Privacy Policy

Last updated: 2 October 2026

1. Data controller and contact

Eventim Global Events GmbH
c/o Alema Trust AG, Zürichstrasse 57
8840 Einsiedeln, Switzerland
UID: CHE-239.051.417

Eventim Global Events GmbH ("EGE", "we", "us") is a subsidiary of CTS EVENTIM AG & Co. KGaA. This privacy policy explains how we collect, use, and protect personal data when you visit ege.co.

For any data-protection enquiry, contact us at [email protected].

2. What data we collect

Data you submit voluntarily. When you use our contact form, we collect the following information you provide:

Name
Email address
Company (optional)
Role (optional)
Message content

Data collected automatically. When you visit this website, Cloudflare — our hosting and content-delivery provider — processes certain technical connection data as part of delivering the page to your browser. This may include:

IP address
HTTP request headers (browser type, operating system, language, referring page)
Date and time of access

This processing is inherent to the operation of any web server and content-delivery network. We do not operate any analytics tools, tracking pixels, or third-party advertising services on this website.

3. How we use your data

Data submitted through our contact form is used solely to respond to your enquiry. Your submission is processed by FormSubmit.co, which forwards the form data to our business email address at [email protected]. We do not use your data for marketing purposes unless you explicitly request it.

Technical connection data processed by Cloudflare is used to deliver the website securely and to protect against abuse. We do not use this data for profiling or analytics.

4. Applicable law and legal basis

Swiss Federal Act on Data Protection (FADP). EGE is domiciled in Switzerland. The Swiss FADP (SR 235.1, in force since 1 September 2023) governs our processing of personal data. Under the FADP, processing of personal data is permitted provided it complies with the principles of lawfulness, good faith, proportionality, purpose limitation, accuracy, and data security (Art. 6 FADP). We process your data in accordance with these principles — specifically, to respond to your enquiry (purpose limitation) and to operate this website (legitimate interest in maintaining our online presence).

EU General Data Protection Regulation (GDPR). To the extent the GDPR applies — for example, because we process data of individuals in the EU/EEA, or because a processor is established in the EU — we rely on the following legal bases:

Article 6(1)(b) GDPR — performance of a contract or pre-contractual measures at your request (responding to your enquiry)
Article 6(1)(f) GDPR — our legitimate interest in operating this website and responding to business enquiries

5. Third-party processors

FormSubmit.co (operated by DevFactory Ltd.) processes contact form submissions on our behalf. Form data is transmitted via HTTPS and forwarded to our email. FormSubmit retains submitted form data in an archive for up to 30 days after delivery, after which it is deleted. FormSubmit processes data in the United States. We are not aware of FormSubmit offering a formal data processing agreement. Given the limited data involved (business enquiries, not sensitive personal data), we consider this proportionate; however, we disclose this limitation transparently.

Cloudflare, Inc. (San Francisco, USA) provides hosting, content delivery, and security services for this website. Cloudflare processes technical connection data (IP address, request headers) as part of delivering the site and protecting it from abuse. Cloudflare does not receive or process any contact form data. Cloudflare is certified under both the EU–US Data Privacy Framework and the Swiss–US Data Privacy Framework.

6. International data transfers

Our processors are based in the United States. For transfers of personal data from Switzerland, we rely on the following safeguards for each recipient:

Cloudflare, Inc. — certified under the Swiss–US Data Privacy Framework (and the EU–US Data Privacy Framework where GDPR applies).
FormSubmit.co / DevFactory Ltd. — transfers are based on our assessment that the limited business-contact data involved and the temporary retention period (up to 30 days) are proportionate. We are evaluating additional safeguards and will update this section if the arrangement changes.

Where the GDPR applies, transfers are additionally safeguarded by the EU–US Data Privacy Framework or Standard Contractual Clauses (SCCs) in accordance with Article 46 GDPR, as applicable to each recipient.

7. Data retention

Contact form submissions (our email system) — retained for as long as necessary to handle your enquiry and any resulting business relationship, after which they are deleted.
Contact form submissions (FormSubmit archive) — retained by FormSubmit for up to 30 days after delivery, then automatically deleted. We do not maintain a separate database of form submissions.
Technical connection data (Cloudflare) — processed transiently during page delivery. Cloudflare's standard log retention applies; we do not access or store these logs.

8. Your rights

Under the Swiss FADP, you have the right to:

Request information about whether and how we process your personal data (Art. 25 FADP)
Request that inaccurate personal data be rectified
Request deletion of your personal data
Request that your data be provided in a commonly used electronic format (data portability, Art. 28 FADP)

Under the GDPR (where applicable), you additionally have the right to restrict processing, to object to processing based on legitimate interest, and to data portability under GDPR-specific conditions.

To exercise any of these rights, email us at [email protected].

You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland. If the GDPR applies to your situation, you may also lodge a complaint with the competent supervisory authority in your EU/EEA member state.

9. Cookies and local storage

This website does not set any cookies or use browser local storage. No consent management platform is required.

10. Changes to this policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.