PRIVACY POLICY

About us

Last Updated: 15.06.2026

We are GRAND CONCERT SAS (hereinafter referred to as “we”, “us”, “our”, or “Grand Concert”), operating the website GrandConcert.fr and providing access to ticket sales, event-related services, and ticketing solutions for concerts, shows, and other live events.

Please carefully read this Privacy Policy to understand how Grand Concert processes your personal data.

Grand Concert SAS acts as the data controller for the processing activities described in this Privacy Policy, except where otherwise specified.

For any inquiries or concerns regarding our privacy practices, please contact us using the information provided at the conclusion of this Privacy Policy.

We may use external ticketing infrastructure providers and other technical service providers in connection with the operation of the Site and the provision of our services.

Such service providers process personal data solely for the purposes of providing services to Grand Concert and are required to implement appropriate technical and organisational measures to protect personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Grand Concert operates the Site for the promotion, organization, and sale of Tickets for concerts, shows, and other live events.

Grand Concert acts as the Event Organizer and seller of record for the events offered through the Site.

We may utilize external technical systems to facilitate ticket sales, ticket delivery, customer support, communications, analytics, and related services.

Certain products or services you access or purchase through the Site may be provided by third-party partners. The handling of your information relating to such services may additionally be governed by the privacy notices of those third parties.

Where third-party partners process personal data in connection with services provided through the Site, such parties are required to implement appropriate technical and organisational measures to ensure the protection of personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Grand Concert may request reasonable assurances of such compliance where appropriate.

↑ Back to top

Table of Contents

Privacy Policy Acknowledgement

By accessing and utilizing our Site, you hereby acknowledge and consent to the practices described in this Privacy Policy (the "Privacy Notice").

You may browse the Site without providing personal information; however, certain services require the provision of personal information.

By providing such information, accessing or visiting the Site, or purchasing Tickets through the Site, you agree to the terms of this Privacy Notice and all applicable laws, regulations, and policies governing the use of the Site.

You affirm that you possess the legal right to enter into this binding agreement.

This Privacy Notice describes the privacy practices relating to the collection and processing of personal information through the Site.

Your access to the Site, together with all communications between you and Grand Concert SAS, is governed by this Privacy Notice.

When using the Site for browsing, searching, or purchasing Tickets, you acknowledge that you are interacting with a Site operated by Grand Concert SAS and that this Privacy Notice applies to you.

↑ Back to top

Applicable Law

Grand Concert SAS prioritizes the protection of your privacy and complies with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679, together with other applicable legislation governing the protection of personal data.

Additionally, we comply with relevant French laws, including:

  • French Data Protection Act (Loi Informatique et Libertés No. 78-17 of 6 January 1978, as amended)
    This law regulates the processing of personal data and implements the GDPR framework in France.
  • French Civil Code (Code civil)
    Including provisions relating to privacy rights and the protection of personal rights.
  • French Consumer Code (Code de la consommation)
    Including consumer protection requirements relevant to online services, communications, and ticket sales.
  • French Postal and Electronic Communications Code (Code des postes et des communications électroniques)
    Including rules relating to electronic communications and direct marketing communications.

These laws provide a framework for the protection of personal data and ensure that your information is handled in accordance with applicable legal standards.

By using the Site or purchasing Tickets through the Site, you acknowledge that your personal data may be processed in accordance with this Privacy Notice and applicable law.

For further information regarding these regulations or any privacy-related concerns, please contact Grand Concert SAS using the contact details provided at the end of this Privacy Notice.

↑ Back to top

Personal Information We Collect

Grand Concert SAS collects personal information that you voluntarily provide when creating (and later updating) your user account, accessing and using our services, interacting with us, or corresponding with us.

This personal information may include, but is not limited to:

  • Contact Information: Your name, home and billing address, email address, and telephone number.
  • Account Information: Usernames combined with passwords, secret questions and answers.
  • Payment Information: Information necessary to process transactions through third-party payment providers. Grand Concert SAS does not store payment card details or bank account information. Payment transactions are processed by independent third-party payment providers.
  • Personal Preferences and Interactions: Email correspondence with customer support, favorite artists, shows, performers, purchase history, viewing history, and other interactions with the Site.
  • Additional Identification Information: Any additional personal information reasonably required to authenticate or identify you or verify information provided to us.

