Back

Privacy policy

Consent management for cookies

In order to obtain data protection-compliant consent for using cookies and services requiring consent on our website, we use the tool of the consent manager provider consent manager AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.bg/.

The consent tool records, logs, and saves the website visitor's settings. To ensure that the selected settings can be clearly assigned to the respective website visitor, certain user information (including the IP address) is collected, transmitted, and stored by the consent tool.

For further information, please refer to the privacy policy of consent manager AB: https://www.consentmanager.bg/поверителност/.

Legal basis: Article 6 para. 1 point f of the GDPR (legitimate interest)

Link to cookie settings

EVENTIM.BG OOD’s PRIVACY POLICY

We take the necessary care of your personal data. With this policy, we would like to inform you about the personal data we collect, how we use it and how we protect it.

Who we are?

We are “Eventim.BG” OOD, a company registered in Bulgaria under unique identification code (UIC) 131448006, with seat and registered address at 58, 6th September Str., Fl. 1, Sofia, Bulgaria /hereinafter referred to as “EVENTIM”/.

We are the administrator of your personal data and as such we are responsible for keeping and processing your data in a fair, transparent and secure manner.

What personal data do we collect?

When buying a ticket you provide us with the following personal data: • First and last name; • Delivery address  (optional)• Phone number; • Email address. We need this information so we can make the sale and deliver the ordered ticket to you, i.e. personal data is necessary for the conclusion and performance of the ticket sale agreement between you and EVENTIM. Customers who purchase tickets for the first time enter this information when they create their own personal account at www.eventim.bg.

 

When creating personal account (profile) on www.eventim.bg Along with all data listed above, we store the following information about your purchases in your personal account: • Which events you have purchased tickets for - name, location and date of events; • Ticket information: number of tickets, location of seats, ticket price. All listed information will be stored in your personal account at www.eventim.bg, which can be used for marketing / advertising purposes, including profiling for direct marketing purposes. You have the right to object to such processing at any time, including profiling, insofar as it relates to direct marketing.

You can create lists of your favorite artists, venues and events, bookmark them and receive information about them. This information is stored in your customer account and you can edit or delete it at any time. "Favorites" data are used to personalize the content and recommendations on the site, as well as in the e-mails that will send to you for your favorite items.

You have the option to select a “persistent” login for the device you are using. In this case, you will not be asked for your password for a period of up to 6 months. This allows you to complete your ticket purchase faster and more conveniently, as well as to use many other functions and advantages faster. To enable this login, session cookies are set on your end device. For some functions, such as downloading tickets, additional authentication via your password, is still required.

If you have created a personal account, you have the option of submitting a review of a venue or event you have attended on our website. You can do so by leaving your review and your e-mail address in a special form designed for this purpose. Your email address will not be published on the website, it is only necessary for internal verification and prevention of misuse. Your review will be published on our website following a verification that is necessary to ensure that we provide useful information to other users. When you share reviews on our website, we process your personal data in order to improve the quality of the events and places that are offered on our website.

If you decide to get your ticket from a physical location (for example, from our office or on partner's premises), you may be subjected to video surveillance to ensure the security of the premises.

Automated data processing at www.eventim.bg

Additionally, we process information about the usage of our website that helps us understand how you use our services, including searches and search preferences, keeping track of your searches and the way you browse our website (which may include your IP address, visit time, visited pages, page interactivity, limited location information, used device and software, initial or re-visit of the page, traffic source information). We collect this information automatically by using cookies. For more information, please see our Cookies Policy.

For what purposes do we use your data?

By ordering a ticket through www.eventim.bg we sign a ticket sale agreement with you. The primary purpose of collecting and using the above personal data is to make it possible to perform this contract - including sending of tickets to you, respectively - to organize the receipt of tickets in our network of partners. Your contact details can be used by our team in the event of changes to or cancellation of certain events. Your payment data may also be used by EVENTIM in the case of a refund.

The email address presented to us in the context of the ticket purchase when creating your account can be used for direct marketing purposes, in which case the legal grounds for the processing would be our legitimate interest. You have the right to object to such processing at any time, including profiling, insofar as it relates to direct marketing. We use information for common usage to improve your stay on our website and increase the quality of the services we provide to you, as well as to protect ourselves from abuse and fraudulent activities, including to verify it is you when changes of personal data are made in your account.

