Musical.ch
Thunerseespiele
Theater 11
Musical Theater Basel
DE
EN
de
en

Privacy policy

I.  General information

The Rent-a-Show AG, Zollikerstrasse 141, 8008 Zurich (hereinafter also «we», «us») is pleased about your visit to our website at:  https://www.musical.ch/de/ (hereinafter «Website») and your interest in our products and services. Protecting your personal data is important to us. In this privacy policy we explain how we collect your personal data, what we do with it, for what purposes and on what legal basis, and what rights and claims you have as a result. Where applicable, we will inform you in good time in writing about additional processing activities not mentioned in this privacy policy. We may also inform you separately about the processing of your data, e.g. in declarations of consent, contract terms, additional privacy notices, forms and notices. We use the term «data» here synonymously with «personal data».

If you transmit or disclose data about other persons to us, such as contact persons at your company, family members, work colleagues, etc., we assume that you are authorised to do so and that this data is correct. By transmitting data about third parties you confirm this. Please also make sure that these third parties have been informed about this privacy policy.

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation («GDPR»), the Swiss Federal Act on Data Protection («FADP»). Whether and to what extent these laws apply, however, depends on the individual case

II.  Name and address of the controller

The controller responsible under data protection law for the data processing described in this privacy policy is

Rent-a-Show AG

Zollikerstrasse 141
CH-8008 Zurich

unless otherwise communicated in individual cases. In certain cases we work with one of our group companies (show tickets AG), in particular for certain ticket sales where we do not involve our contractual partner Ticketcorner. In these cases we decide on the ticket sales, but show tickets is responsible for processing the entire ticket sale.

We have designated an internal office responsible for all data protection matters, which is available to help you with your request. You can contact us regarding data protection matters and to exercise your rights as follows:

Email: datenschutz@fbm.ch

Phone: +41 44 265 56 56

III.  Categories of data we process

The processing of your data is limited to data required to operate a functional website and to provide our content, functionalities, products and services. We only collect data that is necessary to carry out and process our tasks and services or that you provide to us voluntarily. Depending on the occasion and purpose of the processing, we may process the following data:

  • Technical data: When you use our website or other electronic offerings, we may collect the IP address and information about the operating system and devices, name and URL of the requested website, date, region and time of use, GMT time zone difference, whether a request was successful (access status/HTTP status code), amount of data transferred, websites accessed via our website, the website from which access takes place (referrer URL), the type of browser you use to access our online offering, where applicable the name of the internet provider, type and version of the browser used and other information provided by the user (such as geographic origin, language setting, add-ons used, screen resolution etc.), and logs created in our systems (e.g. the log of user logins on our website). We generally keep technical data for 24 months. To ensure the functionality of these offerings, we may also assign an individual code to you or your device (e.g. in the form of a cookie, see section XII). Technical data on its own generally does not allow conclusions to be drawn about your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, it may be linked to other categories of data (and thus possibly to your person).

  • Contact data: When you contact us, e.g. via the online contact form provided on the website, we collect the contact data you provide in this context, including the communication channel (e.g. email address, telephone number etc.), as well as the personal information requested in the online contact form, so that we know who sent the form and how we can contact this person. We also record your request (via a selection menu) and any further information you send us in a free text field provided for this purpose. We also provide a telephone and electronic (SMS) service for obtaining up-to-date information about the upcoming performance each day. In this case we may process the mobile phone number you provide.

  • Newsletter: If you subscribe to one of our newsletters on the website, we also ask for your email address, title, surname, first name and address so that we know which newsletter we may send to whom. To unsubscribe from this service, please use the link provided for this purpose in the respective newsletter.

  • Online services / ticket purchase: All orders, offers or services that you can book on our website can also be made via our contractual partner Ticketcorner. In this case, data processing is carried out in accordance with Ticketcorner’s privacy policy under Ticketcorner’s responsibility, about which please inform yourself separately. In these cases, clicking the corresponding button on our website will redirect you to the Ticketcorner website.

  • Vouchers: You can also order or buy vouchers. For this we provide an e-shop and collect information on the voucher amount, the voucher recipient, the voucher creator (giver), the delivery address of the voucher and the payment method. show tickets AG is responsible for processing voucher sales. Please refer directly to their privacy policy on the show tickets website.

