1. General Information
Protecting your personal data is important to us. This privacy policy explains which data is processed in our app and for what purpose.
2. Controller
The party responsible for providing the app is:
Ducart Webservice
Peter Blümer
Jürgen-Schmeling-Str. 5
45768 Marl
Germany
info@bandapps.de
3. Data Processing and Purpose
The app processes only data required for ticket operations. Ticket data remains on the devices used by the user and is not transmitted to providers, third-party systems, or online services. For the technical data transmission of the barcode recognition on Android, see section 7.
Ticket data: When a ticket file is imported, the app stores only the ticket code in the app database; all other fields in the source file are discarded and not stored permanently. During operation, operational status data is added to each ticket. No technical protection measures are bypassed during import.
No direct access to external systems: The app does not access external ticket accounts, third-party platforms, or online systems of providers. Only files selected and provided by the user are processed.
App store purchases: When purchasing, restoring, or validating in-app purchases, the respective app store or platform provider may process purchase-related data under its own terms and privacy policies. No ticket data is transmitted to the app store or platform provider for this purpose.
4. Permissions with Privacy Relevance
Camera: Used to scan barcodes and QR codes. Images are processed only in memory for code recognition and are not stored or transmitted.
Storage: Used to store the data required for ticket operations locally.
Location/Wi-Fi name: Some operating systems, especially Android, require location permission to read the name of the connected Wi-Fi network. The app uses this permission only to display or check the local network connection. No location is recorded, stored, or transmitted.
Network/Wi-Fi: Used to connect devices within the same local network. The app does not transmit ticket data to external internet services.
5. Data Storage
Storage duration: The data remains on the devices used by the user for as long as it is needed for ticket operations or until it is deleted by the user.
Export/Sharing: If you use the export or sharing function, the exported file leaves the device via the method you choose. This transfer is initiated solely by your own action.
6. Data Security
Your data is protected by the security mechanisms of your device. If several devices are used, communication between them is encrypted.
7. Use of Third-Party Packages
The app uses selected open-source packages to provide its functions. No analytics, tracking, advertising, or crash-reporting libraries are integrated. The exception is the barcode recognition on Android described below, which transmits technical diagnostic data to Google.
Google ML Kit (Android only): To recognize barcodes and QR codes via the camera, the app uses Google's ML Kit library on Android. The code recognition itself takes place entirely on the device; camera images, ticket data, and location data are not transmitted. However, when an internet connection is available, ML Kit sends technical usage and diagnostic data to Google, in particular device and app information (e.g. device model, operating system version, app package name), device identifiers, performance metrics, and configuration and error information. Google uses this data to diagnose and improve ML Kit and for usage analytics. The transmission is encrypted (HTTPS). This data transmission is part of ML Kit and cannot be switched off in the app. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; a transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-U.S. Data Privacy Framework. The legal basis is our legitimate interest in reliably working barcode recognition (Art. 6(1)(f) GDPR). On iOS and macOS, barcode recognition uses Apple system functions without this data transmission. More information: https://developers.google.com/ml-kit/android-data-disclosure, https://policies.google.com/privacy
8. Responsibility, Legal Basis, and Data Subject Rights
Whether a ticket code can be assigned to a person depends on the respective ticket source and the information available to the event organizer. The party using the app for event operations is responsible for this processing. This party must ensure the legal requirements for using the ticket data and is the contact point for the data protection rights of data subjects.
For further questions about data protection, you can contact us at any time.
9. Changes to the Privacy Policy
We reserve the right to adapt this privacy policy if legal requirements or the functionality of our app change. The current version is available in the app.
Last updated: October 1, 2026