Privacy Policy for UK and European Residents
Updated as of February 24, 2023
WHO WE ARE
Eventshop Inc. (“Eventshop”, “we”, “us”, “our”) is committed to providing information and activities relating to its line of products featured and services provided on our websites and mobile applications (collective, the “Site” or the “Platform”). Our content includes information about Eventshop products photos and our services. By accessing or using the Site, you acknowledge and accept the information collection, disclosure and use practices described in this Privacy Policy.
PURPOSE OF THIS POLICY
Eventshop respects privacy rights and is committed to safeguarding the personally identifiable information (“Personal Data”) entrusted to us by our clients and visitors to our Site. Eventshop has implemented this Privacy Policy to govern the use of Personal Data that we collect through the Site, including Personal Data you send to us. This Privacy Policy does not govern Personal Data collected from any other source or in any other manner. It is important that you read and retain this Privacy Policy, together with any other privacy notice we may provide on specific occasions when we are collecting or processing Personal Data about you, so that you are aware of how and why we are using such information and what your rights are under the EU & UK Data Protection Legislation. This Privacy Policy supplements the other notices available on our Site and is not intended to override them. This Privacy Policy does not form part of any contract with you unless the contract expressly states otherwise.
The Privacy Policy is incorporated by reference in and made a part of our Terms and Conditions of use of the Site, and explains how users’ information and data is collected and used.
When this Privacy Policy applies
This Privacy Policy applies if you are a resident in the UK or Europe and we are acting as a controller of your Personal Data as determined by the EU & UK Data Protection Legislation. When we collect and use your Personal Data in the ways set out in this Privacy Policy, we are the controller for the purpose of the EU & UK Data Protection Legislation.
“EU & UK Data Protection Legislation” means (i) Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data (General Data Protection Regulation) (“GDPR”) and (ii) the United Kingdom’s Data Protection Act 2018 and the GDPR as it forms part of the law of the United Kingdom (“UK GDPR”), including by virtue of Section 3 of the European Union (withdrawal) Act 2018, as any of the forgoing may be amended from time to time.”
HOW TO CONTACT US
If you have any questions or comments about this Privacy Policy, the ways in which Eventshop collects and uses your information described here, your choices and rights regarding such use, please do not hesitate to contact us at:
Email: privacy@eventshop.com
Postal Address:
Eventshop Inc. - Privacy Support
101 Creekside Crossing STE 1700 #386
Brentwood, TN 37027-5054Please include the statement “EEU Privacy Request” in the subject field of your email or include it in your writing if you choose to write to us at the designated mailing address. If you make a request, we will respond within one month.
CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be changed from time to time. We will post changes to the Site, and we reserve the right to make changes without prior individual notice. Such changes are effective upon posting. Please review this Privacy Policy often so that you will remain abreast of Eventshop’s current policies, including its policies concerning the gathering and use of information that may be collected on our Site. You are responsible for making sure you are aware of the provisions of Eventshop’s most current Privacy Policy. You can tell when the Privacy Policy was last modified by checking the “updated as of” date at the top of this Privacy Policy.
Collection of PERSONAL DATA
Personal Data Generally
Personal Data is information that uniquely identifies you, such as your name, address, email address and telephone number (the foregoing category of Persona Data being referred to in this Privacy Policy as “Contact Data”).
By attending a live event or other gathering (each, an “Event”) for which Eventshop is contracted and/or authorized by the applicable artist, Event owner(s), booking agents, venue owner(s) and/or venue operator(s) (and/or any of their respective, designees, successors or assigns) (as applicable, collectively, “Event Partners”) to shoot for the Site (whether by photograph, video or other digital media) (collectively, “Images”) or otherwise distribute Images thereof through the Site, you were deemed to have (i) given permission for images of yourself (and any minor child of yours), including through use of facial recognition software, captured during the Event (“Event Images”) to be published and sold on and through the Site, and (ii) waived any right to ownership or compensation to any Event Images, all of which are deemed to be owned exclusively by Eventshop and/or the applicable Event Partner.
