Last update: 11 November 2021
Who are we and what do we do?
We are TicketSwap B.V., acting under the name TicketSwap. You can find our contact information at the bottom of this Privacy Policy. TicketSwap is a safe, convenient and fair place to buy and sell e-tickets for concerts, festivals, sports events, theatre and days out, with a focus on fraud prevention by strict checks and collaborations with organizations and partners (the Services). You can find more information about us and our Services on our Website: www.ticketswap.com (and all its subdomains for other countries) (the Website) or on the mobile application offered under the name TicketSwap (the App).
In this Privacy Policy we explain which personal data we collect through our Services, Website and App. We also explain for which purposes we use personal data, how we secure them and how long we store them. At the bottom of this Privacy Policy we explain what rights you have with regard to your personal data and how you can exercise these rights.
Privacy and relevant legislation
We care about your privacy. We comply with the new General Data Protection Regulation (GDPR), which replaced various privacy laws in European Member States as of 25 May 2018 and with the Dutch Telecommunications Act (Telecommunicatiewet, DTA). This legislation will be referred to hereinafter as the Relevant Legislation.
Personal Data
In this Privacy Policy the notion of “personal data” is understood as all the information by which you can be, directly or indirectly, identified. This definition is in accordance with the Relevant Legislation.
Which personal data do we collect and for which purposes do we use them?
We can collect various sorts of personal data of you when you use our Website, App and/or Services:
(Personal) Data | Purpose(s) |
General Information Name, date of birth, gender, city and country of residence, telephone number, email address and avatar | We use your general information to contact you in the right manner; your email address to send you information and updates about your transaction(s); Based on your (optional) consent we may also send you information about topics that might be interesting; your avatar, city and country of residence to personalize your account; your telephone number to check whether it is real and it belongs to you. When you sell tickets, the verification of your phone number (and not the number itself) will be shown on our Websites to make buying second hand tickets safer for (potential) buyers. When your ticket is sold we send a text message to your telephone number. Your date of birth and gender are used to personalize tickets through the Secure Swap service.
|
Payment Information Bank account, tokenized payment details and bank account holder name | We use |
Know Your Customer (KYC) Standard verification | We use |
Additional verification | |
Social Media Information Apple Login | We use |
Facebook app specific ID and Twitter ID | your Facebook ID, avatar, name, Facebook email address, friends and your residence to (enable you to) complete your account (optional). These "Facebook data" will be shown on our Websites and mobile apps when you sell tickets to make buying second hand tickets safer for (potential) buyers. We further use Facebook IDs for marketing purposes, as described further in this document. Your Twitter ID, username, name, location, followers count, friends count, number of status updates, security status, verification status and account creation date to complete your account. The “Twitter data” will be shown on our Websites and mobile apps when you sell tickets to make buying second hand tickets safer for (potential) buyers.
|
Google Login | Your Google ID, Google Mail. First Name, Last Name, Location, This "Google data" will be shown on our Websites and mobile apps when you sell tickets to make hand tickets safer for (potential) buyers. We further use Google Mail and Google ID for marketing purposes, as described further in this document.
|
|
Instagram | |
Electronic Identifiers IP address, cookies and pixels | We use |
Fraud Prevention Personal and technical information | We use |
Why can we process your personal data?
There are several grounds from the Relevant Legislation on the basis of which we are allowed or required to process your personal data:
Consent: For sending newsletters and direct marketing through email, push notifications and other channels we request your permission. This permission can also easily be withdrawn through the unsubscribe link in each newsletter.
Performance of the agreement: We process your general information, payment information, social information and electronic identifiers to provide our Services to you as a user.
Legal obligation: We are required to store certain general information and payment data in our records for Tax Authorities, such as invoice data, IP address, bank account details, phone number and your country of residence.
Legitimate interest: For processing general information, payment information, social information and electronic identifiers, in order to log user activities to identify and prevent unlawful use of the account and Services.
