Confidentialité et utilisation de cookies

Policy on data protection for the websites of Holiday On Ice Productions B.V.

The purpose of this policy on data protection is to inform you on the processing of your personal data when visiting and using the websites of Holiday On Ice Productions B.V. (hereinafter « Holiday On Ice », « we » or « us ») and in reference to our marketing measures on our own websites as well the websites of third parties and on social networks in accordance with the General Data Protection Regulation (hereinafter « GDPR »).

 

  1. Scope, controller and definitions

 

1.1. Scope of this data protection policy

This information on data protection applies to the visit and use of the Holiday On Ice websites on which a customer account can be created and tickets can be purchased in our online ticket shops, as well as our related marketing activities on our websites, third-party websites and in social networks. You can access, save and print this information on data protection at any time and free of charge on our websites.

 

This information on data protection only concerns the processing of personal data within the meaning of Section 1.1. Other websites are not covered by this privacy information and provide their own specific information on data protection.

 

1.2. Controller for the processing of your personal data

Unless otherwise stated in this data protection declaration, the controller for the processing of your personal data is:

 

Holiday On Ice Productions B.V.

Marktplein 108

2132 DD Hoofddorp

The Netherlands

E-mail: [email protected]

Tel: +31 (0) 88 023 5127

 

1.3. Definitions

This information on data protection is based on the following terms on data protection, which we have defined for easier understanding:

 

The GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. Authorities, however, which within the framework of a specific inquiry mandate may receive personal data under European Union law or the law of the Member States shall not be considered recipients; the processing of such data by these said authorities is carried out in accordance with the applicable directives on data protection in accordance with the purposes of the processing. Depending on the method of payment selected for ticket purchases, the recipients of your personal data may be banks or the postal service providers via whom we send you your ticket by post.

Personal data are all information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data can, for example, be name, contact data, user behaviour or bank data.

The Controller is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by European Union law or by the law of the Member States, the controller or the specific criteria for his appointment may be laid down in accordance with European Union law or the law of the Member States. Holiday On Ice is controller of the data processing described in this data protection declaration (Section 1.2.).

Processing is any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transfer, disseminating or otherwise making available, aligning or combining, restricting, erasing or destroying. Processing can be, for example, the collection and use of your order data for ticket sales.

 

  1. Purposes, legal bases and, if applicable, data categories for processing your personal data

2.1. Processing of your data when you visit our websites as well as part of marketing measures on third-party websites and in social networks

If you access our websites to obtain information about our products and services without registering in the customer account, purchasing a ticket in our ticket shop or otherwise actively providing us with information (purely informational use), we process your personal data. In addition, we process your personal data as part of marketing measures on third-party websites and social networks. Your personal data is processed for the following purposes and on the basis of the following legal bases:

 

2.1.1. Processing for IT security purposes

When using our websites, we process your personal data that is technically necessary for us to make our websites available to you and to ensure stability and security when visiting them. For this purpose, we process the following personal data:

IP address

Browser Fingerprints

Browser User Agents

Cookies

Due to our legitimate interest in providing you with the websites and safeguarding IT security for you when using them, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

 

2.1.2. Processing for analytical purposes

When you visit our websites, we may possibly analyse and document how you use our websites, e.g. number of website visitors, your surfing behaviour on our websites, which events and areas on our website you are interested in, origin of website visitors and, if you purchase a ticket from us, your order and shopping cart data. For this purpose, we process the following personal data:

IP address

UU ID

WEB ID

Device Fingerprints

Browser Fingerprints

Cookies

Geo IP-location

Due to our legitimate interests in carrying out analyses to improve our websites, as well as our products and services on the basis of these analyses, and of our legitimate interest in fraud prevention and to show you individual recommendations for our products and services when visiting our websites, we process your personal data according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

For this analysis, we use Google Analytics, a web analysis service of Google LLC (« Google »). Google Analytics uses cookies that enable an analysis of the use of our websites. The information generated by the cookie about the use of our websites is in general transferred to a Google server in the US and stored there. However, if IP anonymisation is activated on our websites, Google will reduce the IP address of the website visitor within member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the US and shortened there. On behalf of Holiday On Ice, Google will use this information to evaluate the use of the websites, to compile reports on the website activities and to provide Holiday On Ice with further services associated with the use of the website and the Internet. The IP address transferred by the user’s browser within the scope of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of these websites. You can also prevent Google from recording the data generated by the cookie and relating to your use of the websites (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

