Privacy Policy

Last updated: May 20, 2026

This Privacy Policy informs you about how personal data is processed by ApexGrid Tickets in connection with the use of this website and our online store.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

ApexGrid Tickets, Untergasse 24 - 28, D-65468 Trebur-Geinsheim, Germany

VAT ID: DE287640075

Email: office@apexgridtickets.com

2. General Information on Data Processing

We process personal data exclusively in compliance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the respective applicable national data protection regulations.

Personal data means any information relating to an identified or identifiable natural person.

3. What Data We Collect

We may collect and process the following personal data:

•Name, billing, and delivery address

•Email address and phone number

•Payment information and transaction data (processed securely via Shopify checkout)

•Order history and ticket booking details

•Communication content for contact inquiries

•IP address, browser information, and device data

•Usage data and interactions with our shop

4. Purposes of Processing

The processing of personal data is carried out in particular for the following purposes:

•Processing and execution of ticket orders

•Provision of our website and services

•Customer communication and support

•Secure payment processing via Shopify checkout

•Online ticket delivery (typically approximately two weeks in advance of the booked event) and management of returns or cancellations

•Fraud prevention and security

•Fulfillment of legal obligations

•Marketing and advertising, where legally permitted

•Improvement of our offerings and user experience

5. Legal Bases for Processing

The processing of your personal data is based on Art. 6 GDPR:

•Art. 6 (1) (b) GDPR for the performance of a contract and pre-contractual measures

•Art. 6 (1) (c) GDPR for the fulfillment of legal obligations

•Art. 6 (1) (f) GDPR based on our legitimate interest in a secure, economical, and user-friendly operation of our online store

•Art. 6 (1) (a) GDPR if you have given us consent, for example for newsletters or marketing cookies

6. Shopify Checkout Processing

While our online store is hosted independently, our checkout processing is handled by Shopify Inc. Shopify provides the secure technical platform and infrastructure for payments and checkout. In this context, personal data related to your transactions may be processed on Shopify's servers. For more information, please visit: https://www.shopify.com/legal/privacy

7. Disclosure of Personal Data

Personal data is only disclosed if permitted by law or necessary for the fulfillment of the contract.

Potential recipients include in particular:

•Payment service providers (via Shopify checkout)

•IT and independent hosting service providers

•Shopify and affiliated technical service providers for checkout processing

•Marketing and analytics providers, provided explicit consent has been given

8. Cookies and Tracking Technologies

Our website uses cookies and comparable technologies to enable and improve the use of our shop.

Non-technically necessary cookies are only set after your explicit consent. You can change or revoke your cookie settings at any time.

9. Storage Duration

We only store personal data for as long as necessary to fulfill the respective purposes or as required by statutory retention periods.

Commercial and tax-related data are generally stored for up to 10 years.

10. Your Rights under the GDPR

You have the following rights in particular:

•Right of access pursuant to Art. 15 GDPR

•Right to rectification pursuant to Art. 16 GDPR

•Right to erasure pursuant to Art. 17 GDPR

•Right to restriction of processing pursuant to Art. 18 GDPR

•Right to data portability pursuant to Art. 20 GDPR

•Right to object pursuant to Art. 21 GDPR

•Right to withdraw consent given

•Right to lodge a complaint with a data protection supervisory authority

11. International Data Transfers

To the extent that personal data is processed outside the European Union or the European Economic Area, this is done exclusively in compliance with the legal requirements of the GDPR.

For this purpose, Shopify and other technical partners use standard contractual clauses of the European Commission, among other things.

12. Data Security

We take appropriate technical and organizational security measures to protect your personal data from loss, misuse, unauthorized access, or disclosure.

13. Data of Minors

Our offerings are not directed at persons under 16 years of age. We do not knowingly collect personal data from minors.

14. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy at any time to reflect changes in legal requirements or changes to our services.

15. Contact

For questions regarding data protection or to exercise your rights, please contact us:

ApexGrid Tickets, Untergasse 24 - 28, D-65468 Trebur-Geinsheim, Germany

VAT ID: DE287640075

Email: office@apexgridtickets.com

16. Data Protection Officer

No data protection officer has been appointed as there is no legal obligation to do so.