Cookie Policy
This page explains what is stored on your device when you visit Bandit Tickets, who stores it and what for, under article 22.2 of Spanish Law 34/2002 (LSSI) and Regulation (EU) 2016/679 (GDPR).
What a cookie is
A cookie is a small file a website stores in your browser so it can recognise your device on later visits. Here we also call “cookies” other ways of storing information on your device, such as the browser's local storage, because the law treats them the same.
How you decide
The first time you arrive we ask you. You can accept all, reject all or choose by category, and both options carry exactly the same weight: rejecting is as easy as accepting and costs you nothing. If you reject, the purchase works just the same.
You can change your mind at any time from the “Cookie settings” link in the footer of every page. We keep your choice for a year at most; after that we ask again.
Necessary cookies
They are essential for the site to work and to remember what you answer to the cookie notice. They cannot be turned off and do not require your consent, because without them we could not provide the service you are asking for. They are all ours.
| Name | What it does | Lifetime |
|---|---|---|
bandit_consent | Stores which cookie categories you have accepted or rejected. | 1 year |
cc_cookie | Records that you already answered the notice, so we do not ask again on every page. | 6 months |
Your basket and the details you type during checkout are not stored on your device: they live in the page's memory while you have it open and are gone when you close it or complete the payment.
Analytics and marketing cookies: the organiser sets those
Bandit Tickets is a sales platform: the party selling the ticket and putting on the concert is the event organiser, and it is they who decide whether to measure visits to their event page or the results of their ad campaigns. That is why these cookies are not the same across the site: they depend on the event you are looking at, and many events have none at all.
None of this switches on unless you accept it. If you do, an event page whose organiser has set them up may load:
| Category | Provider | Usual cookies | Lifetime |
|---|---|---|---|
| Analytics | Google Analytics 4 (Google Ireland Ltd.) | _ga, _ga_* | Up to 2 years |
| Marketing | Meta Pixel (Meta Platforms Ireland Ltd.) | _fbp, _fbc | Up to 3 months |
| Marketing | Google Tag Manager (Google Ireland Ltd.) | Whatever the organiser's container loads | Varies |
Google Tag Manager is a container: it measures nothing by itself, it loads whichever tags the organiser has put inside. Since we cannot know in advance what those are, we always treat it as marketing, the stricter category.
Measurement without cookies (Conversions API)
There is one form of measurement that uses no cookies and that you should know about: when you complete a purchase, the organiser may receive the confirmation straight from our servers, including your email address encrypted (not in the clear), so they know their ad led to a sale. This is Meta's Conversions API.
No cookie is involved, so no browser blocker can stop it. That is exactly why we tied it to your choice just like the cookies: if you reject marketing, that transfer does not happen. It is our decision, not a technical requirement.
Who processes your data
We are responsible for the necessary cookies. The event organiser is responsible for the analytics and marketing ones, since they decide what they want them for; we merely place them on their page when you allow it. Google and Meta process that data as controllers in their own right, under their own policies:
This may involve transfers of data outside the European Economic Area, covered by the safeguards each provider declares in its terms.
Other ways to block them
Besides the “Cookie settings” link, your browser lets you block or delete cookies from its privacy settings. Bear in mind that if you also block the necessary ones, you may not be able to complete a purchase.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent at any time, on the terms set out in our privacy policy. You may also lodge a complaint with the Spanish Data Protection Agency.
Changes to this policy
If the categories change, or what each one covers, we will ask you again: your earlier answer would no longer be an answer to the same question.