Back

Privacy Policy

Eventim d.o.o. (HR) is a subsidiary of CTS EVENTIM AG & Co. KGaA Germany, which operates in 22 countries (Europe, Brazil and Israel) and is the largest European distributor of tickets for "live entertainment" and other events. Eventim's registered office is Garićgradska ulica 18, 10000 Zagreb, Croatia. You can contact us by e-mail at privacy@eventim.hr.

Eventim is the data controller of your data.

The cookie policy is available here .

General

This document explains which of your personal data we process, for what purpose and in what way we, as the data controller, take care of it. In accordance with the EU General Data Protection Regulation (hereinafter referred to as: GDPR), we must inform you of this information.

When collecting and using personal data, Eventim acts in accordance with the principles of the GDPR and applicable national legislation in the field of personal data protection. Please read this information to understand the rules for the processing of your personal data.

The controller of your data is Eventim d.o.o., Garićgradska ulica 18, 10000 Zagreb.

Eventim has appointed a Data Protection Officer who can be contacted at privatnost@eventim.hr.

Purposes and bases of personal data processing

Eventim processes your personal data in order to successfully carry out the purchase process and inform you about its services and offers, following the principle of minimization, i.e. we use the smallest possible amount of your personal data.

Registration in the online store

To purchase tickets in the Eventim system, registration is required. In this step, the buyer must enter his or her first and last name, address, e-mail address and telephone number. We process this data for the purpose of conducting and managing the registration and subsequently for the purpose of purchasing tickets. The legal basis for this processing is the contract or general terms and conditions, which you had to confirm during registration. Without accepting the general terms and conditions and if you do not allow us to process your data, you will not be able to complete your registration and you will not be able to purchase tickets.

View and select events

You can mark events as your favorites in the online store, which will allow you to have artists, categories, venues and locations collected in one place. In this case, in addition to your registration data, we will process data about your favorites only for their display in your profile on the website or mobile application. You can also select the "Ticketalarm" functionality, in which case we will process this data in order to provide you with event announcements for your favorites. For this purpose, we will also process your email address and data about your favorite performers.

The legal basis for this processing is the contract or general terms and conditions that you had to confirm during registration. Without accepting the general terms and conditions and in case you do not allow us to process your data, it is not possible to carry out the aforementioned processing.

Purchase in the online store

When making a purchase in the online store www.eventim.hr we process your email address as well as the address you entered, whether you want to receive tickets at this address, type of tickets, payment method, age. In the case of purchasing tickets with a name (for example seasonal tickets), we also process other personal data: name and surname, age, nationality and all other personal data requested by the event organizer, which are necessary for control when entry or use of tickets. You can see the information about your ticket purchases in your profile in the my order section. The legal basis for processing this data is the contract - fulfillment of the purchase agreement. If you do not allow us to use the data, the purchase of tickets will not be possible.

Notification in case of extraordinary events

In certain cases; such as event cancellations or date changes or changes to the event location; we will inform you about this and further information at the e-mail address used when purchasing tickets. The legal basis for this processing is the contract - fulfillment of the purchase agreement. In that case the processing of personal data is necessary to fulfill the contractual obligations, otherwise you may not receive information about the change of the event and you will not be able to attend it.

Evaluation of an event or place

After visiting a place or event, you can write a review on the website www.eventim.hr in a special form. In addition to your event rating, you must also enter additional personal data: your name, which can also be a nickname, and your e-mail address. Your rating will be published under the name you have chosen, which you can enter voluntarily; anonymous publication is also possible. We process your data for the publication of your rating on the legal basis of 6.1. b) GDPR in accordance withwith general terms and conditions.

Direct marketing

We send direct mail to your email address with event announcements that may interest you, ticket offers and other promotional content. In doing so, we use your data from registration and ticket purchase. The legal basis for this processing is the exception permitted by the Electronic Communications Act in Article 50.2. If you do not want to receive direct mail, you can always indicate this in your profile in the "Your Newsletter profile" section or simply unsubscribe via the link at the end of such communication or by sending an email to privacy@eventim.hr. After you unsubscribe from the newsletter, you will no longer receive marketing communications.

You may also receive direct mail if you have signed up for the e-Newsletter yourself. In this case, consent is considered the legal basis for such processing. Consent is also considered if you have marked the categories for which you want to receive news on your profile and entered your date of birth. We also process this data for preparing your e-newsletters or special benefits. You can withdraw your consent at any time in your user account, on the link at the end of each direct email message or by sending a message to the e-mail address privatnost@eventim.hr. After you have withdrawn your consent, you will no longer receive marketing communications.