Your personal data may also be processed in connection with various formal proceedings, including pre-trial, judicial and administrative proceedings related to consumer claims and disputes, ticket fraud, etc.

On what grounds the Company processes your personal data?

We collect your data on grounds permitted by the European and the Bulgarian legislation, and in particular:

  • In the process of contract performance (Art. 6, para 1, item b) of the GDPR):

We collect your personal data so that we can confirm that you have made a payment permitting you to receive your ticket, deliver or transfer your tickets to you and to inform you of any changes to forthcoming events, cancellations or claims based on our return policy. For the purpose of fulfilling our obligations under the purchase agreement, we may transfer your personal data to courier companies and financial institutions / payment processing institutions (such as banks, payment service providers, etc.).

  • Legitimate interest (Art. 6, para 1, item f) of the GDPR):

We store the information you have entered into your account in the context of ticket purchase as we believe that it is our legitimate interest to track, evaluate and improve the way we provide our services.

We have a legitimate interest in using this information for future marketing campaigns to inform you of exciting future projects, as well as when we process your fan reviews of places and events.

We also analyze statistical and technical data on our site‘s overall use, visits and user behavior for the functionality of the website as well as our products and services on the basis of these analyzes, as well as to protect ourselves against abusive practices and fraudulent activities. We also use your data for user-verification in case of changes of personal data in the customer account.

In addition, we will store data relating to your payments and purchases to ensure that this information is available in the case of formal proceedings such as civil cases (for example, if claims are filed against us for damages), administrative and criminal investigations (e.g. check or revision by the National Revenue Agency), consumer claims and disputes, ticket fraud, etc. Video surveillance of our commercial premises is done in order to ensure our security of theft and other potential crimes.

  • Consent (Art. 6, para 1, item a) of the GDPR):

If you have not purchased a ticket from us but have subscribed to our newsletters, the necessary personal data will be processed based on your consent, which you can withdraw at any time by writing a short letter to privacy@eventim.bg or click the „I do not want to receive more emails from Eventim.BG“ button in any email you receive from us. Withdrawal of consent does not affect the lawfulness of consent-based processing prior to its withdrawal. Your consent is also required to provide you with persistent login.

Natural and legal persons to whom we may disclose your personal data

The Company is committed to preserving the confidentiality of your data and to comply with all legal requirements regarding the sharing and disclosure of this personal data. Such disclosure only occurs if there is good reason to do so and sufficient guarantees to ensure an adequate level of protection. The Company may disclose your personal data to the following recipients when it is legal and / or necessary, for example:

  • Database service providers; website maintenance and analysis services and IT software maintenance services; • Providers of postal and courier services; • Ticket pick-up outlets; • Central and local authorities and other public authorities (e.g. NRA, NSSI); crime prevention and detection bodies and regulatory authorities which have the authority to request information from us; • Our lawyers, professional consultants and auditors. • Eventim Group companies.

Your personal data outside the European Economic Area

If the recipients of your data are outside the EU, we will provide reasonable assurance that your data will be handled with due care and attention that would be required by an EU-based recipient. Such transfers will be subject to binding corporate rules, standard data protection contractual clauses adopted by the European Commission, and any other data protection mechanism that takes your rights into account. Please note that the website usage information collected automatically through some of the cookies used by us may be transferred to a Google server in the United States because we use Google Analytics - a Google LLC web service („Google“). On our behalf, Google will use this information to assess the use and compile reports on the functionality and attendance of the website and provide us with additional information related to its services.

We should also note that we are also using social plugins („plugins“) provided by the social networks Facebook and Instagram. Those services are provided by:

 

When you visit our website, these plugins establish a direct connection between your browser Facebook and Instagram servers. Plug-in content is delivered directly to your browser and integrated into the web page. By plugging in plugins, Facebook and Instagram gets the information that your browser has visited the relevant page of our website, even if you do not have a social networking account or you are not currently logged in. This information (including your IP address) is transferred directly to Facebook and Instagram  servers and stored there. If you‘re signed in to your social networking site, the platform can link your visit to our website with your account. For example, when you click on the „Like“ button (for Facebook), the relevant information will be sent to Facebook servers and stored there.