  • Contract data: We collect contract data in connection with the conclusion or performance of a contract, e.g. information about the products and the services provided or to be provided, data from the period before the conclusion of the contract, information required or used to perform a contract, and information about feedback (e.g. complaints, feedback on satisfaction etc.). We generally collect this data from you, from contractual partners and from third parties involved in the performance of the contract, but also from third-party sources and publicly accessible sources. We generally keep this data for 10 years from the last contract activity, but at least from the end of the contract. This period may be longer if necessary for reasons of evidence or to comply with legal or contractual requirements, or for technical reasons.

  • Behavioural and preference data: Depending on our relationship with you, we try to get to know you and tailor our products, services and offers better to you. To do so, we collect and use data about your behaviour and preferences that we gather from you, e.g. by collecting and linking the technical data mentioned above or data we obtain via cookies, for example about clicking and browsing behaviour on the website, time spent on a particular page or links to the embedded websites of our contractual partners.

  • Other data: We may also collect data about who attends an event or similar activities and when. We also collect data when you apply for a job with us, about which we inform you in a separate privacy notice, or when you wish to find out about further events. The retention period for this data depends on the purpose and is limited to what is necessary; this ranges from a few days to reports on events with pictures, which may be kept for several years or longer. We also inform you about further events on the website. If you would like details of an upcoming event, you will be redirected to the page of the respective event provider.

Much of the data mentioned in this section III is provided to us by you. You are generally not obliged to do so, but must provide data to us or our contractual partners (e.g. ticket outlets) as part of your contractual obligations under the relevant contract so that we can interact with you or fulfil your request or claim. In addition, the processing of technical data is unavoidable when using our website.

IV. Purposes of processing

We process your data for the following purposes:

  • Communication: We process your data to communicate with you, to answer enquiries and to enable you to exercise your rights (section XI) and to contact you in case of queries. For this we use in particular communication data and master data. We keep this data to document our communication with you, for training purposes and for quality assurance.

  • Performance of contracts: We process your data in order to conclude, perform and administer a contract with you where applicable. In particular, we process communication data, master data and contract data about you. This may also include data about third parties, e.g. if you order products or services for the benefit of a third party.

  • Marketing and relationship management: We process your data for marketing and relationship management purposes. For example, we send personalised newsletters about our products and services. Marketing and relationship management may include contacting you by email, telephone or other channels for which we have your contact information. You can object to such marketing activities or withdraw your consent at any time (see section XI). For relationship management purposes we maintain a customer relationship management system («CRM») to send you information about products and services offered to you, interactions, interests, marketing measures, newsletters, invitations to events and other information. We also process your data for market research, to improve our services and operations, and for product development.

  • Security/risk management: We process your data to protect our IT and other infrastructure (e.g. buildings). For example, we process data to monitor, analyse and test our networks and IT infrastructure. We may also use surveillance systems, e.g. cameras, for security purposes. In such a case we will inform you separately at the relevant locations. We also process your data as part of our risk management and corporate governance to protect ourselves against criminal or abusive activities.

  • Compliance with the law: We process your data to meet legal requirements, e.g. regarding money laundering and terrorist financing, tax obligations etc., and we may need to request further information from you to meet such requirements or because it is required by law and by the authorities.

  • Corporate governance and business development: As part of our business development, we may sell businesses, parts of businesses or companies to others or acquire them from others, or enter into partnerships, which may lead to the exchange and processing of data on the basis of your consent

V.  Legal basis for processing your data

Where we have obtained your consent, we process your data on the basis of this consent. You can withdraw your consent at any time with effect for the future by sending us a written notice (email to: datenschutz@fbm.ch). Withdrawing your consent does not affect the lawfulness of the processing we carried out before your withdrawal, nor the processing of your data on the basis of other legal grounds.

If we have not asked for your consent, we process your data on other legal grounds, such as a contractual obligation, a legal obligation, a vital interest of the data subject or another natural person, the performance of a public task, or a legitimate interest, which includes compliance with applicable law and the marketing of our products and services, and the interest in better understanding our markets and in managing and developing our company, including its activities, safely and efficiently.

VI. Disclosure of data to third parties

In connection with our contracts, the website, our services and products, our legal obligations or otherwise to protect our legitimate interests and the other purposes listed in section IV, we also transfer your data to third parties, in particular to the following categories of recipients. All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict processing by certain third parties (e.g. IT providers), but not by others (e.g. authorities, banks, cooperation and hotel partners etc.).

