Privacy Policy Memento Event AB

Memento Event AB’s (through the brands Memento Event & Julbordsmäklarna) Privacy Policy

Background

Memento Event AB and its brands Memento Event, Julbordsmäklarna, Late Night Show, and House of Christmas process personal data in their daily operations. The privacy policy generally applies to the processing of personal data within Memento Event and is intended to explain the types of data Memento Event processes, why, and how. Personal data is processed in Memento Event’s administrative and booking systems. Personal data is also processed in Memento Event’s applications, social media platforms, and on the websites mementoevent.se, julbordsmaklarna.se, latenightshow.se, and houseofchristmas.se. The privacy policy applies to employees, suppliers, and customers.

Personal data and processing of personal data

Personal data is any information that can be directly or indirectly linked to a living physical person. Names, telephone numbers, images, and IP addresses can be personal data. Bookings, behaviors, and orders can also be personal data if, together with other information, they can be linked to a person. Actions taken with personal data constitute processing of personal data, such as storage, collection, modification, deletion, and dissemination.

Special categories of personal data

Memento Event sometimes processes special categories of personal data. Handling a booking where someone is allergic requires processing of information about someone’s health. Union affiliation may also be processed in employment relationships if necessary under labor law.

Data controller

Memento Event AB, address: Riddargatan 38, 11457, is the data controller for the personal data you provide to us through inquiries and other contact with us and is responsible for processing it.

Data processors

In order to deliver its services, Memento Event uses data processors. This means that Memento Event is the data controller and determines which personal data is processed and why, but outsources parts of the processing. This typically involves IT solutions such as storage and booking systems. Memento Event then determines the processing and is responsible for it but seeks assistance from other suppliers to deliver its services. Memento Event always enters into data processing agreements with data processors to ensure a high level of protection for all data.

Memento Event’s processing of personal data

Memento Event and our data processors always have a legal basis for processing personal data. Most often, it is necessary to fulfill contracts, but it may also occur with consent, if required to safeguard legal claims, or due to legal requirements. Memento Event may also process personal data if there is a legitimate interest. The legitimate interest then outweighs the data subject’s interest in Memento Event not processing their personal data. For example, marketing to guests we have previously been in contact with occurs after a balancing of interests. However, as data subjects, it is always possible to object to such processing of personal data in a simple manner.

Below is an overview of Memento Event’s processing of personal data. Memento Event aims to process as little personal data as possible. Therefore, all categories of personal data are not processed on every occasion. For example, addresses and email addresses are not always processed in bookings, but it happens.

Communication and administration

Memento Event processes personal data for administration and communication with customers, employees, and suppliers. The purpose is to manage bookings, employments, and administer the business.

Personal data:

• Name, email address, address, telephone number, bookings, food preferences, allergies.

Legal basis:

• Processing is necessary to fulfill agreements and provide our services.

Origin of the data:

• The data comes from the data subject themselves provided to us during bookings and contract negotiations.

Employment conditions

To manage the administration and payment of salaries and contact with employees, Memento Event must process employees’ personal data.

Personal data:

• Name, email address, address, telephone number, any dependents, bank account number, employment certificates, salary specifications, absences. Control information, income information.

Legal basis:

• Processing is necessary to fulfill employment contracts and to administer and pay salaries. Memento Event, as an employer, has a legal obligation to provide the Swedish Tax Agency with employees’ control information.

Origin of the data:

• The data comes from the data subject themselves and is provided to us during contract negotiations or during the contractual relationship. Salary specifications are generated in Memento Event’s salary system, and employment certificates are created by the HR department. The data comes from the salary system and is based on what is registered based on the employee’s salary and work rate. Memento Event uses personal data to market its services through digital channels and through mailings with offers and information.

Payments

To handle payments, Memento Event processes personal data.

Personal data:

• Card number, invoice number, name, email address, telephone number, amount, sales point, transaction time, order details.

Legal basis:

• To trade in services and goods and fulfill agreements by getting paid or ensuring one’s own payment, Memento Event AB needs to process personal data related to payments.

Origin of the data:

• The data comes from the data subjects themselves during payment or booking.

