Legal
Last updated: 15.11.2026 · Volume X Festival 2026 Cashless-Portal
The controller responsible for data processing on this portal within the meaning of the General Data Protection Regulation (GDPR) is:
This portal allows festival visitors to top up their cashless festival wristband online, check their balance, and request a refund of remaining balance after the event. The technical operation of the cashless system is handled by Tickee GmbH. Payment processing is handled via Stripe.
To top up your wristband, you enter your ticket ID and the desired amount. This data is transmitted to Tickee GmbH to assign the top-up to your ticket. Payment data (card, Apple Pay, Google Pay) is processed exclusively by Stripe – we never receive full card details. Stripe only transmits a confirmation of successful payment and an anonymised payment ID.
To display your balance, the ticket ID and last name are transmitted to Tickee GmbH for verification. We do not store this data on our servers.
For a payout request, the following data is transmitted to Tickee GmbH, which processes the payment:
This data is used exclusively to process the payout and is not used for any other purposes.
Upon request, a lost ticket can be resent. For this, email address and last name are transmitted to Tickee GmbH.
When accessing this website, our web server automatically stores technical access data (server logs), including IP address, date and time of access, URL accessed and browser used. This data is used solely to ensure operation and for error analysis, and is deleted after a maximum of 30 days.
To simplify usage, the portal saves successfully used ticket IDs in your browser's local storage (localStorage). This data does not leave your device and is not transmitted to us or third parties. You can delete it at any time directly in the portal or via your browser settings.
Your data is processed on the basis of the following legal grounds under the GDPR:
The cashless system is technically operated by Tickee GmbH. Tickee processes only the data necessary to operate the system (ticket ID, top-up amount, last name, and where applicable IBAN and account holder for payouts) on our behalf and under our instructions, pursuant to a data processing agreement (DPA) under Art. 28 GDPR.
Tickee GmbH
Further information: tickee.de
We use Stripe for processing online payments. The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (for users in the EU).
When you enter your payment details, these are transmitted directly and encrypted to Stripe. We do not receive complete payment data (e.g. card numbers). Stripe may process personal data in the USA; the transfer is based on EU standard contractual clauses (SCCs) pursuant to Art. 46 GDPR.
Stripe may use the data for fraud prevention and compliance purposes. Further information can be found in Stripe's privacy policy: stripe.com/de/privacy
The legal basis for integrating Stripe is Art. 6(1)(b) GDPR (contract performance).
Your data is transmitted exclusively to the processors named above (Tickee GmbH, Stripe) to the extent necessary to provide the service. There is no disclosure to other third parties, advertising partners, or for the creation of user profiles.
Data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations. Payment-related data is subject to commercial and tax retention periods of up to 10 years. Server logs are deleted after a maximum of 30 days.
Under the GDPR you have the following rights:
To exercise your rights, contact: support@volume-x-event.de
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your data. The competent authority depends on your place of residence or the controller's registered office. A list of German data protection authorities can be found at: bfdi.bund.de
For privacy questions, contact us anytime at support@volume-x-event.de.