Ihr Browser ist veraltet. Bitte aktualiseren Sie auf Edge, Chrome, Firefox.
Tickets
TicketsTicketsTicketsTicketsTicketsTicketsTicketsTicketsTicketsTickets
Login
LoginLoginLoginLoginLoginLoginLoginLoginLoginLogin

Privacy Policy

Privacy notice of Gurtenfestival AG 

November 2025 edition

In this privacy notice we, Gurtenfestival AG (hereinafter Gurtenfestival AG, we or us), explain how we gather and otherwise process personal data. This is not a complete description; other privacy notices or general terms and conditions of business, conditions of participation and similar documents may apply in specific circumstances. The term personal data is used here to denote all information that relates to an identified or identifiable person.  

If you make personal data of other persons (such as family members, work colleagues) available to us, please make sure that these persons are aware of this privacy notice and only disclose their personal data to us if you are permitted to do so and if such personal data are accurate. 

This privacy notice is based on the EU General Data Protection Regulation (GDPR). Although the GDPR is a Regulation of the European Union it is important for us. The Swiss Data Protection Act (FADP) is heavily dependent on EU law and enterprises based outside the European Union or European Economic Area (EEA) must under certain circumstances comply with the GDPR.  

1.  Person responsible / Representative 

Gurtenfestival AG, Frankenstrasse 70, 3018 Bern is responsible for the data processing operations that we describe here. If you have any concerns about data processing law, you may notify them to us at the following contact address: medien@gurtenfestival.ch 

2.  Gathering and processing personal data  

In the first instance, we process the personal data that we receive in the course of our business relationship with our customers and other business partners, both from the latter and from other participating persons, or that we gather from users of our website and other applications. 

We process the data that occur when our website is used or data that are provided by you. This involves the following personal data in particular: 

  • first name 
  • surname 
  • email address 
  • password 
  • gender 
  • address including house number, post code, place and country of residence 
  • telephone number 
  • method of payment 
  • message 

Apart from the data about you that you notify to us directly, the categories of personal data that we obtain about you from third parties comprise in particular details of compliance with legal requirements, such as money laundering prevention and export restrictions, particulars of banks, insurance companies, distribution partners and other contracting partners given by us to enable you to use or provide services (e.g. payments made, purchases made), your addresses and potential interests and other sociodemographic data (for marketing), data in connection with website use (such as IP address, MAC address of the smartphone or computer, details of your device and settings, cookies, date and time of the visit, pages and contents retrieved, functions used, referring website, location data).  

3. Purposes for which data are processed and legal bases

We use the personal data gathered by us in the first instance to conclude and process our contracts with our customers and business partners, in particular in the context of the webshop and ticket sales and in order to comply with our legal obligations, both at home and abroad. 

We further process personal data about you and other persons to the extent that this is permitted and appears appropriate to us, including for the following purposes in which we (and sometimes also third parties) have an interest that is justified by the relevant purpose:  

  • conclusion of contracts;  
  • offer and ongoing development of our offers, services and websites, apps and other platforms on which we are present; 
  • communication with third parties and processing of their enquiries (e.g. candidacies, media enquiries); 
  • verification and optimization of need analysis procedures for the purpose of direct contact with customers and gathering of personal data from sources that are open to the public with a view to the acquisition of customers;  
  • advertising and marketing (including organization of events) unless you have objected to the use of your data (if we send promotional material to you as an existing customer you may object at any time and we will then place you on a list blocking the receipt of further promotional material);  
  • market and opinion research, media monitoring;  
  • enforcement of legal claims and defense on the occasion of legal disputes and official proceedings;  
  • prevention and investigation of criminal acts and other malfeasance (e.g. performance of internal investigations, data analyses and prevention of fraud);  
  • securing our operations, in particular IT, our websites, apps and other platforms;  
  • video surveillance to safeguard house rules and other measures for IT, building and equipment security and to protect our staff and other persons and assets owned by or entrusted to us (such as access controls, lists of visitors, network and mail scanners, telephone recordings);  
  • buying and selling of business areas, companies or parts of companies and other transactions in company law and in relation thereto the transfer of personal data and measures to run the business and as necessary to comply with legal and regulatory obligations and internal rules of Gurtenfestival AG.  