  • Group companies: You can find a list of our group companies here. The group companies may use the data for the same purposes as we do, for processing ticket purchases, including advertising their own products and services.

  • Contractual partners including customers and cooperation partners: Where the respective contract requires it, we pass your data on to other contractual partners. If we sell or buy a business or assets, we may pass your data on to the potential seller or buyer of such business or assets, to whom we have assigned or transferred our rights and obligations.

  • Authorities: We may pass data on to offices, courts and other authorities in Switzerland or abroad if we are legally obliged or entitled to do so. The authorities process data about you that they receive from us under their own responsibility.

  • Service providers and third-party providers in connection with activities on our website: We work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us, or who receive data about you from us under their own responsibility (e.g. IT providers, shipping companies, advertising service providers, login service providers, cleaning companies, security companies, banks, insurance companies, telecommunications companies, credit agencies, address verification providers, lawyers), or whom we instruct to process data on our behalf and in accordance with our instructions for one of the purposes mentioned above.

We also allow certain third parties to collect data from you under their own responsibility on our website and at our events (e.g. media photographers, providers of tools we have integrated into our website etc.). Insofar as we are not decisively involved in these data collections, these third parties are solely responsible for them. Further information on activities on our website can be found in section VII below.

VII. Third-party providers and social plug-ins

a. General information

We use our own tools as well as services from third-party providers (which may in turn use cookies) on our website, in particular to improve the functionality or content of our website (e.g. embedding videos or maps), to compile statistics and to display advertising. We also use social media plug-ins, which are small software components that create a connection between your visit to our website and a third-party provider. The social media plug-in tells the third-party provider that you have visited our website and may send the third-party provider cookies that it has previously placed on your web browser. Further information on how these third-party providers use the data collected via their social media plug-ins can be found in their respective privacy policies. We also offer contractual partners (e.g. sponsors, hotel partners, coach partners, cooperation partners) the option of placing a button that you can click to be redirected to the respective partner’s website. In these cases, the contractual partner is then responsible for processing your data in accordance with its own privacy policy.

We may currently use in particular the offerings of the following service providers and advertising partners; their contact details and further information on the individual data processing operations are available in the respective privacy policy:

Some of the third-party providers we use may be located outside Switzerland. Information on the disclosure of data abroad can be found in section VIII. In terms of data protection law, some of them are «only» our processors and some are controllers. As mentioned, further information can be found in their privacy policies. The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA («third countries»), which from the perspective of Switzerland or the European Economic Area (EEA) may not guarantee an adequate level of protection for data processing in accordance with Swiss/EU standards. Section VIII applies in these cases.

b. Information on the use of Caymland M4 (marketing automation)

On our website we use the marketing automation platform Caymland M4 from Caymland Technologies AG, Waldmannstrasse 9a, CH-9014 St. Gallen, Switzerland (tel. +41 71 313 80 45, info@caymland.com). Below we inform you about the associated data processing in accordance with Art. 13 GDPR and Art. 19 revFADP.

Cookies and tracking

When you visit, Caymland M4 sets a cookie named «mtc_id» (first-party cookie). This cookie is used to recognise your browser on subsequent visits and assigns your page activity to a pseudonymous contact profile.

  • Cookie name: mtc_id
  • Purpose: assigning page visits to a pseudonymous contact profile
  • Storage period: across sessions (persistent cookie)
  • Category: Marketing

The cookie is only set after you have actively consented to the «Marketing» category via our cookie banner (opt-in under Art. 6(1)(a) GDPR / Art. 31(1) revFADP). Without your consent, no tracking takes place.

Tracking script

If marketing consent has been given, a Caymland M4 tracking script is loaded. It records:

  • Page hits: URL, time, referrer, page title
  • Device information: browser type, operating system, screen resolution, language
  • IP address: used for geolocation (city/region) and then stored in pseudonymised form

Legal basis: consent (Art. 6(1)(a) GDPR / Art. 31(1) revFADP).

Video tracking

Embedded videos on our website may be tracked by Caymland M4. The following data is collected:

  • Video URL, total duration, duration actually watched
  • Assignment to the existing contact profile

This data is transmitted to the Caymland M4 instance. Legal basis: consent (Art. 6(1)(a) GDPR).