We do not intend to process sensitive personal data. However, we may occasionally process information relating to accessibility requirements, special assistance requests, or seating arrangements where necessary to provide our services.

When you access or use the Site, we may automatically collect information about your visit, including:

  • Log Information: Details regarding your use of the Site, including browser type, access times, pages viewed, IP address, and the page visited before accessing our Site.
  • Device Information: Information regarding the computer or mobile device used to access the Site, including hardware model, operating system and version, unique device identifiers, and mobile network information.
  • Location Information: With your permission, information regarding the location of your device when accessing or using the Site.

Our Services are not intended for individuals below the age of majority without parental or guardian involvement. If you are under the age of 18, you are prohibited from registering a profile on our Site. Any tickets for persons under the age of 18 must be purchased by or under the supervision of a parent or guardian.

Grand Concert SAS does not intentionally collect or distribute information from or about children under the age of 16. Should Grand Concert SAS become aware that it has inadvertently received personally identifiable information from an individual under the age of 16, reasonable steps will be taken to delete such information from its records.

↑ Back to top

Information We Receive from Third Parties

Grand Concert SAS may receive information about you from third-party service providers, payment service providers, business partners, analytics providers, marketing partners, public sources, and other lawful sources.

We may combine such information with information that we collect directly from you or through your use of the Site in order to improve our services, maintain accurate records, prevent fraud, comply with legal obligations, and better understand user preferences.

Any processing of such information is carried out in accordance with this Privacy Notice and applicable data protection laws, including the General Data Protection Regulation (GDPR).

↑ Back to top

Information We Collect Via Cookies and Other Tracking Technologies

Grand Concert SAS utilizes various technologies, including web beacons and cookies, to collect information about your activity on the Site with the aim of enhancing your experience. This may encompass details regarding the pages you visit, the content you view, as well as information about your device and browser. We may also employ third-party analytics tools, such as Google Analytics and Amazon Web Services, to gather such information.

↑ Back to top

Cookies

Cookies are data files that are stored on your computer or portable device upon visiting specific web pages. These files function as mechanisms enabling the Site to recall actions previously executed by your browser, such as pressing particular buttons or logging in during an earlier visit. The utilization of cookies assists in enhancing the user experience by allowing us to personalize our services, evaluate the popularity of various areas and features of our services, and comprehend the manner in which customers engage with the services.

↑ Back to top

Types of Cookies

  • Essential Cookies (Strictly Necessary Cookies): These cookies are vital for the operation of our Site. They enable you to access secure areas of our Site and use the shopping cart feature when making purchases.
  • Analytical/Performance Cookies: These cookies allow us to recognize and count the number of visitors and to observe how visitors navigate our Site. This information assists us in improving the Site, ensuring users can easily find what they are searching for.
  • Functionality Cookies: These cookies enhance the functionality of the Site and facilitate ease of use. For example, they remember that you have previously visited the Site and requested to remain logged in.
  • Targeting Cookies: These cookies record your visit to our Site and your browsing habits, such as the pages you have visited and the links you have followed. They are employed to display advertisements that are more relevant to your interests and can also be used to limit the frequency of ads. These cookies may be set by us or by ad networks with our permission. Please note that these cookies do not contain your personal information.

↑ Back to top

Third-Party Cookies

The Site may use third-party cookies and similar technologies provided by analytics providers, advertising partners, social media platforms, embedded content providers, and other third-party services.

Information regarding the collection, use, management, and opt-out options relating to such third-party cookies can be found in the privacy notices and cookie policies of the relevant third parties.

The processing of information collected through cookies and other tracking technologies is carried out in accordance with this Privacy Notice, applicable cookie consent requirements, and applicable data protection laws, including the General Data Protection Regulation (GDPR).

If you have any questions regarding our use of cookies or tracking technologies, please contact Grand Concert SAS using the contact details provided at the end of this Privacy Notice.

↑ Back to top

Managing Cookies

You may manage cookies by configuring the settings in your internet browser to refuse the placement of all or certain cookies. For detailed instructions on how to adjust your cookie settings, please consult the guidance or online help resources provided by your respective browser.

Please be advised that declining cookies may result in the inability to utilize certain additional features of our Site and may restrict access to specific areas of the Site.

