Personal data protection policy

Last updated: 04/04/2024



Resale values the trust you place in us when navigating, buying, or selling tickets on our website, and we place great importance on protecting your personal data and complying with applicable regulations.

All the data provided to Resale is necessary for the proper execution of its services and activities. Therefore, visiting and using our site implies your acceptance of our personal data protection policy. We invite you to find below all the information you need to make an informed decision: the conditions under which we collect, use, and store your personal data, the recipients to whom certain personal data is transferred, and the rights you have over your personal data.

Definitions

“Consent”, any voluntary, specific, informed, and unequivocal manifestation by which the data subject agrees, through a statement or a clear affirmative action, to the processing of personal data concerning them;
“Recipient”, a natural or legal person, public authority, service, or any other body that receives communication of personal data, whether or not a third party. However, public authorities that may receive personal data in the course of a specific investigation mission in accordance with Union or Member State law are not considered recipients; the processing of these data by the relevant public authorities complies with applicable data protection rules depending on the purposes of the processing;
“Personal Data”, any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"); an "identifiable" natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific factors related to their physical, physiological, genetic, mental, economic, cultural, or social identity;
“Inactive Period”, corresponds to a prolonged period during which a User ceases to interact with the Platform. It is interrupted after the slightest interaction, such as a question posed to our support service, clicking on a hyperlink in an email sent by the Platform, or a positive response to a solicitation asking whether a User wishes to continue receiving updates;
“Platform”, refers to the solution comprising all publicly accessible pages of the official ticket exchange service as well as the infrastructure, source code, and databases, which is published by See Tickets S.A.S, located at 12 rue de Penthièvre - 75008 Paris, which holds all intellectual property rights related to it and is operated by the Data Controller under a white-label model. It refers indifferently to all pages of RESALE. The Platform includes both the infrastructure and the content, particularly texts, sounds, images (static or dynamic), videos, and databases.
“Processing”, any operation or set of operations performed, whether or not by automated means, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, consultation, use, communication by transmission, dissemination, or any other form of making available, comparison or interconnection, restriction, erasure, or destruction, whether automated, semi-automated, or otherwise;
“Data Controller”, the natural or legal person, public authority, service, or any other body that, alone or jointly with others, determines the purposes and means of the processing; when the purposes and means of processing are determined by Union or Member State law, the Data Controller may be designated, or the specific criteria applicable to its designation may be set out by Union or Member State law;
“Processor”, the natural or legal person, public authority, service, or any other body that processes personal data on behalf of the Data Controller;
“Third Party”, a natural or legal person, public authority, service, or body other than the data subject, the Data Controller, the Processor, and persons who, under the direct authority of the Data Controller or the Processor, are authorized to process personal data;
“User”, any person who may be concerned by the processing of their personal data as a result of interacting with the Resale platform. This includes, but is not limited to, sellers, buyers or customers, prospects, visitors to the platform...

When is Personal Data Collected?

We may collect data about you when:

  • Creating an account;
  • Modifying your profile;
  • Posting a ticket resale advertisement;
  • Purchasing a ticket listed for sale;
  • Posting a review regarding an advertisement or another user;
  • Browsing the website of the platform;
  • Interacting with customer support;
  • Interacting with advertisements on the platform;

What are the Legal Bases for Processing?

In accordance with the provisions of the General Data Protection Regulation (GDPR) No. 2016/679, each processing operation performed by Resale as the Data Controller is based on one of the following legal bases:

  • The performance of the contract
  • Legitimate interest of the Resale Platform
  • Consent
  • Legal obligation that the Platform must comply with

What is the Purpose of the Collected Personal Data and How Long is it Stored?

Management of User Accounts


Managing your account and those of other Users on the Platform requires the processing of personal data.

Creating an Account


When creating your account on Resale, we need to collect identification data about you (first name, last name, email address, and encrypted password).

The processing of this data is based on the performance of the contract you enter into when registering. It will be stored until your account is deactivated or deleted, or after a 5-year inactivity period.

Configuring Your Profile


The Resale Platform allows you to configure your user profile. You can complete it by adding your first name, last name, gender, date of birth, profile picture, or other information in the "about me" section. Metadata such as geolocation and date/time of photo upload may also be associated with the photo you decide to upload to the Platform.

The processing of this identification data is based on your consent and will be stored until it is deleted, your account is deactivated, or after a 5-year inactivity period.

Displaying Account Activity Information on the Profile


Certain information regarding your activity is displayed on your profile and is visible to other Platform Users. This may include your username, last login date, the number of sales you have made, and the reviews posted about you or your ads.

The processing of this personal data is based on the legitimate interest of the data controller and will be stored until your account is deleted, deactivated, or after a 5-year inactivity period.

Managing Listings

Verifying Seller Identity


In order to post a ticket resale advertisement on the Platform, you will be required to provide personal identification and contact data: your name, surname, postal address, email address, date of birth, and IP address.

Additional information may be requested, such as an official identity document, as part of random checks. Indeed, in order to secure the Platform for Users and the transactions made through it, Users must at all times be able to prove their identity.