Perform an opt-out (Google Analytics Tracking will be deactivated by clicking on the link)

An opt-out cookie is set to prevent future recording of your data when using these websites. Our websites use Google Analytics with the extension « _anonymizelp() ». As a result, IP addresses are processed further in abbreviated form; direct personal reference can thus be ruled out.
Google Analytics is used in accordance with the conditions on which the data protection authorities have agreed with Google. Further information on terms of use and data protection can be found at:

https://www.google.de/intl/de/policies/terms/regional.html

https://www.google.de/intl/de/policies/privacy

In connection with the use of Google Analytics, your personal data transferred to the US. Google LLC is subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:

<= » » a= » »>https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg

To analyse the use of our websites, we also use the following web analysis services:

AT Internet: http://www.xiti.com/de/optout.aspx

Maxymiser: http://www.maxymiser.de/cookie_optout.htm

Criteo: http://www.criteo.com/de/datenschutzrichtlinie

Next Performance: http://www.nextperf.com/de/privacy

TagCommander: http://www.tagcommander.com/de/datenschutz/

The Adex: http://www.theadex.com/opt-out

If you wish to object to the data processing by these web analysis services, please click on the respective link of the analysis service (opt-out option). We would like to point out that the objection is always made by means of a cookie. If this cookie is erased, you must click again on the respective link of the analysis service to exercise your objection.

 

2.1.3. Processing for the purpose of individual recommendations on our websites

If you visit our websites, we analyse and document your user behaviour to display individual recommendations on the websites based on this data. For this purpose, we process the following personal data:

IP address

UUID

WEB ID

Device Fingerprints

Browser Fingerprints

Cookies

Geo IP-location

Due to our legitimate interest in displaying product recommendations and carrying out marketing measures, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

We use Google Adwords and Facebook Pixel for the processing. If you would like to object to the data processing by Google Adwords and/or Facebook Pixel, please click on the respective link (opt-out option):

Google Adwords: https://www.google.de/settings/ads/

Facebook Pixel: http://www.youronlinechoices.com/de/praferenzmanagement

In connection with the use of Google Adwords and Facebook Pixel, your personal data is transferred to the US. Google LLC and Facebook, Inc. are subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:

https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg

For further details on data processing by Google Adwords and Facebook Pixel, please refer to the corresponding information on data protection:

Google Adwords: https://policies.google.com/privacy?gl=GB&hl=de

Facebook Pixel: https://policies.google.com/privacy?gl=GB&hl=de

 

2.1.4. Processing for purposes of advertising and re-targeting on third party websites and social networks

If you visit our websites, we process your personal data for advertising measures in the form of remarketing and display advertising as well as with the help of social media plug-ins and for social media ads.

As part of display advertising, we carry out various marketing campaigns using tags (pixels) and cookies from our retargeting providers. When you visit our websites, tags and cookies are set and associated with products you have viewed or purchased. This allows you to see individual displays for Holiday On Ice products. We also play banner ads to Facebook users who have a similar profile to our existing customers and website visitors. For this, we process:

Web page type called up;

Viewed product number;

When purchasing a ticket: ordered product number, sales value and order number, as well as preferences; and

Cookie IDs.

Due to our legitimate interest in advertising our products and services with the aid of targeted marketing measures, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. If you do not want the retargeting function, you can basically deactivate it by making the appropriate settings (opt-out function) at the following link:

Google: http://www.google.com/settings/ads

Criteo: http://www.criteo.com/de/datenschutzrichtlinie

Next Performance: http://www.nextperf.com/de/privacy

Facebook: http://www.youronlinechoices.com/de/praferenzmanagement/

In connection with the use of tags and cookies from Google and Facebook, your personal data is transferred to the US. Google LLC and Facebook, Inc. are subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:

https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg

For further details on data processing by the retargeting providers, please refer to the corresponding data protection policy:

Google: https://policies.google.com/privacy?hl=de

Facebook: https://www.facebook.com/privacy/explanation

Criteo: https://www.criteo.com/de/privacy/

Nextperformance/Rakuten Marketing: http://www.nextperf.com/de/privacy/

 

