entrelloPrivacy
GDPR Compliant
Privacy Policy
Your privacy matters to us. Learn how we collect, use, and protect your personal data in compliance with GDPR regulations.
Protecting personal data is especially important to us. Therefore, we process data exclusively based on the legal regulations (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing on our website.
Last updated · September 7, 2026
- Data Protection
- EU Certified
- Encryption
- 256-bit SSL
- Your Rights
- Full Control
Contact with us
If contact is made with us via the form on the website or via email, the data provided will be stored for six months for the purpose of processing the inquiry and for any follow-up questions. This data will not be passed on without consent.
Data Storage
When using the online form, the following data is routinely stored: weblog (including IP address, time of use), data about the device used, browser.
The following data is stored on the Entrello servers:
Contact details of organizers (user accounts on entrello)
- First name
- Last name
- Pseudonym
Stripe - Responsible Persons
In addition, when using Stripe as a payment provider, the following data is collected from user accounts designated as "responsible persons":
- Residence, ZIP code, street
- Document upload to verify residence
Contact details (visitors of organizers)
A visitor does not have an account in this form. A visitor is stored as a contact. This contact is only associated with tickets and orders within the respective organizer. Entrello is a data processor for the organizer, not a ticket broker. Therefore, this data is not used by Entrello.
- Name
- Phone (optional)
- Address (optional)
Furthermore, for payment processing, the respective payment provider partner collects credit card data or account information (bank name) and processes it according to the PCI DSS. Neither Entrello nor the organizer has access to this data at any time. However, we do store, for better identification, e.g., the last 4 digits of the credit card (they are only transmitted to us in the form of a 4-digit string by the payment provider partner). This information is considered invoice-relevant and can only be deleted after the invoice retention period has expired.
Data Controller: Respective organizer
If there is suspicion of a violation, the right to information, correction, deletion, or revocation (GDPR), the organizer should be contacted as the data controller.
Server Location
All data processed by Entrello is stored on servers in Frankfurt (DE).
Third-Party Service Providers
The following third-party services are also used:
| Service | Purpose and location |
|---|---|
| Stripe | Payment provider · San Francisco, CA, USA |
| Viveum | Payment provider · Vienna, Austria |
| Mailgun | Email sending by Synch · San Antonio, Texas |
| HyperDX | Log analysis · San Francisco, CA |
| Slack | Monitoring/analysis · Dublin, Ireland |
| Sentry | Error analysis · San Francisco, CA, USA |
| Gleap | Customer feedback · Linz, Austria |
Consent
The user agrees through the purchase process (another checkbox is available at the purchase completion) that entrello stores the above-mentioned personal data for the organizer for sending tickets and for the purpose of the invoice retention period. A corresponding checkbox can be found again at the purchase completion in the webshop.
The user agrees that emails containing important information regarding the process, cancellations, or similar information related to the purchased tickets and other products may also be sent as part of the purchase consent.
Newsletter Consent (Opt-in)
Additionally, the user optionally (opt-in) agrees by clicking the corresponding checkbox to receive newsletter information from the respective organizer to receive interest-related information about similar events.
Revocation
Entrello expressly informs the user that the data protection consent can be revoked at any time by contacting the respective data controller (the address is visible at several points during the order process or ticket purchase, in email communication, and on the issued tickets). In case of doubt, the Entrello Ticket & Service GmbH as the data processor can also be contacted at:
Spengergasse 37, 1050 Vienna, Austria — Email: support@entrello.app
Consequences of Revocation
The revocation results in the inadmissibility of further use of personal data. To avoid misunderstandings, the provider informs the user that in such cases, they remain entitled to retain data insofar as it is still necessary for fulfilling contractual obligations (§ 8 para. 3 Z 4 DSG 2000).
Data Protection Officer
Contact Information
If you have any questions about this privacy policy, how we handle your personal data, or if you wish to exercise your rights under GDPR, please don't hesitate to contact us. We aim to respond to all inquiries within 30 days.
Email the DPO