In the course of using the Site, we may collect your Personal Data. For example, we collect your Personal Data, with your consent, if you purchase or browse for Event Images or other Images included in artist-specific catalogues (“Artist Catalogues”) or otherwise register to receive Event Images, text messages or other communications from Event Partners through the Platform. We may also collect your Personal Data when you provide us with your Contact Data and/or other information related to your attendance at an Event, such as the specific Event and seat location (collectively with your Contact Data, your “Event Data”, and datal rated to your interaction with the Platform, such as shopping history is hereby referred to as “Use Data”). Any and all such information collected about you from the Platform may be associated with other information that Eventshop has collected about you.
Financial Information
This Site does not collect your financial information. However, when you click to shop for Eventshop products on the Site, you will be redirected to a website hosted by Stripe.com. No purchases or sales are made on this site, but rather, are conducted via the Stripe.com platform. Information collected on by Stripe is not governed by the Privacy Policy and/or Terms and Conditions of this Site. You should read the Privacy Policy and any Terms and Conditions of these websites to understand the ways in which your Personal Data is stored and/or protected. Similarly, you may subscribe to newsletters or magazines, or visit other websites that are related to or affiliated with this Site and which may collect your financial information. Such websites are not governed by the Privacy Policy and Terms and Conditions of this Site. You are encouraged to review the policies and terms of these other websites to understand how your Personal Data, including your financial information, is collected and maintained by such websites.
Messaging Data
As part of our services provided to our Event Partners, we will share your mobile telephone number with Event Partners for their marketing purposes. For instance, when you provide your mobile telephone number through our Site’s registration process, our Event Partners would be able to send you text messages through use of our platform to inform you about upcoming events, merchandise availability or other specific information related to them and/or the artist they represent. We will issue unique phone numbers (or other communication accounts) (“Event Partner Numbers”) to our Event Partners. When you interact with Event Partner Numbers (including by sending or receiving text messages to or calling an Event Partner Number), we collect your message-related information (such as the phone number from which the message was sent, when the message was sent, the content of the message, any attached files or media, and data from interactive features such as reactions, effects, stickers, scheduling, polls, surveys and payments). When calling an Event Partner Number, we may also collect additional message information, such as the content of a voicemail, duration of the call, and keys pressed. When you interact with messages sent via our Platform, we collect information about those interactions too. We refer to all of this as “Messaging Data.”
Other Information
When you access the Site, Eventshop will automatically receive some information about your use of the service. The type of information that is automatically collected by Eventshop may include, but is not limited to, such things as the date and time of access of the Site, the anonymized Internet protocol (IP) address of the computer that you are using, the domain and host from which you access the Internet, your browser software and operating system, the referring website address, and the specific activities you are engaged in while visiting the Site (all of the foregoing being referred to as “Internet/Electronic Activity Data”). This aggregate tracking information is used to help Eventshop improve and enhance the website experience for all of its visitors.
LAWFUL PROCESSING
We will only use your Personal Data when the law allows us to – this is referred to as a ‘lawful basis’. Most commonly, we will use your Personal Data in the following circumstances:
- Consent: you have given your consent for us to process your Personal Data for that purpose.
- Contract: the use of your Personal Data is necessary for the performance of a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
- Legal Obligation: the use of your Personal Data is necessary for us to comply with law.
- Vital Interests: the use of your Personal Data is necessary to protect your or someone else’s vital interests e.g. your or someone else’s life.
- Legitimate Interests: the use of your Personal Data is necessary for legitimate interests pursued by us or a third party. Before we rely on this lawful basis we will balance your interests against the legitimate interests pursued by us. In particular, if you would not reasonably expect your Personal Data to be used in a certain way, or it would cause unwarranted harm, your interests are likely to override the legitimate interests. However, your interests do not always have to align with the legitimate interests.