If you have finished a ticket purchase from us, a cookie is set by Google Adwords and Bing. If you enter corresponding search terms in Internet search engines after your purchase, individual recommendations for Holiday On Ice products and services can be displayed to you on the basis of your purchase with the help of this cookie (search engine marketing). Your personal data is processed in the process. Due to our legitimate interest in displaying product recommendations and carrying out marketing measures, processing is carried out on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

If you would like to object to the data processing by Google Adwords and/or Bing, please click on the respective link (opt-out option):

Google Adwords: https://www.google.de/settings/ads/

Bing: http://choice.microsoft.com/de-de/opt-out

 

In connection with the use of Google Adwords and Bing, your personal data is transferred to the US. Bing is a service of Microsoft Corporation. Microsoft and Google LLC are subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:

https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg

 

For further details on data processing by Google Adwords and Bing, please refer to the corresponding information on data protection:

Google Adwords: https://policies.google.com/privacy?gl=GB&hl=de

Bing: https://privacy.microsoft.com/de-de/privacystatement/

 

Our websites contain social media plug-ins (e.g. Facebook « Like/Share-Button »). If you click on these on our websites and you have an account on the corresponding social network, a connection to the social network is established where the content you have « liked » appears. Besides the content that you have « liked », we process:

your IP address;

accessed web page;

date and time of the end of your visit to the website;

We process your personal data to increase the reach of our offer and to carry out marketing measures. Your personal data is processed on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR, which you grant us when activating the button and subsequently clicking the « Like/Share button » (so-called 2-click solution). In doing so, your personal data is transferred to the US. Facebook, Inc. is subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:

https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg

For further details on data processing, please refer to Facebook´s information on data protection:

https://www.facebook.com/privacy/explanation

 

We place advertisements, so-called social media ads, on the social networks Facebook and Instagram. If you have an account on these social networks and through your account settings on the social network agree to display advertising, you will receive corresponding recommendations on our products and services. The recommendations are generated based on your interests (e.g. « likes » of artists) stored in your public profile on Facebook or Instagram. For this, we process your public profile data. Based on your public profile interests (e.g. « likes » of artists) we show you individual advertising. In particular, we process

your IP address;

your Device / Cookie ID;

page/feed activity;

internet speed;

purchasing activities; and

social connections;

to measure ad success. We process your personal data due to our legitimate interest in being able to place advertisements effectively and carry out advertising campaigns, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. In doing so, your personal data is transferred to the US. Facebook, Inc. is subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:

https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg

For further details on data processing, we refer you to the information on data protection of Facebook and Instagram:

Facebook: https://www.facebook.com/privacy/explanation

Instagram: https://help.instagram.com/155833707900388

 

2.1.5. Use of cookies

When using our websites, cookies are stored on your computer. Cookies are small text files that are assigned and stored on your hard disk by the browser you use. Cookies allow certain information to flow to the controller that sets the cookie. These also contain personal data. This allows us to make our websites more user-friendly and effective. Cookies cannot run programs or transmit viruses to your computer.

 

For the use of cookies on the websites of our ticket shop, the Cookie Information Websites of Holiday On Ice as set out below, apply.

 

2.2. Registration and creation of a customer account

When you visit our websites, you can create a customer account. You can use this to purchase tickets, find out about events and leisure activities and receive information about events of your favourite artists via our ticket alert. You can participate in exclusive advance sales, subscribe to newsletters and take advantage of many other benefits relating to your ticket purchase. The registration and use of the customer account requires personal data. Mandatory fields are marked accordingly in the input mask.

Due to our legitimate interest, we process your personal data to enable you to create and use your customer account, as well as to enable the sale of tickets, and to inform you about our products and services. Processing is carried out on the basis of Art. 6 Para. 1 Sentence 1 lit. b) and lit. f) GDPR.

 

2.3. Registration for the customer account with Facebook login

To make it easier for you to create a customer account and log in later, we offer you the option of registering with your Facebook login data. For this, you need a Facebook account. In this respect, the terms of use and data protection of Facebook, Inc. apply.

If you click on the button « Log in with Facebook » during registration, a new window opens with input fields for your Facebook login data. By entering your data, you consent to us receiving access to your public Facebook profile. Your data is returned according to the privacy settings you have selected on Facebook.

After successful authentication via your Facebook login data, your Facebook profile and our customer account are linked to each other and you can use our customer account without having to register separately on our websites.

