This privacy policy explains how stockholmtickets.net ("we", "us", "our") collects and processes personal data when you use the website stockholmtickets.net (the "Site"). By using the Site you confirm that you are over 18 years of age. We collect as little personal data as possible: the Site is a set of static pages, with no account to create, no login, no newsletter, no comment form and no checkout.
Who is responsible
The controller responsible for your personal data under the General Data Protection Regulation (GDPR) is Jonas Klör, Industrieweg 4A, 51429 Bergisch Gladbach, Germany. You can reach us at email address (enable JavaScript). The full provider details are in our legal notice.
Personal data means any information capable of identifying an individual; it does not include anonymised data. If you have written to us and your details change, please let us know so that what we hold stays accurate.
What data we collect and why
The Site has no user accounts and no login. We may process the following limited categories of personal data:
- Communication data: if you contact us by email, your name, email address and the content of your message. We use this to answer you and to keep a record of the correspondence, on the basis of our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR).
- Technical and usage data: such as your IP address, browser type, the pages you view and the time of your visit. Your IP address is processed automatically by our hosting provider, Cloudflare; our analytics service records only anonymised, aggregated statistics. We use this to operate, secure and improve the Site, on the basis of our legitimate interest in running a fast, secure website and knowing which pages are read (Art. 6(1)(f) GDPR).
We do not collect payment or card details, which are handled entirely by Headout at checkout, and we do not collect sensitive data such as information about your health, ethnic origin, religion or political opinions.
How we collect your data
We collect data directly from you when you email us, and automatically as your browser requests pages from the Site, through server logs and the services described below. We set no cookies of our own and run no advertising or cross-site tracking.
Cookies and analytics
Hosting. The Site is hosted and delivered by Cloudflare (Cloudflare, Inc., USA). To deliver a page, Cloudflare necessarily processes your IP address and the request data your browser sends, and keeps basic technical logs for a limited time to keep the Site running and secure. We do not use these logs to identify visitors.
Visitor statistics. To understand how the Site is used we use Simple Analytics (Simple Analytics B.V., Netherlands). It sets no cookies and collects no personal data or cross-site identifiers, recording only aggregated, anonymised statistics such as page views, referrers, browser type and country. It honours your browser's Do Not Track setting. Because it uses no cookies and stores no personal data, no analytics consent banner is required; you can read exactly what it collects at simpleanalytics.com/what-we-collect.
Booking partner. When you click a "Check availability" button and book through Headout, our affiliate partner, Headout may set cookies to attribute the referral to us so that it can pay our commission. That is governed by Headout's own privacy policy, as is everything you enter at checkout. We never see your name, card details or booking, and the attribution does not identify you to us. Our affiliate disclosure covers how the commission works.
You can set your browser to refuse some or all cookies. We do not sell your personal data.
Fonts, images and links
Fonts and images. All fonts and ticket images are served from our own server. Your browser does not contact Google Fonts or any other font or image service.
Links. The Site links to third-party websites, such as Headout and the attractions' own pages, whose privacy practices we do not control. We encourage you to read the privacy notice of every site you visit.
Disclosures of your data
We may share your personal data with the service providers named above who host and deliver the Site, and with government bodies or professional advisers where the law requires it. We require all third parties to respect the security of your data and to process it only for specified purposes and in accordance with our instructions.
International transfers
Some of our providers, notably Cloudflare, may process data outside the European Economic Area. Where that happens, we rely on safeguards recognised under the GDPR, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or standard contractual clauses, to ensure a comparable level of protection for your data.
Data security and retention
We put in place measures to prevent your personal data from being lost, misused, altered or accessed without authorisation, and we limit access to those who need it. We retain personal data only for as long as necessary for the purposes we collected it for, including any legal or reporting requirements. An email is kept for as long as we need to answer it and for a reasonable time afterwards in case you follow up, then deleted.
Your rights under the GDPR
You have the right to access, correct, erase or restrict the processing of your personal data, to receive it in a portable format, and to withdraw any consent you have given. Where we rely on our legitimate interests, you have the right to object to the processing on grounds relating to your particular situation (Art. 21 GDPR). To exercise any of these rights, email email address (enable JavaScript).
You also have the right to lodge a complaint with a data-protection supervisory authority, in particular in the EU country where you live. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
Children
The Site is a general travel information site intended for adults and is not aimed at children. We do not knowingly collect any personal information from them.
Changes
We may update this policy from time to time, for example when we add or replace one of the services above; the date shown at the top of this page reflects the latest version. See also our terms of service.
