Castiglione della Pescaia
Torre del Lago Puccini
Las Palmas de Gran Canaria
Lloret de Mar
Palma de Mallorca
Torre del Mar
Last update: May 22nd, 2018
We participate in and comply with the EU-U.S. Privacy Shield Framework and retention of Personal Data(defined in Section 2.1) from European Economic Area("EEA") member countries.
1.1 Xceed Services
Welcome to Xceed! We are a ticketing and registration platform dedicated to bringing the world together through live experiences. Through our platform, mobile apps and services, we enable people all over the world to create, discover, share and register for events. Xceed's products, features and offerings are available(a) online through various Xceed properties including without limitation, Xceed("Site(s)");(b) off platform, including without limitation, entry management, sponsorship and marketing or distribution services; and(c) through mobile applications, webpages, application programming interfaces, and subdomains("Applications").(a),(b), and(c) are collectively referred to as"Xceed Properties" or our"Services".
1.2 Who's Who
When you use or interact with us through the Services, we may collect Personal Data. Sometimes this will be on our own behalf and other times this will be on behalf of an Organizer using our Services to run an event. This is an important distinction for EU data protection law purposes and is explained in more detail in Section 16 below.
3.1 All Users
As an Organizer we will collect additional Personal Data from you. Information you provide to us: In some cases, we may collect your credit card information(e.g., your credit card number and expiration date, billing address, etc.), some of which may constitute Personal Data, to secure certain payments. In addition, if you use our payment processing services, we will collect financial information from you(e.g., your bank account information or an address to send checks) as necessary to facilitate payments and information required for tax purposes(e.g., your taxpayer identification number). Information we obtain from other sources: We may also collect or receive Personal Data from third party sources, such as third party websites, your bank, our payment processing partners and credit reporting agencies.
As a Consumer we will collect additional Personal Data from you, sometimes for our own purposes and other times on behalf of an Organizer(see Section 16 below for more information). Information you provide via Xceed Properties or Applications: If you register for a paid event, you will provide financial information(e.g., your credit card number and expiration date, billing address, etc.) some of which may constitute Personal Data. In addition, Organizers can set up event registration pages to collect virtually any information from Consumers in connection with registration for an Organizer's event listed on the Services. Xceed does not control an Organizer's registration process nor the Personal Data that they collect. Personal Data collected on behalf of Organizers is provided to the Organizer of the applicable event in accordance with"How We Disclose and Transfer Your Personal Data: Organizers" below. Information we obtain from other sources: We may also collect or receive Personal Data from third party sources, such as Organizers, other Consumers, social media or other third party integrations, your credit card issuing bank, our payment processing partners or other third parties.
4.1 Specific Reason
If you provide Personal Data for a certain purpose, we may use the Personal Data in connection with the purpose for which it was provided. For instance, if you contact us by e-mail, we will use the Personal Data you provide to answer your question or resolve your problem and will respond to the email address from which the contact came.
4.2 Access and Use
If you provide Personal Data in order to obtain access to or use of the Services or any functionality thereof, we will use your Personal Data to provide you with access to or use of the Services or functionality and to analyze your use of such Services or functionality. For instance, if you supply Personal Data relating to your identity or qualifications to use certain portions of the Services, we will use that information to make a decision as to granting you access to use such Services and to assess your ongoing qualification to use such Services.
4.3 Internal Business Purposes
We may use your Personal Data for internal business purposes, including without limitation, to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business.
4.4 Xceed Marketing Communications
Where it is in accordance with your marketing preferences, we may use your Personal Data to contact you in the future for our marketing and advertising purposes, including without limitation, to inform you about services or events we believe might be of interest to you, to develop promotional or marketing materials and provide those materials to you, and to display content and advertising on or off the Services that we believe might be of interest to you. See"Opt Out from Electronic Communications" below on how to opt out of Xceed Marketing Communications.
4.5 Organizer Emails
We allow Organizers to use our email tools to contact Consumers for their current and past events, so you may receive emails from our system that originate with such Organizers and that we send on their behalf. If you registered for an event on the Services, your email address is available to that Organizer. However, Organizers may also import the email addresses they have from external sources and send communications through the Services to those email addresses, and we will deliver those communications to those email addresses on the Organizer's behalf. The Organizer and not Xceed is responsible for sending these emails. See"Opt Out from Electronic Communications" below on how to opt out of Organizer initiated communications.
4.6 Other Purposes
4.7 Aggregated Personal Data
This is where you agree to cover Xceed if you use the Service in a way at causes Xceed to be the subject of a legal matter, or to face other claims or expenses.
