Eventbrite
Eventbrite is a U.S.-based event management and ticketing website.
Score
Citation
In addition, if you are a member of Facebook (or another social media platform), and you provide Personal Data to an Organizer (such as in the ways described in Section 5.5), the Organizer may use that Personal Data to send you advertising and offers through Facebook (or another social media) platform, including when you are on Facebook or another social media platform. The Organizer may work with us and with third parties to enable this data integration and advertising. Facebook and other social media platforms may provide a way to opt out of this type of advertising. Please review their user settings and support pages to learn more about how they help you to manage privacy and marketing choices.
Even if there is a reasonable delay before the data is fully deleted (as is common), the data still counts as "permanently deleted" and satisfies the parameters for this question.
Score
Citation
You can access or delete your Personal Data stored by us. If you are a registered User, you can do this by logging in and visiting the Account Settings page to download a copy of your Personal Data in machine readable form and/or delete your Personal Data. You can also edit some of your Personal Data directly through your account. In certain cases, you can ask us to correct and update any inaccurate Personal Data using the contact information below, and we will consider your request in accordance with applicable laws.
Notes
You can find your account settings at https://www.eventbrite.com/account-settings
This may come in the form of outright data sharing or by using local third-party analytics software (such as Google Analytics, which collects a plethora of user information).
Note that whether the policy allows sharing aggregated user data does not affect this question.
If the personal data is encrypted when it passes through the third-party, it does not count as third-party access (as the data is inaccessible to that party).
If personal data has been made public by, for example, posting it to a blog, it does not count as private personal information (and is therefore not considered by this question).
Score
Citation
We are not in the business of selling your Personal Data. We consider this information to be a vital part of our relationship with you. Therefore, we will not sell your Personal Data to third parties, including third party advertisers. There are certain circumstances in which we may disclose, transfer or share your Personal Data with certain third parties without further notice to you, as set forth in this Privacy Policy.
As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets. We may also disclose your Personal Data in the course of due diligence for such an event. You acknowledge and agree that any successor to or acquirer of Eventbrite (or its assets) will continue to have the right to use your Personal Data and other information in accordance with the terms of this Privacy Policy.
We may also share your Personal Data with our parent companies, subsidiaries and/or affiliates for purposes consistent with this Privacy Policy. Our parent companies, subsidiaries and affiliates will be bound to maintain that Personal Data in accordance with this Privacy Policy.
We may share your Personal Data with our contractors and service providers who process Personal Data on behalf of Eventbrite to perform certain business-related functions. These companies include our marketing agencies, online advertising providers, data enhancement and data services providers, database service providers, backup and disaster recovery service providers, email service providers, payment processing partners, customer support, tech support, hosting companies and others. When we engage another company to perform such functions, we may provide them with information, including Personal Data, in connection with their performance of such functions.
In addition, when you register for an event, sign up for communications, enter a contest, or otherwise input your Personal Data (such as through a web form) to communicate with an Organizer or participate in an Organizer event, that Organizer will receive that information. For instance, if you input your name and email address into a web form for an Organizer offer, activity or event, the Organizer will receive that information. The Organizer may then send you marketing or other communications, which may be subject to its own, separate privacy policy. Likewise, if you provide your mobile phone number, you may receive information messages related to the service, event, activity or information in which you’ve expressed interest.
When you purchase tickets to, register for or donate to an event, transfer an event ticket or registration to another person, enter a contest, or otherwise input your Personal Data (such as through a web form), or otherwise communicate with an Organizer, or participate in or express interest in an Organizer or Organizer event or activity, that Organizer will receive the information you provide, including your Personal Data, and where a ticket or registration is transferred, the Personal Data of the transferee as well. Other third parties that are involved in or on whose behalf an event or activity is promoted, may receive that Personal Data as well.
For example, as to fundraising pages, we may provide your Personal Data both to the Organizer charity of the fundraising page and the Organizer of the event to which the fundraising page is linked. In some instances, an Organizer may appoint a third party, which may or may not be affiliated with the Organizer, to create an event or fundraising page on its behalf (we call these third parties ("Third Party Organizers"). For example, and without limitation, a concert venue (the Organizer, in this case) may allow third party promoters or production companies (the Third Party Organizers) to create events that will be hosted at the Organizer's venue using its Eventbrite account. In that case, we may provide your Personal Data to the Third Party Organizers on behalf of the Organizers. The same is true for contests and sweepstakes: we may provide your Personal Data to both the Organizer promoting the contest or sweepstakes, and any legal sponsor of the contest or sweepstakes (such as a brand sponsor).