Marketing
We may send you marketing communications via email and push notifications. You are given the opportunity to opt in to marketing communications and push notifications on registration. If you change your mind and do not want to receive any marketing communications from us, you can edit your preferences in your profile or unsubscribe from emails by following the unsubscribe directions provided in the footer of each one.
Are you under the age of sixteen?
If you are younger than sixteen years, you are not allowed to register your profile on our Websites or Apps. This is because the law (GDPR) gives us strict rules on the personal data of minors.
How long do we keep the personal data?
It is our policy to store and process personal data that is essential in providing you with the best service possible. We do not store or process personal data we don’t use.
We keep the personal data as long as we need them for the purposes stated above:
Personal data in our accounting records for Tax Authorities are stored for at least 10 years after you have bought or sold on our Platform;
Personal data we process to prevent (users that have committed) fraud we store for at least 5 years after your last login.
All other personal data used within the context of your account we store for 3 years after your last login. If your account is inactive we will send you a notification after 3 years and remove your account and personal data if your account remains inactive. We will remove your personal data if you delete your account as well.
Do we share your personal data with others?
TicketSwap does not sell, trade or rent personal data to third parties. We make use of “Data Processors” however to assist us in our Services. Within this context these Data Processors receive personal data from us which they process by our order. By means of “Data Processing Agreements” we contractually obligate all the Data Processors we work with, not to process the personal data for any other purpose than as instructed by us. These Data Processors are required to follow our instructions strictly. They will, therefore, not use the personal data for their own purposes. We will verify that all our Data Processors comply with the Relevant Legislation.
We may transfer personal data outside the EU, if one of our Data Processors is established outside the EU. The personal data will only be transmitted to countries and/or parties offering an adequate level of protection which meets the European standards. Transfer of data outside the EU will always be in accordance with the Relevant Legislation (such as Article 76(1) of the Dutch Data Protection Act – replaced as per 25 May 2018 by Chapter 5 of the GDPR).
The Data Processors we use for the processing of the personal data are listed in Annex 1.
We may share generic aggregated data with our business partners and trusted affiliates. In such cases the data will be fully anonymized.
How do we protect personal data?
We protect all personal data we process from unauthorized and unlawful access, alteration, disclosure, use and destruction. For instance, we take among other things the following technical and organizational measures to protect the personal data:
Security of our network connections through Secure Socket Layer (SSL);
The (access to) data is secured with passwords and two factor authentication;
All new employees are trained about data privacy during onboarding;
Periodic training about data privacy to all employees;
Restricted access to databases containing personnel information to senior employees;
Pre-employment background screening of all employees.
Third-party websites
You can find (hyper)links on our Website which link to the websites of partners, suppliers, advertisers, sponsors, licensors or other third parties. We do not have control of the content or links which appear on these websites and we are not responsible for the practices of websites linked to or from our Website. Furthermore, these websites, including their content and links, may constantly change. These websites may have their own privacy policies, user terms and customer policy. Browsing and interaction on any other website, including websites which are linked to or from our Website, are subject to the terms and conditions and policy of such website.
Cookies
We use cookies on the Website to enhance your experience when you use our Services. A cookie is a simple small text file that can be stored on your computer, when you visit the Website. This text file identifies your browser and/or computer. When you revisit our Website, the cookie ensures, for instance, that our Website recognizes your browser or computer.
We use the following types of cookies:
Technical cookies: Technical cookies are essential to the operation of our Website. They allow you to navigate through our Website and to use the functions incorporated in it.
Analytical or statistical cookies: Analytical cookies are used to check the quality and effectiveness of the Website. For instance, we can see how many users visit the Website and which pages are visited. We use this information to improve our Website and Services.
Tracking cookies: Tracking-cookies monitor the click and surf behaviour of our visitors. By means of these cookies we can see whether and when you look at your profile and whether you click through to our Website. We may also use these cookies to show you ads based on your interests. For more information about cookie tracking used for advertisements customized to your interests and how you can opt-out to these cookies you can use Your Online Choices or Cookiebot.
