze visits to the Website by LinkedIn users. The data processed include the URL, anonymized IP address, browser and device information, timestamp, and page view count. The legal basis for processing is Article 6(1)(a) GDPR, namely the data subject's consent. Transfers of personal data to the United States are based on the European Commission's Adequacy Decision under the EU–US Data Privacy Framework.
f) YouTube
EVENTIM uses YouTube as a technical tool for displaying embedded video content (trailers, concert recordings, and promotional videos) on the Website. The integration of YouTube also results in the loading of other Google services (Google Fonts and Google APIs). If you are logged into your Google/YouTube account, your visit may be associated with your account. The legal basis for processing is Article 6(1)(a) GDPR, namely the data subject's consent. Transfers of personal data to the United States are based on the European Commission's Adequacy Decision under the EU–US Data Privacy Framework.
g) Facebook and Instagram (Meta Platforms)
EVENTIM uses Facebook and Instagram platforms for marketing activities. The data processed include IP address, browser information, on-site actions (viewed events, items added to the shopping cart, purchases), and cookie identifiers. The purpose of processing is to measure the effectiveness of Facebook and Instagram advertising (conversion tracking), create custom audiences for targeted advertising, and perform remarketing to users who have visited our Website. The legal basis for processing is Article 6(1)(a) GDPR, namely the data subject's consent. Transfers of personal data to the United States are based on the European Commission's Adequacy Decision under the EU–US Data Privacy Framework. More information is available at: https://www.facebook.com/privacy/policy/
h) TikTok
EVENTIM uses the TikTok platform for marketing activities. As TikTok may transfer personal data to third countries (including the United States), such transfers are based on the Standard Contractual Clauses (SCCs) adopted by the European Commission. When using TikTok services, the possibility of transferring personal data to China in accordance with Chinese legislation cannot be excluded. By accepting cookies, you explicitly consent to such possible transfers to a third country in accordance with Article 49(1)(a) GDPR. More information is available at: https://www.tiktok.com/legal/page/eea/privacy-policy/hr/.
5.11. Special Categories of Personal Data
In specific circumstances, and only with your explicit consent (Article 9(2)(a) GDPR), EVENTIM processes special categories of personal data, namely health-related data, including information concerning disabilities, in order to enable the event organizer or venue to provide appropriate access conditions and accommodation for persons with special needs (e.g., accessible seating and special entry arrangements). Without your explicit consent, EVENTIM will not be able to provide such information to the organizer or ensure special arrangements for you at the event. EVENTIM does not classify children's personal data as special categories of personal data within the meaning of Article 9 GDPR. The processing of age-related data or information indicating that a data subject is a minor is carried out on the basis of contractual or legal obligations and with appropriate safeguards.
5.12. Processing of Personal Data Without the Data Subject's Consent or Knowledge
EVENTIM may process your personal data without your prior knowledge or consent only where expressly required or permitted by applicable law, for example for the prevention of fraud, compliance with legal obligations towards competent authorities, or the protection of the vital interests of the data subject. In such cases, the legal basis for processing is Article 6(1)(c) GDPR (legal obligation) or Article 6(1)(f) GDPR (legitimate interests).
6. RECIPIENTS AND SHARING OF PERSONAL DATA
EVENTIM may share your personal data with the following categories of recipients:
a) Event Organizers
EVENTIM provides your personal data to event organizers where this is necessary for the performance of the service, in particular, but not limited to, in the following cases: personalized tickets (season tickets, identity-verified tickets), special offers that include more than a ticket (meet & greet, early entry, etc.), and the provision of special arrangements for persons with disabilities.
b) Payment Processors
EVENTIM provides payment data (transaction details, amount, and card information to the extent necessary for authorization) to payment processors in accordance with the regulations governing payment services in the Republic of Croatia and the European Union.
c) Competent Authorities
EVENTIM provides your personal data to tax authorities, auditors, courts, law enforcement authorities, and other competent public authorities where required by law or where necessary to protect the legal interests of EVENTIM or third parties.
d) Data Processors
For the provision of certain services, EVENTIM engages external data processors who process personal data exclusively in accordance with EVENTIM's instructions and on the basis of data processing agreements concluded pursuant to Article 28 GDPR:
· ticket sales at physical sales outlets (Petrol, Tisak, etc.) – sales intermediaries
· management of the central personal data database – IT service provider
· development and maintenance of the Website – IT service provider
· sending direct e-mail communications and newsletters – internal marketing service
· ticket printing and personalization – printing/production provider
· postal services (ticket delivery) – postal operator
· accounting services – accounting service provider.