In so far as you have given us your consent to the processing of your personal data for particular purposes (for example, when you registered to receive news letters or to enable a background check to be made) we process your personal data in the context and on the strength of that consent in cases where we have no other legal basis and require such a basis. Once consent has been given, it may be withdrawn at any time without, however, any impact on data processing operations that have already been performed.  

4. Cookies/tracking and other technologies related to use of our website  

Cookies 

We typically use cookies and comparable techniques on our website by means of which your browser or your device can be identified. A cookie is a small data file that is sent to your computer or automatically stored by the web browser that is used on your computer or mobile device when you visit our website. If you return to this website later we are able to recognize you in this way even if we do not know who you are. Apart from cookies that are used only during a session and deleted after your visit to the website (“session cookies”), cookies may also be used to store user settings and other information for a particular period of time (e.g. two years) (“permanent cookies”). However, you may set your browser in such a way that it declines cookies, stores them for just one session or otherwise deletes them before the usual time. Most browsers are preset in such a way as to accept cookies. We use permanent cookies to enable you to store user settings (such as language, autologin) and enable us to better understand how you use our offers and contents so that we can display offers and promotional material tailored to your needs (this may also be done on the websites of other companies; however, in that case they do not learn your identity from us even if we ourselves know it because they merely see that their website is being visited by the same user who also consulted one of our own pages). Some cookies are set by us and some by contracting partners with whom we cooperate. If you block cookies, some functions (such as choice of language, shopping cart, ordering processes) may no longer work.   

On occasion and to the extent that this is allowed, we also incorporate into our newsletters and other marketing emails visible and hidden image elements; when they are retrieved from our servers we are able to determine whether and when you opened the email to enable us to measure here too and better understand how you use our offers and tailor them to your needs. You may block this in your email program; most such programs are preset for this to be the case. 

By using our websites and receiving our newsletters and other marketing emails you consent to the use of these technologies. If you do not wish to do so, you must set your browser or email program accordingly. You may also cancel receipt of our newsletter at any time. Your personal data kept by us for the purpose of sending you the newsletter are stored by us until you cancel your subscription to the newsletter; they are deleted after such cancellation. 

Google Analytics  

On our websites we sometimes use Google Analytics or comparable services. This is a third party service that may be located in any country of the world (in the case of Google Analytics it is Google LLC in the USA, www.google.com), with which we are able to measure and evaluate website use (non-personalized). For this purpose we also use permanent cookies that are set by the service provider. The service provider receives no personal data from us (and does not retain any IP addresses) but may track your use of the website, combine these details with data from other websites that you have visited and which are likewise tracked by the service provider and use this knowledge for his own purposes (e.g. to send promotional material). If you too have registered with the service provider, he also knows who you are. In that case your personal data are processed by the service provider under his own responsibility and in compliance with his data protection provisions. The service provider only lets us know how our particular website is used (without any personal details about you). 

Plug-ins and incorporation of other third party offers 

On our websites we also set what are known as plug-ins of social media such as Facebook, Twitter, Youtube, Instagram, Spotify or TikTok. You are always made aware of this (typically by means of the relevant symbols).  

If you have a user account with these third parties, under certain circumstances they may also be able to measure and evaluate your use of our digital offers. On that occasion, other personal data such as IP address, personal browser settings and further parameters may be transferred to these third parties and stored by them. When a social login service such as Facebook-Connect is used, the provider may let us have personal data stored by him about you, such as your name, email address and profile. We have no control over and accept no responsibility or liability for the use of such personal data gathered by third parties. You can find information about data gathering and use by third party providers in the data protection notices of the third party providers concerned. 

Links with third parties 

Gurtenfestival AG has links to other websites. This enables you to retrieve information on topics that are relevant and of interest to you. These third party providers’ websites are located outside our sphere of influence and are not covered by this privacy notice. If you access other websites via the offered links, the operators of those websites may store your personal data.  

Gurtenfestival AG gives no guarantee or assurance as to the storage of user data or their use on third party servers.