↑ Back to top

For What Purposes Do We Process Your Personal Data

Grand Concert SAS processes your personal data based on the following legal grounds:

  • Consent: We process personal data to send newsletters, direct email marketing, push notifications, and marketing communications through other channels based on your explicit consent. You may withdraw your consent at any time by using the unsubscribe link included in our communications or by adjusting your communication preferences where available.
  • Contract Performance: We process general information, account information, contact information, transaction-related information, and electronic identifiers where necessary to perform our contractual obligations, process Ticket purchases, issue Tickets, provide services, manage your account, communicate with you regarding your Orders and purchases, and provide customer support.
  • Legal Obligations: We are required to retain and process certain information for compliance with applicable legal, regulatory, accounting, tax, consumer protection, and fraud-prevention obligations. This may include transaction information, order and purchase records, invoice details, refund-related information, contact information, communications relating to purchases, and other information required by law, including information necessary to comply with consumer rights protection requirements. Grand Concert does not store payment card details or bank account information. Payment transactions are processed by independent third-party payment service providers.
  • Legitimate Interests: We process general information, account-related information, transaction-related information, and electronic identifiers to maintain the security of the Site, prevent fraud, detect unauthorized use of our services, provide customer support, improve our services, analyze Site performance, and protect our legitimate business interests. We may also process information necessary to determine the location of transactions and comply with legal and tax obligations, including country of residence, IP address, telephone number prefix, and event location information where appropriate.

↑ Back to top

How We Use the Information We Collect

The personal information we collect is utilized primarily for the following purposes:

  • Provision of Products and Services: To deliver the products and services you purchase or utilize on our Site, either directly or through third parties.
  • Service Administration and Enhancement: To administer, support, maintain, and enhance the services provided, as well as to improve your overall user experience.
  • Personalization: To personalize your experience on the Site, including offering personalized advertising, content, or functionalities that match your user profile and interests.
  • Contractual Obligations: To fulfill our contractual obligations to you and to third parties.
  • Legitimate Interests: To support and protect our legitimate interests, including the management and operation of our services.
  • Legal Compliance: To ensure compliance with applicable laws and regulations, including obligations related to tax, financial reporting, consumer rights protection, and other legal requirements.
  • Protection and Enforcement of Rights: To protect and enforce our legal rights, safeguard the security of our systems, and ensure the privacy and protection of our customers.
  • Facilitate Transactions: To facilitate and manage transactions in which you participate, ensuring efficient processing.
  • Communication: To communicate with you, including providing customer services and addressing inquiries or issues.
  • Trend Monitoring and Analysis: To monitor and analyze trends, usage patterns, and activities related to our services, helping us understand user behavior and improve our offerings.
  • Fraud Detection and Prevention: To detect, investigate, and prevent fraudulent transactions and other illegal activities, protecting the rights and property of Grand Concert SAS and third parties.

↑ Back to top

Use of Personal Data for Marketing Purposes

Grand Concert SAS may utilize your personal data for marketing purposes, including the following:

  • Marketing Communications: We may send you marketing emails regarding tickets for events that match your interests as indicated on our Site. If you have purchased a ticket through our Site, you may have opted to receive such marketing communications.
  • Personalized Advertising: We may use your personal information to deliver personalized advertisements. Where permitted by applicable law and subject to applicable consent requirements, this information may be shared with third-party advertising partners to facilitate the display of relevant ads to you.
  • User Feedback: We may use the content of any user feedback you provide on our Site for marketing purposes, including showcasing such content on our Site and on third-party websites.

The use of your personal information for marketing purposes is entirely optional and contingent upon your consent. You may withdraw your consent or object to this processing at any time by sending an email to [email protected]. Additionally, you can opt out of receiving marketing emails by clicking the unsubscribe link in any marketing email you receive or by adjusting your email preferences in your account settings.

Please note that if you choose to opt out of marketing communications, we reserve the right to continue sending you essential information related to the services you use, including support communications and important legal notices.

↑ Back to top

Use of Third Parties

Grand Concert SAS engages the services of various third-party processors to handle data, including personal data, on our behalf. These processors are entrusted with the processing of personal data to fulfill specific functions as required by our operations. The use of these processors is governed by contractual agreements ensuring that they process the data in accordance with our instructions and for our purposes.