When you register with your Facebook login data in our online customer portal, we process your first and last name and your e-mail address. The use of your Facebook login data by us for your registration is voluntary. We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

For more information about your registration with your Facebook login details, please see the Terms of Use and information on data protection of Facebook, Inc:

https://de-de.facebook.com/legal/terms/update

https://www.facebook.com/privacy/explanation

 

2.4. Ticket purchases in the online ticket shop, in our reservation offices and via the ticket hotline.

We process your personal data when you buy a ticket on our websites in the ticket shop, in our reservation offices or via our ticket hotlines and provide personal data. The processing is carried out for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

If you purchase a ticket for another person (third party), we process the third party´s personal data (name and, if applicable, contact data) provided by you for ticket personalisation and, if applicable, for sending the ticket to the third party. These data are processed for the purpose of contract execution and processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you provide data of a third party when purchasing a ticket, make sure that the third party is sufficiently informed by you about the processing of his/her data at Holiday On Ice and that you are entitled to provide the data.

 

2.5. Ticket sales via websites of special cooperation partners

If you purchase tickets on the websites of our special cooperation partners, your personal data will be processed for the processing and execution of your order. These cooperation partners are selected partners who are jointly responsible (Art. 26 GDRP) for processing your personal data with us in the context of ticket purchase within the meaning of this Section.

In addition to Section 1.2., Holiday On Ice and our special cooperation partners are joint controllers for the processing described in Section 2.6. Our special cooperation partner is:

CTS Eventim AG & Co. KGaA

We process your personal data as joint controllers with our special cooperation partners as defined in Sections 2.4., 2.7. and 2.16 of this data protection declaration. Your personal data is processed for the purpose of executing and processing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. For inquiries within the meaning of Sections 2.15, 5, 6 and 7, please contact us (see contact details in Section 1.2.).

 

2.7. Credit assessment and profiling

When purchasing tickets, we may carry out a credit check if you choose the payment methods « direct debit », « hire purchase » and « purchase on account ».

Credit risk is assessed on the basis of mathematical-statistical procedures at the credit agency (SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany), so-called scoring. For this purpose, your personal data which are necessary for the credit assessment are transferred to the credit agency. We process your personal data for the purpose of credit assessment to avoid payment default. On the basis of the transferred personal data, a statistical probability of a credit default and thus your solvency is calculated. The credit agency then transfers your score value to us. This personal data is processed for the execution of your contract with us on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR as well as due to our legitimate interest in avoiding a default of payment on your part, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

The decision as to whether payment by direct debit, hire purchase and/or invoice purchase is possible is based on an automated decision. If your customer and order data are similar to the data of an order with payment problems, one of our employees will check your order process separately and manually.

If the credit check is positive, payment by direct debit, hire purchase and/or purchase on account is possible; if it is negative, we cannot offer you the payment method « direct debit », « hire purchase » and/or « purchase on account ». Payment by another payment method is still possible.

Die The scope of the scoring is limited to whether payment by direct debit, hire purchase and/or purchase on account is possible. We use the scoring exclusively to prepare and execute the contract with you and to protect ourselves against possible payment defaults.

 

2.8. Shopping cart canceller e-mails

If you have started an order process in our ticket shop on our websites but have not completed it, we will send you a reminder e-mail to the e-mail address stored in your customer account regarding the purchase process you have started. You can complete this purchase process by logging into your customer account on our websites.

We process your personal data in order to remind you within the context of marketing measures of purchase processes that you have not yet completed. If you have not yet purchased a ticket from us, we will process your data on the basis of your consent according to Art. 6 Para. 1 Sentence 1 lit. a) GDPR. If you have already purchased a ticket from us, we process your personal data provided in previous order processes due to our legitimate interest in carrying out marketing measures on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

 

2.9. Fan reports

After visiting an event, you can create a report on the event on our websites or let us and other visitors to our websites know whether you enjoyed the event. Your report is published on our websites.

When you create and publish a fan report on our websites, we process your personal data to publish your report on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interest in increasing our reach through marketing measures and in informing other customers about your experiences at the event, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

 

2.10. Customer surveys

To continuously improve our products and services and adapt them to your needs, we regularly invite our customers to participate in customer surveys. In doing so, we will use the information you provide during the ticket purchase process (Sections 2.4, 2.5, 2.6to contact you.

