Privacy Policy
Your privacy is important to us. Therefore, we have developed this privacy policy ("Privacy Policy") that describes how we collect, use, share, transfer, and store your information. Please read the Privacy Policy to familiarize yourself with how we handle your privacy and contact us if you have any questions.
Introduction
Cirkus Venues AB, org. nr 559036-8485, Djurgårdsvägen 68, 115 21 Stockholm ("CIRKUS VENUES") and companies that are part of the same group as CIRKUS VENUES ("the Group" or "we") process Personal Data for users and customers who use our services, stay at our hotel, attend our events, purchase our goods, etc. ("the Services").
CIRKUS VENUES is the data controller for the processing of Personal Data and is thus responsible for ensuring that the processing of your Personal Data is conducted in accordance with the principles outlined by law and this Privacy Policy. Other companies within the Group may act as data processors or be joint data controllers for certain Personal Data together with CIRKUS VENUES.
By "Personal Data" we mean any information that can be directly or indirectly linked to a living individual. We are committed to protecting your Personal Data and process your data in accordance with the General Data Protection Regulation (GDPR) and national data protection legislation, which exists to protect individuals' privacy.
Some pages on the Group's websites contain links to third-party websites. These websites have their own privacy policies, and the Group is not responsible for their operations, including but not limited to their information practices. Users who submit information to or through these third-party websites should review the privacy policies of the websites before providing any Personal Data to them.
Changes to this Privacy Policy will be notified by publishing an updated Privacy Policy on this website, and we therefore recommend that you regularly review these.
What personal data we collect
We may ask you to provide Personal Data when you use our Services. The Group and its partners may share the information internally and use it in accordance with this Privacy Policy. You are not required to provide the Personal Data we request, but if you choose not to do so, we may not be able to provide you with our Services in many cases. We only collect Personal Data that is relevant to the purpose described in the specific terms for each Service and this Privacy Policy that you provide to us. When you use our Services, we may collect various types of information, such as details about your name, address, credit card information, phone number, email address, and IP address. In addition to the information you provide to us, we may collect data from ticket providers, travel agencies, or other entities through which you have booked your Service.
How we use your personal data
The Group may use your Personal Data to:
perform and administer the Services,
safeguard your interests,
accounting and billing purposes,
contact you regarding your booking status or information related to your booking,
develop and analyze the business,
communicate with you and offer the Group's Services to you,
send newsletters to you,
disclose information to partners whose events you have attended, or
market the Group's Services.
Legal basis for our processing of your personal data
We process the data based on our legitimate interest as an operator in providing our Services and to fulfill the legal obligations that apply to us. The data processed for the purpose of developing and analyzing the business and communicating with you is processed based on our legitimate interest in developing the business and communicating with our contacts. The processing that involves disclosing your information to partners is based on your consent, which you can withdraw at any time, see the section "Your rights" below.
Recipients who access the personal data
Personal Data may be transferred between companies within the Group and to partners to be processed for the purposes outlined in this Privacy Policy. The Group uses subcontractors for, for example, computer operations, and Personal Data may therefore be transferred to these subcontractors. Our subcontractors process your Personal Data only on behalf of the Group, in accordance with our instructions, and only after they have signed a data processing agreement in accordance with applicable law, to ensure a high level of protection for your Personal Data. The Group may disclose Personal Data to third parties if the Group is required to disclose such information by law or government decision.
Transfer of personal data to third countries
The Group may transfer data to partners and subcontractors outside the EU/EEA. To ensure a high level of protection for your Personal Data in such situations and compliance with EU/EEA rules, the relevant company in the Group enters into data processing agreements with such parties. These data processing agreements regulate these parties' processing of the Personal Data and, where applicable, the transfer of Personal Data in accordance with applicable EU/EEA rules on the protection of Personal Data. The agreements contain terms required by the EU Commission and meet the requirements set by applicable law to protect the transferred Personal Data.
