Eventeam Privacy Policy

The purpose of this privacy policy is to inform you about how your Personal Data is collected and processed by the Eventeam group (here in after ‘Eventeam’) and the measures taken to ensure its security and, with regard to the Personal Data entrusted to us by our Customers in connection with the Services subscribed to, to define at a minimum our obligations and those of our Customers.

The terms ‘You’, ‘your’ and ‘your’ refer to Visitors to our Sites, as well as Customers and prospects who have subscribed to Services or who may be interested in our Services. The terms ‘We’, ‘our’ and ‘us’ refer to Eventeam.

Definitions

The following terms beginning with a capital letter shall have the following meanings, whether used in the singular or plural:

‘Customer’ means any person, whether natural or legal, who has subscribed to our Services.
‘Personal Data’ refers to personal data within the meaning of the Applicable Regulations on the protection of personal data, i.e. any information relating to an identified or identifiable natural person, such as a surname, first name, identification number, location data, an online identifier (e.g. IP address).
‘Event’ means any sporting, cultural or leisure event as described in our general terms and conditions of sale.
‘Applicable Regulations on the protection of personal data’ means Law No. 78-17 of 6 January 1978, known as the ‘Data Protection Act’, in its latest version in force, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data (‘GDPR’).
‘Data Controller’ means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of Personal Data. Depending on the processing, the Data Controller is in principle Eventeam, or, in some cases, the Customer.
‘Services’ means the services offered by Eventeam on its Sites.
‘Website’ refers to Eventeam’s websites, namely: https://eventeam.fr; https://eventeam-group.com
‘Processor’ refers to any person who processes Personal Data on behalf of the Data Controller in accordance with the instructions given by the latter.
‘Visitor’ refers to any natural or legal person who accesses one or more of our Websites.

The terms ‘personal data’, ‘data subject’, ‘processing’, ‘processed’ and ‘personal data breach’ have the same meaning as in the Applicable Regulations on the protection of personal data.

We process your Personal Data in order to provide you with our Services, enable the receipt, execution and management of your orders, inform you, enable you to create an online account, and more generally to manage and monitor our contractual relationship. In this context, we are the ‘Data Controller’ of your Personal Data.

How do we collect your Personal Data?

We collect your Personal Data directly when:

You access our Sites and/or our applications, create an online account or fill in forms;
You communicate with our services by email or telephone;
You subscribe to newsletters;
You report a problem or request assistance;
You participate in our Events;
You purchase a ticket on our Sites;
You participate in our competitions, promotional offers or surveys;
You interact with the platforms we make available to you;
You attend any Event using our Services;
You interact with Eventeam employees during Events.

We may also collect your Personal Data indirectly through third parties in the following situations:

We work closely with our subsidiaries and may receive Personal Data about you in order to provide you with consistent and seamless services.
We may also receive Personal Data about you from third parties such as Event registration platforms (to enable you to register for our Events), venue rental companies (to welcome you to our Events), audience analysis providers (information collected automatically when you visit our Sites), companies that provide medical assistance, our business partners (in order to market our products and services), our sponsors, performance evaluation platforms (in order to compile statistics and performance analyses), ticket providers, booking platforms, payment service providers and hotels.

On what legal basis do we process your Personal Data?

The Applicable Regulations on personal data protection allow us to process Personal Data, provided that we have a legal basis for doing so. Therefore, when we process your Personal Data, we rely on one of the following legal bases:

Performance of a contract: when the processing of your Personal Data is necessary to fulfil our obligations under a contract to which you are a party;
Legal obligation: when we are required to process your Personal Data to comply with a legal obligation, including for the purpose of disclosing information to a public body or law enforcement authority;
Legitimate interests: we process your Personal Data if it is in our legitimate interest to do so, in order to best manage Eventeam’s business in accordance with the law, and to the extent that this interest does not override your own interests;
Your consent: in some cases, we ask for your specific permission to process some of your Personal Data, and we only process it for the purposes you have consented to (e.g. marketing and targeted advertising). You can withdraw your consent at any time by contacting us at the following address: dpo@eventeam-group.com

What categories of Personal Data do we collect and for what purposes is your Data processed?