Due our legitimate interest in improving our products and services, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

 

2.11. Information e-mails, newsletters and web browser pushes

If you visit our websites for information purposes only (Section 2.1) or if you create a customer account (Sections 2.2 and 2.3), you can register for our newsletter.

 

When you subscribe to our newsletter we analyse and document whether you open the newsletter and how you use it. We process your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue our legitimate interest of structuring our newsletter in accordance with your needs and to improve the range of our marketing campaigns.

If you make the appropriate settings in your browser, we will send you personalised push notifications, so-called web browser pushes, from our website https://www.holidayonice.com/. For this, we use the Google service Firebase Cloud Messaging (FCM). We process your personal data on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

In connection with the use of the Google service Firebase Cloud Messaging (FCM), your personal data is transferred to the US. Google LLC is subject to the EU-US Privacy Shield. This safeguards an adequate protection of your personal data. The complete text of the EU-US Privacy Shield Framework can be found under the following link:

<= » » a= » »>https://www.privacyshield.gov/servlet/servlet.FileDownload?file=015t00000004qAg

For further details on data processing by the Google service Firebase Cloud Messaging (FCM), we refer to the corresponding information on data protection:

<= » » a= » »>https://policies.google.com/privacy?hl=de

 

2.12. Competitions

You can participate in various competitions on our websites and social media platforms. For this, we process your personal data to conduct the competition with you and to advertise our events. Your personal data is processed for the purpose of executing the contract with you and due to our legitimate interest in carrying out marketing measures, on the basis of Art. 6 Para. 1 Sentence 1 lit. b) and f) GDPR.

 

2.13. Customer Service

If you have any questions about events, your ticket purchase, your customer account or other Holiday On Ice products and services, if you wish to exercise your rights under this information on data protection or if you wish to make a complaint, you can contact us (see contact details under Section 1.2).

Depending on the subject of your request, we may use your personal data stored in our systems in the course of other data processing (e.g. data that you have provided when purchasing tickets) to answer your questions. If and to the extent necessary to answer your inquiry, we also collect data from external sources (e.g. inquiry with the shipping service provider in the context of a shipment tracking or a request for investigation).

 

Your personal data are processed for the purpose of executing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If you exercise your rights towards us, we process your personal data for the purpose of fulfilling a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR. If you wish to inform yourself about our products and services or to make a complaint, we process personal data due to our legitimate interests in carrying out marketing measures and responding to your complaint on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

If you send us health data within the scope of your inquiry (e.g. information that you have a severe disability), we process this personal data only and insofar as this is necessary to answer your request and you have given us your express consent for this as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

 

2.14. Reversed transactions on tickets

If necessary, it comes to a reversed transaction of your order. Your personal data will be processed on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

If you have not purchased your ticket from us yourself, but received it as a gift from the buyer, for example, and now send in the ticket due to the cancellation or relocation of the event, we process the data that you as a different sender provide us with informally or via the form on our website. We process your personal data for the purpose of returning your ticket and making a refund on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

If you have provided special personal data as defined in Section 2.4.4 on yourself or a third party when purchasing a ticket, we process this data for the purpose of reversing the ticket transaction on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

 

2.15. Dunning, collection and enforcement and defence of legal claims

In the case of outstanding receivables to us, we notify you by e-mail, SMS, post or telephone and, if necessary, send you a reminder. If and to the extent that no payment is made by you as a result, a collection procedure is initiated. If and to the extent that no payment is made by you as a result, a collection procedure is initiated.

The collection procedure is carried out by a collection service provider commissioned by us. As far as this is necessary for the execution of the collection procedure, the collection service provider carries out address investigations and accesses public registers for this purpose.

We process your personal data for the purpose of executing and processing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interests in preventing misuse of our services and enforcing our legal claims, including collection, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

In the context of a legal dispute with you, we process your personal data to enforce and/or defend our rights. If and insofar as this is necessary for executing the legal dispute, we also make use of data from other sources (e.g. public registers). We process your personal data on the basis of a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR and due to our legitimate interest in representing, enforcing and / or defending our legal interests, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

 

2.16. Other processing

2.16.1. Performance of internal audits and compliance

Your personal data can be processed within the Holiday On Ice Group in the framework of internal audits. We also use data from other public sources (e.g. credit agencies) on a case-by-case basis.

If we implement compliance programs and measures, for example to implement the requirements of the German Corporate Governance Code (DCGK) and to identify and correct misconduct within the company, corresponding processing of your data may also occur.