If you do not want cookies to be sent to your computer, you can change this in the cookie settings of your browser. Please note that some of the functions or services of our Website may not operate, or not so well, without cookies. If you want to opt-out from tracking cookies, click here:
Amendments to this Privacy Policy
We aim at constantly improving our Website and Services. That is why from time to time we can update this Privacy Policy. If we change our Privacy Policy significantly, we will state so on our Website and App together with the reviewed Privacy Policy. We may also notify before using our services that our Privacy Policy has been updated. You need to agree to the updated Privacy Policy before you can continue to use our Website and App.
Your rights and our contact data
As laid down in the Relevant Legislation, you have the right to:
Access a copy of the personal data we process of yours. You can find a copy of the personal information we process of you here;
Ask us to rectify, review or remove your personal data from our systems;
Object to our processing of your personal data;
File a complaint with your National Data Protection Authority, if you believe that we process your personal data unlawfully. See here a list of all National Data Protection Authorities in the European Union.
Please note that you can also edit or delete your personal data by logging in to your personal account.
If you want to exercise your aforementioned rights or when you have any questions, comments or concerns regarding the manner in which we handle your personal data, please contact our Data Protection Officer through the contact data below. We will do our best to respond to any of the above requests within 30 days.
TICKETSWAP B.V.,
acting under the name TicketSwap
Rokin 75
1012KL Amsterdam
The Netherlands
No. Chamber of Trade and Industry: 59084952
VAT number: NL8533.10488.B01
Telephone: +31 20 308 06 76
E-mail: info@ticketswap.com
The Data Processors we use for the processing of personal data in order to deliver our Services are listed hereunder:
Processor | Purpose | Location | Explanation |
|
Aircall | Support | France | We use Aircall to process incoming and outgoing calls. To correctly do so, it stores information such as phone numbers and names registered with TicketSwap. When using Aircall, their privacy policy applies. |
Appsflyer | Mobile marketing analytics and attribution platform | California, US | AppsFlyer is a mobile attribution & marketing analytics platform, helping Ticketswap to make better decisions for mobile application marketing and targeting of the users. AppsFlyer may share personal data with other tools provided by their own integrations. AppsFlyer’s privacy policy can be found here. |
Awin Braze | Affiliate Marketing Marketing through email and push notifications | Berlin, Germany New York, US | Awin is the affiliate marketing platform where the partners can promote the platform. Awin’s Online Behavioural Advertising (also known as OBA or targeted advertising), is a technology that allows the display of advertisements that are tailored to your preferences and therefore more interesting for you. Based on the previous anonymous surfing behaviour of Internet users, their interests are grouped into user profiles. More information Our legitimate interest in using this service is optimizing our marketing measures. Braze may use the data of the recipient in aggregated format, i.e. without reference to a user, in order to optimize or improve its own services, such as technically optimizing the sending and the display of the newsletter or for statistical purposes, for example. Braze’s privacy policy can be found here. |
Facebook | Marketing/Analytics | California, US | For Facebook we use the services of Facebook Custom Audience (see Facebook Business for more information). This means that the Facebook Data you shared with us, will be sent (back) to Facebook in a hashed format. Facebook is contractually obliged not to use said data for any other purpose than to render its audience targeting services. See here for the relevant terms. |
Firebase | Marketing/Analytics | California, US | Google Analytics for Firebase or Firebase Analytics is an analytics service provided by Google Inc. (“Google”). In order to understand Google’s use of personal data, consult Google’s partner policy. Firebase Analytics may share personal data with other tools provided by Firebase, such as Crash Reporting, Authentication, Remote Config or Notifications. This application uses identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for iOS, respectively) and technologies similar to cookies to run the Firebase Analytics service. Users may opt-out of certain Firebase features through applicable device settings, such as the device advertising settings for mobile phones or by following the instructions in other Firebase related sections of this privacy policy, if available. Personal data collected: cookies, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example) and usage data. See here for the details. Moreover; We’re also using Firebase for push notifications. We send notifications to drive user re-engagement and retention to our mobile apps. |
