Privacy policy

Last updated: 2026-09-05

We take the security and protection of your personal data very seriously. We strictly comply with the statutory data protection provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German TDDDG. Your data is expressly not passed on to third parties for commercial or non-commercial purposes – apart from the service providers named below. To protect the security of your data during transmission, we use state-of-the-art encryption (TLS) via HTTPS.

1. General

Your personal data (e.g. name, address, e-mail address) is processed by us only in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). The following provisions inform you about the purposes of processing, recipients, legal bases and retention periods as well as about your rights and the controller responsible for your data processing. This privacy policy applies only to our website and the “TixInvoice Connector” browser extension. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.

2. Controller

The controller responsible for data processing within the meaning of the GDPR is:


Deutschland
E-mail: info@tix-invoice.com

3. Information about cookies

(1) Purpose of processing

This website uses technically necessary cookies only. These are small text files stored in or by your internet browser on your computer system. No cookie banner is required; third-party cookies, tracking or analytics services are not used.

(2) Legal basis

The legal basis for this processing is Art. 6 (1) (f) GDPR and § 25 (2) No. 2 TDDDG (strictly necessary cookies).

(3) Legitimate interest

Our legitimate interest is the functionality of our website (login, session, language setting). The user data collected through technically necessary cookies is not used to create user profiles.

(4) Storage period

Technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have a lifetime of up to twelve months. In detail:

(5) Right to object

If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. This may, however, limit the functionality of our website (in particular, logging in is not possible). You can also delete persistent cookies at any time via your browser.

  • tixsid – session cookie that keeps you logged in during a visit; it is deleted when you close your browser.
  • tixremember – remember-me cookie (30 days) so that you stay logged in on this device. It is only set after a successful login and removed when you log out.
  • lang – stores your chosen language (12 months).
  • tix-theme – stored in your browser’s local storage (not a cookie) to remember light or dark mode. It never leaves your browser.

Data we process

We process the following categories of data:

Account data (Discord login)

When you log in with Discord we receive your Discord ID, username, display name, avatar and – if your Discord account has one – your e-mail address. We use them to create and identify your account and to show your name in the app. Legal basis: Art. 6 (1) (b) GDPR (performance of a contract).

Company profile

The company details you enter in the settings (name, address, VAT ID / tax number, logo, tax scheme, invoice layout and numbering). They are printed on your invoices. Legal basis: Art. 6 (1) (b) GDPR.

Imported order data

Order data you import from your marketplace seller account: event, date, venue, section / row / seats, ticket quantity, prices, fees, currency, sale ID and status. The marketplace does not disclose the buyer’s identity, so no buyer data is included. Legal basis: Art. 6 (1) (b) GDPR.

Generated invoices & PDFs

The invoices, fee receipts and manual invoices you create, including the PDF files, are stored so that you can download them again. Manual invoices may contain recipient details you enter yourself – you are responsible for having a legal basis for processing those. Legal basis: Art. 6 (1) (b) GDPR.

Technical data

At each login we record the date, your IP address and your browser’s user agent in a login log to detect abuse and secure your account. Our hosting provider additionally keeps short-lived server logs (IP address, requested URL, time, user agent) for operational security. Rate-limit counters are stored temporarily and contain no personal data other than your account ID. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in security and operation).

Recipients & third parties

We do not sell your data. The following recipients receive data from you:

Discord

For login we use the login service of Discord Inc., 444 De Haro St. Suite 200, San Francisco, CA 94107, USA. When you log in with Discord, your Discord ID, username, display name, avatar and verified e-mail address are transmitted to us; Discord processes your data according to its own privacy policy and may transfer it to the USA. If you grant the “Join servers for you” permission in the Discord dialog, our bot adds your Discord account to our Discord server; you can leave the server at any time. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). More about Discord’s privacy policy: https://discord.com/privacy

JoinOurServer (subscription handling)

Subscriptions for TixInvoice are concluded and paid via our partner JoinOurServer. To check whether a valid subscription exists, we match your Discord ID with JoinOurServer; no other data is transmitted. Payment processing itself takes place at JoinOurServer according to its privacy policy. The legal basis is Art. 6 (1) (b) GDPR. More information: joinourserver.com

Hosting

Hosting provider – our web server is operated by a hosting provider in Germany that acts as our processor under Art. 28 GDPR.