Prize games

When participating in any of the prize games organized by Eventim, as part of accessing the prize game, you provide your personal data. We process this data for the purpose of implementing the prize game and within the prize game for awarding prizes. The data is your name and surname, address, e-mail address, telephone number, year of birth, tax number (only in case of winning a prize). The legal basis for such processing is your consent. You can withdraw your consent to the prize draw by sending an e-mail to privacy@eventim.hr. In this case, you also withdraw from participating in the prize draw.

FanBonus Club

If you have joined our FanBonus Club, where you collect bonuses and receive various benefits, we process the following data in managing the content of the e-newsletter: name and surname, address, phone number, purchased tickets and defined categories. The processing of personal data is necessary so that we can award you prizes based on the bonuses collected (refund of 2% of the purchase value in the form of credit) and offer you special benefits for club members, otherwise this is not possible. The legal basis for this processing is the contract - general terms and conditions of the FanBonus Club.

Data analysis for reporting and decision-making purposes

Eventim also conducts data analysis and research on purchasing habits for the purpose of making business decisions; such as preparing offers for our partners, organizing events and accompanying services, developing strategies and individual activities; also for the purpose of checking the correctness of business decisions and planning new ones. In this case, we process pseudonymized data on ticket purchases, payment methods, responses to marketing activities, parts of the purchase process, etc.

We carry out the processing on the basis of our legitimate interest - Article 6, Paragraph 1, Point f) of the General Regulation.

Cookies

When you visit the website www.eventim.hr, cookies are placed in your browser. Eventim stores your IP address, information about when you visited our website, which events you viewed, which operating system, device and browser you used. You can read more about cookies and their installation at Cookies.

Special categories of data

In special circumstances, we also process special types of personal data, including:

  • health data, including information about disabilities, in order to reasonably adapt our services, for example, if the event organizer or venue provides or needs to provide special conditions.
  • data about vulnerable groups of people, i.e. children, in order to reasonably adapt our services, for example, if the event organizer or venue provides or needs to provide special conditions.

We process special categories of data only with your explicit consent, i.e. when you purchase tickets for special categories (people with disabilities or children). If you do not allow us to process your personal data, we cannot provide you with special conditions at the event.

Change of purpose

Please note that we may process your personal data without your knowledge or consent if this is necessary or permitted by law, such as for fraud investigations.

Who will we share your personal data with and for what purpose will we use it?

We will share your personal data with the following third parties:

  • Organizers who need your personal data to provide services (e.g. special offers that include more than just tickets - meet & greet, early entry to the venue), in case of issuing season tickets or the need to confirm the identity of tickets in the name.
  • Payment processor in the online store in accordance with legal regulations governing payment transactions.
  • In cases where this is required by law or other regulations, we will share your data with tax, audit or other competent authorities.

All our third-party service providers and other entities in the Eventim group must take appropriate security measures to protect your personal data in accordance with our policies and the GDPR. We do not allow our third-party service providers to use your personal data for their own purposes.

We use Microsoft Office, Google Analytics, Mixpanel, Tiktok, Facebook and Instagram for our business. The legal basis for data transfers to the USA is the adequacy decision issued by the European Commission based on the GDPR and the EU-US Data Protection Framework – DPF. We also use the TikTok solution, which also involves the transfer of personal data to a third country. In this case, the legal basis is the Standard Contractual Clauses.

We use the product analytics tool Mixpanel to analyse and improve the use of our websites and apps. Mixpanel Inc. supports us in better understanding user behaviour, replaying pseudonymised sessions, conducting A/B tests and feature experiments, connecting data with our internal systems, and analysing key figures in relation to business performance. The following information is processed using cookies and similar technologies:

  • Technical data about your device and browser
  • Usage interaction with the website and app (e.g., clicks, navigation, feature usage)
  • Session flows and derived statistics
  • Pseudonymised identifiers (e.g., hashed email address)

The processing is carried out exclusively on the basis of consent within the meaning of Art. 6 Para 1 Sentence 1 lit. a) GDPR. As Mixpanel is based in the USA, data is transferred there. An adequate level of protection is ensured by the partner’s certification under the EU-US Data Privacy Framework and additional technical and organisational measures. Further information can be found here: https://mixpanel.com/legal/privacy-policy/

You can prevent the collection of information by preventing the storage of cookies by selecting the appropriate settings in your browser software of by deactivating tracking in the cookie settings.