We require all data processors to implement appropriate technical and organizational data protection measures and prohibit them from using personal data for their own purposes.
e) Entities within the EVENTIM Group
EVENTIM operates in more than 25 countries across Europe and worldwide as part of the EVENTIM Group and may share certain customer personal data with other entities within the Group (e.g., CTS EVENTIM AG & Co. KGaA), solely to the extent necessary for the provision of services and internal business purposes, while applying appropriate safeguards.
f) International Transfers of Personal Data
EVENTIM uses the services of certain analytics and marketing platform providers whose processing activities take place outside the European Economic Area (EEA), as described in Section 5.10 of this Privacy Policy. Each such transfer of personal data is based on appropriate safeguards. The European Commission's Adequacy Decision regarding the EU–US Data Privacy Framework is available at: https://commission.europa.eu. You may request a copy of the safeguards applied (e.g., Standard Contractual Clauses) by contacting us via e-mail at: privatnost@eventim.hr.
7. AUTOMATED DECISION-MAKING AND PROFILING
EVENTIM does not make decisions based solely on automated processing, including profiling, which would produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR. As part of its marketing activities and newsletter personalization, EVENTIM uses certain data (categories of interest, date of birth, purchase history) to segment users in order to provide more relevant communications. This segmentation does not result in automated decision-making with legal or similarly significant effects on the data subject.
8. DATA RETENTION PERIODS AND DELETION
EVENTIM will retain your personal data for as long as necessary to fulfill the purposes for which they were collected, including compliance with applicable legal requirements. Where the purpose of processing is the performance of contractual obligations, EVENTIM will retain your personal data for five (5) years from the date of your last ticket purchase if you are not a registered user, and for the entire duration of your user account if you are a registered user, but no longer than five (5) years from the date of your last ticket purchase in the event that you delete your account. Data relating to Favorites and Ticketalarm settings are retained until you remove them yourself in your account settings. If you have subscribed to receive notifications without creating a user account, your personal data will be retained until you unsubscribe, subject to all other retention periods and exceptions specified in this section. Where you participate in a prize competition, EVENTIM will retain the collected personal data for as long as necessary to fulfill the purpose of the competition, including compliance with legal obligations, namely until the prize competition has been fully completed and prizes have been awarded, or, if consent is withdrawn, until the date of withdrawal of consent and submission of the erasure request, while retaining the winners' data to the extent necessary to comply with tax and other legal obligations. In all cases, EVENTIM will retain your personal data for the periods prescribed by applicable legislation (e.g., 11 years for accounting records under the Accounting Act, 10 years for cash register receipts under the General Tax Act, etc.). Upon expiry of the applicable retention period, personal data will be deleted in accordance with Section 9.3 of this Privacy Policy.
9. RIGHTS OF THE DATA SUBJECT
As a data subject, you have the following rights:
9.1. Right of Access (Article 15 GDPR)
You have the right to obtain confirmation as to whether EVENTIM processes your personal data and, where that is the case, access to those personal data together with the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the envisaged retention periods, the existence of the right to rectification, erasure, restriction of processing, or objection, the right to lodge a complaint with the Croatian Personal Data Protection Agency (hereinafter: AZOP), the source of the data where they have not been collected from you, and the existence of any automated decision-making.
9.2. Right to Rectification (Article 16 GDPR)
You have the right to request the correction of inaccurate personal data concerning you and, taking into account the purposes of the processing, to have incomplete personal data completed.
9.3. Right to Erasure ("Right to be Forgotten") (Article 17 GDPR)
You may request the erasure of your personal data in the following cases:
· the personal data are no longer necessary for the purposes for which they were collected,
· you have withdrawn the consent on which the processing is based and there is no other legal basis for processing,
· you have objected to the processing and there are no overriding legitimate grounds for the processing,
· the personal data have been processed unlawfully,
· erasure is required to comply with a legal obligation.
