About us

XMTickets respects your privacy and protecting your information is paramount. We want you to be informed and empowered with respect to your privacy when you use our services. Please read this Privacy Notice carefully before using our website or apps or registering to use our services. This Privacy Notice sets out our views and practices regarding your personal data and how we use, process and treat the personal data you provide to us or we collect about you and the rights you have in relation to the protection of your personal data.

The data controller of your personal data is XMTickets.  We use your information as further explained in this Privacy Notice.  We do so jointly with XMTickets. If you do make a request to us in respect of your personal information (see the ‘Your Privacy rights’ section below for more information), XMTickets AG will lead in responding to your request and XMTickets will assist fully where required.

What information do we collect?

We may collect and process the following data about you:

Information you give us. You may give us information about you when you register with our website or our apps or by communicating with us by phone, email, social media or otherwise. This includes information you provide when you create a customer account, use our services, provide us with identification information required to verify your identity or in connection with the issue of your tickets, provide us with feedback, participate in surveys, and when you report a problem with our website. The information you give us may include your name, address, email address, phone number, date of birth, copies of formal identity documents such as your passport of ID card and credit or debit card details.

Information we collect about you based on your use of our website or apps. Each time you visit our website or use our app we may automatically collect the following information:

(a)  Technical information, including the Internet protocol (IP) address used to connect your device to the Internet, your login information, browser type and version, time zone setting, operating system, device information (such as the model and version of your device), platform and;

(b)   Information about your visit, including products and events you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page and any data entered into the page during your visit; and

(c)  Location Data, including your precise location (longitude and latitude details with the time that the details are captured), which is provided by using information, such as your IP address or GPS sensors.  We will only collect information about your location if you have provided consent for us to do so.

Information we receive from other sources. We work closely with third parties including, for example, our fraud prevention providers and email address / telephone number verification service providers. We may receive information about you from these third parties to verify information you provide to us which helps us to identify suspicious or unusual transactions.

How do we use your information?

Information you give to us or we collect from third parties on your behalf as part of our services

We will only use this information to:

(a)      Enable you to purchase tickets through our website, administer your account, manage your relationship with us, and to communicate with you by telephone, mail, email, text (SMS) message, instant messaging or other electronic means;

(b)      verify your identity as part of our identity authentication process and to prevent, detect and prosecute fraud and crime and to comply with our legal or regulatory requirements;

(c)      provide evidence of your identity to sellers in connection with the issue of tickets; notify you about changes to our services;

(d)      ensure that content from our website is presented in the most effective manner for you       and your device;

(e)      aggregate your information on an anonymous basis with other data for data analytical and reporting purposes;

(f)      undertake analysis and profiling of your browsing history and purchases (and any other data provided by you or on your behalf or which we collect on your behalf) in order to identify and inform you of products and services that we consider are likely to interest you;

(g)      in combination with information we collect about you based on your use of our website, undertake testing and analysis of new products, services and website / app functionality to help us to assess the impact of these new features and improve the service we offer you; and

(h)      where you have provided your consent to receive marketing material from us, provide you with information about other products and services that are similar to those that you have already purchased or enquired about or about products or services that may be of interest to you. 

Information we collect about you based on your use of our website

We will use this information:

(a)      to administer our website and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;

(b)      to build up a picture of your interests so that you don’t miss information relevant to you when you visit our website;

(c)      to improve the service we offer you and to try and ensure that you get the best from our website, ensuring that content is tailored and presented in the most effective manner for you and for the devices you use to access it;

(d)      as part of our efforts to keep our website safe and secure;

(e)      to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you; and

(f)      to make suggestions and recommendations to you and other users of our website about products or services that may interest you or them.

We also use the device information and battery charging information we collect from you to improve the performance of our apps and to refine the user experience while using our website and apps.  For example, we use the device information to check whether any updates we are making will work on your tablet or phone, and to check how our apps are affecting your battery life.

Information we receive from other sources

We combine this information with information you give to us and information we collect about you. We may use this information and the combined information for identity verification and fraud detection, prevention and prosecution purposes as set out above.

Recording telephone calls and other communications

We will use telephone recordings or transcripts of communications to check your instructions to us, analyse, assess and improve our services to customers, for training and quality purposes and for the purposes of investigating any complaint you may make, or as evidence in any dispute or anticipated disputes between you and us.

We also use technology to make decisions automatically about you

We employ technology which uses logic to analyse transactions you enter into against the information we collect from you or from third parties about you. This helps us to identify unusual or suspicious transactions in order to detect and prevent fraud. What this means for you is that where an attempted transaction appears to be suspicious, unusual or otherwise out of the ordinary, we may automatically decline to proceed with the transaction.

You’ve the right not to be subject to a decision based solely on automated processing, including profiling, which has legal consequences for you or similarly significant effects. While we’re confident that the technology works, if you have any questions about our automated decision making process, you can contact us via help@xmtickets.com


We offer you the opportunity to receive marketing information from us. We will normally send direct marketing by email if we have your email address, but may choose to contact you via other methods, if you have provided your consent for us to market to you using these methods.

If you consented to receive marketing communications when you registered and created a customer account, you can tell us that you do not wish to receive any more at any time by selecting the ‘unsubscribe’ option in the marketing communications we send or at any time by changing your account preferences.

Who do we share your information with?

In addition to sharing your information with other members of our group (including our subsidiaries and affiliated companies), we may need to disclose your data to third parties in order to ensure that we can provide you with our services and to ensure effective operation of our website and the apps.

