Verified tickets for Theatre, Concert, Musical, Rock&Pop

Back

1. Controller
2. Controller contact information
3. What personal data do we process?
4. Is it mandatory to provide information?
5. Where do we collect your personal data from?
6. What are the purposes of collecting and processing your personal data?
7. What are the legal grounds for the processing?
7.1 Legitimate interest
7.2 Agreement
7.3 Consent
7.4 Legal obligation
8. To what other parties do we transfer or disclose personal data?
9. How long do we keep your information?
10. Data subject rights: how can you affect the processing of your personal data?
10.1 Right to access information
10.2 Right to rectification
10.3 Right to erasure
10.4 Right to restriction of processing
10.5 Right to data portability
10.6 Right to object to the processing of personal data
11. Right to lodge a complaint with a supervisory authority
12. How do we ensure the safety of your personal data?
13. Cookie policy
13.1 What data are collected?
13.2 Registration and creating a user account
13.3 Registration and login using a single sign-on (SSO)
13.4 For what purposes are the cookies used?
13.5 How can I manage the cookies?

1. Controller

The controller of the personal data to be processed is Lippupiste Oy (hereinafter referred to as “Lippu.fi”) Business ID: 1789232-4

2. Controller contact information

Kansikatu 5, 33100 TAMPERE, Finland For more information about data protection and the processing of personal data, please contact us at: tietosuoja @ lippu.fi

For information on matters regarding the rights of data subjects, see Section 11.

3. What personal data do we process?

We process data related to the following data categories as well as related changes:

Registered customers

Information related to ticket purchases and the customer relationship

Automatically collected information on the use of the website

We process your personal data when you access our website, mobile site or mobile application, even if you have not registered as our customer or logged in to our service. When you navigate to the Lippu.fi website or use the mobile application, we process the following information via cookies and other similar technologies:

4. Is it mandatory to provide information?

We need the personal data we collect on you (basic information and information related to ticket purchases and the customership) for the performance of the online shop’s user agreement. In addition to this, the processing of personal data related to claims and direct marketing permissions is based on our legal obligations.

The refusal to provide certain personal data may lead to us being unable to make a ticket sales agreement with you, i.e. sell you event tickets.

5. Where do we collect your personal data from?

Primarily, we collect personal data directly by you providing them as you use the various interfaces of Lippu.fi or its partners, such as the ticket outlets of Lippu.fi and its partners or the online and mobile services. You can provide information about yourself through customer registration, ticket purchases, use of other Lippu.fi services or participation in a marketing campaign, for example.

In addition to this, we supplement and refine the customer information by collecting data on ticket purchasing history, along with other personal data (e.g. contact information) from our event organiser partners. In order to ensure the currency and integrity of the personal data, we also collect personal data from authorities and companies that offer information services, such as the Population Register Centre and the commercial file update services.

We also collect personal data via your terminal devices by means of cookies or other similar technologies.

6. What are the purposes of collecting and processing your personal data?

We process your personal data to maintain, manage and develop the customer relationship. The personal data are needed for the implementation of services, such as ticket deliveries, invoicing and customer communications.

We also process personal data for the performance of customer communications regarding changes or cancellations in relation to events, for example. In addition to this, we use your personal data for direct marketing conducted by Lippu.fi and its selected partners, as well as for remote sales, other direct marketing, market surveys and opinion polls, including electronically implemented direct marketing.

In order to be able to provide interesting content, we may target our marketing communications by analysing the data processed in our file, such as stated interests and service usage information. We do not conduct automatic decision-making through profiling or otherwise.

The Lippu.fi online shop uses a variety of profiling tools. For the purpose of online marketing, the collected data are categorised into geographical areas, consumer segments (Classical, Theatre, Show & Live Entertainment, Stand up, Family, Entertainment concert, Rock & Pop & Jazz, Party and Sports) and other corresponding groups. This enables directing Lippu.fi online marketing at these specific target groups. Online marketing and analytic tools are used to collect data on the users of the online shop. The data are profiled in order to personalise the online service and present recommendations/targeted ads to users. For example, the Lippu.fi online shop may store your event browsing history to increase convenience during the next visit to the site by displaying events related to the history. We also use cookies that enable us to target marketing from Lippu.fi and selected third parties on sites external to the Service, based on your search history or pages visited in the Service, for example. These cookies are provided by a third party.

We also process personal data in order to analyse and develop our services and other business operations, as well as for statistical purposes.

7. What are the legal grounds for the processing?

7.1 Legitimate interest

Our right to process your personal data is based on the legitimate interest generated by the customer relationship. We process your data, for example, to create profiles, provide services and sell tickets to the extent that the processing is necessary for the performance of these activities.

According to our assessment pursuant to the applicable data protection legislation and official guidelines, your interests, basic rights and freedoms do not override our right to process your personal data based on our legitimate interest.

