Privacy policy

This is a convenience translation. Only the German version is legally binding; in case of any discrepancy, the German text prevails.

1. Controller

Ticket Lounge UG (haftungsbeschränkt)
Berliner Straße 1, 37073 Göttingen, Germany
Represented by: Alexander Thunert
Email: info@ticket-lounge.de

Full details in the legal notice.

2. What this website does not do

For the sake of clarity, up front — this website uses:

• no tracking, no analytics tools, no pixels
• no external fonts. The typeface is bundled when the site is built and served from our own server. There is no connection to Google Fonts, and no IP addresses are passed to third parties.
• no embedded social media services, maps or video platforms
• no advertising or recognition cookies

None of this requires consent; the two cookies we set are described in section 5 and neither of them needs it. The notice at the bottom left asks you all the same: it holds a statistics category so that audience measurement, if it is ever added, cannot start without your agreement. No such tool is in place today. You can change or withdraw your decision at any time through the cookie manager at the bottom of the page.

3. Server log files

When you open the site, data your browser sends is transmitted automatically and stored temporarily in log files:

• page requested and time of access
• volume of data transferred and confirmation of successful retrieval
• browser type and version, operating system
• referrer URL
• shortened IP address

Legal basis: Art. 6 (1) (f) GDPR. The legitimate interest lies in the technically faultless operation and the security of the website. This data is not combined with any other data.

4. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you open the site, Vercel processes the data listed in section 3 on our behalf.

A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. Delivery runs through servers in the European Union; a transfer to the USA can nevertheless not be ruled out entirely. Vercel is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies.

Legal basis: Art. 6 (1) (f) GDPR.

5. Cookies

This website sets two cookies. Both contain nothing but a setting you made yourself — no identifier, nothing from which a person could be derived, and nothing that is passed to third parties.

Language choice

If you switch between German and English at the top right, we store that choice in a cookie named sprache. It contains nothing but the code of the chosen language (de or en) — no identifier and nothing from which a person could be derived. Without it, every visit would send you back to your browser’s language.

The cookie expires after one year. You can delete it in your browser at any time; the site then works exactly as before and picks the language from your browser’s setting again.

Legal basis: § 25 (2) no. 2 TDDDG — the cookie is strictly necessary for the service you have expressly requested. No consent is therefore required.

Cookie setting

Your answer to the notice at the bottom left is stored in a cookie named einwilligung. It holds the version of the notice and the categories you agreed to — nothing else. Without it we would have to ask you again on every visit.

The cookie expires after six months. The cookie manager at the bottom of the page lets you change your choice at any time, with the same effort it took to make it.

Legal basis: § 25 (2) no. 2 TDDDG. A cookie that records nothing but what you consented to does not itself require consent.

6. Contact form and email

You can write to us using the form on the contact page. We process the details you enter there: name, club, email address, phone number (optional) and your message.

Delivery runs through Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as a processor pursuant to Art. 28 GDPR. Resend delivers the message as an email to our mailbox; processing in the USA takes place in doing so. Resend is certified under the EU-US Data Privacy Framework.

The form contains a field invisible to you that guards against automated submissions. It is not evaluated — we only check whether it was filled in.

We use your details solely to deal with your enquiry. They are deleted once the enquiry has been concluded, unless statutory retention periods apply.

Legal basis: Art. 6 (1) (b) GDPR for enquiries preceding a contract, otherwise Art. 6 (1) (f) GDPR.

7. Your rights

You have the right at any time to:

• information about the data stored about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)

You may also lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen).

8. Changes

We will adapt this policy as soon as the processing changes — for instance through audience measurement or a booking tool. The version published here at the time applies.