1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of your personal data in connection with the ticket purchase is the organizer:

basti@lehmannclub.de
represented by
,
E-mail: basti@lehmannclub.de

2. What Data We Process

As part of the ticket purchase, we process the following personal data: first and last name, e-mail address, order data (purchased tickets, ticket category, price, time of order), and payment information required to process the payment. Payment data (e.g., credit card or account details) is processed exclusively by the payment service provider and is not stored by us.

3. Purposes and Legal Bases of Processing

We process your data to establish, perform, and settle the ticket purchase contract, including sending the tickets and order confirmation as well as admission control at the event. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).

Where we are legally obliged to retain certain data (e.g., for tax and commercial law reasons), the processing is based on Art. 6 (1) (c) GDPR (legal obligation).

4. Recipients and Processors

To provide the ticket shop and process the payment, we use carefully selected service providers acting on our behalf:

Technical platform and processor:
EventSync UG (haftungsbeschränkt)
Dresdner Str. 12, 69181 Leimen, Deutschland
E-mail: hello@eventsync.io

Payment processing: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe processes the payment data as an independent controller or processor to carry out the payment.

Your data will only be transmitted to other third parties insofar as this is necessary for the performance of the contract or required by law.

5. Storage Period

We store your personal data only for as long as is necessary for the stated purposes. After the contract has been fully settled, the data will be deleted unless statutory retention obligations (in particular commercial and tax law periods of up to ten years) apply.

6. Your Rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR). You may also object to processing based on a legitimate interest in accordance with Art. 21 GDPR.

To exercise your rights, you can contact the controller named above at any time (e-mail: basti@lehmannclub.de).

7. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work, or place of the alleged infringement.

8. Notice on the EventSync Platform

The ticket shop is technically operated via the EventSync.io platform. EventSync acts as a processor within the meaning of Art. 28 GDPR exclusively on the instructions of the organizer. EventSync is not the organizer and not the contractual partner of ticket buyers. Further information on processing by EventSync can be found at www.eventsync.io.