Background
Memento Event AB (“Memento”) processes personal data as part of its day-to-day operations. This Privacy Policy applies generally to Memento’s processing of personal data and is intended to explain what types of data Memento processes, why we process it and how it is handled.
Personal data is processed in Memento’s administrative and booking systems, as well as in Memento’s applications, social media platforms and on the website mementoevent.se and its sister websites julbordsmaklarna.se, latenightshow.se and houseofchristmas.se.
This Privacy Policy applies to employees, suppliers and customers.
Personal data means any information that can be linked, directly or indirectly together with other information, to an identifiable living individual. Names, telephone numbers, photographs and IP addresses may constitute personal data. Bookings, behaviours and orders may also constitute personal data if, together with other information, they can be linked to an individual.
Any action performed on personal data constitutes processing of personal data, including storage, collection, alteration, deletion and disclosure.
Memento may occasionally process special categories of personal data. For example, handling a booking where an individual has an allergy requires the processing of health-related information.
Trade union membership may also be processed in connection with employment where necessary under employment law.
Memento Event AB, with its registered address at Riddargatan 38, 114 57 Stockholm, Sweden, is the data controller for personal data that you provide to us through enquiries and other forms of contact and is responsible for the processing of such data.
In order to provide its services, Memento uses data processors. This means that Memento remains the data controller and determines what personal data is processed and why, while certain parts of the processing are outsourced.
This may include IT solutions such as storage and booking systems. Memento remains responsible for the processing but uses external suppliers to enable us to provide our services.
Memento enters into data processing agreements with its data processors in order to maintain a high level of protection for all personal data.
Memento and our data processors always have a lawful basis for processing personal data. In most cases, processing is necessary for the performance of a contract. Processing may also be based on consent, be necessary for the establishment, exercise or defence of legal claims, or be required by law.
Memento may also process personal data where there is a legitimate interest. In such cases, Memento’s legitimate interest is weighed against the interests and rights of the individual. For example, marketing to individuals with whom we have previously been in contact may be carried out on the basis of a legitimate interest assessment. Individuals always have the right to object to such processing.
Below is an overview of Memento’s processing of personal data. Memento aims to process as little personal data as possible. Consequently, not all categories of personal data listed below are processed in every situation.
Memento processes personal data for administration and communication with customers, employees and suppliers. The purpose is to manage bookings, employment relationships and the administration of our business.
Personal data:
Lawful basis:
The processing is necessary to fulfil our contractual obligations and provide our services.
Source of the data:
The information is provided by the data subject in connection with bookings and entering into agreements.
To administer employment, salary payments and communication with employees, Memento needs to process employees’ personal data.
Personal data:
Lawful basis:
The processing is necessary to fulfil employment agreements and to administer and pay salaries.
As an employer, Memento also has legal obligations to provide relevant employee information to the Swedish Tax Agency (Skatteverket).
Source of the data:
The information is provided by the data subject when entering into an employment agreement or during the employment relationship. Payslips are generated in Memento’s payroll system and employment certificates are created by the HR department based on information registered in the payroll system.
Memento uses personal data to market its services through digital channels and communications containing offers and information.
Personal data:
Lawful basis:
Processing is based on consent or a legitimate interest assessment.
Source of the data:
The information is provided by the data subjects themselves, for example when subscribing to newsletters or when an individual has previously been in contact with Memento Event or booked an event with us.
Memento processes personal data in order to handle payments.
Personal data:
Lawful basis:
Processing payment-related personal data is necessary for Memento to sell services and products, fulfil contractual obligations, receive payment and secure its right to payment.
Source of the data:
The information is provided by the data subject in connection with payment or booking.
In order to improve our services, Memento may send invitations to participate in customer or guest surveys.
Personal data:
Lawful basis:
Processing is based on a legitimate interest assessment.
Source of the data:
Contact details are provided by the data subjects themselves. Survey responses are provided directly by the individual participating in the survey.
Memento may need to process personal data in connection with legal claims, including complaints, claims or legal proceedings.
Personal data:
Lawful basis:
Processing is necessary for Memento Event’s legitimate interest in establishing, exercising or defending legal claims.
Source of the data:
The information may be provided by the data subjects themselves, public authorities or other parties such as insurance companies.
To improve the user experience in our digital channels, Memento may collect technical data.
Personal data:
Lawful basis:
Depending on the type of technical data collected, processing is based either on a legitimate interest assessment or on consent.
Source of the data:
The information is generated when data subjects use our digital channels.
In order to provide our services, Memento uses various suppliers, including providers of IT solutions such as networks, storage services and email services.
These suppliers may only process personal data in accordance with Memento Event’s explicit instructions and may not process the information for their own purposes. All such suppliers are also required by law and contract to protect personal data.
In connection with payments, personal data may be shared with payment service providers, payment recipients and the banks of the respective parties.
In certain circumstances, Memento may share information with other recipients, primarily public authorities where required by law or in connection with legal proceedings.
Personal data may also be shared with potential buyers or sellers in connection with a sale or transfer of all or part of the business.
Memento takes the privacy of its customers and employees seriously and implements appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure or destruction.
Memento Event’s aim is for all personal data to be processed within the EU/EEA.
However, certain suppliers may process personal data outside the EU/EEA. In such cases, we ensure that the personal data is adequately protected and that appropriate safeguards are in place through agreements that impose data protection requirements equivalent to those applicable within the EU.
Memento processes personal data for as long as there is a relationship with the data subject and for a period thereafter, provided that there is a lawful basis for doing so.
When there is no longer a lawful reason to process the personal data, it will be deleted.
Memento would like to remind you of the rights available to individuals whose personal data is processed under the General Data Protection Regulation (GDPR).
You have the right to request confirmation as to whether we process personal data relating to you. If we do, you have the right to request access to the personal data we hold about you.
If any personal data is inaccurate or incomplete, you have the right to request that it be corrected.
Where we process your personal data on the basis of consent, you have the right to withdraw your consent at any time. The withdrawal will apply to future processing.
You have the right to object to the processing of your personal data for direct marketing purposes.
The easiest way to do this is to unsubscribe from our communications using the unsubscribe link included in the relevant communication or by contacting us.
You have the right to lodge a complaint directly with the relevant data protection supervisory authority regarding our processing of your personal data.
Where processing is based on Memento’s legitimate interests, you have the right to object to the processing based on circumstances relating to your particular situation.
If we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, we may continue the processing.
You have the right to request the deletion of your personal data under certain circumstances. An exception applies where we are legally required to retain the information.
You have the right, under certain circumstances, to request that the processing of your personal data be restricted.
You also have the right, under certain circumstances, to receive personal data concerning you in a structured, commonly used and machine-readable format.
This right applies only to personal data that you have provided to us where the lawful basis for processing is either consent or the performance of a contract.
To exercise any of your rights or if you have questions about how we process personal data, please contact Memento Event AB.
Data Controller: Memento Event AB
Company registration number: 556660–7817
Postal address: Riddargatan 38, 114 57 Stockholm, Sweden
Email: info@mementoevent.se
Telephone: +46 (0)8 667 41 01
Memento – Creative Event Studio & Dream Factory