Protecting and deleting personal data
The Group has internal procedures for IT and information security and takes appropriate technical and organizational measures to protect your Personal Data against, for example, loss, manipulation, or unauthorized access. We process your Personal Data for the duration necessary to fulfill the purposes for which the data was collected and/or we have a legal obligation to retain the Personal Data. If you unsubscribe from newsletters or similar, the data will be deleted immediately.
Surveillance cameras
We conduct surveillance in our premises at Hazeliusbacken 20, 115 21 Stockholm to prevent criminal activities and thereby protect our staff, guests, and property. Surveillance is deemed justified for this purpose, and the surveillance is conducted with a legitimate interest. Visitors are notified of the surveillance through signs in the premises and at the hotel. The data is stored for 30 days but may be retained longer if necessary. Access to the material is strictly limited to a small group of pre-approved processors within Cirkus Venues. The data is only evaluated upon request.
Your rights
Right to information: You have the right to receive information about our processing of your Personal Data free of charge. Requests for extracts should be made in writing to the Group's data protection officer at the address provided below and must be personally signed by you and include your name, postal address, phone number, email address (used in communication with the Group). The extract is sent to your registered address within one month from the date the application was received by the data protection officer.
Right to rectification: We strive to ensure that the Personal Data we process about you is accurate and relevant to the purpose for which the processing is conducted. You have the right to contact the Group's data protection officer to ask us to correct incorrect information about you that is processed by us. You can also request information about to whom we have disclosed your Personal Data. The Group is not responsible for problems arising as a result of Personal Data being outdated or incorrect if you have failed to inform us of the change. Each company within the Group will, at your request or when the company discovers it, correct or delete incorrect or incomplete information.
Right to erasure: We have an obligation to delete your Personal Data (i) if they are no longer needed for the purpose(s) for which they were collected, (ii) if the processing of them is based solely on your consent and you withdraw it, or (iii) if the processing is conducted for direct marketing.
Please note that you can withdraw your consent to further processing (not retroactively) of your Personal Data at any time by contacting the data protection officer at the address below, whereupon the Group will prevent such information from continuing to be processed. However, you are made aware that withdrawal of consent does not affect processing that can be conducted without consent (e.g., processing conducted to provide the Services) but may result in the Services not functioning as intended or the Group no longer being able to provide the Services.
Right to restriction of processing: You can in certain cases request that our processing of your Personal Data be restricted to certain limited purposes. You can do this, for example, when you believe the data is incorrect and have requested rectification.
Right to data portability: We can help you transfer Personal Data that you have provided to us to another service provider. A prerequisite is that the recipient processes the data based on your consent or to fulfill a contract with you. The right only applies to such Personal Data that you have provided to us.
Right to object: You have the right to object at any time to the processing of your Personal Data for marketing purposes.
Complaints to the Data Inspection Board: If you believe that we are processing data about you in violation of the General Data Protection Regulation, you can file a complaint with a supervisory authority where you live or work. In Sweden, the Data Inspection Board is the supervisory authority.
Right to compensation: If you have suffered damage because we have processed your Personal Data in violation of the General Data Protection Regulation, you may be entitled to compensation.
Cookies
When you visit our website, we may send and store a cookie on your computer, tablet, or mobile phone. This cookie enables the website or web server to collect and save specific, but limited, information from the browser about how you use it and improves your user experience. We may also collect information about your IP address, operating system, and which search engine you use for statistical and administrative purposes. The information we obtain through your visit to our website is generally anonymized and cannot be traced to a specific person. Information on how the Group uses cookies, what they are used for, and how you can avoid them is outlined in the Group's current Cookie Policy.
Transfer
If we sell, reorganize, or otherwise transfer all or part of our business, your Personal Data may be transferred simultaneously.
Questions about privacy
If you have questions or concerns about the Group's Privacy Policy or data processing or would like to make a complaint about a possible breach of privacy laws and regulations, you can contact our data protection officer at the address below.
Contact details Data Protection Officer
Name: Rasmus Söderlund
Email: DPO@cirkusvenues.se
Postal address: Att: Rasmus Söderlund, Cirkus Venues AB, Djurgårdsvägen 68, 115 21 Stockholm