Privacy policy

Privacy Policy

Eventim Brasil São Paulo Sistemas e Serviços de Ingressos Ltda.

Last updated: 01.06.2026

Eventim Brasil São Paulo Sistemas e Serviços de Ingressos Ltda. (“Eventim Brasil”, “We”, “Us” or “Our”) is part of the international group CTS EVENTIM AG & Co. KGaA, a global benchmark in technology for ticket sales and live event management, with operations in more than 25 countries.

In Brazil, we provide ticket production, printing, sale and distribution services to event promoters, producers and organizers, sports entities, venue managers and operators of concert halls, theaters, museums and other parties responsible for the creation, management and sale of tickets for a wide range of entertainment, sports and cultural events. We offer a set of products and services designed to connect the public to the experiences they wish to have.

This Privacy Policy describes how we process personal data collected when you use any of our products or services, whether digital or in person (the “Products and Services”), including, among others:

  • Website eventim.com.br and our associated domains;

  • Eventim mobile app for Android and iOS;

  • EVENTIM.Light — self-service platform for event promoters and producers;

  • Official box offices and physical Points of Sale (PoS) located in concert halls, stadiums, arenas and other event venues;

  • Bilheteria Eletrônica — a geolocation-based technology that allows the user to purchase tickets through the App or Website under the same pricing and payment conditions as a physical PoS, provided the user is within a defined radius of specific geographic coordinates;

  • Face Ticket — event access solution by facial recognition;

  • Customer service channels, including web forms, e-mail and telephone;

  • Promotions, cultural contests, surveys and marketing campaigns that we conduct directly or in partnership with third parties.

This Policy applies to all individuals who interact with our Products and Services, such as ticket buyers, website visitors, App users, event attendees, partner promoters and producers, sponsors, suppliers and any other person whose personal data are processed as a result of such interactions.

Eventim Brasil is committed to privacy and to the protection of personal data and operates in a transparent, ethical manner and in compliance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — “LGPD”) and other applicable regulations.

We recommend that you read this Policy carefully, together with the specific Terms and Conditions of each Product or Service you choose to use, before starting to use them. These documents complement each other and contain additional information relevant to specific rules, deadlines and conditions of use.

For any questions, comments or requests regarding the processing of your personal data, you may contact our Data Protection Officer through the channels indicated at the end of this Policy.

What information do we collect?

The information we collect varies according to the Product or Service used, the form of interaction (online or in person) and your choice, where applicable, to provide certain data.

In general, depending on the characteristics and purposes of the Product or Service, we may collect and process the following categories of personal data:

  • Registration and identification information:full name, date of birth, CPF (Brazilian individual taxpayer registry) or passport, e-mail, telephone, residential address, country and other information provided during registration or purchase.

  • Payment and transaction information:data related to the purchase, such as tickets acquired, events selected, amounts paid, transaction dates and purchase history. Credit card, debit card and other payment data are processed directly by the financial institutions and payment platforms contracted by us, which bear their own responsibility for such information.

  • Event-related information:data related to your access to the event, such as the ticket used, entry time, any changes to the purchase (transfer, refund) and, where applicable, seat or venue location information.

  • Images, video and biometric data:in certain Products and Services, such as Face Ticket, we may collect images (facial photo) or biometric records for specific purposes, such as authentication by facial recognition for event access, validation of the buyer’s identity, or recording of images at events. The processing of biometric data, as it constitutes sensitive personal data under the LGPD, is carried out subject to your specific and highlighted consent, obtained at the time of contracting or activating the relevant service.

  • Identification documents:in specific situations, such as the activation of biometric validation services, collection of tickets by third parties or compliance with legal obligations, we may request the presentation or submission of a copy of an official photo identification document.

  • Information about dependents:when you purchase tickets for children or adolescents under your legal responsibility, we may collect basic data about the minor (name, date of birth) from you in your capacity as legal guardian, in accordance with the conditions set forth in this Policy.