Our processors

For some services, Eventim HR engages external contractors who are our third-party processors from a personal data protection perspective. These are the following services:

  • ticket sales (purchase mediation) at points of sale such as Petrol, Tisak and others
  • management of a central personal data base,
  • development and maintenance of the website,
  • direct email processing,
  • ticket development,
  • postal services (when sending tickets to a selected address),
  • payment processor on the website.

Data Security

We have implemented appropriate security measures to prevent accidental loss of your personal data, its misuse or unauthorized access. We have implemented procedures for effectively and promptly resolving any suspicions or actual misuse of your personal data, and we will notify you and the local regulatory authority of such breaches when required by law.

Data storage and deletion

We will retain your personal data for as long as necessary to fulfill the purpose, including compliance with legal requirements:

In order to fulfill a purchase agreement, we will retain your personal data in our main system for five years from the date of your last order.

For accounting purposes, we will retain your personal data on our main server for ten years from the date of your last order.

For marketing purposes, we will retain your personal data for five years from the date of your last order. However, if you have signed up to receive notifications, your data will be retained until you unsubscribe or request the deletion of your personal data. The same applies to the selection of favorites and Ticket Alarm; the data is retained until it is deleted from the favorites list and the alarm is turned off.

The event or venue rating is kept ______________

After the retention period, personal data will be deleted or appropriately anonymized.

Your rights regarding the processing of your personal data

Please inform us of any changes to your personal data. It is important that the personal data we hold about you is accurate and up-to-date. If you do not inform us of changes to your personal data, a certain service may be disabled. For example, if you do not inform us of a change of address, you may not receive tickets.

Respondents have a number of rights regarding personal data. Before exercising their rights Eventim will verify the identity of the person inquiring about their rights. The individual must submit their request for information in writing to the Eventim e-mail or postal address specified in the first point of these rules.

Eventim will respond to a justified request within 1 month, provided that this deadline may be extended by a maximum of 2 months in the event of the complexity of the request or a large number of requests. In such case, we will also inform you of the extension and the reasons for it.

Right of access to data: the individual shall be informed upon request whether personal data relating to him/her are being processed and, where applicable, the following information shall be provided:

  • types of personal data;
  • categories of users to whom personal data have been or will be disclosed;
  • storage periods;
  • that he/she may request the rectification or erasure of personal data or the restriction of the processing of personal data and has the right to object to such processing;
  • has the right to lodge a complaint with the Personal Data Protection Agency;
  • all available information about the source where personal data are not collected from the individual;
  • the existence of automated decision-making, including profiling.

Right to rectification: The data subject may at any time request that Eventim correct inaccurate data or complete incomplete data relating to him or her.

Right to erasure: The data subject may request that their personal data be erased in the following cases:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
  • the data subject withdraws the consent on which the processing is based and where there is no other legal ground for the processing;
  • the data subject objects to the processing of personal data and there are no overriding legitimate grounds for their processing;

Right to restriction of processing: The data subject may request that the processing of data relating to them be restricted in the following cases:

  • the data are inaccurate,
  • the processing is unlawful and the individual does not want the data to be erased,
  • Eventim no longer needs the data for the purposes of the processing, but the data subject needs them for the submission, exercise or opposition of legal claims,
  • the data subject has objected to the processing.

Right to data portability: The data subject has the right to receive the personal data provided by Eventim, if the processing of such data is based on a contract or consent and the processing is carried out by automated means.

Right to object: The data subject may object to the processing of personal data. This right only applies to the processing of personal data carried out on the basis of a legitimate interest that overrides the interests of the individual.

Right to lodge an objection regarding the processing of personal data: The individual may send an objection regarding the processing of personal data to the addresses of the controller referred to in Article 1 of this policy.

The data subject may revoke the consent given for the processing of personal data at any time by sending a request to the e-mail address privatnost@eventim.hr, or in the case of direct mail and in the message itself or in the user account. The revocation shall take effect on the day following receipt. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent until its withdrawal.

Also, each data subject to whom personal data relates has the right to file a complaint directly with the Personal Data Protection Agency if he or she believes that the processing of personal data relating to him or her violates applicable law.

Contact us

If you have any questions regarding the privacy policy, please contact us at privatnost@eventim.hr.

Changes to the Privacy Policy

The Privacy Policy is subject to change in accordance with changes in the manner and purpose of processing personal data.

This policy is published on www.eventim.hr and is valid from 21.05.2025.