Privacy - valid version till 24th May 2018

INFORMATION ON PERSONAL DATA TREATMENT according to the art. 13 of the Legislative Decree N. 196 dated 30th June 2003 (Code regarding personal data protection)

Dear Mr./Ms.,

The present information is made available for the website 'www.ticketone.it' (hereinafter, the 'Website') owned and managed by the company TicketOne S.p.A., having registered office in Milan, Via Vittor Pisani n. 19 (hereinafter, 'TicketOne' or the 'Company'), as Holder of the treatment, and not also for other websites eventually consulted by the user through link. The information is addressed to all parties who interact with the pages of the Website, both those who use the Website without effecting any registration, and those who, at the end of an appropriate procedure, register themselves to the Website and use the online services carried out through it. The present information is provided according to the art. 13 of the Legislative Decree 196/2003, as well as according to the Recommendation n. 2/2001 that the European Authorities for the Personal Data Protection, convened in the Group established by the art. 29 of the Directive n. 95/46/CE, have adopted on 17th May 2001 in order to individuate some minimum requirements for the on line collection of personal data.

Registration

The information and the data requested in case of registration will be used both to allow You to access to the reserved area of the Website and use the on line services offered by TicketOne. The personal data of the registered users will be treated for the purposes and according to the modalities of the present information.

Orders

In case an order is effected, some data is registered, e.g. the IP address the transaction comes from, the time of the request, the type of browser used, etc....... This data might be used in order to verify the responsibility in case of hypothetical IT crimes to the Website and/or third parties, upon initiative of the inquiring authorities in charge by law.

Marketing

Subject to your agreement, TicketOne may treat personal data provided by Your side for the shipment of advertising material on the products and/or services offered by TicketOne or by third parties.

Profiling

Personal data provided by Your side during a purchase on the Website may be treated by TicketOne, subject to Your agreement, with the aim of profiling, that is the survey of your consuming habits through the disclosure of type and frequency of the purchases made by Your side, in order to send You advertising material on the services offered by TicketOne or by third parties having specific interest for You.

Soft spamming

TicketOne may use, for the purpose of providing direct ticketing services through the Website, email contact information provided by Your side during a purchase session on the Website, also without Your agreement, according to the art.130, paragraph 4, of the Privacy Code, only if the service provided is comparable to those subject of the previous sale (i.e. soft spamming). You may however oppose to this treatment at any time by sending a request to TicketOne as indicated in the art. 7 that follows.

Cookie

Various software solutions are used to optimise the online services. These solutions allow website usage to be analysed and valuable information about the needs of users to be gathered, so that the user-friendliness and quality of the online services can be continuously enhanced. In order to perform such analyses, aggregated and anonymous statistical data related to the browser used, the number of visits/page impressions and the browsing behaviour of the respective visitor are captured. The shortened IP address of the visitor may also be viewed in the course of data gathering and processing.

The data are analysed for the following purposes, in particular:
– counting the number of visitors
– tracking those areas of the website that are particularly attractive for the respective visitor
– analysing where visitors are from, in order to optimise the services provided
– adapting recommendations to specific target groups

This process involves the use of cookies. Cookies are small text files that websites visited by users send to their terminals, where they are stored before being transmitted back to the same sites on their next visit. For further information about definition of cookie, terms of use and opting out, please check our cookie policy .

Please find below the list of the main software solutions deployed (by clicking the respective provider below, the user will be redirected to the opt out option):

• AT Internet www.xiti.com/it/optout.aspx
• Criteo www.criteo.com/it/privacy/
• Google www.google.com/settings/ads
• Facebook www.youronlinechoices.com/it/le-tue-scelte
• Il Sole 24 Ore du.ilsole24ore.com/utenti/privacyfiles/informativa_cookies.html
• CTS EVENTIM AG & Co. KGaA https://isi-tracking.eventim.com/optout_itt?language=it
• Google Analytics https://tools.google.com/dlpage/gaoptout?hl=it
• Tag Commander www.commandersact.com/it/
• Twitter https://twitter.com/personalization

Please note: Opting out is done using a cookie. If that cookie is deleted, the opt-out option must be reactivated.

To check further types of software solutions provided on the website, and related opt out options, we invite you to read our cookie policy .

INFORMATION FOR THE TREATMENT OF THE PERSONAL DATA according to the art. 13 of the Legislative Decree 196/2003

The registration to the Website owned and managed by TicketOne and the eventual subsequent use of the services rendered by TicketOne through the Website, including the reservation, purchase, issuing and ticket shipment (so-called 'ticketing service') and the information service on the events on sale, the sale opening dates and further information on such events (so-called 'newsletter service') will involve the treatment of personal data regarding You.
Therefore, according to the prescriptions of the Legislative Decree 30/06/2003 n. 196 (so-called 'Privacy Code'), herewith we intend to inform You that the Company, as owner of the Website and Data Controller, will treat the personal data regarding You under the following conditions.