Furthermore, each withdrawal request will necessarily be subject to an identity check (known as "Know Your Customer" or KYC), which is required by law as part of efforts to combat money laundering and terrorist financing (AML/CFT), and will be carried out by the company Stripe, under the terms outlined below.

The personal data thus collected will be retained for a period of 3 years. This duration is reduced to 1 year for any biometric data that may be transmitted to us.

Managing Transactions, Payments, and Banking Data

We use Stripe for payments, analytics, and other commercial services. Stripe collects and processes personal data, including identification information about devices connecting to its services. Stripe uses this data to operate and improve the services it provides to us, including for fraud detection and prevention. You can learn more about Stripe and its processing activities by consulting their privacy policy at the following address: https://stripe.com/fr/privacy.

Thus, Resale does not collect or process any personal data regarding payments and transactions made for the resale of tickets between Users on its Platform.

In accordance with its legal obligations, SEE TICKETS will use the personal data of sellers necessary for sending a summary file of transactions made in the previous year at the beginning of the year, and will communicate this summary to the authorities when the annual amount exceeds €3,000 or 20 transactions.

Content Moderation


In order to moderate the content on its Platform, Resale is required to process personal data concerning you.

Moderation of a User’s Activity


When you have a user account, add or modify information on your public profile, post a resale listing, or leave a review about other Users, Resale must ensure the accuracy of the information you provide. It collects personal identification data such as your name, surname, username, contact information such as your email address, as well as data related to the listing you post, such as its title, content, photos, or the review you have submitted.

The processing of this personal data is based on the legitimate interest of the data controller and it will be kept until the deletion or deactivation of your account or after a period of inactivity of 5 years.

Reporting Content


The Platform allows you to report content (listings, reviews, etc.) from other Users that you consider abusive or unlawful. For this purpose, Resale processes personal identification and contact data concerning you.

The processing of this personal data is based on your consent and it will be kept for the duration necessary to manage the report.

Fraud Prevention


We are committed to providing our users with a trustworthy service of the highest quality. Thus, we may need to use the personal data we collect during the sale of tickets on our site to determine the fraud risk associated with each order and to protect buyers from potential fraudulent ticket sales.

For this purpose, we may collect identification data, contact information, session, connection, browsing data, and track your commercial relationships. We may also ask you for and process an identity document.

The processing of this personal data is based on legitimate interest and it will be kept for the duration necessary for the verification.

Platform Maintenance


To ensure the maintenance of the Resale platform, we may need to process certain personal data. In the event of a malfunction on our site, the analysis of the logged data will also allow our technical teams to identify the cause of the anomaly and make necessary corrections.

The legal basis for processing this personal data is legitimate interest, and it will be kept for 5 years.

Marketing Operations

User Journey Analysis


In order to improve our service, we may, with your authorization through the cookie banner, collect personal identification, connection, session, and browsing data concerning you. This may include your name, surname, IP address, connection time, pages visited, and the items you have viewed on the Platform.

The processing of this personal data is based on your consent, and it will be kept for 1 year.

Commercial Communications


When creating your customer account on our site, and at any time by clicking on the appropriate link, we offer you the opportunity to stay informed by email about our latest news and deals, as well as those of our partners and/or event organizers. To consent, simply check the relevant box at the end of the form.

The processing of this personal data is based on your consent, and it will be kept for 3 years.

If you are already a customer of our site, under Article L.34-5 of the French Postal and Electronic Communications Code, we may send you information via email about similar events and services to those you have purchased.

The processing of this personal data is based on legitimate interest, and it will be kept for 3 years from the end of the commercial relationship or the last contact initiated by the user.

You have the option to oppose all these communications by not checking the acceptance box during account creation and later unsubscribing from our database using the hyperlink provided at the bottom of each of our emails. The data processing will then stop.

Alert Management


We offer you the possibility to stay connected with your favorite artists, venues, and events and to receive an email whenever a new date or announcement is posted on the Platform. To do so, simply provide your email address in the designated field available in each profile corresponding to your search criteria. You can then manage your alerts from your customer account and delete them if necessary.

Thus, we need to collect identification and contact data concerning you. These will be processed based on your consent and will be kept for 5 years or until the deletion or deactivation of your account.

User Assistance


We provide a support service to respond to your questions, requests, or statements. We need to collect and process personal data to address and fulfill your request. This may include identification, contact data, connection information, as well as profile information such as your age, gender, or details related to your platform use.

The processing of this data is based on contract execution, and it will be kept for as long as necessary to fulfill your request.

Ensuring User Security


We collect personal data to ensure the security of the platform, our services, and our users, and to detect, prevent, trace, or correct any illegal or malicious actions or attempts against them.

For this purpose, identification, connection, browsing, and session data are collected.

The processing of this personal data is based on legitimate interest, and it will be kept for 5 years or following the deletion of your account.

Management of User Rights Requests


You have various rights regarding your personal data. When you wish to exercise them, you are required to provide us with certain information to allow us to reasonably respond to your request.

