Tickets
Tickets

Privacy Policy

Controller (Art. 4 No. 7 GDPR)

Epic Comedy Berlin UG (haftungsbeschränkt)
 Anton-Saefkow-Straße 52, 10407 Berlin, Germany
 Email: info@epiccomedyberlin.com | Tel.: +49 157 575 22343

1. Overview

We process personal data when you visit this website, submit contact enquiries, purchase tickets through third-party providers, engage with our marketing communications, and for reach and performance measurement. This notice explains the purposes, legal bases, recipients, storage periods, international transfers, and your rights.

2. Hosting and log files

Hosting by HOSTINGER operations, UAB, Švitrigailos str. 34, 03230 Vilnius, Lithuania. When you access our site, server log files are processed (IP address, date and time, URL, referrer, user agent, status code).
 Purpose/legal basis: operation and security of the website (Art. 6(1)(f) GDPR).
 Retention: usually 7 to 14 days, then deletion or anonymisation.
 Processor agreement: data processing agreement under Art. 28 GDPR with Hostinger.

3. Cookies and consent management

We use Cookiebot (Usercentrics A/S) as our consent management platform. On your first visit you can choose categories (essential, preferences, statistics, marketing).
 Legal basis: Art. 6(1)(c) GDPR for documenting consent and Art. 6(1)(a) GDPR for non-essential cookies. You can withdraw your consent at any time via the cookie icon.

4. Contact form and email

Data: first name, last name, email address, subject, message, and any optional details you provide.
 Purpose/legal basis: handling your enquiry (Art. 6(1)(b) GDPR for pre-contractual communication, otherwise Art. 6(1)(f) GDPR).
 Retention: enquiries are generally stored for 12 months unless statutory retention obligations require longer.
 Email service: Google Workspace (Google Ireland Limited) as processor. Possible transfers to Google LLC (USA) under EU Standard Contractual Clauses (SCCs).

5. Newsletter (optional / once activated)

We only send newsletters using double opt-in (sign-up plus confirmation link).
 Data: email address and, where applicable, name. Delivery and open statistics may be processed where technically necessary.
 Legal basis: consent under Art. 6(1)(a) GDPR. Documentation of consent under Art. 6(1)(c) GDPR.
 Unsubscribe: possible at any time via the link in the newsletter.
 Provider: ⚠︎ [insert e.g. Mailchimp/Brevo/Klaviyo] acting as processor. If applicable, third-country transfers based on SCCs.

6. Ticketing / Humanitix widgets

Tickets are sold via Humanitix using embedded widgets. When you use the widget, your data is transmitted directly to Humanitix. Humanitix’s privacy policy applies.
 Legal basis: contract performance (Art. 6(1)(b) GDPR) and our legitimate interest in efficient processing (Art. 6(1)(f) GDPR).
 Note: please review the Humanitix privacy information within the widget.

7. Web analytics and marketing

7.1 Google Analytics 4

Provider: Google Ireland Limited. We use IP anonymisation (IP masking).
 Legal basis: consent (Art. 6(1)(a) GDPR) via Cookiebot.
 Transfers: Google LLC (USA) under SCCs. Additional safeguards may apply.
 Retention: standard 14 months, configurable.

7.2 Meta Pixel (Facebook/Instagram) and Google Ads

Used for reach measurement and remarketing where you have given consent.
 Legal basis: consent (Art. 6(1)(a) GDPR).
 Transfers: Meta Platforms Ireland Ltd. with transfers to the USA under SCCs. Google Ireland and Google LLC under SCCs. You can adjust settings or opt out via Cookiebot.

8. Third-party embeds

8.1 YouTube (privacy-enhanced mode)

We embed YouTube videos using privacy-enhanced mode (youtube-nocookie.com). Cookies may be set when you play a video.
 Legal basis: consent (Art. 6(1)(a) GDPR).

8.2 Google Fonts and local fonts

We use self-hosted fonts and the Inter typeface.
 ⚠︎ If Inter is loaded remotely via Google Fonts, your browser transmits your IP address to Google.
 Recommendation: host Inter locally to avoid third-country calls. If loaded remotely, the legal basis is consent (Art. 6(1)(a) GDPR).

8.3 reCAPTCHA / bot protection (if active)

⚠︎ Please confirm activation. If used: provider is Google. Legal basis is consent (Art. 6(1)(a) GDPR). Possible transfers to the USA under SCCs.

9. International data transfers

When using Google, Meta, or newsletter providers, data may be transferred to third countries, in particular the USA. Transfers are based on EU Standard Contractual Clauses with supplementary measures where appropriate.

10. Storage periods

We only process data for as long as necessary for the stated purposes:

  • Contact enquiries: generally 12 months

     

  • Newsletter: until withdrawal of consent

     

  • Analytics and marketing: according to tool settings, for example 14 months

     

  • Server logs: 7 to 14 days

     

11. Your rights (Art. 15 to 22 GDPR)

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on Art. 6(1)(f) GDPR. You may withdraw consents at any time with effect for the future.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

13. Data security

We use TLS/HTTPS and apply appropriate organisational and technical measures in line with Art. 32 GDPR.

14. Changes to this notice

We will update this notice if our services or the legal framework change.
 Status: 24 September 2025.