Last updated: 23 May 2026

This Privacy Policy describes how German Club, Inc. (“we”, “us”, “the Club”) collects, uses, shares, and protects personal data through the website oktoberfest.ph and related Oktoberfest Manila activities, in accordance with Republic Act No. 10173 — Data Privacy Act of 2012 of the Philippines and its Implementing Rules and Regulations (IRR).

1. Personal Information Controller

German Club, Inc.
118 V.A. Rufino St., Legaspi Village, Makati City 1200, Philippines
Email: dpo@oktoberfest.ph
Phone: +63 2 8818 4236

2. Data Protection Officer

Our Data Protection Officer (DPO) is the contact point for any inquiries or requests regarding your personal data and this Privacy Policy.

dpo@oktoberfest.ph

3. What personal data we collect

  • Contact form submissions: name, email, message content, IP address.
  • Ticket purchases: ticket purchases are processed by our ticketing partner Yapsody (oktoberfest-manila.yapsody.com). The data collected by Yapsody is governed by their Privacy Policy. We may receive personal and transaction-related information reasonably necessary for event administration, including purchaser identification details, contact information, ticket details and transaction references, as applicable. Payment information is processed by the relevant ticketing or payment service provider in accordance with their own privacy policies.
  • Website analytics: cookies, page-view data, browser/device information (see our Cookie Policy for the live inventory).
  • Photographs and video from the Event: we may capture photographs, video recordings, and other audio-visual materials during the event in which attendees may appear. Such recordings may be used for marketing materials, social media, and post-event communications. Notice is given at the venue entrance.

4. Why we collect it (lawful basis & purpose)

  • Contract / pre-contract: to process ticket purchases, administer attendance, provide event-related communications, and respond to queries.
  • Legitimate interest: to operate, secure, and improve the website and the Event; manage Event operations; document the Event; and to communicate event-related updates.
  • Consent: for marketing communications, cookies that are not strictly necessary, and the use of your image in marketing.
  • Legal obligation: to comply with applicable Philippine tax, anti-money-laundering, and consumer-protection rules.

5. Who we share it with

  • Yapsody Pte. Ltd. (our ticketing platform provider) — in connection with ticket purchases, order administration, and related event operations.
  • Payment processors — Yapsody processes payments via Metrobank credit-card services and Dragonpay; supported methods include cash, online bank transfer, cheque, credit card, and Dragonpay e-wallet.
  • Pegotec Pte. Ltd. — website hosting infrastructure.
  • Google Workspace (Gmail on the @oktoberfest.ph domain) — transactional and team email.
  • MailerLite — bulk marketing campaigns (only with consent).
  • Government authorities, regulators, law enforcement agencies, or other parties where disclosure is required or permitted by applicable law.

6. International transfers

Some of our service providers or technology platforms may be located outside the Philippines or may process personal data in other jurisdictions. Where personal data is transferred internationally, we take reasonable steps to ensure that such transfers are subject to appropriate safeguards and that personal data receives a level of protection consistent with applicable data privacy laws.

7. Retention

We retain personal data only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, comply with applicable legal or regulatory obligations, resolve disputes, and enforce our rights.

  • Contact form submissions: 2 years.
  • Ticket transaction data: for such period as may be required for operational, accounting, legal, or regulatory purposes.
  • Event photographs: retained for archival purposes unless deletion is requested.
  • Marketing subscriber data: until consent is withdrawn.

8. Your rights under the Data Privacy Act

As a data subject, you have the right to:

  • Be informed about the processing of your data.
  • Object to the processing of your personal data.
  • Access your personal data.
  • Request correction of inaccurate or incomplete personal data.
  • Request the deletion, blocking or restriction of personal data, where applicable.
  • Data portability, where applicable.
  • File a complaint with the National Privacy Commission (NPC) — privacy.gov.ph.
  • Seek such other remedies as may be available under applicable law.

To exercise any of these rights, contact our DPO at dpo@oktoberfest.ph.

9. Security

We implement reasonable organizational, physical, and technical measures designed to protect personal data, including encrypted transmission (HTTPS), access controls, and regular security reviews. In the event of a personal data breach that is subject to notification requirements under applicable law, we will notify the appropriate authorities and affected data subjects in accordance with such legal requirements.

10. Cookies

See our separate Cookie Policy for full details on the cookies used by this site.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when changes were last made. Material changes will be communicated through the website or by direct notice to affected data subjects where feasible.

12. Contact

For any privacy-related inquiry, write to our DPO at dpo@oktoberfest.ph or by post to 118 V.A. Rufino St., Legaspi Village, Makati City 1200, Philippines.