Under certain circumstances, your personal data may also be processed in these data processing operations. We process your personal data to comply with our statutory obligations, on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR. In addition, due to our legitimate interests in reviewing the processes and efficiency in the group of companies, correcting any misconduct and preventing fraud and, if necessary, in enforcing and/or defending our rights, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

 

2.16.2. Preparation of analyses

On the basis of your data, which we process as defined in Section 2 of this information on data protection, we may prepare analyses. These serve as the basis for business decisions to improve our products and services, to adapt them to the needs of our customers and to carry out marketing measures. Due to our legitimate interest in improving our offer and carrying out marketing measures, we process your personal data on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR. The analyses created on this basis no longer contain any personal references, meaning it is no longer possible to draw any conclusions about your person.

 

  1. Storage and erasure of your personal data

We store your personal data for as long and as far as it is necessary for the purposes for which they are processed (Section 2).

As soon as the data is no longer required for the purposes stated in Section 2, we store your personal data for the period in which you can assert claims against us or we against you (statutory limitation period usually of three years, beginning at the end of the year in which the claim arises; e.g. at the end of the ticket transaction).

In addition, we store your personal data for as long as and insofar as we are legally obliged to do so. The retention period is up to ten years.

 

  1. Categories of recipients of personal data

When providing, implementing and managing our products and services, we collaboratively transfer your personal data to companies within the Holiday On Ice Group as part of an work-sharing process. The transfer is based on our legitimate interest in carrying out internal administrative activities efficiently and collaboratively as well as in improving our products and services on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

If you purchase tickets on the websites of our partners, we transfer your personal data to them for marketing purposes if you give us your consent for this within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

When you purchase tickets on the websites of our special cooperation partners (Section 2.6), we process your personal data as joint controllers with our partners. On the basis of the agreement concluded with our partners (Art. 26 in conjunction with Art. 6 Para. 1 Sentence 1 lit. b) GDPR), we transfer your personal data for the purpose of contract execution and, if applicable, processing with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. We also transfer your personal data to our partners for statistical evaluations due to our legitimate interest in improving our products and services together with our partners on the basis of these analyses and carrying out marketing measures. Your personal data is processed on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

If you purchase tickets on the websites of our loyalty partners who have integrated our online shop on their websites, we transfer personal data to them as part of the bonus programmes. Your data is transferred when you purchase a ticket, so that the Loyalty Partner can assign the purchase to a specific person, the customer. The customer then receives bonus points (such as Miles and More, PAYBACK, etc.). We transfer your data on the basis of our legitimate interest and the legitimate interest of our loyalty partners in carrying out marketing measures and in sending you discounts for your loyalty, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

In addition to this, your personal data is transferred to IT service providers who provide the platforms, databases and tools for our products and services (e.g. our website, the sale of tickets, sending of newsletters and information e-mails), create analyses of user behaviour on our websites, display marketing campaigns and process your personal data on our behalf as part of ticket purchases. The transfer of your personal data takes place for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR, due to our legitimate interest in improving and promoting our products, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR and provided that you have given us your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR for the processing of your personal data.

When you purchase a ticket on our websites, we offer you various payment options. For the processing of the payment and, if necessary, a refund of the purchase price, we transfer your personal data to banks, payment service providers, financial service providers and credit card companies, depending on the selected payment method. We transfer your personal data for the processing of your ticket purchase and, if necessary, the reverse transaction on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. In addition, we may also transfer your personal data to credit agencies to check your creditworthiness (see Section 2.7). The transfer is made to execute the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interest in avoiding payment defaults on your part, according to Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

If you select « PayPal » as payment option when purchasing tickets, we transfer your personal data. Your personal data is transferred based on your selected payment method and in order to process the payment with you. In doing so, your personal data is transferred to the US. In the case of the US, the EU Commission has not decided that an adequate level of data protection within the meaning of the GDPR exists; there is no such adequacy decision (Art. 45 GDPR). However, we transfer your data for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) in conjunction with Art. 49 Para. 1 Sentence 1 lit. b) and c) GDPR.