Use of Your Personal Data
Your Personal Data may also be used in the following ways:
Purpose/Activity Types of Personal Data Lawful basis for processing including basis of legitimate interest To fulfil or meet the reason you provided the information (e.g., to fulfil an order for a product that you place on our Site). Contact Data; Internet/Electronic Activity Data Legitimate Basis; Consent To onboard people to our Platform and enable messaging with Event Partners Contact Data; Event Data Consent To operate the Platform for Event Partners, including by automating and scheduling messages and integrating with external systems and data. Contact Data; Internet/Electronic Activity Data Legitimate Basis To give you notice of and/or resolve any problems that may arise in connection with our services. Contact Data; Consent To better understand the needs and interests of our customers. Use Data; Internet/Electronic Activity Data Legitimate Basis To analyse the success of our products and services and Site. Use Data; Internet/Electronic Activity Data Legitimate Basis For compliance with Eventshop’s legal and regulatory obligations. All categories of Personal Data Legal Obligation To investigate potential breaches of the Terms and Conditions of the Site, without your consent. All categories Personal Data Legitimate Basis To share with our Event Partners and Event Sponsors. Event Data Consent We may, under certain circumstances, also use your Personal Data to contact you via direct postal mail and/or electronically to the extent such activity is permitted by law, and, with your consent, regarding your relationship with Eventshop. This information may also be used to help Eventshop and its commercial partners deliver targeted advertisements, promotions and other initiatives to you, but only if you affirmatively consent to such uses.
INFORMATION SHARING
Disclosure of Information to Event Partners
When you attend an Event, register on the Platform and/or or purchase products or services through the Site, portions of your Personal Data (including Event Data and Messaging Data) may be provided those Events Partners to which such Event Data and/or Messaging Data relates. Eventshop shares such information to its Event Partners for such Event Partners’ marketing purposes. You may request that we cease from sharing your Personal Data with our Event Partners by writing to privacy@eventshop.com.
To the extent that Eventshop is contractually obligation to provide certain of your Personal Data to our Event Partners, such obligation will only relate to the Personal Data in which we are lawfully permitted to share (such as with your Consent).
Disclosure of Information to Event Sponsors
When you attend register on the Platform and/or or purchase products or services through the Site, portions of your Personal Data (including your Event Data) may be provided to sponsors of our Events Partners (“Event Sponsors”) to which such Event Data relates. Eventshop shares such information to Event Sponsors for such Event Sponsors’ marketing purposes. You may request that we cease from sharing your Personal Data with our Event Sponsors by writing to privacy@eventshop.com.
To the extent that Eventshop is contractually obligation to provide certain of your Personal Data to our Event Sponsor, such obligation will only relate to the Personal Data in which we are lawfully permitted to share (such as with your Consent).
Text Messaging Services
We may share your Messaging Data with the Event Partners you are interacting with via the Platform. Event Partners may be able to save or sync copies of their Eventshop address book for use outside of the Platform, which may include your contact info and other Messaging Data. The information practices of Event Partners are not covered by this Privacy Policy.
Disclosure of Information to Other Non-Affiliated Third Parties
Except as otherwise described in this Privacy Policy, Eventshop does not sell or market the Personal Data collected on the Site to non-affiliated third parties for their marketing purposes without your express consent. Other aggregated and/or anonymous information may be disclosed without your consent. Eventshop may disclose aggregated statistics about visitors to its Site, along with anonymous information concerning individual visitors of its Site. We may combine anonymous information and/or aggregate information we collect with additional anonymous information collected from other sources. We may share anonymous information (including aggregate information) we collect regarding our users with third parties (such as advisors, promotional sponsors, and investors) for various business purposes including conducting general business analysis, and developing website content and services.
Do Not Track Signals.
Certain web browsers provide users with an option by which you may have your browser send a “Do Not Track” signal to the website that you are visiting, advising the recipient website that you do not want to have your online activity tracked. However, the way browsers communicate such “Do Not Track” signals is not yet uniform and accordingly, our Site does not take any action in response to such signals. In the event a final standard is developed and accepted, we may reassess how we should respond to such signals.
Use of Your Personal Data by Our Service Providers.
