Privacy

1. Controller

The controller for this website and the operation of the platform is:

Phone: +49 1516 4327820
Email: hello@fommo.live

2. Roles: organizers and Fommo

As described in the imprint, Fommo only operates the technical online ticketing service. This results in the following split:

• Ticket purchase and admission: the controller within the meaning of the GDPR is the organizer named on the event page. We process the resulting data as a processor (Art. 28 GDPR) on the organizer's instructions. Questions and requests about your order are best sent directly to the organizer. If you write to us, we will forward your request to them.
• This website and enquiries to us: here we are the controller ourselves. This covers visits to these pages, emails to us and the data of organizers who use Fommo.

3. Visiting this website

When you visit this website, our hosting provider processes technically necessary connection data: IP address, date and time, the page requested, amount of data transferred, referrer, and browser and operating system details. This data is stored in server logs to deliver the website and keep it secure, and is deleted after 30 days at the latest.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website reliably and securely.

No cookies, no tracking: this website sets no cookies, uses no analytics or advertising services and embeds no external fonts, maps or videos. Fonts and scripts are served from our own server.

4. Contact by email or phone

When you contact us, we process the information you provide (e.g. name, email address, phone number, content of your message) to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your request relates to a contract or its preparation, and Art. 6 (1) (f) GDPR otherwise (answering enquiries). We delete the data once your request has been resolved, unless statutory retention obligations apply.

5. Ticket purchase and admission (on behalf of the organizer)

When you order a ticket through Fommo, we process the following on behalf of the organizer:

• Order data: name, email address, selected event, ticket type, quantity, price and time of order,
• Ticket data: ticket number and the personal code (e.g. a QR code) used to check your ticket at the entrance,
• Admission data: whether and when your ticket was scanned at the entrance,
• Payment information: where the organizer provides payment details on the event page or integrates a payment service. The organizer handles the payment itself.

The purpose is to process your order, provide your ticket and check it at the entrance. The organizer's legal basis is Art. 6 (1) (b) GDPR (contract for the ticket purchase). Which further data the organizer collects and how long it is kept is set out in the organizer's own privacy notice.

6. Organizer data

If you use Fommo as an organizer, we process your account and contact details, the details of your events and billing data in order to provide the platform and invoice our services. The legal basis is Art. 6 (1) (b) GDPR, and Art. 6 (1) (c) GDPR for retention under tax and commercial law.

7. Hosting and service providers

We run the platform's database, sign-in and file storage on Supabase (Supabase Inc.). Data is stored on servers in the European Union. A data processing agreement under Art. 28 GDPR is in place with Supabase. Where data may reach the USA in individual cases, we rely on the European Commission's Standard Contractual Clauses.

Data is transferred between your device and our servers in encrypted form (TLS).

8. Recipients

Your order and admission data is received by the organizer of the event and the door staff they deploy. Beyond that, only the service providers named in this policy have access, as far as is necessary for operation. We do not sell data and do not share data for advertising purposes.

9. Retention

We store personal data only for as long as necessary for the respective purpose. Ticket and order data is stored according to the organizer's instructions. Data subject to statutory retention obligations (e.g. up to ten years under the German Commercial Code or Fiscal Code) is kept until those periods expire and is blocked for any other use.

10. Your rights

You have the right to:

• access the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).

For data from a ticket purchase, please contact the organizer. For everything else, reach us at hello@fommo.live.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Devrientstraße 5, 01067 Dresden, Germany.

11. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

12. Changes

We update this privacy policy when the platform or the legal situation changes. The version published on this page applies.