If we send you your ticket by postal services, we transfer your personal data to shipping service providers. The transfer takes place for the purpose of contract execution with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

If you fail to meet your payment obligations, we initiate a collection procedure (Section 2.17). For the execution of the collection procedure, we transfer your personal data to collection service providers who carry out the procedure for us. We process your personal data for the purpose of executing and processing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR and due to our legitimate interests in enforcing our legal claims, including collection, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

In the context of legal disputes, we transfer your data to the competent court and, if you have appointed a lawyer, to him/her to carry out the legal dispute. We process your personal data on the basis of a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR and due to our legitimate interest in representing, enforcing and / or defending our legal interests, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

Guest lists are created for some events and sent to the organiser to check your eligibility to participate in the event, to allocate seats and to take menu requests into account. If you take part in our competitions (Section 2.14), we transmit the personal data of the winner to the respective promoter of the competition for this purpose. We transfer your personal data for the purpose of contract execution with you and with our contractual partners on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR. If and as far as this is necessary for the event, we also transfer health data (e.g. information on allergies at food events), if you have provided this information when purchasing a ticket and given us your consent for the transfer of the data as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

Information e-mails and newsletters (Section 2.13) are sent by service providers commissioned by us and, in some circumstances we may analyse and document your use of them. For this purpose, we transfer your personal data to the service providers. In doing so, we process your personal data as follows:

If you give us your consent to send you newsletters when visiting our websites for information purposes only (Section 2.1) or when creating a customer account (Sections 2.2 and 2.3), we transfer your data on the basis of your consent within the meaning of Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

After purchasing a ticket (Sections 2.4, 2.5 and 2.6) or after successful participation in a competition (Section 2.14), we transfer your personal data in order to provide you with information on the event, for the purpose of executing the contract with you on the basis of Art. 6 Para. 1 Sentence 1 lit. b) GDPR.

In addition, after purchasing a ticket (Sections 2.4, 2.5 and 2.6) or after participating in one of our competitions (Section 2.14), we transfer your personal data to inform you about changes to our products and services and to promote our products. The transfer of your personal data occurs due to our legitimate interest in carrying out marketing measures, on the basis of Art. 6 Para. 1 Sentence 1 lit. f) GDPR.

In order to analyze the use of our newsletter, we transmit your personal data on the basis of Art. 6 (1) Sentence 1 lit. f) GDPR to pursue our legitimate interest of structuring our newsletter in accordance with your needs and to improve the range of our marketing measures.

We transfer your personal data to the Google service Firebase Cloud Messaging (FCM) to send the web browser pushes. Your data is processed on the basis of your consent as defined in Art. 6 Para. 1 Sentence 1 lit. a) GDPR.

We conduct customer surveys and customer evaluations. For this purpose, your contact details are sent to our mailing service providers, via whom we invite you to our surveys and evaluations. We process your personal data on the basis of our legitimate interest in improving our products and services on the basis of your evaluation and conducting surveys and evaluations efficiently, on the basis of Art. 6 Para. 1 Sentence 1 letter f) GDPR.

Beyond this, we transfer your personal data only and insofar a legal obligation exists on our part to pass it on. The transfer takes place on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR (e.g. to the police authorities in the context of criminal investigations or to the data protection supervisory authorities).

 

  1. Justified interests in data processing and objection

We process your personal data as defined above due to our legitimate interests particularly in ensuring IT security on our websites, carrying out analyses and marketing measures, informing you about our products and services, increasing the scope of our products and marketing measures, preventing fraud and misuse, avoiding payment defaults, representing, enforcing and defending our legal interests (possibly also in court) and carrying out internal administration efficiently and collaboratively. Information on the balance of interests carried out can be obtained from: [email protected]

If we process your personal data on the basis of these legitimate interests (Art. 6 Para. 1 Sentence 1 lit. f) GDPR), you can object to the data processing at any time. Unless there are important reasons to the contrary within the meaning of Art. 21 GDPR, we will comply with your objection. Please direct your request:

by e-mail to [email protected]

by tel. to +31 (0) 88 023 5127

in writing to Holiday On Ice Productions B.V. P.O. Box 3096, 2130 KB Hoofddorp, The Netherlands.

If you object to the data processing according to Section 5.2, we process your personal data collected in this context to answer your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

 

  1. Consent and revocation of your consent

If you have given us your consent for the processing of your personal data, you can revoke this at any time. The revocation of your consent is effective for the future. The legality of the processing of your personal data up to the time of revocation remains unaffected. Please address your revocation:

by e-mail to [email protected]

by tel. to +31 (0) 88 023 5127

in writing to Holiday On Ice Productions B.V. P.O. Box 3096, 2130 KB Hoofddorp, The Netherlands.

