The system was developed according to the following standards: ÖNORM A 7700 (Standard for the Security of Web Applications), PCI DSS (Payment Card Industry Data Security Standard) as well as ASVS (Application Security Verification Standard) and was also tested by an independent expert. ASVS 2010 is currently the leading standard for IT security. The VVT Tickets app has also been implemented in accordance with the GDPR (General Data Protection Regulation) requirements.

 

Does VVT store its customers’ payment information?

By payment information we understand the information we need to process your payment. We do not store any payment information such as credit or debit card numbers, expiration dates or Card Validation Codes (CVC). We store the card type (VISA, Mastercard, etc.) and the last 4 digits of the payment method for a specific booking. We use tested and PCI-certified payment service providers to process the payment transaction, who process and use the payment information for booking processing. Payment data is only stored in exceptional cases: If a cancellation cannot be carried out automatically by us, but we have to transfer the cancellation amount afterwards. The following data will be stored by us for this purpose: applicant’s name, IBAN, BIC, bank name and address (postcode, city, country, street and house number).

 

Can special offers also be sent to registered users via this system?

Yes, if you have agreed to receive information about VVT’s current offers, prize draws, promotions, discounts and surveys. Your email address is only used by us and will not be disclosed to cooperation partners. You can of course withdraw your consent at any time. We expressly state and ensure that we will not disclose your information to third parties who conduct surveys for their own purposes.