DEEN
RegisterFree consultationBook a call

Legal

Privacy Policy

Last updated: November 2026

This English version is provided for convenience only. Only the German version of the Datenschutzerklärung is legally binding.

Overview

This privacy policy informs you about which personal data tickee GmbH processes, for what purposes this is done and what rights you have. Personal data is any information that can be used to identify you personally.

It applies to all services of tickee GmbH:

  • the website tickee.de with contact form, registration and appointment booking,
  • the ticket shops we operate for organisers (in particular at shop.tickee.de, on event pages and under the organisers’ domains),
  • the delivery of tickets by email and as a pass for Apple Wallet and Google Wallet,
  • access control, point of sale and cashless payment at events,
  • the Organiser, the administration interface for organisers,
  • the tickee app for access control and point-of-sale staff, as well as the event apps we provide for organisers.

Controller and contact

Unless otherwise stated in this policy, the controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

tickee GmbH
Norderweg 1
25856 Wobbenbüll

Phone: +49 4841 981 290
Email: office@tickee.de

Managing directors authorised to represent the company:

Leif Paisen, Heiko Taube

For all questions about data protection and to exercise your rights, you can contact us at the email address given above or by post at the address given above.

Role of the organisers

tickee is a platform for organisers. If you buy a ticket, the contract for attending the event is concluded with the respective organiser; we operate the ticket shop, process the payment and issue the tickets (see our Terms and Conditions). This results in the following division:

  • We are responsible for operating our platform (shop, payment processing, ticket delivery, settlement, security).
  • The organiser receives the order and ticket data for their event in order to hold it, for example for access control, for information about the event or in the event of a cancellation. The organiser is themselves responsible for this processing; you will find their contact details in the ticket shop and on your ticket.
  • We operate event apps on behalf of the respective organiser. There, the organiser is the controller; we act as a processor pursuant to Art. 28 GDPR (see section “Event apps”).

Hosting and security

Servers in Germany

The website, ticket shops, Organiser and our interfaces run on servers in data centres in Germany. Our hosting service providers are STACKIT GmbH & Co. KG, Neckarsulm, and Windcloud 4.0 GmbH, Enge-Sande. They process the data exclusively on our behalf and in accordance with our instructions (Art. 28 GDPR). The legal basis is our legitimate interest in secure and reliable operation (Art. 6 (1) (f) GDPR) and, insofar as you use our services, the performance of the contract (Art. 6 (1) (b) GDPR).

Server log files

Each time our website, a ticket shop or the Organiser is accessed, the server automatically stores information transmitted by your browser:

  • IP address,
  • date and time of the request,
  • address accessed and amount of data transferred,
  • previously visited page (referrer),
  • browser type, browser version and operating system.

We need this information to deliver the pages, find errors and fend off attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the security and stability of our systems. The log files are not merged with other data and are generally deleted after 14 days. If a security incident is being investigated, we retain the affected entries until the investigation has been completed.

Encryption

All pages and interfaces transmit data exclusively in encrypted form (TLS). You can recognise an encrypted connection by the padlock symbol and by “https://” in your browser’s address bar. You enter payment data such as card or account details directly with the respective payment service provider; it does not reach our servers.

Sending emails

We send confirmations, tickets, invoices, invitations to the Organiser and other emails via the mail server of a service provider acting on our behalf (Art. 28 GDPR). In doing so, your email address and the content of the message are processed.

Website tickee.de

Cookies and local storage

The website itself does not set any cookies. So that it can respect your decision in the cookie banner, it stores this decision in your browser (see next section). Cookies are only set by the services of Google and Meta, and only after you have given your consent; details are given for the respective services.

Consent via the cookie banner

On your first visit, a banner asks whether you consent to the services that are not necessary for operating the website. These are currently the Zeeg appointment calendar (category “External services”), audience measurement with Google Analytics (category “Statistics”) and the Meta Pixel for advertising on Facebook and Instagram (category “Marketing”). Until you have made a decision, none of these services is loaded and no data is transmitted to the providers. Declining takes one click and is as easy as consenting.

We store your choice exclusively in your browser (entry “tickee.consent” in Local Storage), together with the time of the decision. It is not transmitted to us or to third parties and is not a cookie. This storage is necessary in order to respect your decision on subsequent visits; the legal basis is § 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6 (1) © GDPR.

You can change or withdraw your choice at any time via the “Cookie settings” link in the footer. After a withdrawal, we no longer load the services concerned; you can delete cookies previously set by a provider in your browser settings. If we change the services that the banner informs you about, we will ask you again.