Forms

Our website contains forms generated and processed by Caymland M4 (e.g. contact form, newsletter sign-up, application forms). The data you enter (e.g. name, email address, company, message) is transmitted directly to the Caymland M4 instance and stored there in your contact profile.

Legal basis: depending on the form, either pre-contractual measures (Art. 6(1)(b) GDPR) or consent (Art. 6(1)(a) GDPR).

Personalisation of content

If a contact profile has been created in Caymland M4 (e.g. by submitting a form or via a personalised link from an email campaign), content on our website may be personalised. This includes:

  • Personalised greetings: displaying your name, company or industry in hero sections and on other pages
  • Industry-specific content: selection of content based on the industry assigned to your profile

Personalisation is based on the following data fields: title, first name, surname, email, company, industry, city. This data is used exclusively for display on the website and is not passed on to third parties.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) or consent, if the data was collected via tracking that requires consent.

Encrypted link parameter

An encrypted parameter may be embedded in links in email campaigns. It is decrypted on the server to derive your contact ID and show you personalised content – even without a cookie already being set. No additional personal data is transmitted.

Storage period and deletion

Contact profiles in Caymland M4 are stored for as long as there is an active business relationship or a legitimate interest. You can request the deletion of your profile at any time (see section «Withdrawal, changes, corrections and updates»).

Your rights regarding Caymland M4

You have the right at any time to:

  • withdraw your consent (Art. 7(3) GDPR / Art. 31(3) revFADP) – the lawfulness of the processing carried out until withdrawal remains unaffected
  • request information about the data stored about you (Art. 15 GDPR / Art. 25 revFADP)
  • request rectification, erasure or restriction of processing (Art. 16–18 GDPR / Art. 32 revFADP)
  • object to the processing (Art. 21 GDPR)
  • request data portability (Art. 20 GDPR / Art. 28 revFADP)

VIII. Transfer of data abroad

We process and store data mainly in Switzerland and the European Economic Area (EEA), but depending on the case – for example via subcontractors of our service providers or in proceedings before foreign courts or authorities – potentially in any country in the world.

If a recipient of our data transfers is located in a country without adequate data protection, we contractually oblige the recipient to comply with a sufficient level of data protection (for this we use the revised standard contractual clauses of the European Commission, available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj? , including the additions necessary for Switzerland), unless the recipient is already subject to a legally recognised set of rules to ensure data protection. We may also disclose data to a country without adequate data protection without concluding a separate contract if we can rely on an exception. An exception may apply in particular in legal proceedings abroad, but also in cases of overriding public interest or if the performance of a contract in your interest requires such disclosure (e.g. if we disclose data to our correspondent law firms), if you have consented, or if obtaining your consent within a reasonable period is not possible and the disclosure is necessary to protect your life or physical integrity or that of a third party,  or if the data has been made generally accessible by you and you have not objected to its processing. Most providers have a European branch (e.g. a subsidiary) that acts as our contractual partner. According to their own information, these have an adequate level of data protection, including for data transfers to third countries, e.g. by concluding the standard contractual clauses with their contractual partners as data recipients or by being certified under the EU-US Data Privacy Framework and/or the Swiss-U.S. Data Privacy Framework.

IX. How long we keep your personal data

We only process your data for as long as necessary to fulfil the purposes for which we collected it, including compliance with statutory retention obligations and, where necessary to assert or defend legal claims, until the end of the respective retention period or until the claims in question have been settled. After the respective retention period has expired, we will securely destroy your data in accordance with applicable laws and regulations.

X. Data security

We take appropriate security measures to maintain the confidentiality, integrity and availability of your data, to protect it against unauthorised or unlawful processing and to counter the risks of loss, accidental alteration, unwanted disclosure or unauthorised access. Nevertheless, we and your data may fall victim to cyber attacks, cybercrime, brute-force methods, hacking and other fraudulent and malicious activities, including but not limited to viruses, forgeries, malfunctions and interruptions, which are beyond our control and responsibility and cannot be completely ruled out or prevented even by appropriate security measures.