7.2 Agreement

Furthermore, we process your personal data for the performance of the agreement between you and Lippu.fi and for the implementation of the pre-contractual measures on your request. An agreement is formed between you and Lippu.fi when you accept the terms of the user agreement for our online shop and purchase tickets via the shop.

7.3 Consent

We will process your personal data based on your consent insofar as we request your consent for electronic direct marketing. We will process your personal data based on your consent insofar as we request your consent for electronic direct marketing. Please note that electronic direct marketing based on a customer relationship may also be based on legitimate interests according to Section 7.1.

We also process personal data collected through cookies and other tracking methods based on your consent for setting cookies.

If you use our mobile application, we process your location data if you have provided your consent for the processing of this information.

You have the right to withdraw your consent for the processing of personal data at any time, as regards electronic direct marketing, through the link provided in the marketing messages. You can withdraw your consent for the use of cookies at any time through the cookie banner on our website, which can be opened by clicking the Cookie Settings link at the bottom of the site.

7.4 Legal obligation

We process your personal data in order to observe our legal obligations when transferring your data to the tax authorities and processing your information in order to comply with accounting obligations.

8. To what other parties do we transfer or disclose personal data?

We disclose personal data within the limits permitted and required by the legislation in force at the time.

Lippu.fi and its parent company CTS Eventim use personal data in their systems to provide ticket sales services.

Personal data is processed and stored primarily on servers located within the European Union (EU) or the European Economic Area (EEA).

In some cases, personal data may be transferred to or processed by our service providers outside the EU/EEA. In such instances, we ensure that the transfer of personal data is carried out in accordance with data protection laws and that appropriate safeguards are in place, such as the Standard Contractual Clauses (SCCs) approved by the European Commission or another lawful basis for the transfer.

We disclose personal data to responsible event organisers only for purposes that do not conflict with the purposes of use described in Section 6 of this policy. Disclosure always requires a relevant written agreement between us and the event organiser in question. We disclose personal data to each responsible event organiser only on persons who have purchased tickets to events arranged by the event organiser in question. In this context, a customer relationship is also formed between these registered customers and the responsible event organiser. The aforementioned responsible event organisers will only process the personal data in their customer systems for purposes that do not conflict with the purposes of using personal data described in Section 6, such as customership management, marketing, administration and development.

Responsible event organisers may also process the personal data we disclose to send general customer communications regarding relevant products and services determined on the base of your customership. However, these cooperation partners must request that you provide your advance consent for electronic direct marketing. This marketing permission can be separately requested on behalf of the event organiser in the purchase phase.

If necessary, we also disclose personal data to parties that are entitled to receive them, such as competence authorities.

Our IT service providers store and process personal data in accordance with our instructions for no other purposes than those defined by us and only on our behalf. Correspondingly, our authorised national ticket outlets process personal data only on our behalf and according to our instructions.

9. How long do we keep your information?

We will retain your information for as long as it is necessary for performing the purposes of the processing of personal data or observing our contractual and legal obligations.

Personal data will be deleted from the online shop’s register under the following alternative conditions:

If you have subscribed to our newsletter, we retain your personal data for as long as the subscription is active. If you cancel your newsletter subscription, i.e., withdraw your consent to receive direct electronic marketing, we will stop sending the newsletter to you without undue delay. However, we will retain information about your marketing opt-out for as long as your personal data is processed for other purposes, such as based on activity in the online shop.

10. Data subject rights: how can you affect the processing of your personal data?

The data protection legislation grants you a number of rights, which are described below. These rights enforce your privacy and provide you with the opportunity to control the processing of your own personal data.

Without undue delay and no later than in two months of you contacting us, we will inform you of the measures we have taken to fulfil your request to exercise your rights.

If you submit several requests or your request is particularly complex, we may extend the response time by no more than two months, as necessary. We will inform you separately of any such delay.

You can submit a request pertaining to your rights, as described in this section, by post, e-mail or telephone.

Lippu.fi contact information for exercising your rights as a data subject:

Postal address: Lippupiste Oy, Tietosuoja, Kansikatu 5, 33100 TAMPERE
E-mail: tietosuoja @ lippu.fi

When contacting us by e-mail, please enter the words ‘Data protection’ at the beginning of the subject field.

Please note that we may ask you to provide more specific information in order to verify your identity.

10.1 Right to access information

You have the right to receive confirmation from us on whether or not we are processing your personal data. In addition to this, you have the right to access personal data on yourself and the right to receive the information on the processing of personal data, as specified in the EU’s General Data Protection Regulation (679/2016, “GDPR”).

When you exercise your right to access the data, we will provide you with a copy of the personal data we are processing. If you present the request electronically, we will deliver the information in a commonly-used electronic format, unless you specifically request another method of delivery, which we can reasonably arrange.