Thus, we need to collect identification data to verify your identity as the person authorized to make the request, data related to your activities on the Platform to ensure we have enough information to respond to your request, and contact data to get back to you.

The processing of this personal data is based on your consent and on the legal obligation imposed on SEE TICKETS, and it will be kept as long as necessary to process your request.

Are Personal Data Shared with Third Parties?


To ensure the purposes described in this document, and only for that purpose, we also share certain personal data with technical service providers with whom we are contractually bound and who have made strict commitments to comply with applicable regulations and security.

Firstly, for the execution of your transactions, your personal data may be transmitted to our payment provider, Stripe. The use of your data is then entirely their responsibility.

Also, our website and platform are hosted on servers provided by the company JAGUAR, which does not have access to your data.

Are Personal Data Transferred Outside the European Union?


Your personal data is not subject to processing or transfer outside of the European Union.

Are Personal Data Protected?


We have implemented the necessary physical, logical, and organizational protection measures to preserve the security of your data during its collection, processing, and transfer. Additionally, we have trained and sensitized our staff, who are bound by a strict confidentiality obligation, and we have established a rigorous internal security policy.

Furthermore, all our service providers and subcontractors are bound by contracts and data use agreements that allow us to ensure the processing they perform meets the compliance requirements we impose.

Moreover, we protect the security of your personal information during transmission by using Secure Sockets Layer (SSL) software, which encrypts the information you enter before sending it to us, including your credit card details.

It is still your responsibility to protect your password and not share it with anyone. Also, if you share an

computer, you must log out after each use.

How Long Are Your Data Retained?


Your personal data is retained until the purpose for which it was collected is fulfilled, subject to our legal obligations regarding retention, allowing us to justify our activities in the event of a regulatory check.

At the end of this period, your data will be deleted, anonymized, or archived in accordance with our legal retention obligations.

What Are Your Rights?


In accordance with applicable regulations, you have the right to access and rectify the personal data concerning you and the right to erasure. You can also request the restriction or portability of your data and, for legitimate reasons, object to their processing.

You can exercise these rights by contacting: donneespersonnelles@seetickets.fr or at: SEE TICKETS – Legal Department: 10 Place de la Joliette, Les Docks, Atrium 10.5, 13002 Marseille.

The letter must be signed and accompanied by a copy of an identity document bearing your signature and specifying the address to which the response should be sent. These documents will be kept by SEE TICKETS for the statutory retention period. To respond to your request accurately, we also kindly ask that you specify the treatments and/or data concerned by your request.

We will respond to your request within a maximum of one month, or two months if the complexity of the request or the number of requests requires it, provided that your request is not manifestly unfounded or excessive.

Furthermore, we remind you that you have the right to be listed on the opposition list for telephone solicitation, Bloctel, which is managed by the company OPPOSETEL as part of a public service delegation.

You also have the right to file a complaint with the CNIL, the competent authority in France, online at www.cnil.fr or by mail at 3 Place de Fontenoy – TSA 80715 – 75 334 Paris Cedex 07.

Is the Site Intended for Minors?


Tickets for events and shows intended for minors must be purchased by adults, who must provide their own personal data. Minors must, therefore, use the site with the active participation of a parent or guardian.

In accordance with applicable legal provisions, the Resale platform also commits to never targeting minors with advertising.

What About Cookies?


A cookie is a small computer file, a tracker, placed and read when, for example, browsing a website, reading an email, or installing or using software or a mobile application, regardless of the type of terminal used.

We distinguish several types of cookies, depending on their retention duration and purpose. Most of the cookies we use are automatically deleted from your hard drive when you leave your browser.

Session Cookies


Session cookies serve, for example, to offer you the cart function across multiple pages and maintain your connection to your customer account.

Functional Cookies


To recognize you and remember your preferences, make our site more welcoming, effective, and secure, adjust our offers accordingly, and enable you to browse comfortably on our site, we also use temporary functional cookies that are stored on your hard drive and are automatically deleted after a defined period.

Performance and Statistical Cookies


Additionally, we use performance and statistical cookies that collect information related to how our site is used, including through Google Analytics, allowing us to continuously improve it.

What Data is Stored in Cookies?


Only pseudonymized or anonymized data is stored in the cookies used by our site. When the cookie is activated, an identification number is assigned to it, and your personal data is not linked to this identification number. Your name, IP address, or any similar data that would allow a direct link to your identity is not stored in the cookie.

How Can You Oppose the Use of Cookies on Your Device?


You can disable cookies stored on your device at any time by selecting the appropriate settings in your browser, as indicated on the page accessible from the cookie banner that appears at the bottom of our site. However, disabling them will result in difficulties in browsing and may prevent access to certain essential features of the site.

You can also use the services of the site Youronlinechoices, offered by digital advertising professionals grouped within the European Digital Advertising Alliance (EDAA). This platform allows you to list the cookies that may be used to offer you targeted advertising and to express your consent or refusal for each of them. We invite you to note that this service will only prevent the display of advertisements based on your interests, as defined by your online activity and previous browsing.