Art. 1. Aim of the treatment

The treatment of the personal data (including their registration in the data sheets of the Company) is aimed exclusively at reaching the following purposes:

a) granting the registration to the Website and the correct provision of the services requested to TicketOne through the Website, including the ticketing service and the newsletter service, and, therefore, filing in a correct and punctual way any obligations arising from the relevant contractual relationships entered into with You, as well as the obligations arising from law or regulations in place, in particular in the fiscal area, as well as in the public safety area;
b) for administration and accounting purposes, including the eventual transmission by e-mail of commercial invoices by TicketOne and/or companies associated to it in the provision of the ticketing service;
c.1) for the performing of market researches, also aimed to assess the consumers’ satisfaction level, and the shipment of advertising material on the products and/or services offered by TicketOne and/or by third parties, through computerized systems, such as e-mail, fax, sms or MMS, or through traditional methods (e.g.: mail or telephone) (so-called marketing purposes);
c.2) in order to allow the direct offer of similar products and services by TicketOne (i.e. soft spamming), limited to the email contact information You provided at the moment of the purchase on the website, unless You oppose to this treatment;
d) for the elaboration of Your commercial profile through the survey and processing of the Your choices and buying behavior on the Website, aimed both to monitor the satisfaction level of the customers in order to ensure a better satisfaction of their needs, and to send to You advertising material on TicketOne's and/or third parties’ products and/or services, having specific interest for You, through computerized systems, such as e-mail, fax, sms or MMS, or by traditional means (e.g. mail or telephone) (so-called profiling purposes.)

Art. 2. Provision of data and consequences in case of missed agreement to the treatment

The provision of the data for the purposes indicated at points a) and b) of Article 1 above is purely optional. However, since the processing for such purposes is necessary in order to allow the registration to the Website and to consent to TicketOne to carry out the services offered through the Website, including the ticketing service and the newsletter service, Your possible denial to give such data will prevent the registration to the Website and the use of the online services offered by TicketOne through the Webiste.
With reference to the purposes of the treatment indicated at points c.1) and d) of Article 1 mentioned before (marketing purposes and profiling purposes), we point out that the agreement to the treatment of Your data is purely optional. The lack of consent will not determine any consequences with respect to the registration to the Website and to the use of the services offered by TicketOne through the Website, including the opportunity to purchase through the Website, and will only determine the consequences described below.
The missed agreement to the treatment of the data for the purposes indicated at point c.1) of Article 1 above will involve the impossibility for You to receive advertising material related to the products and/or services offered by TicketOne and/or third parties, as well as the impossibility for the Company to carry out market researches, also aimed to assess the customers’ satisfaction level .
The missed agreement to the treatment of Your data for the purposes indicated at point d) of Article 1 above will involve the impossibility for our Company to elaborate Your commercial profile, through the survey of Your choices and buying behavior on the Website (also aimed to granting a major satisfaction of the needs of the customers and the continuous improvement of the services offered), as well as to send You advertising material on products and/or services of TicketOne and/or third parties, of Your specific interest.
Stated as above, it is intended that, in case of not acceptance by Your side of the agreement to the treatment of Your personal data for the purposes set forth at points c.1) and d) of Article 1 above, our Company will anyway be able to use Your data only in order to correctly meet the obligations arising from the laws in force as well as to comply to the obligations arising from the contractual relationship between You and the Company, as indicated at points a) and b) of the Article 1 above.
In any case, You will be able to revoke the consent possibly given for the purposes set forth at points c.1) and d) of Article 1 above (marketing purposes and profiling purposes) at any moment, by accessing to 'My TicketOne' section, 'My Data' area of the Website or through the 'Privacy Settings' box, available during the purchase procedure. Moreover, with respect to the purpose set forth at point c.2) of Article 1 above (so-called soft-spam), we remind You that You may object to the processing of Your data, by sending an email to the following address: privacy@ticketone.it.<br/><br/> Art. 3. Treatment modality

The treatment of the personal data regarding You will basically be effected through electronic or in any case computerized ways, according to the modalities and with the instruments eligible to grant the safety and the confidentiality of the data, according to the prescriptions of the Legislative Decree 196/2003.

In particular, there will be the adoption of all the technical, IT, organizational, logistical and safety procedural measures, as prescribed by the Legislative Decree 196/2003, so that the minimum protection level of the data prescribed by law is granted, allowing the access only to the persons in charge of the treatment by the Holder of by the Responsible persons appointed by the Holder. The information received and the treatment modalities will be coherent and not exceeding compared to the kind of services rendered.

The data will also be managed and protected in an environment whose access is under constant control.