Contact form

If you write to us via the contact form, we process your name, your email address, your message and the voluntary information (such as phone number or company) in order to answer your enquiry. The form sends the information by email to our team. The legal basis is Art. 6 (1) (b) GDPR if your enquiry is aimed at a contract with us, and otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR). We delete the enquiry once it has been dealt with and no statutory retention obligations prevent this; enquiries that do not result in a contract are deleted after two years at the latest.

Registration as an organiser

You can apply for access to the Organiser via the “Register” page. For this purpose, we process your first name, last name, email address, the name of your company or event and, if you provide it, your phone number. The information is sent by email to our team, which reviews it and sets up your access; you will receive the activation by email. The legal basis is Art. 6 (1) (b) GDPR (initiation and performance of the contract). If no contract is concluded, we delete the information as soon as it is no longer needed.

Appointment booking with Zeeg

On the “Book a demo” page, we embed the appointment calendar from Zeeg. The provider is Zeeg GmbH, Friedrichstr. 155, 10117 Berlin, Germany.

The calendar is loaded from Zeeg’s servers. In the process, Zeeg receives your IP address as well as information about your browser and device. This only happens once you have consented to the category “External services” in the cookie banner or click “Load calendar” on the page itself. Without this consent, the area remains empty and no connection to Zeeg is established. The legal basis for loading is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG; it can be withdrawn at any time via “Cookie settings” in the footer.

If you book an appointment, you transmit your name, your email address, the selected time and, where applicable, further information from the booking form to Zeeg. This information is stored in our Zeeg account so that we can hold the appointment and get in touch with you. The legal basis for this is Art. 6 (1) (b) GDPR (performance of pre-contractual measures at your request). We delete the data as soon as the purpose no longer applies and no statutory retention obligations prevent this.

Further information can be found in Zeeg’s privacy policy: https://zeeg.me

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that we use to embed and control analytics tools on our website. It does not itself create user profiles or store cookies. However, when the Tag Manager is loaded, a connection to Google’s servers is established, and Google receives your IP address in the process.

The Tag Manager is only loaded once you have consented to the category “Statistics” in the cookie banner. Without this consent, no connection to Google is established. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time via “Cookie settings” in the footer.

We currently use the Tag Manager exclusively to embed Google Analytics. When loading it, we send Google the instruction that data may only be processed for statistical purposes and not for advertising (Google Consent Mode). The Meta Pixel (see below) does not run via the Tag Manager.

Google Ireland Limited is a subsidiary of Google LLC, which is based in the USA. A transfer of data to the USA can therefore not be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; in addition, the European Commission’s standard contractual clauses apply. Further information: https://business.safety.google/privacy/

Google Analytics 4

This website uses functions of the web analytics service Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyse the behaviour of website visitors: which pages are accessed and how often, how long visitors stay, which page they come from and which device and browser they use. We also record whether an appointment was booked or a registration was submitted via the website, without the content of this information. For this purpose, Google Analytics sets cookies (in particular “_ga” and “ga…”) with which your browser is recognised on a later visit, and records the information mentioned together with a randomly generated identifier. The information is transmitted to Google’s servers and stored there.

Google Analytics is only loaded once you have consented to the category “Statistics” in the cookie banner. Before this consent, no cookie is set and no data is transmitted to Google. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent is voluntary and can be withdrawn at any time with effect for the future via “Cookie settings” in the footer. The lawfulness of the processing carried out until the withdrawal remains unaffected by the withdrawal.

Google Analytics 4 does not store IP addresses. Google uses the IP address only to determine the approximate location and discards it on servers in the EU before it is stored. The cookies remain stored on your device for up to 2 years unless you delete them beforehand. User and event data stored at Google is automatically deleted after 14 months. Aggregated reports without personal reference remain unaffected by this.

The basis for processing by Google on our behalf is Google’s data processing terms, a data processing agreement pursuant to Art. 28 GDPR. With regard to transfers to the USA, what was said for the Tag Manager applies. Irrespective of your consent, you can prevent Google Analytics from collecting data by using a browser plug-in: https://tools.google.com/dlpage/gaoptout?hl=de. More about how user data is handled in Google Analytics: https://support.google.com/analytics/answer/6004245?hl=de

Meta Pixel (Facebook and Instagram)

We use the Meta Pixel. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The Pixel is a piece of program code that establishes a connection to Meta’s servers when you visit our website.

The Pixel is only loaded once you have consented to the category “Marketing” in the cookie banner. Before this consent, no cookie is set and no data is transmitted to Meta. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time via “Cookie settings” in the footer; after that, the Pixel no longer reports anything.