From time to time, we may hire third parties to assist us with certain functions and services, such as data processing, computer software, text messaging services and website maintenance and development, promotional and marketing services, customer service, professional, legal or accounting services and/or business and sales analysis. Eventshop may share your Personal Data, without restriction (and regardless of whether you have chosen to limit our sharing of your Personal Data as collected on the Site), with such companies that we hire to perform services for us. In such situations, Eventshop requires that these companies agree to maintain the confidentiality of your Personal Data and to comply with the safeguards described in this Privacy Policy. These companies have access to the Personal Data needed to perform their functions but are not permitted to share or use such information for any other purposes. Furthermore, in compliance with privacy laws, we also provide our opt-out lists to non-affiliated third-party companies so that communications sent by those companies on Eventshop’s behalf do not get sent to addresses appearing on our opt-out lists.
Eventshop will utilize third-party service providers who work with us to provide certain services and features of the Site to help us communicate with you. Examples of such services include sending email or text messages. We require our third-party service providers to promise not to use such information except as necessary to provide the relevant services to us. This Privacy Policy does not cover the use of your personally identifiable information by such third-parties. We do not maintain responsibility for the manner in which third parties use or further disclose Personal Data collected from you in accordance with this Privacy Policy, after we have disclosed such information to those third parties.
Change of Ownership
We may also share your Personal Data as required to allow for a change in ownership of Eventshop and/or any of Eventshop’s affiliated entities and/or of any business(es) to which the Site relates, and the related transfer of user information to the new owner. In the event of any such change of ownership, your Personal Data will continue to be protected by the terms of this Privacy Policy unless and until you are notified of a change.
Lawful Access, Legal Action and Investigations
Your Personal Data may be disclosed to non-affiliated third parties as either permitted by, or to comply with, applicable laws and regulations. We may disclose Personal Data if we believe it is necessary to investigate, prevent, or take action regarding suspected illegal activities or fraud, situations involving the physical safety of any person, violations of our Terms and Conditions, or otherwise in accordance with applicable law. For example, Eventshop may disclose your Personal Data to comply with investigations by regulatory authorities or enforcement agencies in the United States of America or elsewhere, or to protect against or prevent actual or potential fraud. Furthermore, Eventshop may disclose your Personal Data if it has a reasonable good faith basis to believe that it is required to do so by law, compelled by court order or legal process, or is reasonably necessary and/or appropriate to: (i) protect the rights, property and/or safety of Eventshop or any other person or entity; or (ii) prevent or take action concerning any alleged: (a) illegal activity or (b) breach of the Terms and Conditions or Privacy Policy of the Site.
Retention of Personal Data
Personal Data is retained to deliver our services, to otherwise fulfill identified or apparent purposes, and for record-keeping. How long we retain Personal Data will vary depending on the products or services we provide and our legal obligations under applicable laws. For example, we retain certain purchase information for accounting and tax purposes even after you have deleted your account. Our retention periods are generally informed by three factors: (1) is this information necessary to provide the service?; (2) What consent have you provided around our use of this information?; and (3) what statutory, contractual or other legal obligations do we have to retain this information? In all situation, your Personal Data will be securely deleted after the relevant limitation or retention periods have expired.
At some point Eventshop may elect to destroy, erase or anonymize your Personal Data. Once anonymized, Eventshop undertakes not to re-identify the information.
Information published on the Site may continue to be displayed on this Site, or on any successor website for as long as the Site or any successor Site is available, and may be archived by third party Sites. You may request access to your Personal Data in order for it to be updated or removed by writing to privacy@eventshop.com. To the extent permitted by applicable law, we reserve the right to refuse requests for the removal of Personal Data from the Site.
Your Privacy Choices
You have the right to request access to the Personal Information that we hold about you (commonly known as a “data subject access request”). This enables you to receive a copy of Personal Data we hold about you and to check that we are lawfully processing it. You may request access and update your Personal Data by writing to privacy@eventshop.com. Please note that the accuracy of any information may need to be verified before any correction can be made.
To protect the confidentiality of your information and respect your wishes for how it is used, Eventshop will not share Personal Data about you with our affiliated entities without your consent. As noted above, you may also opt-out of receiving electronic communications from us at any time. You may make your privacy choice at any time and it will remain in effect until you change it.