Database host – the database is operated on a managed database server of our hosting provider, likewise bound as a processor.

No other third parties receive your data.

Marketplace data stays in your browser

TixInvoice never asks for or stores your viagogo / StubHub credentials and never connects to the marketplace on your behalf. The TixInvoice Connector browser extension reads your sales data in your own, already logged-in browser and transfers only this order data to TixInvoice.

Retention & deletion

We keep your data for as long as your account exists. You can delete your account at any time under Settings → Delete account. This immediately and permanently removes your profile, company settings, logo, imported orders, invoices, PDF files, login log entries and remember-me tokens. Remember-me tokens expire automatically after 30 days. Statutory retention obligations for your invoices apply to you as the issuer – please keep your own copies of the PDFs.

4. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against us:

1. Right of access

You can request confirmation from us as to whether personal data concerning you is being processed by us.

If such processing takes place, you can request the following information from us:

  • (1) the purposes for which the personal data is processed;
  • (2) the categories of personal data being processed;
  • (3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
  • (4) the planned duration of storage of the personal data concerning you or, if specific information is not possible, the criteria for determining the storage period;
  • (5) the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by us or a right to object to this processing;
  • (6) the existence of a right to lodge a complaint with a supervisory authority;
  • (7) all available information about the origin of the data if the personal data is not collected from the data subject;
  • (8) the existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information on whether the personal data concerning you is transferred to a third country or to an international organisation. In this context you can request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to rectification

You have a right to rectification and/or completion if the processed personal data concerning you is inaccurate or incomplete. We must carry out the rectification without undue delay. You can change your company profile yourself at any time in the settings.

3. Right to restriction of processing

Under the following conditions you can request the restriction of the processing of personal data concerning you:

  • (1) if you contest the accuracy of the personal data concerning you for a period that enables us to verify the accuracy of the personal data;
  • (2) if the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data;
  • (3) if we no longer need the personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims, or
  • (4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether our legitimate grounds override yours.

If the processing of personal data concerning you has been restricted, this data may – apart from storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been restricted according to the above conditions, you will be informed by us before the restriction is lifted.

4. Right to erasure

a) Obligation to erase: You can request that the personal data concerning you be erased without undue delay, and we are obliged to erase this data without undue delay if one of the following reasons applies:

  • (1) The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  • (2) You withdraw your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing.
  • (3) You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
  • (4) The personal data concerning you has been processed unlawfully.
  • (5) The erasure of the personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which we are subject.
  • (6) The personal data concerning you was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

You can delete your account with all its data yourself at any time under Settings → Delete account.

b) Information to third parties: If we have made the personal data concerning you public and are obliged to erase it pursuant to Art. 17 (1) GDPR, we shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of all links to, or copies or replications of, this personal data.

c) Exceptions: The right to erasure does not apply insofar as the processing is necessary

  • (1) for exercising the right of freedom of expression and information;
  • (2) for compliance with a legal obligation which requires processing under Union or Member State law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
  • (3) for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
  • (4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  • (5) for the establishment, exercise or defence of legal claims.

5. Right to be informed

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

6. Right to data portability

You have the right to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance, provided that

  • (1) the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
  • (2) the processing is carried out by automated means.

In exercising this right you also have the right to have the personal data concerning you transmitted directly from us to another controller, where technically feasible. The freedoms and rights of other persons must not be affected by this. You can export your invoices as CSV and PDF at any time.

7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.

We will then no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. We do not carry out direct marketing.

8. Right to withdraw consent

You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.

9. Automated individual decision-making including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. TixInvoice does not make such decisions; the tax calculation follows the settings you have chosen and is reviewed by you before every invoice is created.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

To exercise your rights, simply contact us at info@tix-invoice.com.

Security

All connections are encrypted (TLS). Remember-me tokens are stored hashed, access to your data is scoped to your account and stored PDFs are not publicly accessible. Nevertheless, no transmission over the internet can be guaranteed to be completely secure.

Changes to this policy

We may update this policy when the service or the legal situation changes. The current version is always available on this page.