We may collect different categories of Personal Data about you. In all cases, we undertake to collect only Data that is strictly necessary for the purposes pursued by the processing operations carried out. The table below describes the purposes and legal basis for Eventeam’s processing of the different categories of Personal Data.

We may also use your Data:

When necessary and when we believe that there has been a violation of the terms and conditions of purchase, the terms and conditions of use, the ticket terms and conditions for the organisation of an Event or the rights of a third party;
When necessary, to assist in an investigation into an activity that violates our rules, regulations and policies;
To comply with applicable laws, court orders, or government regulations.

Use of Tracking Pixels in Our Communications

As part of our activities, we may send electronic communications to both professionals and private individuals. Some of these communications may contain tracking pixels that enable us to detect when a message has been opened.

Sending Electronic Communications

Electronic communications sent to private individuals are based on the individual’s prior consent. Electronic communications sent to professionals are based on our legitimate interest, in accordance with applicable regulations. Each message contains an unsubscribe link, allowing recipients to opt out at any time.

Tracking Pixels for Email Open Detection

Tracking pixels rely on an automatic technical mechanism that operates independently of any voluntary action by the recipient. We strictly regulate the use of these pixels and limit their use to the following purposes:

Overall management and monitoring of communication campaigns;
Technical purposes necessary to ensure the proper delivery and functioning of email communications.

Data generated through the opening of emails is not used for marketing segmentation or individual profiling purposes without specific prior consent.

Legal Basis for Tracking

The use of tracking pixels is based on the explicit consent of the individual concerned. This consent is separate from the consent to receive marketing communications for private individuals and from the legal basis applicable to professional communications for business contacts.

Withdrawal of Consent

Consent for email open tracking may be withdrawn at any time, without affecting the lawfulness of any processing carried out prior to the withdrawal of consent.

How long is your Personal Data retained?

We only retain your Personal Data for as long as necessary and proportionate to the purpose for which it was collected.

Who are the recipients of your Personal Data?

Your Personal Data is processed by authorised persons and is not transferred to unauthorised third parties within the meaning of the Applicable Regulations on the protection of personal data. We may share your Data with the following entities:

Within the relevant Eventeam entity: authorised persons in the sales and marketing department and the support service are required to process your Personal Data and only have access to the Data that is necessary for them to perform their duties. Our employees have signed a specific confidentiality agreement to ensure the security of your Personal Data.
Our affiliated companies: we may share your Personal Data with our affiliated companies operating in the travel and leisure sector, in particular Eventeam Live and Eventeam Creativ. We may use your Data to send you information about products and services related to leisure and travel that may be of interest to you. In the event that our affiliated companies have access to this Data, they will follow practices that are at least as restrictive as those described in this privacy policy.
Third-party suppliers: third-party suppliers such as hotels, airlines, car rental companies, venue rental companies and activity providers involved in your travel bookings may process some of your Personal Data. These third-party providers may, subject to your prior consent, contact you to obtain additional information about you, to facilitate your travel booking, or to respond to any feedback you may have provided. These providers are not our processors within the meaning of the applicable data protection regulations.
Sponsors: sponsors with whom we may jointly offer products or services may need to process some of your Personal Data in order to provide you with optional products and services. When you subscribe to a relevant product or service, you will be informed when one of our sponsors is involved. If you choose to access these optional services, we may, subject to your prior consent, share your Data with these third parties so that they can contact you directly by email or post about their products and services.

In general, we recommend that you consult the privacy policies of third-party providers and sponsors whose products and services you purchase through us.

Subcontractors: your Data may also be disclosed to third-party service providers (auditors, consultants, lawyers, accountants, etc.) and trusted subcontractors (IT service providers, payment service providers, customer service and marketing providers, polling organisations, etc.) who may access, host and/or process your Personal Data on our behalf, in accordance with our instructions.
Official Event organisers: official Event organisers (including Olympic committees, national and international sports federations, agencies offering hospitality services) are required to process some of your Personal Data so that we can provide you with our Services. These organisers, as independent data controllers, may use your Data or transfer it between themselves and their affiliates, in accordance with their privacy policies and if necessary and justified by a legal basis. In all cases, you will be informed and must give your consent to the transfer of your data if these organisers are located outside the European Union.
Third-party websites: if you have been redirected to one of our Sites from a third-party website, we may share Data about you with these referring websites so that they may, subject to your prior consent, contact you directly by email or post about their products and services. We encourage you to review the privacy policies of any website that redirects you to our Sites.