We may charge a reasonable fee, based on administrative costs, if you request multiple copies or submit repeated requests.

We cannot provide you with information that could reveal trade secrets or infringe upon the rights or freedoms of another person. For example, we cannot disclose the personal data of other persons regardless of your request.

10.2 Right to rectification

You have the right to request us to correct any inaccurate and erroneous information on you without undue delay. In addition to this, you are entitled to have incomplete personal data supplemented by providing us with a supplementary statement.

10.3 Right to erasure

You have the right to request us to erase personal data concerning you without undue delay if:

• your personal data must be erased for compliance with a legal obligation applicable to us.

10.4 Right to restriction of processing

You have the right to have us restrict the processing of your personal data in such a way that, in addition to storing the data, we may only process them with your express consent or the establishment, exercise or defence of a legal claim or the protection of the rights of another person if:

10.5 Right to data portability

Insofar as you have submitted your personal data to us via a form available in our online service, for example, you have the right to receive the data in a structured, commonly-used and machine-readable format and to transmit those data to another controller to the extent that we have processed your personal data automatically and based on your consent (as regards electronic direct marketing, for example) or the processing of your personal data is necessary for the implementation of an agreement, such as the online shop user agreement.

The right to data portability is limited to procedures that do not adversely affect the rights or freedoms of other persons. You do not have the right to transfer data from one system to another if the personal data are being processed based on our legitimate interest.

10.6 Right to object to the processing of personal data

You have the right to object to the processing on special grounds related to your situation if there are no legitimate grounds for the processing.

You are also always entitled to object to the use of your personal data for direct marketing purposes. Direct marketing or the processing of personal data for direct marketing purposes may not be conducted once this right to object has been exercised. We request that you primarily exercise your right to object by logging in to your customer account and making the desired choices in the section ‘Markkinointilupa, tapahtumamuistutukset ja informaatioviestit’ (Marketing permission, Ticket Alarms and information messages). If you would like to object to direct marketing by the event organiser, please contact the customer service of the event organiser in question.

11. Right to lodge a complaint with a supervisory authority

You have the right to submit a complaint to a supervisory authority (in Finland, the Data Security Ombudsman) if you find that your rights established in the applicable data protection legislation and specifically the GDPR have been infringed upon.

12. How do we ensure the safety of your personal data?

The proper protection of personal data is extremely important to us. We collect the information into databases secured with firewalls, passwords and other technical means. The databases and their backups are located in locked and guarded facilities, and the information can only be accessed by certain people designated in advance.

Access to the personal data requires a user ID granted by the main user of the customer database. The main user also defines the access level granted to a user. Furthermore, we have ensured by contractual means that any partners processing personal data on our behalf are also committed to the protection of personal data with regard to their own employees.

The personal data of online shop customers are stored in an encrypted format.

13. Cookie policy

Lippu.fi uses cookies and the browser’s local storage. Cookies are text files that are stored in the memory of the browser you use when you access our online or mobile services.

With cookies, we can identify the browser you are using and certain browser-related data regarding the use of our site. Our web pages use cookies to remember your choices. For example, the pages may store your event browsing history to provide a more targeted view during the next visit to the site by displaying events related to the history.

Cookies enable more accurate analytics of our online shop, which helps us develop our website and improve the quality of our service. The cookies allow the contents of your shopping to remain in place even if you close the browser. They also allow us to provide more targeted advertisements on the website to our customers.

Cookies are valid from 30 seconds to 24 months. More information about cookies and their periods of validity can be found in the online shop’s cookie settings.

13.1 What data are collected?

As an example, cookies can be used to collect information on the page from which you have accessed the Lippu.fi site, which of our pages you have browsed and when, what browser you use, your screen resolution and operating system, and the IP address of your computer – i.e. which internet address is sending and receiving your data. We also use cookies that enable us to target marketing from Lippu.fi and selected third parties on sites external to the Service, based on your search history or pages visited in the Service, for example.

13.2 Registration and creating a user account

You can register and create a customer account when you visit our website. With an account, you can purchase tickets, receive information about events, free time activities and your favourite artists with the event reminder service. You can participate in targeted pre-sales, which are announced in newsletters, subscribe to newsletters and take advantage of many other benefits related to ticket purchasing. Registering and using an customer account requires the provision of personal data. The required data are marked with an asterisk (*) and visible when you create the account.

As a registered user, you can view your order history and the tickets you have purchased in the service at any time.

Data collected with cookies and other technologies may be combined with personal data obtained from the User upon registering for the Service. The data are anonymised whenever this is possible.