This right does not apply where processing is necessary for compliance with a legal obligation or for the establishment, exercise, or defence of legal claims. Whenever possible, EVENTIM will permanently erase your personal data while retaining only aggregated statistical information that cannot be linked to your identity.
9.4. Right to Restriction of Processing (Article 18 GDPR)
You may request the restriction of processing in the following cases:
· you contest the accuracy of the personal data, for a period enabling us to verify their accuracy,
· the processing is unlawful, but you oppose the erasure of the data and instead request the restriction of their use,
· EVENTIM no longer needs the personal data, but you require them for the establishment, exercise, or defence of legal claims,
· you have objected to the processing pending verification of whether our legitimate grounds override yours.
9.5. Right to Data Portability (Article 20 GDPR)
You have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit those data to another controller, where the processing is based on consent or on a contract and is carried out by automated means.
9.6. Right to Object (Article 21 GDPR)
You have the right to object at any time to the processing of your personal data based on the legitimate interests of EVENTIM (Article 6(1)(f) GDPR), including profiling based on that provision. If you object, EVENTIM will no longer process your personal data unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defence of legal claims. You may always object to processing for direct marketing purposes without providing any justification.
9.7. Right to Withdraw Consent (Article 7(3) GDPR)
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.
You may withdraw your consent in one of the following ways:
· in your user profile on the Website,
· by clicking the unsubscribe link contained in marketing communications,
· by sending a request to: privatnost@eventim.hr
9.8. Right to Lodge a Complaint with a Supervisory Authority (Article 77 GDPR)
You have the right to lodge a complaint with AZOP if you believe that the processing of your personal data violates the GDPR or applicable national legislation. AZOP contact details: Croatian Personal Data Protection Agency, Selska cesta 136, 10000 Zagreb, Telephone: +385 1 4609 000, E-mail: azop@azop.hr, Website: www.azop.hr.
10. PROCEDURE FOR EXERCISING YOUR RIGHTS
You may submit a request to exercise your rights in one of the following ways:
· in writing to: EVENTIM d.o.o., Garićgradska ulica 18, 10000 Zagreb
· by e-mail to: privatnost@eventim.hr
In order to protect your personal data and prevent unauthorized access, EVENTIM may request verification of your identity before processing your request. EVENTIM will respond to your request no later than 30 days from the date of its receipt. Where requests are particularly complex or numerous, this period may be extended by an additional 60 days (up to a total of three months), in which case you will be informed of the extension within 30 days of receipt of your request. This service is provided free of charge unless the request is manifestly unfounded, excessive, or repetitive.
11. DATA SECURITY
EVENTIM has implemented appropriate technical and organizational measures to protect personal data against unauthorized access, loss, disclosure, alteration, or destruction, in accordance with Article 32 GDPR.
These security measures include, but are not limited to:
· encryption of data during transmission (SSL/TLS protocol),
· access control and authorization management,
· regular security audits and testing,
· employee training on the protection of personal data.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, EVENTIM will notify AZOP within 72 hours of becoming aware of the breach, in accordance with Article 33 GDPR and, where required by law, will also notify you as the data subject.
12. ACCURACY OF PERSONAL DATA
We kindly ask you to notify us promptly of any changes to your personal data (e.g., change of address, e-mail address, or telephone number) to ensure that the information we process remains accurate. You may update your personal data through your user profile on the Website or by contacting us at privatnost@eventim.hr. Please note that EVENTIM shall not be liable for any damage resulting from your failure to update your personal data in a timely manner (e.g., non-delivery of tickets to an outdated address).
13. AMENDMENTS TO THE PRIVACY POLICY
EVENTIM reserves the right to amend this Privacy Policy in accordance with changes to the methods and purposes of processing personal data, changes in its business operations, or to ensure compliance with new legal requirements. You will be informed of all material amendments by publication of the updated Privacy Policy on the Website. The date of the latest revision will always be indicated at the end of this document.
14. CONTACT
For any questions, requests, or complaints relating to the protection of personal data, please contact us:
EVENTIM d.o.o., Garićgradska ulica 18, 10000 Zagreb, E-mail: privatnost@eventim.hr
This Privacy Policy is published at www.eventim.hr and enters into force on 27 May 2026.