After consent, Meta receives your IP address, information about your browser and device, the pages of our website you have accessed (“PageView”) and the information that you have submitted an enquiry, booked an appointment or registered (“Lead”). We do not transmit the content of this information, such as your name or email address, to Meta. The Pixel sets the cookie “_fbp”, which is valid for up to 3 months. We have switched off the Pixel’s automatic recording of buttons and form fields.

We use this data to measure whether our advertisements on Facebook and Instagram lead to enquiries, and to show visitors to our website suitable advertisements there. If you are logged in to Facebook or Instagram, Meta can assign the visit to your account. Meta also processes the data for its own purposes, for example to improve its advertising systems; we have no influence on this. We and Meta are joint controllers for the collection and transmission of the data (Art. 26 GDPR); the agreement on this can be found at https://www.facebook.com/legal/controller_addendum.

A transfer of data to the USA to Meta Platforms, Inc. cannot be ruled out. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework; in addition, the European Commission’s standard contractual clauses apply.

You can change your advertising settings at Meta here, also independently of our website: https://www.facebook.com/settings?tab=ads. Further information on data protection at Meta: https://www.facebook.com/about/privacy/

Fonts

The fonts used on this website are hosted on our own server. No connection to the servers of Google or other providers is established for this when the page is accessed.

Ticket shops

Accessing a ticket shop

When a ticket shop is accessed, the server log files described above are created. So that the shop works, it stores your basket, the selected language and your cookie decision in your browser. We store your decision in the shop’s cookie notice in the cookie “tickee_consent” for 180 days. This storage is strictly necessary for the service you have requested (§ 25 (2) no. 2 TDDDG, Art. 6 (1) (b) and (f) GDPR). Images in individual shops may be delivered via the content delivery network Amazon CloudFront; in the process, the provider Amazon Web Services receives your IP address.

Orders and tickets

For an order, we process:

  • first name, last name, email address and billing address, and the company name if you wish,
  • the tickets and items ordered, prices, voucher or invitation codes,
  • personalisation details that the organiser requires for their tickets, such as the name of the ticket holder,
  • payment method and payment status (not your full card or account details),
  • the time of the order and technical information to protect against misuse.

We need this data to process your order, collect the payment, send you the tickets and the invoice, and check your tickets at the entrance. The legal basis is Art. 6 (1) (b) GDPR; for the retention of invoices and booking records, Art. 6 (1) © GDPR in conjunction with the retention obligations under commercial and tax law. Without this information, we cannot accept an order.

You receive tickets by email and as a PDF. We store the PDF files in an object storage so that you can retrieve your tickets again. We inform the organiser about the orders for their event; they receive the order and ticket data mentioned above (see section “Role of the organisers”).

If an organiser issues a ticket in your name or invites you to an event, for example via a guest list, we receive your name and email address from the organiser and send you the ticket or invitation on their behalf.

If an organiser offers resale via TicketSwap, you will see a link to it in the shop. Only if you follow it do you leave our service; TicketSwap’s provider is responsible for processing at TicketSwap.

Payment service providers

Depending on the event and the payment method you choose, we process the payment via one of the following providers. You enter your payment data directly with the provider. We transmit the amount, the order number and, insofar as necessary for the payment, your name and email address to the provider, and receive the payment status from them. The legal basis is Art. 6 (1) (b) GDPR. The providers are themselves responsible for payment processing and are subject to obligations to combat fraud and prevent money laundering.

  • Stripe (cards, Apple Pay, Google Pay and others): Stripe Payments Europe, Limited, Dublin, Ireland. Payments may run via organisers’ accounts at Stripe (Stripe Connect). Privacy: https://stripe.com/de/privacy
  • PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. Privacy: https://www.paypal.com/de/legalhub/privacy-full
  • Mollie (e.g. Klarna, cards and other methods): Mollie B.V., Amsterdam, Netherlands. Privacy: https://www.mollie.com/de/privacy. If you choose Klarna, Mollie transmits the information required for the payment to Klarna Bank AB (publ), Stockholm, Sweden; Klarna may carry out an identity and credit check in the process. Privacy: https://www.klarna.com/de/datenschutz/
  • VR Payment (e.g. cards and Wero): VR Payment GmbH, Frankfurt am Main.
  • Bank transfer (payment in advance, Vorkasse): you transfer the amount to the bank account stated in the shop; we match the incoming payment with your order.

Stripe, PayPal and Klarna belong to groups of companies that are also based in the USA; a transfer to third countries cannot be ruled out there and takes place on the basis of the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Invoices and receipts

We create and archive invoices and booking records with lexoffice, a service of Haufe-Lexware GmbH & Co. KG, Freiburg, which acts on our behalf (Art. 28 GDPR). For this purpose, we process the billing information from your order. The legal basis is Art. 6 (1) (b) and © GDPR.

