TicketSource is a member of STAR (the Society of Ticket Agents and Retailers) which requires TicketSource to comply with an industry Code of Practice. TicketSource also uses the latest extended validation security (EV SSL) certificate and is PCI DSS compliant ensuring that tickets are sold in a safe and secure environment.
Who are we?
TicketSource is an online ticketing software provider. We have been contracted by the Event Organiser to deliver online ticketing services on their behalf. Therefore, TicketSource is the Data Processor acting on behalf of the Event Organiser who is the Data Controller and it is the Event Organiser who decides what happens to your Personal Data.
The Event Organiser / Data Controller is named as part of the booking process.
What is the legal basis for processing your personal data?
Processing is necessary for the performance of a contract (i.e. the processing of ticket bookings on behalf of the Event Organiser) and legitimate interest (storage or IP Addresses for risk management or Cookies to allow full access and smooth progression through our website).
How do we process your personal data?
TicketSource complies with its obligations under the General Data Protection Regulations (GDPR) by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining unnecessary data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data.
TicketSource only collects personal information about you when you specifically provide us with such information on a voluntary basis. The information that we collect includes:
- Contact number
- Business name/position (for some business events)
- Payment card details – card details are encrypted for processing. TicketSource does not store card details within its system.
- IP address - we may collect information about your computer, including where available your IP address, operating system and browser type, for system security, customer support and site analytics. This statistical data cannot be used to identify a customer.
- Cookies – cookies are used to track visitors through our site and to save booking information as you move from page to page of the booking process.
We use your personal data for the following purposes:
- To process ticket bookings (including the booking, payment processing and ticket delivery)
- To send you email communication regarding your booking (to include booking reminders or to advise you of an event cancellation)
- To assist you with any query that you may have with your booking or payment
- We may also use your data to perform quality assurance, sales analysis or other business analysis.
Sharing your personal data
TicketSource will not use your contact details for any marketing activities and TicketSource does not sell Customer contact details to Third parties. TicketSource will only contact you regarding an existing booking or booking attempt.
As we are acting on behalf of the Event Organiser, we will forward your contact details and booking information to the Event Organiser of your selected event. The Event Organiser will use this information to:
- Manage ticketing for an event
- Facilitate ticket pick-up
- Dispute resolution
- Customer service
- Notification of any changes to the event
- Undertake sales, campaign or demographic analysis.
The Event Organiser is responsible for their own compliance with GDPR and you agree that TicketSource is not responsible for the actions of the Event Organiser with regard to your Personal Data.
TicketSource may share your Personal Data with our processing partners such as Merchant Service Providers or Email/Text Service Providers who are contracted to assist TicketSource with the booking of your tickets – known as Sub-Processors. TicketSource is responsible under GDPR to ensure that any Sub-Processor we contract are fully compliant with GDPR law and will also act to ensure the safety and confidentiality of your Personal Data.
Where Personal Data relating to an EU (or UK or Swiss) Data Subject is transferred outside of the EEA it shall be processed by an entity: (i) located in a third country or territory recognised by the EU Commission as having an adequate level of protection; or (ii) that is subject to Standard Contractual Clauses; or (iii) that has other legally recognised appropriate safeguards in place, such as the EU-US Privacy Shield or Binding Corporate Rules.
During the booking process, the Event Organiser will ask if you would like to be included on their mailing list or that of other named Third Parties. If you decide to opt in to these marketing lists, You agree that the Event Organiser or named Third Party can send you marketing information, until such a time that you indicate to them a preference not to receive further information.
The Event Organiser is responsible for their own compliance with Data Protection laws and you agree that TicketSource is not responsible for the actions of the Event Organiser with regard to your personal data.
How long do we keep your Personal Data?
TicketSource will keep your Personal Data for no longer than reasonably necessary and will be deleted after one (1) year. Personal Data is retained by TicketSource for this period to assist us to respond to customer booking queries or any charge disputes that may arise.
Your Rights and your Personal Data
You have the right to request a copy of the information that we hold about you. If you would like a copy of some or all of your Personal Data held by TicketSource, please contact the Data Security Officer using the contact details listed below.
Under GDPR you have the following rights:
- Right of access to the Personal Data held
- Right of rectification if incorrect data is held
- Right to erasure (may be subject to the booking contract and retention periods)
- Right to object to processing
To instigate any of your rights under GDPR, you will need to contact the Event Organiser (the Data Controller) who is responsible for how your Personal Data is used. TicketSource can either provide you with contact details for the Event Organiser or will forward your request upon your behalf.
TicketSource will not undertake any further processing of your Personal Data beyond this booking and the activities outlined above under 'How do we process your Personal Data'.
To exercise any relevant rights, queries or complaints regarding TicketSource and the handling of your Personal Data, please contact:
The Data Security Officer
Depending on your query, we may need to forward your request to the Event Organiser who is the Data Controller and responsible for how your Personal Data is handled.
How to make a complaint
If you are unhappy with the way in which your personal data has been processed by TicketSource you may in the first instance contact The Data Security Officer using the contact details above.
If you remain dissatisfied, then you have the right to apply directly to the Information Commissioner for a decision. The Information Commissioner can be contacted by phone on 0303 123 1113 or via their online notification system at www.ico.org.uk/make-a-complaint/