BreakFree Events

Privacy Policy

Last updated: 25/11/2025

This Privacy Policy describes how Break Free Events, an event company based in Berlin that organises cultural events across Germany and operates the website https://breakfreeevents.de, collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).


1. Who We Are

Break Free Events
Berlin, Germany
Website: https://breakfreeevents.de

We are the Data Controller for all personal data processed through our website, ticketing system, and event operations.


2. Personal Data We Collect

We collect personal data when you interact with our website, attend events, or use our ticketing system.

a) Comments

When visitors leave comments on the site, we collect:

  • The data shown in the comments form

  • Visitor’s IP address

  • Browser user agent string (for spam detection)

An anonymized hash of your email address may be shared with the Gravatar service to determine whether you use it. After approval of your comment, your Gravatar profile picture will be publicly visible next to your comment.

b) Media Uploads

If you upload images to the website, avoid including embedded location data (EXIF GPS). Visitors may download and extract location data from images on the site.

c) Ticket Purchases

When you purchase tickets for our events, we collect:

  • Name

  • Email address

  • Billing details

  • Payment information (handled by secure third‑party processors; we do not store credit card details)

  • Ticket purchase details

d) Website Usage Data

  • IP address

  • Cookies (see Section 6)

  • Browser and device information


3. How We Use Your Data

We use personal data to:

  • Process ticket purchases and deliver tickets

  • Communicate event updates or changes

  • Manage event entry and ticket validation

  • Detect and prevent spam or fraudulent activity

  • Improve website performance and user experience

  • Process comments and allow website interaction

  • Comply with legal requirements


4. Legal Basis for Processing

Your data is processed based on the following GDPR legal grounds:

  • Contractual necessity: Ticket purchases and event participation

  • Legitimate interests: Website security, spam detection, analytics

  • Consent: Optional cookies, marketing communication

  • Legal obligations: Accounting and regulatory compliance


5. Cookies

Our website uses cookies for functionality, authentication, and user convenience.

a) Comment Cookies

If you leave a comment, you may opt‑in to saving your name, email, and website in cookies for your convenience. These cookies last one year.

b) Login Cookies

  • A temporary cookie checks whether your browser accepts cookies (discarded when you close your browser).

  • Login cookies last two days.

  • “Remember Me” extends login persistence to two weeks.

  • Screen options cookies last one year.

  • Article editing cookies last one day.

You can manage or block cookies through your browser settings.


6. Embedded Content from Other Websites

Articles on this website may contain embedded content (e.g., videos, images). Embedded content behaves as if you visited the originating website.

These third-party sites may:

  • Collect data about you

  • Use cookies

  • Use third‑party tracking

  • Monitor your interaction with embedded content


7. Who We Share Your Data With

We only share personal data when necessary:

  • Password reset requests: Your IP address is included in the reset email.

  • Payment processors (e.g., Stripe, PayPal) for ticket purchases

  • Automated spam detection services

  • Event partners or venues when operationally required

We do not sell your personal data.


8. How Long We Retain Your Data

  • Comments and their metadata are retained indefinitely to facilitate automated follow‑up approvals.

  • User accounts (if any): Personal information is stored as long as the account remains active. Users can edit or delete their data at any time (except usernames).

  • Ticketing and financial data: Retained up to 10 years to comply with German accounting and tax regulations.


9. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Request restriction of processing

  • Object to certain types of processing

  • Receive a copy of your data (data portability)

  • Withdraw consent at any time

To make a request, contact us at: info@breakfreeevents.de.


10. Where Your Data Is Sent

Visitor comments may be checked through automated spam detection services. Payment data is processed through secure third‑party payment providers.


11. Security Measures

We protect your data through:

  • SSL encryption

  • Secure servers

  • Access controls

  • Regular security monitoring


12. Updates to This Policy

We may update this Privacy Policy occasionally. Any changes will be posted on this page with an updated date.


For questions about this Privacy Policy, please contact us at info@breakfreeevents.de.