Tickets in Apple Wallet and Google Wallet

You can add your ticket to Apple Wallet or Google Wallet. This only happens if you press the corresponding button.

Google Wallet. If you add your ticket to Google Wallet, we transmit the name of the ticket holder, the barcode and the identifier of the ticket, the ticket category, the seat information where applicable, and information about the event to Google Ireland Limited, Dublin, Ireland. Google stores this data in order to display the pass in your Google account. If your ticket or the event changes, we update the data at Google.

Apple Wallet. If you add your ticket to Apple Wallet, you receive a pass file from us with the same information. To keep the pass up to date, your device then automatically registers with our server; in doing so, we store an identifier of the device and a push token. If your ticket or the event changes, or the ticket becomes invalid, we notify your device via the push service of Apple Inc.; Apple only receives the push token in the process, not any ticket data. You can switch off automatic updates in Apple Wallet for each pass or remove the pass; your device then unregisters from our server.

The legal basis is Art. 6 (1) (b) GDPR, and for access to your device § 25 (2) no. 2 TDDDG. Google and Apple are also based in the USA; both are certified under the EU-US Data Privacy Framework. We only evaluate counts, such as how many passes were added per event, not individual persons.

Statistics in the ticket shop (Matomo)

With your consent (category “Statistics” in the shop’s cookie notice), we measure the use of the ticket shops with Matomo in order to improve the shops. Matomo runs on our own server (analytics.tickee.de); the data is not passed on to third parties, and we evaluate it in anonymised form. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG; you can withdraw it at any time in the shop’s cookie notice.

The organiser’s Meta Pixel and Conversions API

Some organisers advertise their event on Facebook and Instagram and add their own Meta Pixel to their ticket shop for this purpose. The Pixel is only loaded once you have consented to the category “Marketing” in the shop’s cookie notice. It then reports to Meta Platforms Ireland Limited, Dublin, Ireland, which event you are viewing and whether you add tickets to the basket, begin and complete the order, with the value and number of tickets, and sets the cookie “_fbp” (up to 3 months).

In addition, we transmit these events for the organiser directly from our server to Meta (Conversions API). In addition to IP address, browser identifier and the Meta cookies “_fbp” and “_fbc”, your email address, phone number and name may also be transmitted, but only in encrypted form (as a hash value), so that Meta can only match them with its own user accounts.

The purpose is to measure and target the organiser’s advertising. The organiser and Meta are responsible for this processing; we provide it technically for the organiser. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, which you can withdraw at any time in the shop’s cookie notice. A transfer to the USA cannot be ruled out; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. Your advertising settings at Meta: https://www.facebook.com/settings?tab=ads

At the event

Access control

At the entrance, staff scan the code on your ticket. We store when and at which entrance the ticket was validated, in order to prevent multiple use and to provide the organiser with visitor numbers. For personalised tickets, staff may compare the name on the ticket with an identity document. If the organiser has sold tickets via another ticketing provider, we take over the ticket data required for access control on the organiser’s behalf. The legal basis is Art. 6 (1) (b) GDPR.

Cashless payment and point of sale

At events with cashless payment, your credit is assigned to an NFC wristband or a card, linked to your ticket where applicable. We store top-ups, purchases, refunds and the current credit balance. If you top up online, the information on orders and payment service providers above applies. Card payments at the point of sale or top-up station are processed via card terminals of SumUp Payments Limited, Dublin, Ireland, or via Stripe. On request, we refund unused credit to the original means of payment or by bank transfer; for this purpose, we process the information in your request and, in the case of a bank transfer, also your bank details.

We record point-of-sale transactions with a technical security device (TSE) in accordance with the German Cash Register Security Ordinance (Kassensicherungsverordnung, KassenSichV). For this purpose, we use the cloud service of fiskaly GmbH, Vienna, Austria, which acts on our behalf. Data on the transaction (amount, item, time, till) is transmitted, but no names. You can obtain a payment receipt via a link or by email; for this purpose, we process your email address if you provide it.

The legal basis is Art. 6 (1) (b) GDPR; for till records and receipts, Art. 6 (1) © GDPR in conjunction with the German Fiscal Code (Abgabenordnung) and the Cash Register Security Ordinance (KassenSichV).

Organiser for organisers

For the use of the Organiser, we process the data of the organisers and their staff: name, email address, phone number, role and permissions, information about the organisation (address, tax details, bank details) as well as login times and changes made in the Organiser. We need this data to provide access, to manage events and tickets, to settle and pay out revenue and to protect our systems against misuse. The legal basis is Art. 6 (1) (b) GDPR, for the settlement additionally ©, and for logging (f) (security of the accounts and traceability of changes).