We are not responsible for the actions of these Organizers, or their Third Party Organizers (or other downstream recipients of your Personal Data), with respect to your Personal Data. It is important that you review the applicable policies of the Organizers, and if applicable and available, their appointed Third Party Organizers, of an event (and the related fundraising page, if applicable) before providing Personal Data or other information in connection with that event or related fundraising page.
Similarly, if you are a member of an Organizer's organization within Eventbrite, your Personal Data will be available to the Organizer and shared with those Third Party Organizers granted permission by the Organizer to view all members of the Organizer's organization.
a. Connecting Your Eventbrite Account to Social Media Services. You can connect your Eventbrite account to your accounts on third party services like Facebook, in which case we may collect, use, disclose, transfer and store/retain information relating to your account with such third party services in accordance with this Privacy Policy. For example, if you connect with Facebook, we store your Facebook id, first name, last name, email, location, friends list and profile picture and use them to connect with your Facebook account to provide certain functionality on the Services, like recommending events that your Facebook friends are interested in and sharing the events you are interested in, or attending, with certain groups of people like your Facebook friends.
b. “Liking” or “Following” Eventbrite on Social Media. In addition, when you “like” or “follow” us on Facebook, Instagram, Twitter or other social media sites (to the extent we provide that capability), we may collect some information from you including your name, email address, and any comments or content you post relevant to us. We likewise may collect your information if you sign up for one of our promotions or submit information to us through social media sites.
c. Facebook Plug-Ins and Links on Our Pages. Eventbrite’s own website may contain links to Facebook as well, such as through the Facebook “Like” or “Share” button or other social plug-ins. When you interact with these features and links, your browser will establish a direct link with the Facebook servers, and Facebook will receive information about your browser and activity, and may link it to your Facebook user account. For more information about how Facebook uses data, please see Facebook’s own policies.
d. Additional Facebook Marketing and Connectivity. In addition, if you are a member of Facebook (or another social media platform), and you provide Personal Data to an Organizer (such as in the ways described in Section 5.5), the Organizer may use that Personal Data to send you advertising and offers through Facebook (or another social media) platform, including when you are on Facebook or another social media platform. The Organizer may work with us and with third parties to enable this data integration and advertising. Facebook and other social media platforms may provide a way to opt out of this type of advertising. Please review their user settings and support pages to learn more about how they help you to manage privacy and marketing choices.
e. Third party services and integrations. Eventbrite may provide you with opportunities to contract directly with third parties, and/or to integrate with third party services or applications, through our platform. In such instances, we will disclose your Personal Data to other entities in order to fulfill a request by you, or to provide services you have requested.
We may disclose your Personal Data if required to do so by law in order to (for example) respond to a subpoena or request from law enforcement, a court or a government agency (including in response to public authorities to meet national security or law enforcement requirements), or in the good faith belief that such action is necessary to (a) comply with a legal obligation, (b) protect or defend our rights, interests or property or that of third parties, (c) prevent or investigate possible wrongdoing in connection with the Services, (d) act in urgent circumstances to protect the personal safety of Users of the Services or the public, or (e) protect against legal liability.
Score
Citation
We may disclose your Personal Data if required to do so by law in order to (for example) respond to a subpoena or request from law enforcement, a court or a government agency (including in response to public authorities to meet national security or law enforcement requirements), or in the good faith belief that such action is necessary to (a) comply with a legal obligation, (b) protect or defend our rights, interests or property or that of third parties, (c) prevent or investigate possible wrongdoing in connection with the Services, (d) act in urgent circumstances to protect the personal safety of Users of the Services or the public, or (e) protect against legal liability.
Score
Notes
There is no mention to how data is secured
Score
Citation
Last Updated: December 16, 2019
Note that all companies operating in the EU are subject to Art. 33 of the GDPR, which requires companies to notify their data protection authority of a data breach within 72 hours of discovering it.
Score
Notes
This policy doesn't require the service to disclose data breaches.
