プライバシーポリシー

最終更新日：2026年6月3日

本プライバシーステートメントについて

本プライバシーステートメント（以下「本ステートメント」といいます）は、QuintEvents, LLC、QuintEvents International, LLC、Exclusive GP Ltd.、Hammerhead B.V.、QuintEvents Australia Pty. Ltd.、Sportsnet Corporation Pty. Ltd.、Quint Events International LLC London Ltd.、Monaco Star Events、およびGoldman & Goldman Enterprises, LLC（以下、総称して「Quint」「当社」または「当社グループ」といいます）が、当社の商品およびサービスの提供に関連して、個人に関する個人データをどのように取り扱うかについて説明するものです。 これには、本プライバシーステートメントへのリンクを掲載または表示する当社のウェブサイト、アプリ、デジタルプラットフォーム（以下「オンラインサービス」といいます）、ならびに当社が提供するイベント、体験プログラム、その他の各種プログラム（以下、これらを総称して「本サービス」といいます）が含まれます。 本ステートメントでは、当社が取得する個人データの種類、その利用方法、個人データを開示する可能性のある第三者、個人データの利用に関してお客様が選択できる事項、ならびに当社のプライバシーに関するその他の取り組みについて説明します。

Quintはグローバルに事業を展開しており、欧州連合（EU）の一般データ保護規則（「GDPR」）、カリフォルニア州プライバシー権法（「CPRA」）、その他の世界各国および米国各州のデータ保護に関する法令および規制の適用を受けます。 当社は、世界各地の一流スポーツ団体、エンターテインメント施設、ライフスタイルブランドと提携し、著名なイベントや特別な体験のための公式チケットおよびホスピタリティパッケージを提供しています。 当社のパートナーによるプライバシーに関する取り扱いについては、各パートナーが定めるプライバシー通知が適用される場合があり、当該通知には、各パートナーが個人データをどのように取り扱うかが記載されています。

当社のオンラインサービスを利用することにより、お客様は本ステートメントを読み、その内容を理解したものとみなされます。 当社がお客様の個人データを取り扱う法的根拠として同意に依拠する場合には、個人データを取得する際に、別途お客様の同意を求めます。

---

1. 当社が収集する個人データ

当社は、別途明示する場合を除き、CPRAにより認められている目的以外の目的で、センシティブ個人情報を利用または開示することはありません。

識別情報 & アカウントデータ

• 識別情報 & アカウントデータ
  • 法的根拠： 契約の履行（お客様のアカウントの管理）および法的義務（税務報告のため）［第6条第1項(b)& (c)］。
  • 法的根拠： 契約の履行（お客様のアカウント管理）および法的義務（税務報告） [第6条(1)(b)& (c)]。
• 財務 & 取引データ
  • 履行の根拠： 契約の履行（支払いの処理および注文の履行）［第6条第1項(b)］。
  • 履行の根拠： 契約の履行（支払いの処理および注文の履行）［第6条第1項(b)］。
• デバイス& デジタルアクティビティデータ
  • データ： IPアドレス、モバイル端末のID、閲覧履歴、およびオンライン上のやり取り。
  • 法的根拠： 同意（当社のクッキーバナーを通じて）または正当な利益（ウェブサイトのセキュリティ維持のため）［第6条(1)(a)& (f)］。
• 位置情報
  • データ：おおよその位置情報および正確な位置情報。
  • 法的根拠： 同意（お使いのデバイスまたはブラウザの設定を通じて明示的に求められたもの）[第6条(1)(a)]。
• コミュニケーション & フィードバック
  • データ： カスタマーサービスのチャット履歴、メール、アンケートへの回答、および商品レビュー。
  • 法的根拠： 正当な利益（当社のサービス向上およびお問い合わせへの対応のため））［第6条第1項(f)］。
• 職業 &人口統計データ
  • データ： 役職、業種、会社名、学歴、年齢、性別。
  • 法的根拠： 正当な利益（B2Bの取引関係の管理を目的とする場合）または同意 [第6条(1)(f) &(a)]。
• 興味・関心、嗜好、および推測情報
  • データ： ご希望のイベント、ホスピタリティの手配、飲食に関する嗜好、および当社のサービスやイベントのご利用状況から推測される行動傾向に関する情報。
  • 法的根拠： 同意（マーケティングを目的としたプロファイリングの場合）または正当な利益（サービスの改善および不正防止を目的とする場合）［第6条第1項(a) & (f)］。なお、お客様は、ダイレクトマーケティングを目的としたプロファイリングに対して、いつでも異議を申し立てる権利を有します。
• サードパーティ& ソーシャルメディアのデータ
  • データ： お客様が第三者のアカウント（ソーシャルメディアのログインなど）との連携を選択した場合に取得する、公開プロフィール情報。
  • 法的根拠： 同意（お客様のご希望に基づき、より簡単なログインを可能にするため）［第6条第1項(a)］。
• データの自動収集（詳細）