We reserve the possibility and the right to sell your Personal Data to third parties, including third party advertisers. There are certain circumstances in which we may disclose, transfer or share your Personal Data with certain third parties without further notice to you, as set forth below.
5.2 Business Transfers
5.3 Parent Companies, Subsidiaries and Affiliates
5.4 Agents, Consultants and Service Providers
We may share your Personal Data with our contractors and service providers who process Personal Data on behalf of Xceed to perform certain business-related functions. These companies include our marketing agencies, database service providers, backup and disaster recovery service providers, email service providers and others. When we engage another company to perform such functions, we may provide them with information, including Personal Data, in connection with their performance of such functions.
When you purchase tickets to, register for or donate to an event through the event page, or through a related fundraising page on the Services, we provide the Personal Data entered on the applicable event or related fundraising page to the Organizers of such event or related fundraising page. For fundraising pages, we may provide your Personal Data both to the Organizer charity of the fundraising page and the Organizer of the event to which the fundraising page is linked. In some instances, an Organizer may appoint a third party, which may or may not be affiliated with the Organizer, to create an event or fundraising page on its behalf(we call these third parties("Third Party Organizers"). For example, and without limitation, a concert venue(the Organizer, in this case) may allow third party promoters or production companies(the Third Party Organizers) to create events that will be hosted at the Organizer's venue using its Xceed account. In that case, we may provide your Personal Data to the Third Party Organizers on behalf of the Organizers. We are not responsible for the actions of these Organizers, or their Third Party Organizers, with respect to your Personal Data. It is important that you review the applicable policies of the Organizers, and if applicable and available, their appointed Third Party Organizers, of an event(and the related fundraising page, if applicable) before providing Personal Data or other information in connection with that event or related fundraising page. Similarly, if you are a member of an Organizer's organization within Xceed, your Personal Data will be available to the Organizer and shared with those Third Party Organizers granted permission by the Organizer to view all members of the Organizer's organization.
5.6 Facebook and Other Third Party Connections
5.7 Legal Requirements
We may disclose your Personal Data if required to do so by law in order to(for example) respond to a subpoena or request from law enforcement, a court or a government agency(including in response to public authorities to meet national security or law enforcement requirements), or in the good faith belief that such action is necessary to(a) comply with a legal obligation,(b) protect or defend our rights, interests or property or that of third parties,(c) prevent or investigate possible wrongdoing in connection with the Services,(d) act in urgent circumstances to protect the personal safety of Users of the Services or the public, or(e) protect against legal liability.
You can request access to some of your Personal Data being stored by us. You can also ask us to correct, update or delete any inaccurate Personal Data that we process about them. If you are a registered User, you can exercise these rights by logging in and visiting the My Account page. Both registered and unregistered Users may also exercise these rights by contacting us directly by email or at the address specified below. If a Consumer initiates a data deletion request, Xceed is authorized to delete or anonymize Personal Data of the requesting Consumer from the Services even if that means removing its availability to the Organizer through the Services. However, if you are a Consumer, you understand that even if you Xceed deletes or anonymizes your Personal Data upon your request or pursuant to this Policy, your Personal Data may still be available in the Organizer's own databases if transmitted to the Organizer prior to Xceed receiving or taking action on any deletion or anonymization activity. We will consider and respond to all requests in accordance with applicable law.
We may retain your Personal Data as long as you are registered to use the Services. You may close your account by contacting us. However, we may retain Personal Data for an additional period as is permitted or required under applicable laws. Even if we delete your Personal Data it may persist on backup or archival media for an additional period of time for legal, tax or regulatory reasons or for legitimate and lawful business purposes.
You have several choices available when it comes to your Personal Data:
10.1 Limit the Personal Data You Provide
You can browse the Services without providing any Personal Data(other than Automatic Data to the extent it is considered Personal Data under applicable laws) or with limiting the Personal Data you provide. If you choose not to provide any Personal Data or limit the Personal Data you provide, you may not be able to use certain functionality of the Services. For instance, in order to buy tickets as an Consumer, your name and email address will be required by the Organizer.
10.2 Opt Out from Electronic Communications
10.3 Do Not Track
We currently do not participate in any"Do Not Track" frameworks that would allow us to respond to signals or other mechanisms from you regarding the collection of your Personal Data.
11.1 Personal Data Provided to Others
11.2 Third Party Links
If you are visiting the Services from outside the United States, please be aware that you are sending information(including Personal Data) to Ireland where our servers are located. EU - US Privacy Shield For Personal Data we receive from the EEA, Xceed srl has certified its compliance to the EU-US Privacy Shield regarding the collection, use, and retention of personal data from the European Union countries. We have certified that we adhere to the Privacy Shield principles of Notice, Choice, Accountability for Onward Transfers, Security, Data Integrity & Purpose Limitation, Access and Recourse, Enforcement & Liability when processing Personal Data from the EEA in the United States.