Score
Citation
The Services and our business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right, in our sole discretion, to update or modify this Privacy Policy at any time (collectively, "Modifications"). Modifications to this Privacy Policy will be posted to the Site with a change to the "Updated" date at the top of this Privacy Policy. In certain circumstances Eventbrite may, but need not, provide you with additional notice of such Modifications, such as via email or with in-Service notifications. Modifications will be effective thirty (30) days following the "Updated" date or such other date as communicated in any other notice to you.
Please review this policy periodically, and especially before you provide any Personal Data. This Privacy Policy was updated on the date indicated above. Your continued use of the Services following the effectiveness of any Modifications to this Privacy Policy constitutes acceptance of those Modifications. If any Modification to this Privacy Policy is not acceptable to you, you should cease accessing, browsing and otherwise using the Services.
This includes the use of data brokers and independent verification authorities (such as background check providers).
Score
Citation
We may also collect or receive Personal Data from third party sources, such as Organizers, other Consumers, social media or other third party integrations, your credit card issuing bank, our payment processing partners or other third parties.
Score
Citation
We collect and use the Personal Data we collect in a manner that is consistent with this Privacy Policy, and applicable privacy laws. We may use the Personal Data as follows:
4.1 Specific Reason.
If you provide Personal Data for a certain purpose, we may use the Personal Data in connection with the purpose for which it was provided. For instance, if you contact us by email, we will use the Personal Data you provide to answer your question or resolve your problem and will respond to the email address from which the contact came.
4.2 Access and Use.
If you provide Personal Data in order to obtain access to or use of the Services or any functionality thereof, we will use your Personal Data to provide you with access to or use of the Services or functionality and to analyze your use of such Services or functionality. For instance, if you supply Personal Data relating to your identity or qualifications to use certain portions of the Services, we will use that information to make a decision as to granting you access to use such Services and to assess your ongoing qualification to use such Services.
4.3 Internal Business Purposes.
We may use your Personal Data for internal business purposes, including without limitation, to help us improve the content and functionality of the Services, to better understand our Users, to improve the Services, to protect against, identify or address wrongdoing, to enforce our Terms of Service, to manage your account and provide you with customer service, and to generally manage the Services and our business.
4.4 Eventbrite Marketing.
We may use your Personal Data for our marketing and advertising purposes, including (without limitation) by email, SMS marketing, display media, and targeting other devices (such as tablets, mobile devices and televisions). We do this in order to inform you about services or events we believe might be of interest to you, develop promotional or marketing materials and display Eventbrite or event-related content and advertising on or off the Services that we believe might be of interest to you. We may also do this on behalf of an Organizer, for example where your prior interactions with an Organizer suggest you may be interested in a particular type of event. See "Opt Out from Electronic Communications" below on how to opt out of various Eventbrite marketing communications.
You may see advertisements for our Services (or our Organizer’s events) on third party websites, including on social media platforms. Where you see an advertisement on a third party website or social media platform, this may be because we engaged the third party or social media platform to show this advertisement to our Users, or to others who have similar attributes to our Users. In some cases, this involves sharing your email address or other contact details with the third party or social media platform so that they can identify you as one of our Users, or identify other individuals with similar attributes to you in order to show them advertisements for our Services (or for our Organizer’s events). If you no longer want your Personal Data to be used for these purposes please contact us at privacy@eventbrite.com. For more information about how we market on, and interact with social media sites, please refer to section 5.6.
4.5 Organizer Emails.
We allow Organizers to use our email tools to contact Consumers for their current and past events, so you may receive emails from our system that originate with such Organizers and that we send on their behalf. If you registered for an event on the Services, your email address is available to that Organizer. However, Organizers may also import the email addresses they have from external sources and send communications through the Services to those email addresses, and we will deliver those communications to those email addresses on the Organizer's behalf. The Organizer and not Eventbrite is responsible for sending these emails. See "Opt Out from Electronic Communications" below on how to opt out of Organizer-initiated communications.
4.6 Use of Interest-Based Data
We sometimes make inferences about the type of events or activities you may be interested in. We may use these inferences to help target advertising or customize recommendations to you, including on behalf of Organizers. We may do this on an aggregated or generalized basis. For instance, we may determine that our users who attend many comedy events also often attend or show interest in endurance-related events or content. We may direct (or assist in directing) content or recommendations related to both comedy and endurance to those Users.