Google Google Ads | Marketing/Analytics | California, US | Google Ads is an online advertising service developed by Google where advertisers pay to display brief advertising copy, product listings, and video content within the Google ad network to web users (Google Display Network, Google Search, YouTube etc.). These companies also use automated technologies to collect information when you click on our ads, which helps track and manage the effectiveness of our marketing efforts (such as: remarketing/retargeting/purposes). You may opt out of the automated collection of information by third-party ad networks for the purpose of delivering advertisements tailored to your interests. See here for the details and relevant terms. |
Google Analytics | Marketing/Analytics | California, US | Google Analytics is a web analysis service provided by Google. Google utilizes the personal data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services. Google may use the personal data collected to contextualize and personalize the ads of its own advertising network. Personal data collected are cookies and usage data. See here for the details. |
Google Login API | Marketing | California, US | A Google Account is a user account that is required for access, authentication and authorization to certain online Google services, including Gmail and similar products. It is a public API and service provided by Google Inc. Google utilizes the personal data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services. We use Google Login API for the fast registration process. |
Google Optimize | Marketing/Analytics | California, US | Google Optimize (Optimize) is an experimentation tool developed by Google. Optimize utilizes Google Analytics cookies to target content variants to a user and a content experiment cookie to determine a user’s participation in an experiment. We are using this tool to record and track visitors’ involvement in a website experiment such as an A/B Test where half of our website users see one webpage, and the other half see another custom variant. These tests help us improve the user experience. |
Google Tag Manager | Marketing/Analytics | California, US | Google Tag Manager is a tag management system created by Google to manage JavaScript and HTML tags used for tracking and analytics on websites. We use this service to load scripts into our webpages. These scripts can have tracking or advertising purposes which are also mentioned in this Privacy Policy. |
Hotjar | Marketing/Analytics | Malta, EU | Hotjar is a tool that reveals the online behavior and voice of our users. By combining analysis and feedback tools, Hotjar gives us an idea of how to improve our platform. For more information refer to the Hotjar privacy policy. |
Hubspot | Marketing | Cambridge, United States | HubSpot is an American developer and marketer of software products for inbound marketing, sales, and customer service. We use Hubspot in order to collect leads through their Marketing features. More information about privacy policy |
Instagram | Marketing | California, US | Instagram is a photo and video-sharing social networking service owned by Facebook, Inc. The user can share any listing or anything on Instagram based on the feature that is offered on the platform. For public accounts anyone on Instagram can see the user story, while for private accounts only approved followers can see stories. Whenever we use the services of Instagram the Instagram privacy policy applies. For further Information refer to this thread. |
Intercom | Support | - | We use Intercom as our customer support tool to handle all our customer’s contacts through all the support channels. Whenever we use the services of Intercom the Intercom privacy policy applies. |
Leadpages | Landing page creation | Minneapolis, United States | Leadpages is the landing page creation platform where certain features and functionalities of the Services may allow Leadpages to collect information from your current or potential customers, website visitors or end-users. https://www.leadpages.com/privacy |
Mailchimp | Mass Messaging | Georgia, US | We use Mailchimp to send promotional emails to our users. We share your name and email address with Mailchimp. Whenever we use the services of Mailchimp the Mailchimp privacy policy applies. |
|
MessageBird | Mass Messaging | The Netherlands, EU | We use MessageBird to send text messages (SMS), emails and Whatsapp messages to our users. We share your phone number, email address and message content with MessageBird. The message content could contain personal information to directly address you (e.g. name). Whenever we use the services of MessageBird the MessageBird privacy policy applies. Is established in the EU and thus needs to comply with the Relevant Legislation. |
Meltwater | Marketing | The Netherlands, EU | Meltwater is a media monitoring tool that we are using to track media coverage, and identify media contacts who may be interested in covering TicketSwap in the press. Meltwater has a database of media contacts which they make publicly available, and we export this information from Meltwater, and storing it in PR.Co (another software mentioned later in this doc). https://www.meltwater.cn/privacy/services |
