Tickets. With or without hotel.

.

Privacy Policy

We take the protection of your personal data seriously. Below we explain which personal data are processed when you visit our websites and place an order, for what purposes this takes place and what rights you have.

1. Controller

Ticketpool
Proprietor: Holger Miebach
Thurner Str. 30
51069 Köln
Germany
E-Mail: info@ticketpool.de
Tel: +49 (0)221 8026 2222
Contact / Legal notice: contact.php

2. Visiting our websites

When you visit our websites, technically necessary connection data are processed. This may include, in particular, the IP address, date and time of access, page requested, browser type, operating system and amount of data transferred.

Where necessary, this processing is carried out to provide our online services securely and reliably on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision and security of our services.

3. Contacting us

If you contact us by email or via a contact option on our website, we process the information you provide in order to handle your enquiry.

If your enquiry relates to a contract or an order, processing is based on Art. 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in handling enquiries pursuant to Art. 6(1)(f) GDPR.

4. Orders and contract processing

If you order tickets, travel packages or other services from Ticketpool, we process the data required to fulfil the order. This includes in particular:

Processing is carried out for the initiation and performance of the contract pursuant to Art. 6(1)(b) GDPR and to comply with legal obligations pursuant to Art. 6(1)(c) GDPR.

We use these data only to the extent necessary to process your order, communicate with you, handle payment, deliver or provide the tickets and comply with legal obligations.

5. Payment processing

If you use a payment method involving an external payment service provider, in particular PayPal, the data required for payment processing are transmitted to the payment service provider you have selected. Processing is carried out for performance of the contract pursuant to Art. 6(1)(b) GDPR.

Bank account or credit card data entered directly on a payment service provider’s website are generally processed there. The privacy notices of the respective payment service provider also apply.

6. Delivery and provision of tickets

If tickets or documents are sent by post or through a delivery service, we transmit the data required for delivery to the relevant service provider. For electronic delivery, we use the email address you provided.

The legal basis is Art. 6(1)(b) GDPR.

7. Disclosure of data

Personal data are disclosed only where this is necessary for contract performance, where we are legally obliged to do so, where you have consented, or where another legal basis permits the disclosure.

Recipients may include, in particular, payment service providers, delivery providers, hosting and IT service providers, as well as public authorities or other bodies where there is a legal obligation to disclose data.

8. Cookies and similar technologies

According to the current technical setup, Ticketpool does not use analytics or marketing cookies.

Where technically necessary storage of or access to information on your device is required to provide a function of our online service expressly requested by you, this is carried out within the statutory requirements of Section 25(2) TDDDG.

If non-essential cookies, analytics or marketing technologies are used in the future, this will take place only after appropriate information has been provided and – where legally required – after your prior consent.

9. Retention period

We store personal data only for as long as necessary for the respective purpose or for as long as statutory retention obligations apply.

Business records are subject in particular to statutory commercial and tax retention periods. Accounting vouchers are generally retained for eight years, commercial and business correspondence for six years, and certain books, records and annual financial statements for ten years.

Once the relevant purpose no longer applies and statutory retention periods have expired, the data are deleted unless another legal basis requires or permits continued storage.

10. Your rights

Subject to the statutory requirements, you have in particular the following rights:

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

11. Right to lodge a complaint

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

12. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unauthorised alteration.

13. Changes to this Privacy Policy

We update this Privacy Policy if our online services, the technical procedures used or the legal requirements change.

Last updated: October 2026