Specifically, we utilize processors for the following functions:

  • Data Hosting: To host and manage our data securely.
  • Support Services: To provide assistance with customer support and related services.
  • Analytics: To perform marketing and site analytics, enabling us to understand user behavior and improve our services.
  • Bulk Communication: To facilitate the distribution of bulk information, including via email and SMS. For example, we may use cloud-based service providers, including Amazon Web Services, for email distribution and related communications.

These processors are selected for their ability to comply with applicable data protection laws and to safeguard personal data. They are contractually obligated to ensure the confidentiality and security of your data and to use it solely for the purposes specified in our agreements.

In addition to the processors mentioned, Grand Concert SAS engages other third parties for specific functions, including but not limited to:

  • Transportation Companies: To deliver tickets to you, where applicable.
  • Payment Processing Companies: To process payments for goods and services through third-party payment providers.

For these purposes, we may provide the necessary personal data to these third parties, which may include your name, email address, billing and shipping address, and payment-related information necessary to complete a transaction. Grand Concert SAS does not store payment card details or bank account information. Payment transactions are processed by independent third-party payment service providers selected from the payment methods made available on the Site. Such providers are responsible for the security of payment transactions and are required to maintain appropriate security measures and comply with applicable payment industry security standards, including PCI DSS where applicable.

Grand Concert SAS may engage additional technical service providers, ticketing infrastructure providers, communication providers, analytics providers, and other operational service providers in connection with ticket sales, event administration, payment processing, ticket issuance, customer support, and related services.

Such providers process personal data solely on behalf of Grand Concert and are required to implement appropriate technical and organisational measures to protect personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

All third-party processors are required to adhere strictly to our instructions regarding the processing of personal data. They are prohibited from using personal data for their own purposes and must comply with the requirements of the General Data Protection Regulation (GDPR). We ensure that all processors are bound by contractual agreements that mandate compliance with applicable data protection laws and safeguard your personal data. Grand Concert SAS may require reasonable evidence of such compliance where appropriate.

↑ Back to top

Data Controller

Grand Concert SAS acts as the data controller for the personal data processing activities described in this Privacy Notice, except where otherwise expressly stated.

Where third-party service providers process personal data on behalf of Grand Concert, such providers act as data processors and process personal data only in accordance with Grand Concert’s instructions and applicable data protection laws.

If you wish to exercise your rights under this Privacy Notice or applicable data protection laws, please contact Grand Concert SAS using the contact details provided at the end of this Privacy Notice.

↑ Back to top

External Controllers

Grand Concert SAS may disclose your personal data to external controllers in the following circumstances:

  • Payments: Payments are processed through third-party payment service providers. For more details on how payment providers handle your data, please review their privacy notice available on the applicable payment provider site. Payment providers process personal data as independent controllers in accordance with their own privacy practices.
  • Tax Authorities: We are legally obligated to include certain personal data in our financial records, which may be disclosed to national tax authorities as required. These authorities process personal data as separate controllers in accordance with their own privacy policies.

In addition to the aforementioned scenarios, personal data may be shared with third parties as legally required.

Grand Concert SAS does not sell, exchange, or rent personal data to third parties.

We may share aggregated, anonymized data with business partners and trusted affiliates.

↑ Back to top

Data Transfers and Security

Transfers Outside the EEA: Personal data may be transferred to parties outside the European Economic Area (EEA) if our processors, service providers, or partners are located in such regions. We ensure that such transfers comply with applicable data protection laws and that personal data is transferred only where an adequate level of protection is provided or appropriate safeguards are in place.

Restricted Access: Access to your personal and account information is limited to individuals who require such access for the purposes described in this Privacy Notice.

Your personal data will not be sold, transferred, rented, or exchanged with third parties, except in specific circumstances, including:

  • Legal Compliance: Disclosure of personal information in response to subpoenas, court orders, regulatory requests, or other legal processes, or where necessary to establish, exercise, or defend our legal rights.
  • Protection of Rights: Disclosure of personal information where necessary to protect the rights, property, or safety of Grand Concert SAS, our users, or others, including for the prevention, detection, or investigation of fraud, security incidents, or unlawful activities.
  • Business Transactions: Disclosure of personal and account information in connection with the sale of part or all of our business, a merger, acquisition, restructuring, financing, or similar corporate transaction. Any receiving party will be required to process personal data in accordance with applicable data protection laws.