  • Browsing and technical information:IP address (generally partially anonymized), browser type and version, operating system, device identifiers, pages visited, time spent, events accessed, interactions with the platform, approximate geolocation data based on IP, and mobile app usage data.

  • Voluntary information about your preferences:favorite artists, genres and events, wishlists, viewing history and data that you share with us to personalize your experience.

  • Communications and customer service interactions:records of your interactions with our service channels (messages, e-mails, chats, as applicable), as well as responses to surveys, evaluations and participation in cultural contests.

  • Information from promoters, producers, partners and sponsors (B2B): when you act on behalf of a promoter, producer, supplier or partner company, we may collect professional contact data, position held, corporate documents and other data necessary to formalize the commercial relationship.

  • Information from job applicants:data provided in selection processes, such as résumé, education, professional experience and other information related to recruitment.

As a rule, we do not collect sensitive personal data, except for the biometric data described above and any information regarding special needs or health conditions that you voluntarily provide to enable your access to or participation in an event (for example, purchase of tickets intended for persons with disabilities, indication of accessibility needs or of adapted seating). Where this is the case, such data will be processed exclusively for the purpose informed at the time of collection.

What are the sources of the information?

The information we process may be obtained from different sources, depending on the context of the interaction:

  • Directly from you:when you register for our Products and Services, make a purchase, use a service, fill out a form, take part in a promotion or survey, contact our customer service or apply for a job opening.

  • Automatically collected:during your browsing on our digital channels, by means of cookies, pixels and other tracking technologies, as described further below.

  • From event promoters and producers:our partners may pass on to us information related to registrations, guest lists, accreditation, event changes or other operational situations.

  • From commercial partners, sponsors and suppliers:companies that provide services related to our operations, such as payment platforms, technology providers, anti-fraud service providers, marketing agencies and customer service platforms, may transmit information to us as necessary for the functioning of the Products and Services.

  • From public and official sources:in limited situations, we may consult public databases for the validation of registration information, fraud prevention or compliance with legal obligations.

  • From public authorities and the Judiciary:we may receive information in connection with judicial actions, administrative proceedings, official communications from police or oversight authorities, or other legal determinations.

  • From other companies of the CTS EVENTIM group:we may receive information from other companies of our international group, in connection with purposes compatible with this Policy.

We may combine information received from these different sources in order to enhance the accuracy of the data we process and the quality of the Products and Services we offer.

How do we use the information we collect?

We use the personal data we collect to enable the offering, operation and continuous improvement of our Products and Services, always observing the purposes communicated at the time of collection and the limits established by applicable legislation. The main purposes include:

  • Provision of the Products and Services:processing ticket purchases, enabling your access to the event, maintaining your customer account, requesting refunds, ticket changes and transfers, authenticating users and supporting the operations of our partner promoters.

  • Identity validation and security:confirming the buyer’s identity, preventing fraud, combating the irregular resale of tickets, protecting the integrity of events and ensuring entry only to authorized individuals. In certain services, this involves the comparison between facial image and official document.

  • Customer service and relationships:answering questions, processing requests, providing support, managing complaints and responding to requests received through consumer protection bodies.

  • Operational communications:sending purchase confirmations, reminders, event updates (cancellation, change of date or location), account notifications and other communications essential to the performance of the contract.

  • Marketing, offers and personalization:sending communications about events, launches, promotions and news that may be of interest to you, recommending content, personalizing your experience on our channels and displaying advertising adequate to your profile. Whenever required by law, these activities depend on your consent, which may be revoked at any time.

  • Analysis, improvement and product development:understanding how our Products and Services are used, identifying trends, evaluating the performance of campaigns, conducting research and developing new features. Whenever possible, we use aggregated or anonymized data for this purpose.

  • Information security and fraud prevention:protecting our systems, detecting unauthorized access, monitoring suspicious activities and adopting risk mitigation measures.