Login with SMS code. To protect the accounts, we ask for a confirmation code when you log in, which we send by SMS to the mobile number on file. We send the SMS via our own devices on the German mobile network; the mobile network operator receives the usual connection data in the process. The legal basis is Art. 6 (1) (b) and (f) GDPR in conjunction with Art. 32 GDPR (security of processing).

Payouts via Stripe Connect. Organisers who receive payments via their own account at Stripe conclude a contract with Stripe for this purpose; Stripe verifies their identity in accordance with the regulations on the prevention of money laundering. This verification takes place at Stripe, not with us.

For the data of ticket buyers that organisers can view and export in the Organiser, the organiser is themselves responsible from the time of retrieval.

Apps

tickee app for staff

The organisers’ access control, point-of-sale and top-up staff work with the tickee app. It uses the camera to scan tickets, NFC to read wristbands and cards and, where applicable, the connection to a SumUp card terminal. The staff’s login data, the device identifier and the access control and point-of-sale transactions recorded with the app are processed; for operation without a network, data is temporarily stored on the device. The app contains no advertising and no analytics or tracking services. The legal basis is Art. 6 (1) (b) and (f) GDPR.

Event apps

We provide organisers with their own apps for their events (programme, information, tickets, notifications). These apps are published in the app stores under the organiser’s name. The respective organiser is the controller for data processing in an event app; we operate the app and its server on their behalf (Art. 28 GDPR). You can find the full privacy policy in the app under “Legal” and in the store listing.

The following generally applies to the event apps:

  • The app works without consent. Notifications (push), location and analytics are voluntary and are only used after you have agreed; promotional notifications are switched off by default.
  • For notifications, we store a push token of your device. Delivery runs via the push service of Expo (650 Industries, Inc., USA) and the services of Apple (Apple Push Notification Service) and Google (Firebase Cloud Messaging).
  • The app only uses your location while it is in use and only if you allow it, for example for the site map.
  • Tickets only appear in the app once you log in with your ticket details. Voluntary emergency information, such as allergies or an emergency contact, remains on your device.
  • In the app settings, you can withdraw consents and delete your data.

Recipients and transfers to third countries

Your data is only received by parties that need it for the purposes stated: the organisers of the events you attend, the payment service providers mentioned, our service providers for hosting, email delivery, accounting, TSE and wallet passes and, where there is a legal obligation, authorities and tax advisers. We have bound service providers acting on our behalf pursuant to Art. 28 GDPR. We do not sell personal data.

A transfer to countries outside the EU and the EEA only takes place with the providers for which we point this out. It takes place on the basis of an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or the European Commission’s standard contractual clauses.

Storage period

We only store personal data for as long as is necessary for the respective purpose or as required by law:

  • Server log files: generally 14 days.
  • Enquiries via the contact form and appointment booking: until they have been dealt with, and if no contract is concluded, two years at the latest.
  • Orders and tickets: for the duration of processing and of any possible claims, generally up to three years after the end of the year of the event.
  • Invoices, booking records and till data: eight years in accordance with the provisions of commercial and tax law; commercial and business letters six years.
  • Accounts in the Organiser: until the end of the cooperation, thereafter within the scope of the retention obligations.
  • Consent-based data: until withdrawal or until the purpose no longer applies, and for cookies no longer than the respective durations stated.

We block data that we only still store because of retention obligations for any other use.

Your rights

You have the following rights vis-à-vis us with regard to the personal data concerning you:

  • access to the stored data (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR), insofar as no retention obligation prevents this,
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR) for data that you have provided to us on the basis of consent or a contract,
  • withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR); the lawfulness of the processing carried out until then remains unaffected.

If your request concerns data for which an organiser is responsible, you can contact them or us; we will then forward your request.

Right to object (Art. 21 GDPR)

If we process your data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You can object to processing for the purposes of direct marketing at any time without giving reasons.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD, Independent Centre for Privacy Protection Schleswig-Holstein), Holstenstraße 98, 24103 Kiel, Germany, https://www.datenschutzzentrum.de.

Advertising by email

We do not send you advertising by email without your consent. We hereby object to the use of our contact details published in the legal notice (Impressum) for sending unsolicited advertising and information material.

No automated decision-making

We do not make decisions based solely on automated processing, including profiling (Art. 22 GDPR). A credit check for the Klarna payment method is carried out by Klarna under its own responsibility.

Changes to this privacy policy

We adapt this privacy policy when our services or the legal situation change. The version published here at any given time applies.