In addition, this information will be posted to the appropriate social network and will be shown to your contacts there. For the purpose and scope of this data collection, information on further processing and use of Facebook and Instagram  data and your legal rights and privacy settings related to this, please refer to the privacy policy of:

  • Facebook: www.facebook.com/about/privacy
  • Instagram: https://privacycenter.instagram.com/guide/

If you do not want such automatic linking of the data collected by visiting our website on your Facebook account, you must sign out of the network before visiting our website.

This website uses Google Analytics, a web traffic analysis program provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyze how users use the site. The information generated by the cookie about your use of eventim.bg (including your IP address) will be transmitted to and stored by Google on servers in Ireland or other countries (including outside the EU or the European Economic Area). Google will use this information for the purpose of evaluating your use of the eventim.bg site, compiling reports on site activity and providing other services related to eventim.bg activity. Google may also transmit this information to third parties where required by law or where such third parties are processors who process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. More information about Google Analytics and how your personal data are collected by Google can be found at: https://policies.google.com/technologies/partner-sites?hl=bg , as well as at https://policies.google.com/privacy?hl=bg .  You can also disable the use of Google Analytics by clicking the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Google LLC, Facebook Inc. and Instagram are parties to the EU-U.S. Data Privacy Framework (EU-U.S. DPF) . This ensures an adequate level of protection for your data. The full text of the EU-US privacy framework can be found at the following address: privacyshield.gov/EU-US-Framework.

We co-operate with the affiliate network of the service provider Stay 22, Technologies Inc, 917 Mont-Royal Ave E. Montreal QC H2J 1X3, Canada, and use a hotel map plugin from this provider on our website. If you follow the affiliate links in the hotel map and subsequently use the offers, we may receive an affiliate commission from Stay22. To be able to track whether you have used the offers, it is necessary for the third-party provider to know that you have followed an affiliate link used on our website. We use cookies or comparable recognition technologies for this purpose. For more information, please refer to the Stay 22 privacy policy at https://www.stay22.com/privacy. The integration of Stay22 leads to the reloading of Stadia Maps, a service of the provider Stadia Maps, Ltd. Co, 6650 Rivers Ave, Charleston, South Carolina 29406, USA, on our website. To use the functions of Stay 22 via Stadia Maps, it is necessary to collect your IP address. By using this service, a transfer of personal data to the USA takes place or cannot be ruled out! For more information, please refer to the Stadia Maps privacy policy https://stadiamaps.com/privacy/.

We use the services of Bazaarvoice Inc, 10901 Stonelake Blvd, Austin, TX, USA, to collect fan reviews and display them on our website. Bazaarvoice enables us to collect, moderate and display reviews and reports from our users.  For more information, please refer to the privacy policy of Bazaarvoice Inc. at https://www.bazaarvoice.com/de/legal/datenschutzrichtlinie/.

Legal basis: Art. 6 para. 1 point a of the GDPR (consent)

We use the product analytics tool Mixpanel to analyse and improve the use of our websites and apps. Mixpanel Inc. supports us in better understanding user behaviour, replaying sessions in a pseudonymized manner, conducting A/B tests and feature experiments, connecting data with our internal systems, and analysing key figures in relation to business performance. The following information is processed using cookies and similar technologies:

  • technical data about your device and browser
  • usage interactions within the website or app (e.g., clicks, navigation, feature usage)
  • session flows and derived statistics
  • pseudonymized identifiers (e.g., hashed email address).

The processing is carried out exclusively on the basis of your consent pursuant to Art. 6 Para 1 Sentence 1 lit. a) GDPR. As Mixpanel is established in the USA, data is transferred there. An adequate level of data protection is ensured through the EU-US Data Privacy Framework certification of our partner as well as additional technical and organizational measures. Further information can be found at: https://mixpanel.com/legal/privacy-policy/

You can prevent the collection of information by disabling the storage of cookies through the appropriate settings in your browser software or by deactivating tracking in the cookie settings.