Guest surveys

To improve its services, Memento Event sends out requests for participation in guest surveys.

Personal data:

• Name, email address, survey results.

Legal basis:

• Processing occurs after a balancing of interests.

Origin of the data:

• The data for mailings comes from the data subjects themselves who have provided them to Memento Event. The responses to the surveys come directly from the data subject.

Handling claims

To handle any legal claims such as complaints, claims, or legal processes, Memento Event may need to process personal data.

Personal data:

• Name, personal identity number, address, email address, telephone number, bank account number, sequence of events, location information.

Legal basis:

• Processing is necessary to meet Memento Event’s legitimate interest in establishing, asserting, and exercising legal claims.

Origin of the data:

• The data may come from the data subjects themselves but also from authorities or other entities such as insurance companies.

Cookies, etc.

To improve the user experience in digital channels, Memento Event may collect technical data.

Personal data:

• IP addresses, cookies, browser information, device IDs.

Legal basis:

• Depending on the type of technical data collected, processing occurs either after a balancing of interests or consent.

Origin of the data:

• The data subjects themselves when using the digital channels.

Recipients with whom Memento Event may share information:

Service providers

To provide its services, Memento Event relies on various suppliers, including IT solutions such as networks, storage services, and email services. The providers may only process personal data according to Memento Event’s explicit instructions and may not process the data for their own purposes. All are also bound by law and contract to protect personal data.

Payment recipients and payment service providers

In the case of payments, personal data may be shared with the payment service provider, the payment recipient, and both parties’ banks.

Other recipients

In some cases, Memento Event may also share data with other recipients, primarily authorities due to legal requirements or in connection with legal processes. Personal data may also be shared with potential buyers and sellers of all or parts of the business.

Technical and organizational measures

Memento Event values the privacy of its customers and employees and takes appropriate technical and organizational security measures to protect personal data from unauthorized access, alteration, dissemination, or destruction.

Where does Memento Event process personal data?

Memento Event’s goal is for all personal data to be processed within the EU/EEA area. However, some providers may process personal data outside the EU/EEA area. In such cases, we always ensure that the data is protected and that there are safeguards in place, through agreements that impose the same requirements as the rules within the EU.

How long are personal data retained?

Memento Event processes personal data for as long as there is a relationship with the data subject and for a period thereafter, as long as there is a legal basis. If there is no longer a reason to process personal data, it is deleted.

Rights

Memento Event wants to remind individuals of the rights GDPR grants to individuals whose personal data is processed.

Access to personal data

As a data subject, you have the right to request confirmation as to whether we process personal data about you or not. If we do, you have the right to see what data we process about you through a record extract.

Correction

If information is incorrect or incomplete, you have the right to request correction.

Withdraw consent

If we process your personal data with consent as the legal basis for processing, you have the right to withdraw consent at any time with future effect.

Object to processing for direct marketing

Data subjects have the right to object to personal data processing for direct marketing. This is easiest done by unsubscribing from mailings by clicking on the unsubscribe link in the mailing or by contacting us.

Right to lodge a complaint with the supervisory authority

The data subject also has the right to directly contact the supervisory authority to lodge a complaint. The supervisory authority will then investigate what has occurred.

Object to processing based on Memento Event’s legitimate interest

As a data subject, you have the right to object to processing based on a legitimate interest if there are reasons in your specific case that speak against processing. However, if you object to processing and there are compelling legitimate reasons that outweigh, we may continue processing.

Erasure

Data subjects have the right to request and, under certain circumstances, have their personal data erased. An exception is if we are required by law to retain the information.

Restriction of processing

Data subjects have the right to request that the processing of their personal data be restricted.

Data portability

Data subjects also have the right to receive copies of their personal data in a structured, commonly used, and machine-readable format. This right only applies to personal data that the data subject has provided to us, and the legal basis is either consent or the existence of a contract.

To protect your rights or for questions, please contact Memento Event AB

Data controller: Memento Event AB, 556660–7817
Postal address: Riddargatan 38, 11457 Stockholm
Email: info@mementoevent.se
Phone: 08-6674000