hambax.
HomeEventsOrganizationsContact
Sign in

Privacy Policy.

Last updated: September 29, 2026

At Hambax, we place great importance on protecting your personal data. This Privacy Policy explains which data we collect, how we use it and which rights you have under the GDPR.

1. Data we collect
  • Cookies: For functionality and analytics.
  • Email address: For ticket purchases and contact requests.
  • Usage data: IP address, browser type, visited pages, session duration.
2. How we use your data
  • For contract fulfillment: Ticket purchases, order confirmations, event information.
  • For analytics: Improving our services and user experience.
  • For functionality: Storing settings and session data.
2.1 Legal basis (Art. 6 GDPR)
  • Consent (Art. 6(1)(a)): Cookies, analytics.
  • Contract (Art. 6(1)(b)): Ticket orders, customer communication.
  • Legal obligation (Art. 6(1)(c)): Tax and retention obligations.
  • Legitimate interest (Art. 6(1)(f)): Security and improvement of our system.
3. Data sharing

We only share data with trusted service providers:

  • Payment processing: Stripe. Hambax does not store payment data.
4. Data retention

Data is stored for a maximum of one year unless longer statutory retention obligations apply.

5. Your rights under the GDPR
  • Right of access
  • Right to rectification and erasure
  • Withdrawal of consent
  • Right to lodge a complaint with a supervisory authority
6. Cookies & analytics

We use cookies as well as analytics tools such as Google Analytics and Microsoft Clarity (session recordings and heatmaps of how the site is used; form inputs are masked and payment details are never recorded). These are activated only after your consent via our cookie banner.

7. Hosting & processing

The platform is hosted by Hetzner Online GmbH (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place.

8. International data transfers

If data is processed outside the EU, this is done exclusively on the basis of standard contractual clauses (Art. 46 GDPR).

9. Changes to this Privacy Policy

Changes will be published on this page.

10. Customer account

You can buy tickets without an account. If you create a customer account, we store your email address, optionally your name, your email language, a hashed (never readable) password or your Google account ID if you sign in with Google, and the time of your last sign-in. Your account shows the tickets bought with it and tickets bought without an account using your confirmed email address. When you sign in with Google, Google Ireland Ltd. confirms your identity and shares your name and email address with us. Legal basis: contract (Art. 6(1)(b) GDPR). We keep the account until you delete it; orders are kept as required by tax law. To sign you in we use a strictly necessary cookie (session) and a small preference cookie that remembers you are signed in.

11. Contact

If you have any questions, please contact us at:

info@hambax.com