5. Data release and data transfer to other countries

On the occasion of our business activities and for the purposes set out in Section 3, we also disclose data to third parties to the extent that this is permitted and in our view appropriate, either because those third parties process such data for us or because they use them for their own purposes. The following entities are concerned in particular

  • our service providers (in particular our sister company Eventon AG), including order processers (such as IT providers);  
  • dealers, suppliers, subcontractors and other business partners;  
  • customers;  
  • domestic and foreign authorities, official bodies or lawcourts;  
  • media;  
  • the public, including visitors to websites and social media;  
  • competitors, branch organizations, associations, organizations and other bodies;  
  • persons who acquire or are interested in acquiring the company or business areas or other parts of Gurtenfestival AG;  
  • other parties involved in potential or actual legal proceedings.  

We are likewise entitled to transfer your personal data for the purposes of the data processing operations described in this privacy notice to third party enterprises (contracted service providers) located abroad. They are required to protect data to the same extent as we ourselves must do so. If the data protection standard in a particular country does not comply with the Swiss or European standard, we make contractual provision to ensure that your personal data are protected at all times to the same extent as they are in Switzerland or in the EU. 

6. Period for which personal data are stored 

We process and store your personal data for as long as that is necessary to comply with our contractual and legal obligations or otherwise required to achieve the purpose for which data are processed, i.e. for example for the duration of the entire business relationship (from preparation and implementation until termination of a contract) and even beyond that time to satisfy legal obligations of storage and documentation. In this connection, personal data may be stored for the time during which claims may be enforced against our enterprise and to the extent that we are otherwise required to do so by law or by justified business interests (for example for evidential and documentation purposes). As soon as your personal data are no longer needed for the above purposes they will as a matter of principle be deleted or anonymized as far as that is possible.  

7. Data security 

We take appropriate technical and organizational security measures to protect your personal data against unauthorized access and misuse. These measures are constantly adapted to the latest state of technology.  

8. Duty toprovide personal data 

As part of our business relationship, you must provide the particular personal data that are needed to initiate and implement a business relationship and perform the accompanying contractual obligations (as a rule, you do not have a legal obligation to make data available). In the absence of such data we will as a rule be unable to conclude or implement a contract with you (or with the entity or person whom you represent). The website cannot be used either unless certain information is disclosed to assure the data traffic (such as an IP address). 

9. Profiling 

We process your personal data in part by automated means with a view to assessing certain personal aspects (profiling). We use profiling in particular in order to keep you suitably informed of products and to be able to advise you. For that purpose, we use evaluation instruments that enable us to effect communication and advertising adapted to your particular needs, including market and opinion research. 

10. Rights of the person concerned 

Under the terms of the data protection law which applies to you and to the extent stipulated therein (for instance in the case of the GDPR), you have the right to information, correction, deletion, the right to limit data processing and otherwise object to our data processing operations and to the release of certain personal data for the purpose of transfer to another entity (known as data portability). However, please be aware that we reserve the right to enforce on our side the limitations prescribed by law, for instance if we are required to store or process certain data, have an overriding interest in doing so (in so far are we are entitled to refer to that interest) or require such data in order to enforce claims. If you incur costs in this connection we will inform you in advance. You were already informed in Section 3 of the possibility open to you of withdrawing your consent. Please note that the exercise of these rights may conflict with contractual agreements and that this may have consequences, such as termination of the contract before the due date or consequential costs. In that case we will inform you in advance unless this matter is already covered by the contract.  

As a rule, exercise of these rights presupposes unambiguous proof of your identity (e.g. by means of a copy of an identity document unless your identity is otherwise already clear or can be verified). You may contact us at the address given in Section1 in order to enforce your rights. 

Any person concerned likewise has the right to enforce her or his claims in the lawcourts or to file a complaint with the relevant data protection authority  The data protection authority responsible in Switzerland is the Federal Data Protection and Information Commissioner FDPIC (http://www.edoeb.admin.ch).

11. Amendments 

We may adapt this privacy notice at any time without prior notice. The latest edition published on our website applies in every case.  

Please read this privacy notice again at regular intervals so that you always have the latest information on our use of your personal data and on ways and means of enforcing your rights. 

I.
1.

 

←