If you would like to check, change, or confirm your privacy choices please contact us at: privacy@eventshop.com.
Use of Cookies
The Site makes use of “cookies” – small data files which we may send to your computer on the basis of the information that we have collected about your visit. They contain information allowing us to recognize when you are visiting the Site and to keep track of your preferences. Through the use of a cookie, we also may automatically collect information about your online activity on our Site, such as the web pages you visit, the links you click, and the searches you conduct on our site. Cookies are stored in your computer’s browser or on your hard disk and can then be retrieved by the website.
We may in the future also use third-party advertising companies to target and show you advertisements when you visit the Site. On occasion, with your consent, Eventshop may permit third-party advertisers and ad networks to place their own cookies on our Site to track visitors’ activities on the Site. This enables such companies to recognize visitors so that when those visitors visit a third-party website, advertising can be delivered that is tailored to their individual interests (whether for Eventshop products or for the products or services of others), based on what has been learned from the visitors’ activity on Eventshop’s Site. This practice is called “interest-based advertising,” and the practices of these third-parties are not covered by this Privacy Policy.
If you want to delete any cookies that were already sent to your computer or personal device, please refer to your web browser’s “Help” facility. In addition, most web browsers can be set to prevent you from receiving new cookies, notify you before accepting cookies or disable cookies altogether. Details about this can normally be found in the “Help” facility provided with your browser. Please note that if you disable cookies you may not be able to take advantage of some of the Site’s interactive functionality.
Protection and Security of Information
Eventshop maintains reasonable standards of confidentiality and security for the Site and the Personal Data collected from the Site. Physical, technical, electronic and managerial procedures have been employed to safeguard the security and integrity of Personal Data collected through the Site. The Personal Data you provide is secured using industry standard security technology. Eventshop also restricts its own employees’ access to Personal Data. However, it is possible that someone may intercept or access communications, transmissions and/or Personal Data.
In the event that Eventshop determines that there has been a security breach that results in the unauthorized disclosure of Personal Data to a third party, Eventshop will promptly notify consumers whose Personal Data it reasonably believes has been compromised by posting information on the Site and, if email contact is possible, then also by sending an email notification with respect to the situation.
You acknowledge that the security of online transactions you conduct using the Site cannot be guaranteed. To the fullest extent permitted at law, Eventshop shall not accept responsibility for misuse or loss of, or unauthorized access to, your Personal Data.
Use of the Site by Children
You must be 18 years of age to use the Site. Eventshop does not knowingly collect or maintain information from children under the age of 13, and no part of the Site is designed with the intention of attracting such children.
Links to Other Websites and Services
The Eventshop Site may contain links to other websites that are not controlled and/or maintained by Eventshop. Please be aware that these other Site may have different privacy policies which may subject you to different privacy practices. Please review the privacy policies of such other websites for information concerning what information is collected on such websites and how it is used. Eventshop is not responsible for the contents or privacy practices of any linked site or any link on a linked site.=
Our Site may also include social media features, such as Facebook, Twitter, Instagram and Pinterest. These features may collect your IP address, which page you are visiting on our Site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by a third party or hosted directly on our Site. Your interactions with these features are governed by the privacy policy of the company providing the feature, which we encourage you to review.
INTERNATIONAL TRANSFER OF PERSONAL DATA
Eventshop is a U.S. entity and the Site is a U.S. website. Currently, all Personal Data provided to us by your is maintained and processed in the U.S. If we ever transfer your Personal Data from the UK or EEA to a third country or share with an international organization, we will take reasonable steps to (a) transfer your Personal Data to countries that have been deemed to provide an adequate level of protection for Personal Data or (b) use specific contracts approved for use which give Personal Data the same protection it has in the UK or the EEA.
Complaints
You have the right to make a complaint at any time to your relevant supervisory authority. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority so please contact us in the first instance.
We may require to use any or all types of your Personal Data for complaint, grievance or litigation purposes depending on the specific nature of the complaint, grievance or litigation. We rely on the lawful basis of our Legitimate Interests for this purpose, and the additional condition of legal claims.