Art. 4. Data communication and disclosure

Your data can be communicated:
a) to all those parties (including the Public Authorities) having access to the personal data according to by-law or administrative provisions;
b) to third companies whose services are proposed or sold through the TicketOne Website (and, in particular, to companies or promoters of concerts, shows, sport or any other events whose tickets are sold through the Website);
c) to companies or third parties in charge of printing, fulfilment, shipping or delivering of the tickets bought through the Website;
d) to postal offices, couriers or forwarding agents in charge of delivering the products bought through the Website;
e) to banking institution and to companies managing the national or international payment circuits the on line payments of the products bought through the Website are effected through;
f) to companies, consultants or professionals eventually in charge of the set-up, maintenance, updating and, in general, management of the hardware and software either belonging to TicketOne or the Company provides for its services through;
g) to companies or Internet providers in charge of sending documentation of information material; h) to companies in charge of elaborating and/or sending advertising and information material on behalf of our Company;
i) to other companies belonging to our Group, having corporate address in Italy or abroad, within the European Union, that may treat them only as external responsible of the treatment of the personal data on behalf of TicketOne for the purposes indicated at the art. 1;
j) to all those public and/or private parties, physical and/or juridical persons (legal, administration and tax firms, Marshals, Chambers of Commerce, Law Chambers and Offices, etc...), should the communication be necessary of functional to the correct filing of the contractual obligations arose, as well as of the by-law obligations.

The data regarding you will only be disclosed in an anonymous and aggregated ways for statistical or research purpose.

Art. 5. Holder and Responsible for the Treatment of the personal data
The Holder of the treatment of the personal data is the company TicketOne S.p.A., having its registered office in Milano, Via Vittor Pisani n. 19.

All instances and requests related to the treatment of the personal data regarding You can be addressed to the Holder, to the following addresses:
a) TicketOne S.p.A., via Vittor Pisani n. 19 - Milano (Italia);
b) e-mail address: privacy@ticketone.it;
c) fax number: (+39) 02.3922.670.

The list of the data processors appointed by the Data Controller is available at the Company's headquarters.

Art. 6. Archive of the personal data

The personal data regarding you will be archived only for the time necessary to grant the correct provision of the services offered by our Company.
In case of cancellation, exclusion or revocation of the enablement for missed use of Your account on the Website, Your data will be archived for administration purposes for a period not higher than a quarter, with the exclusion of eventual specific by-law obligations regarding the archive of accounting documentation or for public safety purposes. In such cases, there will be the guarantee of the automatic cancellation of the data also by third parties the data were eventually communicated to.
In any case, it is intended that Your personal data is archived and treated for the purposes set forth at points c.1) (marketing purposes) and d) (profiling purposes) of Article 1 above for the period of time allowed by law and by the prescriptions of the Data Protection Authority, and thus for a 24-month period as of the consent for marketing purposes was given and/or renewed, and for a 12-month period as of the consent for profiling purposes was given and/or renewed.
Expired this period, Your data will be transformed into an anonymous form, in order not to permit – even indirectly – to identify You. More in particular, please be aware that:

- 24 months after the consent for marketing purposes was given and/or renewed, Your personal data shall no more be processed for the purpose set forth at point c.1) of Article 1 above; and

- 12 months after the consent for profiling purposes was given and/or renewed, Your personal data shall no more be processed for the purpose set forth at point d) of Article 1 above, save that, should You newly give Your consent for such purpose, Your orders history data – as previously obtained and stored for the purposes set forth at points a) and b) of Article 1 above - may be used again for the profiling purpose set forth at point d) of Article 1 above.

Consent Renewal

Moreover, please pay attention to the fact that, during the purchase procedure, You may modify Your preferences on personal data processing, through the 'Privacy Settings' box, by giving the consent to the data processing for marketing and/or profiling purposes, if not already given, or by revoking the previously given consent, if any.

Please remember that, should You not proceed to modify the preferences on data processing indicated in the above-mentioned box, by clicking on the 'Save and proceed with payment' button, you will confirm such preferences. As a consequence, in the event that You have already given Your consent to the processing of Your data for marketing and/or profiling purposes, You will renew the consent previously given, to all effects, including the storage duration.

Art. 7. Access right to the personal data

According to the art. 7 of the Legislative Decree 196/2003, You have the right – among others - to:
a) obtain the confirmation about the existence or not of personal data regarding You and its communication in a clear form;
b) obtain, by the Holder of the treatment:
- indications on the origin of the personal data, on the treatment purposes and ways, on the logic applied in case of treatment effected through electronic instruments;
- indication of the identification details of both the Holder of the treatment;
- indication about the parties or the party categories the data can be communicated to or that can know the data as representatives granted in the territory of the State, as responsible persons or persons in charge;
c) obtain:
- the update, adjustment or integration of the data regarding You;
- the cancellation, transformation into an anonymous form or the block of the data not treated according by-law, including the data whose conservation is necessary in relation to the purposes the data has been collected or subsequently treated for;
- the acknowledgment of the fact that the operations according to the previous points have been communicated, also regarding their content, to those parties the data is been the data is been communicated or disclosed to, except the case where this filing is impossible or involves the use of supports which are visibly disproportional compared to the right under protection;
d) oppose, wholly or partially:
- for justified reasons, to the treatment of the data regarding You, even if referred to the purpose of the collection;
- to the treatment of the personal data regarding You, stated for the purposes of commercial information or of deliver of advertising material or of direct sales or for effecting market or commercial communication researches.

The above rights can be exerted with request made without any formality to the Holder or Responsible. The request can be sent to the Holder or Responsible via letter, fax or e-mail, at the contact details indicated at Article 5 above.

TicketOne S.p.A.