  • Compliance with legal and regulatory obligations:meeting tax, accounting, labor and sector-specific obligations and responding to official communications and determinations from public authorities and the Judiciary.

  • Defense of rights:constituting, exercising and defending Eventim Brasil’s rights in judicial, administrative and arbitration proceedings, as well as preventing and responding to fraud or unlawful acts.

  • Corporate management:supporting internal activities of our administrative, financial, accounting, legal, compliance, human resources and audit areas.

  • Corporate reorganizations:in the event of merger, acquisition, spin-off, asset disposal or any other form of corporate reorganization, the data may be transferred to the successor company, always in compliance with applicable legal obligations.

  • Other purposes with your consent:for any other purpose that is informed and has your consent, at the time it is requested.

With whom do we share your information?

We share personal data only when this is necessary for the performance of the Products and Services, for compliance with legal or regulatory obligations, for the protection of legitimate rights, or with your prior and express consent. The main recipients of personal data are:

  • Companies of the CTS EVENTIM group:our headquarters in Germany and other affiliated companies of the international group may have access to personal data for purposes of technological infrastructure, support, corporate governance, fraud prevention, internal audit and compliance with the group’s regulatory obligations.

  • Event promoters and producers:we share strictly necessary data to confirm the identity of the ticket holder, control access to the event, deliver operational communications about the event (cancellations, changes, rescheduling) and, where applicable, ensure compliance with regulatory or contractual obligations between the parties.

  • Payment platforms and financial institutions:for processing transactions, anti-fraud measures, financial settlement and anti-money laundering compliance.

  • Technology providers and service providers:companies that support our operations in areas such as cloud hosting, IT infrastructure, information security, customer service, biometric and document validation, anti-fraud, transactional communications, digital marketing, analytics and event logistics. These providers act under our instructions and are contractually required to protect the information they access.

  • Commercial partners and sponsors:in certain promotions, campaigns or joint programs, we may share data with commercial partners or sponsors, always informing you of this possibility at the time of collection and, where applicable, subject to your consent.

  • External professionals and consultants:law firms, auditors, consultants and other specialized professionals engaged to support Eventim Brasil in its activities, all bound by duties of confidentiality and secrecy.

  • Public authorities and the Judiciary:in compliance with legal obligations, judicial decisions, official communications and legitimate administrative determinations.

  • Successors in corporate reorganization:as described above, in the event of corporate transactions involving Eventim Brasil.

Eventim Brasil does not sell personal data of its customers to third parties for advertising purposes. The disclosures described above are always made on the basis of a legitimate purpose, in compliance with the principles of necessity, adequacy and proportionality, and with the adoption of the safeguards required by the LGPD.

On what legal basis do we process your information?

All processing of personal data is carried out on the basis of one of the legal bases provided for in the LGPD. The main legal bases we use, depending on the purpose of the processing, are:

  • Performance of a contract or preliminary procedures (Art. 7, V): for processing necessary for the provision of the Products and Services you acquire, such as the processing of ticket purchases, enabling your access to the event, maintaining your customer account and operational communications about the event.

  • Compliance with a legal or regulatory obligation (Art. 7, II): for processing required by applicable laws and regulations, such as tax, accounting, consumer protection and anti-money laundering obligations, and compliance with determinations from the ANPD (the Brazilian National Data Protection Authority) or other authorities.

  • Legitimate interest (Art. 7, IX):for processing that supports our operations in a legitimate and proportionate manner, without overriding your fundamental rights and freedoms, such as fraud prevention, information security, analysis of the use of the Products and Services, continuous improvement of our platforms and communications about events similar to those in which you have already shown interest.

  • Consent (Art. 7, I):for processing that depends on your express authorization, such as the sending of marketing communications through channels for which the law requires consent, the collection of biometric data in the context of facial recognition services, the processing of data of children and adolescents, or other situations informed at the time of collection. Your consent may be revoked at any time.