If you have a complaint about Xceed's privacy practices you should write to us at: Xceed S.r.l. P. IVA: IT03373311202 Via Felice Casati 1/A Milano(MI), 20124 or by email. We will take reasonable steps to work with you to attempt to resolve your complaint.
The EU General Data Protection Regulation(GDPR) In May 2018, a new data privacy law known as the EU General Data Protection Regulation(or the"GDPR") becomes effective. The GDPR requires Xceed and Organizers using the Service to provide Users with more information about the processing of their Personal Data. Here is what you need to know: Legal grounds for processing your Personal Data The GDPR requires us to tell you about the legal ground we're relying on to process any Personal Data about you. The legal grounds for us processing your Personal Data for the purposes set out in Section 4 above will typically be because: • you provided your consent; • it is necessary for our contractual relationship; • the processing is necessary for us to comply with our legal or regulatory obligations; and/or • the processing is in our legitimate interest as an event organising and ticketing platform(for example, to protect the security and integrity of our systems and to provide you with customer service, etc.).
16.1 Transfers of Personal Data
As Xceed is a global company, we may need to transfer your Personal Data outside of the country from which it was originally provided. This may be intra-group or to third parties that we work with who may be located in jurisdictions outside the EEA, Switzerland and the UK which have no data protection laws or laws that are less strict compared with those in Europe. Whenever we transfer Personal Data outside of the EEA, Switzerland or the UK, we take legally required steps to make sure that appropriate safeguards are in place to protect your Personal Data. For example, Xceed, Inc is Privacy Shield certified which means that it self-certifies to protect Personal Data from the EEA, Switzerland and the UK in accordance with established data privacy principles. Feel free to contact us as set forth in Section 15 for more information about the safeguards we have put in place to protect your Personal Data and privacy rights in these circumstances.
16.2 Personal Data retention
We retain your Personal Data for as long as necessary to provide you with our Services, or for other important purposes such as complying with legal obligations, resolving disputes, and enforcing our agreements. If you have an account with us, we will typically retain your Personal Data for a period of 90 days after you have requested that your account is closed or if it's been inactive for 7 years.
16.3 Your rights
Data protection law provides you with rights in respect of Personal Data that we hold about you, including the right to request a copy of the Personal Data, request that we rectify, restrict or delete your Personal Data, object to profiling and unsubscribe from marketing communications. For the most part, you can you can exercise these rights by logging in and visiting the My Account page or changing the"cookie settings" in your browser(see our Cookie Statement for more information). If you can't find what you're looking for in the My Account page, please contact us using the contact information set out in Section 15 above. Please note that requests to exercise data protection rights will be assessed by us on a case-by-case basis. There may be circumstances where we are not legally required to comply with your request because of the laws in your jurisdiction or because of exemptions provided for in data protection legislation. If you have a complaint about how we handle your Personal Data, please get in touch with us as set forth in Section 15 to explain. If you are not happy with how we have attempted to resolve your complaint, you may contact the relevant data protection authority.
16.4 Xceed as a data controller and a data processor
EU data protection law makes a distinction between organizations that process Personal Data for their own purposes(known as"data controllers") and organizations that process personal data on behalf of other organizations(known as"data processors"). If you have a question or complaint about how your Personal Data is handled, these should always be directed to the relevant data controller since they are the ones with primary responsibility for your Personal Data. Xceed may act as either a data controller or a data processor in respect of your Personal Data, depending on the circumstances. For example, if you create an account with us to organize your events, Xceed will be a data controller in respect of the Personal Data that you provide as part of your account. We will also be a data controller of the Personal Data that we have obtained about the use of the Applications or Xceed Properties, which could relate to Organizers or Consumers. We use this to conduct research and analysis to help better understand and serve Users of the Services as well as to improve our platform and provide you with more targeted recommendations about events we think may be of interest to you. However, if you register for an event as a Consumer, we will process your Personal Data to help administer that event on behalf of the Organizer(for example, sending confirmation, promotional and feedback emails, processing payments, etc.) and to help the Organizer target, and understand the success of, their event and event planning(for example, providing event reports, using analytics to gain insights into the effectiveness of various sales channels, etc.). In these circumstances, Xceed merely provides the"tools" for Organizers; Xceed does not decide what Personal Data to request on registration forms, nor is it responsible for the continued accuracy any Personal Data provided. Any questions that you may have relating to your Personal Data and your rights under data protection law should therefore be directed to the Organizer as the data controller, not to Xceed.
Unternehmen & Organisatoren