We also use a user experience analytics tool provided by Contentsquare GmbH (Hotjar) to better understand the needs of our users and to optimize the offering and experience on this website. This tool uses cookies and other technologies to collect data about the behavior of our users and their devices. For this purpose, we process the following (personal) data:

  • IP address of the device (in anonymized form)
  • Screen size, device type (unique device identifiers), browser used
  • Location (country only) and preferred language for displaying our website
  • Keyboard and mouse interactions (movement, position, and clicks)
  • Referrer URL and domain
  • Inputs and responses from surveys and survey widgets within EVENTIM.Net

You can prevent the collection of this information by adjusting your browser settings to block the storage of cookies or by disabling tracking in the cookie settings. Please note that in this case, you may not be able to use all functions of this website to their full extent. The processing of your personal data is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) sentence 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future by adjusting your selection in the cookie settings.

 

Period for which personal data is stored

We will store and process your data for a period no longer than is necessary to achieve the purposes for which it was collected or to their compatible purposes. For example: • We process data based on your consent until you withdraw this consent; • We use your data based on our legitimate interests, insofar as such processing does not go beyond your rights and interests to be erased or anonymized; • We use your data for conclusion or performance of a contract for as long as the contractual relationship with you is in force or in accordance with the legal deadlines applicable in case of disputes regarding the services provided by us. Also, personal information is stored in your personal account at www.eventim.com for the time your account is active. You can easily edit your personal details at any time / besides the email that serves as the permanent identifier of the client in our system(s) / and you can request to deactivate your account at our website at any time by contacting our team at privacy@eventim.bg.

Once your account is deactivated, we will delete all of your personal data stored in our web store. However, personal data from your account will be stored in our company archive for cases of possible legal claims or administrative procedures within a period of 5 years from the date of the event for which you purchased the last ticket through your account.

How the Company protects personal data?

The Company will take all necessary action and measures to ensure the security of personal data and to prevent unauthorized access to, collection, use, disclosure, copying, modification, disposal, erasure or other unauthorized use of data by unauthorized persons. All your personal data will be transmitted through SSL (128 bit encryption) (RSA at 1024 data rate) and therefore third parties will not be able to abuse them.

Eventim.bg is certified by Thawte (www.thawte.com). A certificate from a licensed certification body guarantees the secure transfer of your data and the authenticity of our server.

Information for persons with disabilities

Some events may provide specialized wheelchair accommodation. Should you need such specialized accommodation, you may contact our team at privacy@eventim.bg or call 02 961 53 70 to provide you with the necessary information and guidance. We assure you that all information shared about your health and disability will be treated as confidential. Such information can only be obtained from EVENTIM if it is sent at your initiative in order to purchase the special ticket.

Your personal data protection rights

You, as a data subject, have the following rights:

Right to access your personal data: know whether we process your personal data, what categories, for what purposes and to whom we disclose it; Right to request updating (correction) of incomplete, inaccurate, inappropriate or obsolete data. In addition, you may request to restrict the processing if: we process your personal data without legal basis; after fulfilling the purposes for which it was collected; if you have objected to the processing based on our legitimate interest. In this case, we will not process (except storage) it until we verify this statement. Right to object to: fully automated decision making, including profiling; if there is another legal basis; when processing takes place on our legitimate interest grounds or when it is processed for direct marketing purposes. You may request to delete your personal information, but we may be legally obliged to store this information and not to delete it (or to restrict the processing for a certain period of time, in which case we will comply with the request for deletion only once we have met these requirements). A right to ask for the data we hold to be provided to you in a commonly used machine-readable format (e.g. a computer) and / or to be passed on to another organization but only when the processing of your data is based on a contract or your consent and that processing is done automatically. If you believe that your rights in terms of privacy and data protection are violated, you can contact the Commission for Personal Data Protection. How to exercise your rights? In order to exercise some of your rights, you can contact us by phone, e-mail, regular mail or fill in a form in our office. We will respond to every request for access to personal data no later than one month after submitting it in electronic form unless you specify another preferred way.

You can also send your request to privacy@eventim.bg.

Your written request should include:

  • Your Name; • The email address you are registered with in your personal account; • Preferred form of communication (e.g., regular mail or e-mail); • Signature (in case of paper delivery); • Date of request; • Mailing address; • Power of attorney - if the request is filed on behalf of someone else.

The Company may ask you to provide additional information needed to verify your identity (e.g. by clicking on a confirmation link or by providing a verification code) to exercise your rights.

Privacy Policy Changes We will notify you of any changes to this Privacy Policy by publishing the current version of our Privacy Policy. You may address any questions relating to your personal data to our team by email: privacy@eventim.bg.

Last updated date: 20.05.2026