13.3 Registration and login using a single sign-on (SSO)

1. To make it easier for you to create a customer account and log in later, we offer you the option of registering or logging in using a single sign-on (SSO) procedure. This involves authenticating yourself with your access data with the selected provider (e.g., Facebook or PayPal). After clicking the branded button, you will be redirected to the login page of the provider of your choice. We receive selected profile data (e.g., name, email address and potentially delivery address and data of birth) in order to create a customer account or link an existing one. The specific data that is received depends on your setting with the respective provider.

2. The use of SSO is voluntary and allows you to log in directly via your chosen provider in the future without the need to register again.

3. We process your personal data on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future. To do so, you can remove the respective link in your customer account or directly in the settings of the chosen provider. The lawfulness of the processing prior revoking remains unaffected.

4. We are not responsible for the data processing for authentication by the respective SSO-provider. For further information on data processing in the context of registering via third parties, please refer to the respective data protection information of your chosen provider:

Apple: www.apple.com/legal/privacy/en-ww/
Facebook: https://www.facebook.com/privacy/policy
PayPal: www.paypal.com/en/legalhub

13.4 For what purposes are the cookies used?

• Required cookies
These cookies enable the functions that are necessary for the intended functioning of the website. In most cases, they offer you the functions you request, such as logging in, changing your privacy settings or filling in forms. The user’s consent is not required for the use of absolutely necessary cookies and they cannot be disabled in the settings of this website.

• Statistical and functional cookies
These cookies provide us with additional opportunities to improve the quality of your visit to our website. We analyse how you use the site and create reports on the site’s traffic. Analytics allow us to determine where we have room for improvement. For this end, we co-operate with such third parties as the Google Analytics and Google Tag Manager services.

Some of our service providers may be active outside the European Union (EU) or the European Economic Area (EEA). Personal data may be transferred outside the EU or EEA in accordance with and to the extent allowed by data protection legislation. In order to ensure an adequate level of data protection in such situations in accordance with EU’s General Data Protection Regulation by complying with the equivalence decisions issued by the European Commission and, if necessary, applying the standard clauses in accordance with decision 914/2021 approved by the European Commission and, if necessary, additional protective measures.

The information on the use of the website generated by Google’s cookies is generally transferred to a Google server in the USA and stored there. However, IP anonymisation has been implemented on the Lippu.fi website ("_anonymizelp()"). This means that the IP addresses are processed in short format with which individual users cannot be identified.

You can read more about Google’s data protection policy at:

https://policies.google.com/terms?hl=en
https://policies.google.com/privacy?hl=en

We use the product analytics tool Mixpanel to analyse and improve the use of our websites and apps. Mixpanel Inc. supports us in better understanding user behaviour, replaying pseudonymised sessions, conducting A/B tests and feature experiments, connecting data with our internal systems, and analysing key figures in relation to business performance. The following information is processed using cookies and similar technologies:

- Technical data about your device and browser
- Usage interaction with the website and app (e.g., clicks, navigation, feature usage)
- Session flows and derived statistics
- Pseudonymised identifiers (e.g., hashed email address)

The processing is carried out exclusively on the basis of consent within the meaning of Art. 6 Para 1 Sentence 1 lit. a) GDPR. As Mixpanel is based in the USA, data is transferred there. An adequate level of protection is ensured by the partner’s certification under the EU-US Data Privacy Framework and additional technical and organisational measures. Further information can be found here: https://mixpanel.com/legal/privacy-policy

You can prevent the collection of information by preventing the storage of cookies by selecting the appropriate settings in your browser software of by deactivating tracking in the cookie settings.

• Marketing cookies
These cookies are set by our marketing partners. They help us create buyer profiles, which in turn helps us show you only offers that interest you in the future. Marketing cookies also allow us to show you suitable marketing content. We do not store your personal data with these cookies, but they allow us to identify your browser and terminal device accurately. The following service providers help us with the services mentioned above: Piano/Cxense, Frosmo, Google Ads, Google Signals, Facebook, Adform, TikTok. The deletion of cookies does not affect the number of advertisements displayed, but their content will not be targeted for you.

The Lippu.fi online shop uses a variety of profiling tools. For the purposes of online marketing, the collected data are categorised according to geographical area and consumer segments (theatre, sports, etc.) as well as other corresponding groups. This enables directing Lippu.fi online marketing at these specific target groups. Analytic tools are used to collect data on the users of the online shop. The data are profiled in order to personalise the online service and present recommendations/targeted ads to users. We do not conduct automatic decision-making through profiling or otherwise.

13.5 How can I manage the cookies?

When you visit our service for the first time, we will ask for your consent to the use of cookies for separate purposes. The consent only applies to cookies that are not required for the use of Lippu.fi services. The consent is browser-specific and, for example, if you use another browser to log in to the same account, the consent is not stored and you have to provide it again.

We provide a separate tool designed for the management of cookies that allow users to manage their own cookies. The tool can be opened by clicking on the following link and changing your settings there:

Privacy policy updated on 23rd April 2026.