Grand Concert SAS does not sell personal data to third parties for their independent commercial use.

↑ Back to top

Data Protection Rights

We are committed to ensuring that you are fully informed of your data protection rights. As a user, you are entitled to the following rights:

  • The Right to Access: You have the right to request access to and obtain a copy of your personal data held by us. Requests will generally be provided free of charge, although a reasonable fee may be charged where permitted by applicable law, including where requests are manifestly unfounded, excessive, or repetitive.
  • The Right to Rectification: You have the right to request correction of any inaccurate information and to request completion of any incomplete information.
  • The Right to Erasure: You have the right to request the deletion of your personal data, subject to certain conditions.
  • The Right to Restrict Processing: You have the right to request restriction of the processing of your personal data, under certain conditions.
  • The Right to Object to Processing: You have the right to object to the processing of your personal data, subject to certain conditions.
  • The Right to Data Portability: You have the right to request the transfer of your personal data to another organization or directly to you, under certain conditions.

For detailed information about your rights, you may refer to the General Data Protection Regulation (GDPR), which governs data protection and privacy within the European Union and the European Economic Area.

If you wish to exercise any of these rights, please contact us at: [email protected]. We are obligated to respond to your request within one month.

You also have the right to lodge a complaint with the competent data protection authority, including the Commission Nationale de l'Informatique et des Libertés (CNIL) in France.

Please note that if you choose not to provide certain personal information, we may be unable to deliver specific services to you, and some services may not fully accommodate your interests and preferences.

If you have any questions regarding the personal information we process or retain, or about your rights related to that information, please do not hesitate to contact us.

↑ Back to top

Protection of Your Personal Information

We employ reasonable measures to ensure that your personal data is protected from unauthorized disclosure to regional or national institutions and authorities, except as required by law or other applicable regulations.

To safeguard the privacy and security of personal data, Grand Concert implements appropriate technical and organisational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Such measures may include access controls, data encryption, secure infrastructure, security monitoring, internal policies, staff training, and other security procedures appropriate to the nature of the personal data processed and the risks involved.

Access to personal data is limited to personnel, service providers, and contractors who require such access in order to perform their duties and who are subject to appropriate confidentiality obligations.

Despite these measures, please be aware that no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure. While we take reasonable steps to protect personal data, we cannot guarantee absolute security.

In the event of a personal data breach, Grand Concert will take such actions as may be required under applicable data protection laws, including notification to affected individuals and competent authorities where required.

For any concerns or inquiries regarding the security of your personal data, please contact us.

↑ Back to top

Personal Data Storage Duration

We adhere to the following retention policy concerning personal data:

  • Accounting and Tax Purposes: Personal data related to purchases made on our Site is retained for a minimum of 10 years in compliance with tax authority requirements and applicable legal obligations.
  • Fraud Prevention: Personal data processed for fraud prevention purposes may be retained for up to 5 years following your last login or transaction, where necessary to prevent fraud, protect our services, and comply with legal obligations.
  • Account Data: Personal data associated with your account is retained for 12 months after your last login. If your account remains inactive beyond this period, we may delete your account and associated personal data, subject to any legal or regulatory retention obligations.

↑ Back to top

Changes to Privacy Notice

We reserve the right to amend this Privacy Notice periodically. Any modifications will be reflected in updates posted to this Privacy Notice, detailing changes in data collection practices, usage, and disclosure circumstances. We encourage you to review this Privacy Notice regularly to remain informed of any updates. Continued use of the Site following any changes signifies your acceptance of the revised terms and acknowledgment of having read and understood them, even if you have not received written notification. In certain instances, we may seek your explicit consent for specific changes.

↑ Back to top

Contact Us

For any inquiries or comments regarding this Privacy Notice, our data collection and usage practices, your choices and rights concerning your data, or if you wish to exercise your legal rights, please contact us at:

Company name: GRAND CONCERT SAS
Registration Number (SIREN): 934 961 970
Address: 94 Rue de l'Assomption, 75016 Paris, France
Email: [email protected]
Site: https://grandconcert.fr/

↑ Back to top