お客様が当社のウェブサイト、アプリケーション、またはオンラインサービスをご利用になる際、当社は、お客様のデバイスや当社サービスの利用状況に関する特定の技術情報および利用情報を自動的に収集する場合があります。これらの情報には、以下が含まれる場合があります。:

• IPアドレス
• ブラウザの種類およびバージョン
• デバイス識別子
• オペレーティングシステム
• 参照元URL
• 閲覧したページおよびクリックしたリンク
• アクセス日時
• IPアドレスから推定される位置情報
• セッションおよび利用状況
• パフォーマンスおよび診断データ

当社は、サーバーログ、クッキー、ピクセル、ウェブビーコン、スクリプト、API、および類似の追跡技術などの技術を通じて、この情報を収集しています。

当社は、この情報を以下の目的で使用します：

• 当社のウェブサイトおよびサービスの運営とセキュリティ確保
• ウェブサイトの機能性およびユーザーエクスペリエンスの向上
• パフォーマンスおよび利用傾向の分析
• 不正行為、不正利用、またはセキュリティインシデントの検知
• 法令で認められる範囲におけるコンテンツおよびコミュニケーションのパーソナライズ
• 同意が必要な場合における、分析、広告およびマーケティング活動への活用

EU／英国GDPRおよびePrivacyに関する要件を含む適用法令により必要とされる場合、当社は、必須ではないCookieをお客様のデバイスに保存する前、またはこれに類するトラッキング技術を使用する前に、お客様の同意を取得します。

---

2. Cookieの使用

お使いのブラウザによっては、特定の種類の自動化技術に関する通知の受け取り方や、それらの制限・無効化の方法について説明されている場合があります。必須ではないクッキーは、適用される法律で要求される場合に限り、同意を得た上でのみ使用されます。なお、これらの技術を利用しない場合、当社のオンラインサービスのすべての機能をご利用いただけない可能性があります。モバイル端末の場合、端末のプライバシーおよびセキュリティ設定を調整することで、端末やブラウザが特定の端末データを公開する方法を管理できる場合があります。クッキーおよびその他の追跡技術の使用に関する詳細については、当社のクッキーポリシーをご参照ください。

また、お客様のデバイスの位置情報も収集する場合があります。当社のアプリやウェブサイトが位置情報の収集を試みた際、お客様のデバイスのオペレーティングシステムやウェブブラウザから通知が表示される場合があります。なお、当社のオンラインサービスによる正確な位置情報の収集を許可しない場合、オンラインサービスのすべての機能をご利用いただけない場合がありますので、あらかじめご了承ください。

---

3. 個人情報の利用方法について

We use the personal data described in Section 1 for the following purposes, each supported by a valid legal basis under applicable law.

• Service Operations & Delivery
  • Purpose: Providing our core products and services, enabling interactive platform features, and managing customer relationships (including responding to inquiries and maintaining customer service chat transcripts). Where required by our contractual terms, we may also enforce territorial content restrictions via geolocation.
  • Legal Basis: Performance of a Contract [Article 6(1)(b)].
• Security, Fraud Prevention, & Legal Enforcement
  • Purpose: Protecting customer safety, detecting and preventing unauthorized activities or fraud, monitoring for security breaches, resolving disputes, and enforcing our terms of service.
  • Legal Basis: Legitimate Interest (to protect our business, users, and assets) [Article 6(1)(f)].
• Regulatory & Statutory Compliance
  • Purpose: Complying with applicable laws, regulations, and regulatory obligations.
  • Legal Basis: Legal Obligation [Article 6(1)(c)].
• Business Analytics, Research, & Data Optimization
  • Purpose: Conducting market research, analyzing usage trends, remembering user settings/languages, and compiling de-identified or aggregated data pools to improve our platforms.
  • Legal Basis: Legitimate Interest (To improve, secure, maintain, and enhance our products and services while balancing those interests against the rights and freedoms of affected individuals.) [Article 6(1)(f)].
• Personalized Marketing & Targeted Advertising
  • Purpose: Delivering promotional messages, administering partner advertisements, and evaluating campaign effectiveness based on your demographics and usage trends.
  • Legal Basis: Consent [Article 6(1)(a)].
• Predictive Modeling & User Profiling
  We do not make decisions based solely on automated processing that produce legal or similarly significant effects without meaningful human involvement.
  • Purpose: Building automated predictive models to infer your preferences and dynamically tailor content, recommendations, and advertising campaigns.
  • Legal Basis: Consent [Article 6(1)(a)]. Note: You may withdraw your consent at any time. You also have an absolute right to object to profiling for direct marketing purposes.