Microsoft Ads | Marketing/Analytics | California, US | Microsoft (Bing) ads an online advertising service developed by Microsoft where advertisers pay to display brief advertising copy, product listings, within the Bing ad network to web users (Bing Search). These companies also use automated technologies to collect information when you click on our ads, which helps track and manage the effectiveness of our marketing efforts (such as: remarketing/retargeting purposes). You may opt out of the automated collection of information by third-party ad networks for the purpose of delivering advertisements tailored to your interests. See here for the details and relevant terms. |
Mixpanel | Marketing/Analytics | California, US | Mixpanel is a business analytics service company. It tracks user interactions with web and mobile applications and provides tools for targeted communication with them. Its tool-set contains in-app A/B tests and user survey forms. Data collected is used to build custom reports and measure user engagement and retention. Ticketswap uses Mixpanel for better reporting and user analysis. Privacy Policy of Mixpanel |
Optimizely | Marketing/ Analytics | New York, United States | Optimizely is known for content, commerce and optimization with our Digital Experience Platform (DXP). Millions of experiences are served with the platform every single day, helping organizations grow exponentially online. We use Optimizely for Product experimentation in order to give a better experience to fans on the platform.More information about privacy policy |
PR.Co | Marketing | The Netherlands, EU | PR.Co is a software used to create newsrooms for companies. You can publish news announcements, as well as target both staff and specific journalists by sending bespoke outreach releases and newsletters, both for employee advocacy and public relations. Within PR.Co, we have a database of media contacts identified who might be interested in receiving news from TicketSwap, as well as media personnel who have signed up via our subscribe form. https://www.pr.co/privacy-policy |
|
|
Secureswap | Mass Messaging | The Netherlands, EU | For our SecureSwap service we have partnered up with various ticket providers. We have entered into data processing agreements with those ticket providers, as to safeguard your personal data as much as possible. Refer to here for the full list of partnered ticket providers and organizers. Is established in the EU and thus needs to comply with the Relevant Legislation. |
Segment | Marketing/Analytics | California, US | Segment is a tool which collects customer data and send it to our analytics (e.g. Google Analytics, Firebase) and marketing (e.g. Google Adwords, Facebook Pixel etc.) stack. See here for the details. |
|
Stripe | Payments | California, US | In performing its services, Stripe acts as a Data Processor for TicketSwap. As a payment services provider, Stripe has its own obligations with regard to your personal data. Stripe can also be regarded as a Data Controller with regard to your personal data. For any data processing operations Stripe performs as a data controller, Stripe’s privacy policy applies. When processing payments or payouts we may use Stripe to process payments made to us and to other users. In such an event your payment information is transmitted to Stripe via an encrypted connection. Stripe uses and processes your payment information, in accordance with Stripe’s privacy policy. We only store tokenized data in connection with the processing of payments (incl. last 4 digits credit card number) ourselves. |
TikTok Ads | Marketing/Analytics | California, US | TikTok Ads Ads is an online advertising service developed by TikTok where advertisers pay to display their advertising within the TikTok application. These companies also use automated technologies to collect information when you tap on our ads, which helps track and manage the effectiveness of our marketing efforts (such as: remarketing/retargeting/purposes). You may opt out of the automated collection of information by third-party ad networks for the purpose of delivering advertisements tailored to your interests. See here for the details and relevant terms. |
Twilio Wise | Mass Messaging Payouts | California, US United Kingdom, EU | We use Twilio to send text messages (SMS) messages to our users. We share your phone number and message content with Twilio. The message content could contain personal information to directly address you (e.g. name). Whenever we use the services of Twilio the Twilio privacy policy applies. Wise processes payouts to Sellers in a selected number of countries*. We send your bank account holder name, IBAN and date of birth to Wise to execute the payout. Whenever you are receiving payouts as a Seller in the aforementioned countries the Wise privacy policy applies. *refer to FAQ item about payouts. |
|
YouTube | Video content | California, US | We use YouTube API Services. By using our Online Services, you therefore agree to be bound by the Google Privacy Policy. We don’t share any personal information. |