If you revoke your consent, we will process your personal data collected in this context to respond to your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

 

  1. Your rights

You may at any time, in accordance with the GDPR, request that we provide you with information about the personal data concerning you that we process (Art. 15 GDPR), rectify any personal data concerning you that is inaccurate (Art. 16 GDPR) and/or erase (Art. 17 GDPR), block (Art. 18 GDPR) and/or release (Art. 20 GDPR) your personal data stored by us.

Please send your request:

by e-mail to [email protected]

by tel. to +31 (0) 88 023 5127

in writing to Holiday On Ice Productions B.V. P.O. Box 3096, 2130 KB Hoofddorp, The Netherlands.

If you assert your rights against us, we process your personal data collected in this context to answer your inquiry. Your personal data is processed in order to fulfil a legal obligation on the basis of Art. 6 Para. 1 Sentence 1 lit. c) GDPR.

Without prejudice to your rights under this Section 7, you may lodge a complaint with a data protection supervisory authority if you believe that Holiday On Ice’s processing of personal data concerning you is in breach of the GDPR (Art. 77 GDPR).

 

  1. Other

The provisions of this policy on data protection (available free of charge on our websites), including the Cookie Information of Holiday On Ice (available free of charge on our websites) apply in the version valid at the time of use of our websites.

We reserve the right to supplement and amend the content of the information on data protection. The updated data protection policy is valid from the time it is published on our websites.

We will inform you in good time about these amendments and supplements on our websites, and if your contact details are already stored with us, by e-mail or by post. You will be given the opportunity to view, print and save the amended information on data protection free of charge.

 

  1. Contact details of the Data Protection Officer

Please direct any questions regarding data protection to:

Data Protection Officer

Holiday On Ice Productions B.V.

E-mail: [email protected]

 

As at: 24.05.2018

 

 

Cookie Policy

 

Scope of application

This cookie policy provides more specific data protection information as required by Section 2.1.5. (2) about the use of cookies on websites of Holiday On Ice and its affiliates, referred to here as “Holiday On Ice”, “we” or “us“.

 

General information on cookies

“Cookies” are small text files which are saved in the browsers of your end devices when you visit our websites. Cookies can save and track your actions and settings in our websites for the duration of the browser session and, in some cases, beyond this. Cookies also enable the recognition of your browser. For instance, after leaving the website, the content of your shopping basket is reconstructed or events recently viewed are displayed again.

 

Types of cookies used

First-party cookies:

On the one hand, we use first-party cookies, i.e. cookies placed by our server on our websites and which can only be accessed via our server.

Third-party cookies:

On the other, our websites also incorporate third-party cookies which are placed by servers of others and/or our websites or domains and that can be read by third parties. With these cookies, your browser can be tracked beyond our website, for instance so as to be able to display Holiday On Ice advertisements on the websites of our partner companies.

 

Storage period of the cookies

Session cookies:

Some of the cookies we use are session cookies, i.e. cookies which are only stored for the duration of your visit to our website.

Persistent cookies:

We also use persistent cookies which stay saved on your browser after the session and are automatically deleted after a predefined expiry date.

 

Purposes of using cookies

Essential cookies:

We use cookies which are needed to operate the webshop and which facilitate certain functions to be able to use the website.

Functional cookies:

In addition to this, we use cookies in order to allow you to use certain “convenience” functions through the automatic recognition of your browser. This includes, for example, the automatic recognition and setting of language, the restoration of the content of completed forms or the shopping basket after leaving and subsequent return to our websites.

Analytical cookies:

We also use cookies to collect information about your website visits and to use this information to prepare anonymous analyses and statistics with a view to constantly improving the design of our website.

Advertising and (re-) marketing cookies:

Finally, (third-party) cookies are also used on our websites for advertising/marketing purposes. These help us, for example, to be able to display Holiday On Ice advertising on the websites of partner companies.

 

Cookie settings by users

Via your browser settings you can limit or completely prevent the storage of (certain) cookies for all websites and delete any cookies that have already been saved. For more information about this please consult the instruction manual or help functions of your browser. Our websites can in principle still be visited and used after restricting/deactivating cookies in the browser settings. However, please note that in particular the complete deactivation of cookies can limit the functionalities of our websites.

 

As at: 24.05.2018