4.7 Other Purposes.
If we intend to use any Personal Data in any manner that is not consistent with this Privacy Policy, you will be informed of such anticipated use prior to or at the time the Personal Data is collected or we will obtain your consent subsequent to such collection but prior to such use.
4.8 Aggregated Personal Data.
In an ongoing effort to understand and serve our Users better, we often conduct research on our customer demographics, interests and behavior based on Personal Data and other information that we have collected. This research is typically conducted on an aggregate basis only that does not identify you. Once Personal Data is in an aggregated form, for purposes of this Privacy Policy, it becomes Non-Personal Data.
Some services allow users to opt-out or opt-in to of non-critical collection or use of personal data, such as collecting data for personalized advertisements.
Score
Citation
Facebook and other social media platforms may provide a way to opt out of this type of advertising. Please review their user settings and support pages to learn more about how they help you to manage privacy and marketing choices.
Score
Citation
When you use or interact with us through the Services, we may collect Personal Data. Sometimes this will be on our own behalf and other times this will be on behalf of an Organizer using our Services to run an event. This is an important distinction for purposes of certain data protection laws and is explained in more detail below.
3.1 Information Collected From All Users.
Information you provide to us: For all Users we collect Personal Data when you voluntarily provide such information to the Services, such as when you register for access to the Services, contact us with inquiries, respond to one of our surveys or browse or use certain parts of the Services. The Personal Data we may collect includes without limitation your name, address, email address and any other information that you choose to provide and/or that enables Users to be personally identified.
Information we automatically collect: We also automatically collect certain technical data that is sent to us from the computer, mobile device and/or browser through which you access the Services ("Automatic Data"). Automatic Data, includes without limitation, a unique identifier associated with your access device and/or browser (including, for example, your Internet Protocol (IP) address) characteristics about your access device and/or browser, statistics on your activities on the Services, information about how you came to the Services and data collected through Cookies, Pixel Tags, Local Shared Objects, Web Storage and other similar technologies. You can find out more information about how we use Cookies and other similar tracking technologies in our Cookie Statement.
When you register for the Services or otherwise submit Personal Data to us, we may associate other Non-Personal Data (including Non-Personal Data we collect from third parties) with your Personal Data. At such instance, we will treat any such combined data as your Personal Data until such time as it can no longer be associated with you or used to identify you.
3.2 Information Collected From Organizers.
If you are an Organizer we will collect additional Personal Data from you.
Information you provide to us: In some cases, we may collect your credit card information (e.g., your credit card number and expiration date, billing address, etc.), some of which may constitute Personal Data, to secure certain payments. In addition, if you use our payment processing services, we will collect financial information from you (e.g., your bank account information or an address to send checks) as necessary to facilitate payments and information required for tax purposes (e.g., your taxpayer identification number).
Information we obtain from other sources: We may also collect or receive Personal Data including your name, email address and other contact information from third party sources, such as third party websites and marketing partners, your bank, our payment processing partners and credit reporting agencies.
3.3 Information Collected From Consumers.
If you are a Consumer we will collect additional Personal Data from you, sometimes for our own purposes and other times on behalf of an Organizer (see Section 16 below for more information).
Information you provide via Eventbrite Properties or Applications: If you register for a paid event, you will provide financial information (e.g., your credit card number and expiration date, billing address, etc.) some of which may constitute Personal Data. In addition, Organizers can set up event registration pages to collect virtually any information from Consumers in connection with registration for an Organizer's event listed on the Services. Eventbrite does not control an Organizer's registration process nor the Personal Data that they collect. When you register for, or otherwise provide information to Eventbrite in conjunction with an Organizer event or activity, whether that information is yours or a third party’s, in connection with a purchase, registration, or transfer, that Organizer will receive and may use the information you provide. Please see Section 5.5 below, titled “How We Disclose and Transfer Your Personal Data: Organizers” for more information about an Organizer’s receipt and use of your Personal Data.
Information we obtain from other sources: We may also collect or receive Personal Data from third party sources, such as Organizers, other Consumers, social media or other third party integrations, your credit card issuing bank, our payment processing partners or other third parties.
Notes
There is frequent usage of not "without limitation," meaning more, unmentioned data could be collected.
Last Updated
June 24, 2020
Sources
Contributors