We may also share your Data in response to requests from courts or tribunals, government or law enforcement agencies, or when necessary to comply with applicable laws and procedures.

Finally, we may share anonymous or aggregated data with third parties, including advertisers and investors. For example, we may share with advertisers the number of Visitors to our Sites or the names of the most popular hotels and holiday destinations. This data does not contain any Personal Data and is used to develop our content and Services.

What are your rights regarding your Personal Data?

In accordance with the provisions of the Applicable Regulations on the protection of Personal Data, you have the following rights over your Personal Data, in particular to ensure that we comply with our commitments:

A right of access: you may submit a request for access and obtain a copy of your Data;
A right to rectification: you have the option of correcting your Data if it is incorrect or incomplete;
A right to erasure of your Data, subject to compliance with our legal obligations;
A right to obtain a copy of the Personal Data we hold in a structured electronic format (right to portability).

You also have the right to object, on legitimate grounds, to the processing of your Data and to the use of this Data for commercial prospecting purposes.

If you have any questions, require further information or wish to make a complaint, please contact us by email at the following address: dpo@eventeam-group.com

We may ask you to provide proof of identity if your request concerns the exercise of one of the rights granted to you by the Applicable Regulations on the protection of personal data. The exercise of your rights (in particular your rights to object to or delete Data) must also be reconciled with the legal obligations and legitimate interests pursued by Eventeam.

We will respond to your requests within one (1) month of receipt, it being understood that this period may be extended by two (2) months depending on the complexity of your request or in the event of a large number of requests at the same time, provided that we inform you of this.

If you do not receive a response from us within a maximum of three (3) months of your initial request or in the event of a dispute regarding the exercise of your rights, you may lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (French Data Protection Authority).

Security

As Data Controller, we implement reasonable technical and organisational measures in line with the state of the art to ensure the security, integrity and confidentiality of your Personal Data, including to prevent the alteration or damage of your Personal Data or access by unauthorised third parties.

Transfer of your Data to third countries

We do not transfer Personal Data to countries that do not provide an adequate level of protection without first implementing one of the appropriate safeguards provided for by the Applicable Regulations to govern such transfer, in particular by using standard contractual clauses approved by the European Commission.

By way of exception, in the absence of an adequacy decision or appropriate safeguards in accordance with Article 46 of the GDPR, a transfer or set of transfers of personal data to a third country may only take place if one of the conditions set out in Article 49 of the GDPR is met, namely:

the data subject has given explicit consent to the proposed transfer, after having been informed of the risks that the transfer may entail for them due to the absence of an adequacy decision and appropriate safeguards;
the transfer is necessary for the performance of a contract between the data subject and the Data Controller or for the implementation of pre-contractual measures taken at the request of the data subject;
the transfer is necessary for the conclusion or performance of a contract between the Data Controller and another natural or legal person in the interests of the data subject;
the transfer is necessary for important reasons of public interest;
the transfer is necessary for the establishment, exercise or defence of legal claims;
the transfer is necessary to protect the vital interests of the data subject or other persons, where the data subject is physically or legally incapable of giving consent (…).

Links to third-party websites

Our commercial communications may contain links to websites belonging to third parties, including our partners, advertisers and affiliates. If you click on one of these links, please note that these sites have their own privacy policies and that Eventeam cannot be held liable for the terms of these privacy policies.

Processing carried out by Eventeam, as a Processor (within the meaning of the GDPR), on behalf of its Clients

Eventeam may be entrusted by its Clients with the access and/or processing of Personal Data in the context of a given assignment, such as the organisation and management of hospitality events. In this context, Eventeam acts as a ‘Processor’ within the meaning of the GDPR and the Customer as the ‘Controller’. The Customer then determines the means and purposes of the processing(s) it carries out and for which it has requested our Services, and we comply with its instructions.

Changes to this privacy policy

This version of the privacy policy was updated on 01/01/2025.

We may update or adapt this privacy policy in the future. If we do so, we will inform you of any changes to this privacy policy through the usual means of communication.