Data Privacy Visitors

1. General 

1.1 Controller for the processing of your personal data 
We take the protection of your personal data very seriously. We will treat your personal data confidentially and in accordance to the general data protection regulations. This data protection information informs you about the processing of your personal data in the context of visiting our venue Waldbühne (“Waldbühne”).  The controller within the meaning of the EU General Data Protection Regulation ("GDPR") with regard to the processing of personal data in connection with your visit is: 

CTS EVENTIM AG & Co. KGaA („Waldbühne Berlin“, „CTS Eventim“ „we“, „us“) 
Contrescarpe 75 A 
D-28195 Bremen  
Telephone: +49 (0)30 74 73 75 00  
Fax: +49 (0)30 74 73 75 10 

In the following, we will explain to you what information we collect within your visit, for what purposes, how we use this data and what rights you are entitled to. 

1.2. Definitions 
This information on data protection is based on the following terms on data protection, which we have defined for easier understanding: 

1. The GDPR is the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC). 

2. Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. Authorities, however, which within the framework of a specific inquiry mandate may receive personal data under Union law or the law of the Member States shall not be considered recipients; the processing of such data by these said authorities is carried out in accordance with the applicable directives on data protection in accordance with the purposes of the processing. 

3. Personal data are all information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data may be your name, contact data and user behaviour. 

4. The Controller is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of processing personal data. Where the purposes and means of such processing are laid down by Union law or by the law of the Member States, the controller or the specific criteria for his appointment may be laid down in accordance with Union law or the law of the Member States. For the data processing described in this privacy policy, CTS EVENTIM AG & Co. KGaA is responsible. 

5. Processing is any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transfer, disseminating or otherwise making available, aligning or combining, restricting, erasing or destroying. A processing activity may be the collection and use of your contact details when sending out newsletters. 

2. Processing of your data 
We only process data insofar as this is necessary for your visit. 

2.1 Merchandise sales 
If you pay cashless for merchandise items during an event at the Waldbühne, we as the operator of the Waldbühne will process your payment information in accordance with Art. 6 Para. 1 Sentence 1 lit. b) GDPR for the purpose of processing and executing your order requests. 

During the payment process, your data will be transmitted to PayOne GmbH, who is the network operator and acquirer for credit card transactions. More information are available here:

2.2 Accreditation 
If you are employed at an event at the Waldbühne or you are authorised to enter via our guest list, we process your personal data on the event premises for the purpose of carrying out access control. In doing so, we record your name and, if applicable, company data before the event with the support of our personnel security service provider. The legal basis is the fulfilment of a contract in accordance with Art. 6 Para. 1 Sentence 1 lit. b) GDPR. 

2.3 Technical support services 
In order to ensure functioning technical conditions at events, we provide technical support services on site. In the context of these support cases, it may be possible that our technicians, who work in a wide variety of systems in the course of their activities/ when solving problems, can access your personal data, the cash register system or in the access control system. The legal basis is the fulfilment of a contract in accordance with Art. 6 Para. 1 Sentence 1 lit. b) GDPR. 

2.4 Accessibility 
If you contact us in advance to provide us with information about dietary restrictions, the type and extent of assistance you require and other requirements for your seat, or if you are an accompanying person, we process this personal data for the purpose of barrier-free access to events at the Waldbühne (further information here: We use Tempodrom Betriebsgesellschaft mbH & Co. KG as a service provider to answer and coordinate your requests. The legal basis is the fulfilment of a contract in accordance with Art. 6 Para. 1 Sentence 1 lit. b) GDPR. 

3. Categories of recipients of personal data 
The personal data collected in the course of your visit will not be passed on to third parties or transferred in any other way without your consent - except in other cases expressly described in this data protection information. Exceptions to this are the transfer of personal data to state institutions and authorities insofar as we are legally obliged to do so. The legal basis for this processing of your personal data is Art. 6 Para. 1 Sentence 1 lit. c) GDPR (fulfilment of a legal obligation). 

4. Storage and erasure of your personal data 
Unless a shorter storage period results from the other provisions of this data protection information, we will only store your personal data obtained by us in connection with your visit for as long as this is necessary to process your enquiries to us, and thereafter only to the extent and insofar as we are obliged to do so. If we no longer need your data for the purposes described above, it will only be stored during the respective statutory retention period and not processed for other purposes. 

5. Your rights 
You have the right to request information from us relating to your personal data stored with us at any time. Insofar as the legal requirements are met, you also have rights vis-à-vis us to the rectification, deletion or restriction of the processing of the relevant data, the right to object to the processing of your data by us and to receive from us the personal data concerning you in a structured, common and machine-readable format (you may transfer this data or have it transmitted to other parties). If you have given consent for the use of personal data, you can revoke this at any time. 

If you are of the opinion that the processing of your personal data by us violates the applicable data protection law, you can complain to the competent supervisory authority for data protection. 

6. Contact: Data Protection Officer 
You can contact us via the communication details specified in Paragraph 1. 

For all questions concerning the topic of data protection (including the assertion of your rights under Paragraph 5), you can also contact our Data Protection Officer. The contact information for the Data Protection Officer is as follows: 

Data Protection Officer  
Contrescarpe 75 A 
D-28195 Bremen  

7. Data security 
CTS EVENTIM AG & Co. KGaA maintains current technical measures to guarantee data security and in particular to protect your personal data against hazards during data transfers and from third parties becoming aware of the same. These are adjusted according to the current state of the art in each case. 

8. Changes to the data protection information 
From time to time, for example due to further developments of our services onsite or statutory changes, it may become necessary to amend the data protection information. We therefore reserve the right to amend the data protection statement at any time with effect for the future. We therefore recommend that you reread this data protection statement at regular intervals. 


Stay up to date and subscribe to our newsletter.