XI. Your rights

Depending on the applicable data protection law, you have various rights regarding our processing of your data:

  • Right to access: You have the right to ask us whether and which of your data we process.
  • Right to rectification: We strive to keep your personal data correct, up to date and complete. We encourage you to contact us and let us know if your personal data is incorrect or changes so that we can keep it up to date.
  • Right to erasure: You have the right to request that we erase your data if it is no longer needed for the purposes for which it was collected, or if your data has been processed unlawfully, among other things.
  • Right to restriction of processing: You have the right to ask us to restrict the processing of your data in certain circumstances.
  • Right to data portability: You have the right to ask us to hand over certain data in a common electronic format or to transfer it to another controller.
  • Right to withdraw consent: If we process data on the basis of your consent, you have the right to withdraw your consent. As soon as we have received notice that you have withdrawn your consent, we will no longer process your data for the purpose(s) to which you originally consented, unless there is another legal basis for the processing.
  • Right to lodge a data protection complaint: If you believe that your data protection rights may have been violated, you can contact the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or the competent authority of the respective member state in the EU (https://www.edpb.europa.eu/about-edpb/about-edpb/members_de) and explain why you believe your data is not being processed in compliance with data protection law. We ask you to contact us first (see section II) so that we can try to find a solution together.
  • Right to object: Under applicable data protection law, you have the right to object at any time to the processing of data concerning you in certain circumstances, in particular if your data is processed in the public interest, on the basis of a balancing of interests or for direct marketing purposes.

XII. Cookies

We use cookies on our website and may also allow certain third parties to do so. Cookies are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone etc.) when you visit our website, e.g. to make it easier for you to use the website and our services and to obtain information to improve our services. Cookies are small text files that the browser stores in a designated directory on the user’s system. In principle, cookies themselves do not contain any data about you, but the information stored in cookies may be linked to further information, including data, and thereby connected to your person.

You can configure your browser at any time to block cookies in general or to display a warning each time before a cookie is accepted, so that you can decide yourself whether to accept the cookie or not. You can access your current settings by clicking the button at the very bottom of the website in the footer, and you can withdraw your consent at any time via the same link. Further information can be found on your browser’s own help pages (usually under «Privacy») or on the websites of the third-party providers mentioned. There are various categories of cookies that we may use:

  • Necessary cookies: Some cookies are necessary for the website as such or for certain functions to work. For example, they ensure that you can switch between pages without losing information entered in a form, or that you stay logged in. Other cookies are necessary for the server to store options or information (that you have entered) beyond a session (i.e. a visit to the website) if you use this function (e.g. language settings, consents, automatic login functions etc.). These cookies have an expiry period of up to 24 months. The legal basis for these cookies is our legitimate interest in providing you with all functions of our website.
  • Performance cookies: To optimise our website and the associated offerings and adapt them better to users’ needs, we use cookies to record and analyse the use of our website, possibly also beyond a session. For this purpose we use analytics services from third-party providers (see also section VII). For example, we analyse which page a user visits most often and whether error messages are displayed. These cookies do not store any further information. They serve exclusively to increase user-friendliness and to tailor websites more specifically to the user. Before we use such cookies, we ask for your express prior consent. You can withdraw this consent at any time via the cookie settings. Performance cookies also have an expiry period of up to 24 months. Details can be found on the websites of the third-party providers.
  • Marketing cookies: We and our advertising partners have an interest in targeting advertising as precisely as possible, i.e. showing it only to those we want to reach. For this purpose, we and our advertising partners use cookies – if you consent – that can record the content accessed or the contracts concluded. This allows us to optimise our content and allows us and our advertising partners to show you advertising that we think will interest you, on our website but also on other websites that display advertising from us or our advertising partners. If you consent to the use of these cookies, you will be shown relevant advertising. If you do not consent, you will not see less advertising, just different advertising. You can withdraw your consent at any time via the cookie settings. Marketing cookies have an expiry period of a few days up to 24 months, depending on the circumstances.

As mentioned, you can change your cookie settings at any time via the Cookie settings link in the footer of the website.

XIII. Updates and changes to this privacy policy

Due to the continuous development of our website and its content, and due to changes in the law or regulatory requirements, we may need to amend this privacy policy from time to time. The version published on this website is the current version. In case of discrepancies, the German version prevails.

Zurich, June 2026

Pages
Team
Advertising material
Jobs
FAQ
House rules
Resale
Legal
Legal notice
Terms & conditions
Privacy policy
Ticket insurance
Social
Instagram
YouTube
Facebook
Social
Musical.ch
Thunerseespiele
Theater 11
Musical Theater Basel
DE
EN