We may share your information with the following third parties:

(a)   other users and ticket sellers in order to enable them to verify your identity and/or provide you with tickets you have bought through our website or app (e.g. for the purposes of posting your tickets to you);

(b)   business partners, third party suppliers and our subcontractors (including delivery companies, payment providers and fraud prevention providers) to enable us to provide our services, operate our websites and app and to detect and prevent fraudulent transactions;

(c)   analytics and search engine providers that assist us in the improvement and optimisation of our website;

(d)   where we buy or sell any businesses or assets, we may disclose your information to the prospective buyer or seller (or their advisers) or if part or all of our assets or business    are acquired by a third party, our customer data will be one of the assets transferred;

 (f)   to protect the rights, property, or safety of us, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.

Additionally, where you have consented to receive cookies, we allow third parties such as Google and Doubleclick by Google to place cookies on your device in order to show you online advertising on other (non-XMTickets) websites that you visit. Google will collect information about you (such as pages you have viewed and events you may be interested in) in order to select and serve relevant adverts to you. Further information about Google’s and Doubleclick’s use of cookies to deliver advertising content can be found on Google’s website here, and to opt-out of Google’s and Doubleclick’s use of cookies, you can control your Google advertising settings here.

Ensuring that use of your information is lawful

We take appropriate measures to ensure that all processing of your personal information by us, or by our service providers, is lawful.  The lawful basis for the processing of your personal information will depend on the purposes for which we process your information.

Much of the personal information we collect from you is necessary for us to provide our services to you in line with our Terms of Use. This includes most of the information you provide to us when setting up a customer account and making transactions via our website or app.

Some of the processing we conduct is necessary in pursuit of our legitimate interests in developing our website and apps and ensuring that they deliver relevant and focused content to you. We may profile your information, including by combining information we collect from you about your use of the website and apps with other information we hold about you, to help us to achieve these outcomes.

We require your consent to process information we process for marketing purposes and to maintain your customer account with us. You don’t have to provide your consent, and can withdraw it at any time. However, if you do not provide us with consent to maintain a customer account, your account on our website and access to the associated services will be suspended or terminated. There are no consequences of withdrawing your consent for marketing purposes.

Finally, sometimes we also need to process your personal information to comply with our legal obligations. This includes in relation to fraud prevention, sanctions screening checks, complaints and investigations or litigation.

How long do we keep your information?

How long we keep your information will depend on the purpose for which we use it. While you are a customer of ours, we will only retain your information for as long as is necessary for those purposes.

If your account is terminated (by you or us), we will keep your information for a period of up to 3 years after termination (unless a longer period is prescribed by law) for the purposes of responding to legal disputes and legal or regulatory enquiries or investigations.

During and after expiry of this period, we will continue to use data which does not identify individual users in an aggregated form.  We use this aggregated data for data analysis, trend identification and research purposes, for example to gain insights about our users and to make improvements to our website.

Your Privacy rights

This section explains your rights in relation to your personal information in more detail. The various rights are not absolute and are subject to certain exceptions or qualifications.

We will respond to your requests in respect of your personal information free of charge (except in the following circumstances, where we may charge a reasonable fee to cover our administrative costs or may be entitled to refuse to respond:

·         manifestly unfounded or excessive/repeated requests, or

·         further copies of the same information).

Please consider your request responsibly before submitting it. We’ll respond as soon as we can. Generally, this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we’ll let you know.

Accessing your information

What can you request access to?

You have the right to:

·         receive confirmation from us that your personal information is being processed;

·         access to your personal information; and

·         certain other details in relation to how we use your personal information (which is generally included in our Privacy Notice anyway).

You can request copies of paper and electronic records (including recorded calls, where applicable) about you that we hold, share or use. To deal with your request, we can ask for proof of your identity and enough personal information about you to enable us to locate the personal information you have requested.

When will access not be provided?

We can only provide you with your personal information, not personal information about another person.  Also, where access would negatively affect another person’s rights, we’re not required to provide this.  Due to legal privilege, we may not be able to show you anything that we learned in connection with a claim or legal proceeding.

When requesting access to your personal information, to help us respond to your request quickly, please clearly set out in your request the personal information that you would like.  If this is not clear, we may need to ask for further information from you by way of clarification.

Correcting your information

You have the right to require us to correct inaccurate personal information that we hold about you.

If you tell us that the personal information we hold on you is incorrect, we will review it and if we agree with you, we will correct our records.  If we do not agree with you, we will let you know.  If you believe the records we hold on you are still incorrect, you can let us know in writing, and we will include your statement when we give your personal information to any third parties. 

If you believe that we hold incomplete personal information about you, you may also have the right to have the information completed, including by providing a supplementary statement.  Whether or not this right applies will depend on the purposes for which your personal information is being processed.

How You Can See and Correct Your Information

Generally, if you ask us in writing, we will let you see the personal information that we hold about you, and/or take steps to correct any inaccurate information.

Due to legal privilege, we may not be able to show you anything that we learned in connection with a claim or legal proceeding.

Erasing your information

When can you request deletion of your personal information?

·         the personal information is no longer necessary for the purpose it was originally collected/processed,

·         you withdraw your consent (where consent was previously provided and required for us to process the information),

·         you object to the processing, as long as our legitimate interests in processing your personal information don’t take priority over your objection,

·         we’ve been processing your personal information unlawfully, or

·         your personal information has to be erased in order to comply with a legal obligation.