  • Specific consent for sensitive data (Art. 11, I):the processing of sensitive personal data, such as biometric data, is carried out exclusively subject to specific and highlighted consent, obtained separately from the other terms of use, and may be revoked at any time.

  • Regular exercise of rights in judicial, administrative or arbitration proceedings (Art. 7, VI): for the retention of information relevant to the constitution, exercise or defense of rights.

  • Credit protection (Art. 7, X) and other legal grounds: when applicable to the specific context of the processing.

When the processing of personal data of children and adolescents is necessary, it will be carried out in their best interest, subject to the specific and highlighted consent of at least one of the parents or the legal guardian, in accordance with Article 14 of the LGPD, and observing the additional safeguards applicable to this audience.

What you need to know about cookies and other identifiers

When you browse our digital channels, we use cookies, pixels, web beacons and other tracking technologies (together, “cookies”) to recognize your browser or device, maintain your preferences, ensure the proper functioning of our Products and Services and improve your experience. The use of such technology is standard practice on digital platforms for ticket sales and consumer relationships.

In general, we use cookies for purposes such as:

  • ensuring the essential technical functioning of our channels (session maintenance, login, shopping cart, language preferences);

  • remembering your settings and usage preferences, making your next visits faster;

  • analyzing how our Products and Services are used, measuring audience and identifying opportunities for improvement;

  • personalizing content, recommendations and communications based on your profile and usage history;

  • measuring the effectiveness of marketing campaigns and displaying advertising adequate to your interests, both within and outside our channels.

Some cookies are operated directly by Eventim Brasil, while others are operated by technology partners (for example, analytics tools, fraud prevention or digital advertising), which may collect information about your use of our channels over time, including on other websites and applications. These partners are responsible for their own cookies and identifiers and may process them in accordance with their own policies, subject to applicable requirements. The disabling of certain cookies may affect the functionality of the Products and Services.

How can you control your information?

The LGPD grants you a series of rights regarding your personal data, which may be exercised at any time, free of charge, as described below:

  • Confirmation of processing and access:you may confirm whether we process your data and request access to the data we hold about you.

  • Correction:you may request the correction of incomplete, inaccurate or outdated data.

  • Anonymization, blocking or deletion:you may request the anonymization, blocking or deletion of unnecessary or excessive data or data processed in non-compliance with the LGPD.

  • Portability:you may request the portability of your data to another service or product provider, subject to ANPD regulations and to trade and industrial secrets.

  • Deletion of data processed on the basis of consent: you may request the deletion of personal data processed exclusively on the basis of your consent, except for the retention scenarios set forth in law.

  • Information on sharing:you may obtain information about the public and private entities with which Eventim Brasil has shared your data.

  • Information on the possibility of not consenting and its consequences: you may be informed about the consequences of choosing not to provide consent for a given processing activity.

  • Revocation of consent:you may revoke, at any time, the consent given for any processing based on this legal basis, without prejudice to processing already carried out.

  • Objection:you may object to processing carried out on one of the grounds that waive consent, in the event of non-compliance with the LGPD.

  • Review of automated decisions:you may request the review of decisions taken exclusively on the basis of automated data processing that affect your interests.

  • Complaint to the ANPD:you may file a complaint with the Brazilian National Data Protection Authority whenever you believe that your rights are not being respected.

How to exercise your rights

To exercise any of these rights, you may contact our Data Protection Officer through the following channels:

  • Privacy form:access https://help.eventim.com.br/hc/pt-br/requests/new and select, in the “Contact Reason” field, the option “5. Privacidade e Proteção de Dados” (Privacy and Data Protection).

  • E-mail of the Data Protection Officer:encarregado@eventim.com.br.

Upon receipt of the request, we may contact you to validate the identity of the requester, which is a measure necessary to protect your own data against unauthorized requests. Only the data subject or their legal representative may exercise the rights described above. We undertake to respond within the shortest possible timeframe, observing the legal deadline of up to 15 (fifteen) days from receipt, in accordance with the LGPD and ANPD regulations. If your request cannot be fulfilled, for example, due to a legal obligation to retain the data, we will explain the reasons.