---

4. Sharing of Data

Cybersecurity Considerations for Data Sharing

We maintain administrative, technical, and physical safeguards aligned with industry-recognized security frameworks to safeguard personal data against accidental, unlawful, or unauthorized access, destruction, loss, alteration, disclosure, or use. Our practices also maintain alignment with data protection laws such as the EU/UK GDPR and the CPRA.

We may disclose personal data to the following categories of recipients:

• Cloud Infrastructure and Hosting Providers: We utilize secure, tier-one enterprise cloud environments to host our primary databases, websites, and core application infrastructure.
• Customer Relationship Management (CRM) and SaaS Platforms: We leverage enterprise-grade software-as-a-service platforms to securely manage customer interactions, sales pipelines, and marketing communications.
• Corporate Collaboration and Information Management Systems: We use centralized, enterprise-level document storage and productivity suites to securely manage corporate files, internal communications, and operational records.
• Professional Services and Corporate Affiliates: Data may be shared internally among our parent organization and global subsidiaries (including our establishments in the European Union and the United Kingdom) for centralized human resources, financial accounting, and global IT support.
• Legal and Regulatory Authorities: We may disclose personal data if required to do so by law, court order, or a binding regulatory request from authorized law enforcement or supervisory bodies.
• Event Partners, Rights Holders, and Their Service Providers: In connection with the events, experiences, hospitality packages, and services we offer, we may disclose personal data to event organizers, sports leagues, teams, venues, hospitality providers, sponsors, rights holders, and their authorized service providers or agencies where necessary to administer an event, fulfill contractual obligations, provide requested services, facilitate access, comply with event requirements, support customer service activities, or otherwise deliver the products and services you have purchased or requested.

Under certain circumstances, we may disclose personal data when we believe that disclosure is necessary to:

• 適用される法令を遵守し、または正当な法的手続きに対応いたします。
• Protect the safety and security of our customers or our products and services.
• 不正行為、悪用、その他の違法または不正な活動を防止します。
• 当社の権利または財産、あるいは第三者の権利または財産を保護するため、契約条件の履行を含む措置を講じます。

We may also disclose personal data for other specific purposes communicated to you at the time of collection, or where we have obtained your consent for such disclosure.

---

5. Targeted Advertising

We may disclose or make available certain personal data to advertising partners, analytics providers, affiliates, and business partners for sales, marketing, advertising, analytics, and targeted advertising purposes. This may include commercial information, device data, online activity, demographic data, interests, and preferences.

Depending on applicable law, these activities may be considered “sharing,” or processing for targeted advertising. Where required, you may opt out of the sharing of your personal data, or the use of your personal data for targeted advertising, by submitting a request through the Data Request Portal described in the Data Subject Rights section below.

You may see our ads on other websites or apps because we use third-party advertising services. These services may use cookies, web beacons, logs, and similar technologies to collect information about your activity over time and across websites and apps, including device data, online activity, location, demographic data, interests, preferences, and commercial information. We use this information to tailor advertising based on factors such as demographics, inferred interests, and browsing context. To opt out of interest-based advertising, see our Cookie Policy or the Data Subject Rights section below.

---

6. Data Subject Rights

In accordance with Articles 15-22 of the General Data Protection Regulation (GDPR) and applicable U.S. state privacy laws (including the California Privacy Rights Act), depending on your country or state of residency, you may possess specific statutory or legal rights regarding your personal data. You may exercise any of the following rights at any time by contacting us through the methods provided in the "Contact Us" section below.

---

7. How to Exercise Your Rights

To submit a request, please complete the form provided here:

Submit Request

Verified requests will be addressed free of charge within one calendar month in accordance with Article 12 of the GDPR, or within the timeframe required by applicable U.S. state privacy law (e.g., 45 business days under the CPRA). Under the GDPR, this period may be extended by up to two additional months where necessary, taking into account the complexity and number of requests, in which case we will inform you of such extension within one month of receipt of the request. Under the CPRA, the response period may be extended by an additional 45 business days where reasonably necessary.

If we deny your privacy request, you may appeal our decision by contacting privacy@quint.co. We will review and respond to your appeal in accordance with applicable law.

If concerns have not been addressed, individuals have the right to lodge a complaint with the relevant Data Protection Authority, the Information Commissioner's Office (ICO), or other applicable regulatory authority.

---

8. お子様と保護者の方々

Our Online Services are not directed at children under the age of 16, and we do not knowingly collect personal data from children under the age of 16. In the United States, we also comply with the Children's Online Privacy Protection Act (COPPA), which applies to the collection of personal information from children under 13. For certain activities in which children are allowed to participate (for example, youth clinics, camps, kids clubs, and community outreach events), any request for personal data (such as registration data) is intended for and directed to the parent or legal guardian.

