Privacy Policy

5. Ticket Booking
For booking tickets online (in addition to the BRticket webshop) the following webshops are available:

• München Ticket
• Eventim (CTS EVENTIM AG & Co. KgaA)
• Reservix (Reservix GmbH)
• okticket.de (okticket.de GmbH)

If you choose to book via one of these webshops, the data collection and processing are carried out by the respective provider on the basis of their privacy policy.

It is also possible to purchase tickets by phone or at a local BRmedia sales office.

5.1 Processed Personal Data
The following personal data are collected as part of the ticket purchase:

• Title/Salutation, first name, last name
• Address
• Phone number
• Email address
• For potential discounts, if applicable, degree of severe disability
• For potential discounts, if applicable, proof (student ID, age verification for U30 tickets)
• For card payments, additional credit card details

5.2 Purpose and Legal Basis
We process your data to be able to contact you for advice/information, to handle the purchase and payment of tickets, and to send you the purchased tickets (Legal basis: Art. 6 para. 1 lit. b GDPR).

5.3 Duration of Storage
The data will be deleted as soon as they are no longer needed, unless they must be kept for a longer period due to legal requirements.

6. Payments
When paying with a credit card, your details are collected directly by the payment service provider Computop Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, D-96050 Bamberg. Further information on data protection at Computop can be found at: https://www.computop.com/de/datenschutz.

When paying with a credit or debit card, your card and payment information is transmitted to the payment service provider transact Elektronische Zahlungssysteme GmbH, Fraunhoferstr. 10, 82152 Martinsried. Further information on data protection at transact can be found at: https://epay.de/datenschutzbestimmungen.

7. Customer-Relationship-Management (CRM)
Our CRM system is used for management and maintenance of customer relationships. A corresponding data processing agreement was concluded with our service provider Wilken/starmate solutions GmbH.

7.1 Processed Personal Data

• Name, address, phone number, email address
• Email histories, phone notes
• Orders, invoices
• Preferences, interaction history, newsletter subscriptions

7.2 Purpose and Legal Basis
The purpose of the CRM is the collection, storage, and processing of customer data to optimize our business processes, including sales, marketing, and customer service (Legal bases: Art. 6 para. 1 lit. b, legitimate interest in optimizing customer relationships – Art. 6 para. 1 lit. f, or if necessary, e.g., for receiving marketing information, your consent – Art. 6 para. 1 lit. a GDPR).

7.3 Duration of Storage
Business data is stored for 6 to 10 years in accordance to commercial and tax regulations. Contact and communication data are deleted as soon as they are no longer needed for the original purpose. Data processed based on consent are deleted as soon as the consent is revoked (if there is no other retention obligation).

8. Customer Account
You also have the option of registering on our website.

8.1 Processed Personal Data

• Title/Salutation, first name, last name
• Address
• Phone number
• Email address
• Login credentials (username and password)

8.2 Purpose and Legal Basis
The purpose of data processing is the initiation, conclusion, or fulfillment of contracts and the facilitation of your ordering process (Legal bases: Art. 6 para. 1 lit. a, b and f GDPR).

8.3 Duration of Storage
You can have your account deleted by us at any time. Please send a notification in text form to or to the contact details mentioned under section 1. The data will be deleted, unless we need to store it for the processing of ongoing orders or due to legal retention obligations..

9. Contact via Email, Phone, or Contact Form
You can contact us using the contact details above or via the »Contact« link.

9.1 Processed Personal Data

• Name
• Address
• Email address
• Phone number

9.2 Purpose and Legal Basis
We process your data to handle your request (Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR). The processing can also be carried out for pre-contractual measures or for the performance of a contract if you are already our customer (Legal basis: Art. 6 para. 1 lit. b GDPR).

9.3 Duration of Storage
The data will be deleted as soon as your request has been fully resolved, unless they must be kept for a longer period due to legal requirements.

10. Data Transfer

We will only disclose your data to third parties if we are entitled or obliged to do so under applicable law.

To provide our services, your data is generally transmitted to the respective event organizer for whose event you have purchased tickets, as well as to third parties, insofar as this is necessary for the fulfillment of contracts (e.g., to logistics service providers for ticket shipping) or if you have given us corresponding consent.

If we outsource certain parts of the data processing, we contractually obligate processors in accordance with Art. 28 GDPR (Legal basis: Art. 6 para. 1 lit. b GDPR, Art 6 para. 1 lit. f GDPR)
.

11. Rights of the data subject

You have the following rights under the GDPR as data subject:

• right of access (Art. 15 para. 1, 2 GDPR)
• right to rectification (Article 16 GDPR) and right to erasure (Article 17 GDPR)
• the right to restriction of processing (Article 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object (Article 21 GDPR)
• Right to withdraw (Art. 7 para. 3 GDPR)
• Right to complain with a supervisory authority (Art. 77 GDPR)

The supervisory authority responsible for us is

Der Rundfunkdatenschutzbeauftragte
Stephan Schwarze
04360 Leipzig
Email:
Phone: +49 341 3 00 62 40

This Privacy Policy is current as of September 2025.