International data transfers

Eventim Brasil is part of an international group, and the operation of our Products and Services involves the use of technologies, suppliers and infrastructure that may be located outside Brazil. For this reason, your personal data may be transferred to other countries, in particular:

  • to Germany, the headquarters country of our parent company CTS EVENTIM AG & Co. KGaA, in the context of the group’s technological infrastructure, support, corporate governance, fraud prevention and compliance with regulatory obligations;

  • to the United States and other European countries, where part of the servers and service providers we use for cloud hosting, payment processing, analytics, digital marketing and other operational purposes are located.

Whenever we carry out an international data transfer, we adopt the safeguards required by the LGPD and by ANPD Resolution No. 19/2024, including, as applicable, specific contractual clauses with the recipients, or, where appropriate, we obtain your specific consent.

For more information about the international transfer mechanisms adopted in a specific context, you may contact our Data Protection Officer through the channels indicated in this Policy.

How long do we retain your information?

We retain your personal data only for the period necessary to fulfill the purposes for which they were collected, depending on the Product and Service, observing the periods required by law and the statute-of-limitation periods applicable to the defense of rights. The main criteria we use to define retention periods are:

  • the nature of the data and the purpose of the processing;

  • the period during which you maintain an active relationship with Eventim Brasil or use our Products and Services;

  • the statute-of-limitation periods applicable under Brazilian law, in particular the Consumer Protection Code, the Civil Code and tax obligations;

  • the existence of specific legal, regulatory or contractual obligations requiring the retention of the data for a determined period;

  • the need to constitute, exercise or defend rights in judicial, administrative or arbitration proceedings.

When the personal data are processed on the basis of your consent, such as, for example, biometric data for facial recognition services, we will retain such data only for the period necessary to fulfill the contracted purpose, and the data may be deleted at any time upon revocation of consent. After the applicable retention period, the personal data will be securely deleted or anonymized, except in the situations set forth in Article 16 of the LGPD.

How do we protect your information?

Eventim Brasil adopts technical, administrative and organizational measures compatible with the best market practices and proportionate to the risks of the processing, with the objective of protecting your personal data against unauthorized access, loss, alteration, disclosure or destruction.

Such measures include, among others, access controls based on the principle of least privilege, encryption of data in transit and at rest where applicable, continuous monitoring of security events, vulnerability management and periodic training of teams.

Although we make our best efforts to protect your data, no system is completely impenetrable. Should a security incident occur that may pose a relevant risk or harm to the data subjects, we will take the appropriate measures for the containment and mitigation of the incident and will comply with the obligations to communicate the incident to the Brazilian National Data Protection Authority and to the affected data subjects, within the deadlines and terms provided for by the applicable legislation.

What happens if this Policy is amended or revised?

We may update this Privacy Policy periodically to reflect changes in our Products and Services, in applicable legislation or in our processing practices. Whenever there are material changes that may impact you, we will provide prior notice, with reasonable advance, by e-mail, by notice on the Website, App and/or other digital channels, or by other appropriate means.

We recommend that you consult this document periodically to stay informed about our current practices.

How to contact us

For any questions, comments or requests related to this Privacy Policy or to the processing of your personal data, please contact our Data Protection Officer (DPO):

Data Protection Officer (DPO)

Viseu Sociedade de Advogados — CNPJ 01.113.450/0001-53
Represented by Antonielle Freitas

E-mail:encarregado@eventim.com.br

Website:https://help.eventim.com.br/hc/pt-br/requests/new (Contact Reason — 5. Privacy and Data Protection)

Controller:Eventim Brasil São Paulo Sistemas e Serviços de Ingressos Ltda.

CNPJ:23.945.623/0001-32

Address:Av. Pedroso de Morais, 272, 5th floor, Pinheiros, São Paulo — SP, Brazil