Under Article 8(1) of the GDPR, where we rely on consent as a legal basis for processing in relation to information society services offered directly to a child, such processing is lawful only where the child is at least 16 years old. Where the child is below 16, processing requires consent given or authorized by the holder of parental responsibility. Some EU Member States may set a lower age threshold, but not below 13 years.

If we become aware that we have collected personal data from a child without proper consent, we will take steps to delete that data promptly.

If you have reason to believe that a child under the age of 16 has provided personal data to us without parental consent, please contact us using any of the methods described in the How to Contact Us section to request that we delete the personal data.

---

9. Retention

We generally retain your personal data for a period of up to 7 years following the end of the calendar year in which your active relationship with us concludes, in order to comply with our statutory legal obligations, satisfy regulatory retention requirements, and manage potential legal claims. This retention period pertains to: customer accounts, financial records, marketing data, and security logs. Certain categories of data may be retained for shorter periods where a 7-year retention is not required by law or necessary for our legitimate purposes. Once personal data is no longer required, it is securely deleted from active systems; archived data is reviewed and scheduled for deletion; and backups are encrypted and retained in accordance with our Data Retention Policy.

---

10. International Data Transfers and Regulatory Compliance

• 1. Data Controller and Centralized US Storage Infrastructure
  Personal data collected through this website is controlled by QuintEvents, LLC (as primary data controller on behalf of the Quint group), and processed and stored by Quint, headquartered in Charlotte, NC, United States. When you interact with the website, your information may be transmitted to and stored in the United States, where it is securely hosted and managed within our cloud infrastructure, our customer relationship management (CRM) SaaS platform, and our corporate collaboration and information management SaaS system. Where personal data is transferred from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on appropriate transfer mechanisms as required by applicable law, such as Standard Contractual Clauses approved by the European Commission or other lawful safeguards.
• a. Legal Basis and Purpose of Processing
  Personal data is processed under the legal bases set forth in Section 1 above, pursuant to Article 6(1) of the EU/UK GDPR, including Consent, Performance of a Contract, Legal Obligation, and Legitimate Interests.
  • Consent (Article 6(1)(a)): For website cookies, analytics tracking, and marketing communications that are actively opted into. For additional legal bases (including Performance of a Contract and Legal Obligation), please refer to Section 1 above.
  • Legitimate Interests (Article 6(1)(f)): To maintain website security, prevent fraud, and optimize digital performance, balanced against privacy rights.
• b. European Union and United Kingdom Establishments
  Because Quint operates corporate locations in both the European Union and the United Kingdom, local establishments may be contacted directly regarding data governance matters:
  • European Union Establishment: Hammerhead B.V., the registered EU entity, is located in Meppel, The Netherlands. This entity serves as the local establishment inside the EU under Article 3(1) of the EU GDPR.
  • United Kingdom Establishment: Quint Events International LLC London Ltd., located in London, United Kingdom, serves as the local presence under the UK GDPR.
• c. Data Subject Rights
  Regardless of the centralized US hosting, individuals located in the EU or UK hold specific legal rights under Articles 15 through 22 of the GDPR, and individuals in certain U.S. states hold rights under applicable state privacy laws, as specified above. You may contact us to exercise the following rights:
  • The Right of Access (Article 15): Request a copy of the personal data we hold about you.
  • The Right to Erasure / Right to be Forgotten (Article 17): Request the deletion of personal data, subject to applicable exceptions.
  • The Right to Withdraw Consent (Article 7(3)): Revoke cookie or marketing consent at any time.

---

11. Changes to our Privacy Statement

We may change this Statement from time to time to reflect changes in our business, products, or services, our practices and procedures, or to comply with applicable laws. Any such changes will be posted on this page and will indicate the date on which this Statement was last revised. Where changes materially affect how we process your personal data, we will provide notice through the Online Services or by other means (such as email) prior to the changes taking effect. Please check back frequently to see any updates or changes to this Statement.

---

12. How to Contact Us

If you have questions or concerns about this Statement or how we collect, use, and disclose personal data, you may contact our Privacy and Security Department by any of the following methods:

By writing to us at 9335 Harris Corners Pkwy, Suite 500, Charlotte, NC 28269, Attn: Privacy and Security Department

By sending an email to  privacy@quint.co

By calling us at  1-866-834-8663

---

13. Complaints to Supervisory Authorities

If you have any concerns about our use of personal data, you have the right to lodge a complaint with your local data protection authority or, for U.S. residents, with the applicable state attorney general or privacy agency. You may also contact the relevant supervisory authority at the following website:

Information Commissioner's Office (ICO)
https://ico.org.uk/global/privacy-notice/how-you-can-contact-us/
Helpline: 0303 123 1113
You can find the contact details for all EU supervisory authorities here: https://edpb.europa.eu/about-edpb/board/members_en
For California residents, you may also contact the California Privacy Protection Agency at https://cppa.ca.gov/ or the California Attorney General at https://oag.ca.gov/.