Cirkus Venues AB, org. no. 559036-8485, Djurgårdsvägen 68, 115 21 Stockholm (“Cirkus Venues”) and companies which at each time are part of the same group as Cirkus Venues (“the Group” or “we”) treat Personal Information for users and customers using our services, live in our hotel, go to our events, buy our goods etc. (“The Services”)
With “Personal data” means all information that can be directly or indirectly linked to a live person today. We are committed to protecting your Personal Data and processing your data in accordance with the Data Protection Ordinance (GDPR) and national data protection laws, which are in place to protect the privacy of individuals.
Some pages on the Group’s websites contain links to third party websites. These sites have their own privacy policies and the Group is not responsible for their business, including but not limited to their information practices. Users submitting information to or through these third-party websites should review the privacy policies of the websites before any Personal Information is provided to them.
What personal data do we collect
If you leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
In addition to the information you provide to us, we may collect information from ticket suppliers, travel agencies or other actors through whom you have booked your Service.
How we use your personal information
The group may use your Personal Information for:
To perform and administer the Services.
To safeguard your interests.
Accounting and billing purposes.
To contact you regarding your booking status or information connecting to your booking.
To develop and analyze the business.
To communicate with you and offer the Group Services to you.
To send you newsletters.
To provide information to partners whose event you visited, or promote the Group’s Services.
Legal basis for our processing of your personal data
We handle the information on the basis of our legitimate interest as an actor in the provision of our Services and in order to fulfill the legal obligations of us.
The tasks that are dealt with in order to develop and analyze the business and to communicate with you are treated on the basis of our legitimate interest to develop the business and communicate with our contacts.
The treatment that means that we disclose your information to partners is based on your consent which you can withdraw at any time, see the section “Your rights” below.
Recipients who take part of the personal data
Personal data may be transferred between companies within the Group and to partners in order to be processed for the purposes stated in this Interaction Policy. The group uses subcontractors for e.g. Computer operations and personal data can therefore be transferred to these subcontractors. Our subcontractors treat your Personal Data only on behalf of the Group, in accordance with our instructions and only after they have signed a personal data support agreement in accordance with applicable law, so that we can ensure a high level of protection for your Personal Data. The group may disclose Personal Information to a third party if the Group is obliged to disclose such information with the support of law or authority decisions.
Transfer of personal data to third countries
The group may transfer data to partners and subcontractors outside the EU / EEA. In order to ensure a high level of protection for your Personal Data in such situations and compliance with EU / EEA rules, the current company is included in the Group Personal Data Assistance Agreement with such parties. Such personal data assistance agreements regulate these parties’ processing of the Personal Data and, when applicable, the transfer of Personal Data in accordance with applicable EU / EEA rules on the protection of Personal Data. The agreement contains conditions that the EU Commission requires and which meets the requirements of the applicable law to protect the transferred Personal Data.
We conduct video surveillance of our premises at Hazeliusbacken 20, 115 21 Stockholm for the purpose of preventing and discovering crime and consequently protecting our staff, visitors and premises. Video surveillance is deemed to be a justified mean for this purpose, and the surveillance is performed with support of legitimate interest. Visitors of our premises are notified of the video surveillance through information signs.
The personal data is stored for 30 days but can be saved for longer time if needed for legal obligations. Access to the video surveillance is strictly limited to a small group of approved handlers at Cirkus Venues. Video data is only evaluated where required.
Right to information: You have the right to receive information about our processing of your Personal Data free of charge. Requests for excerpts must be made in writing to the Group’s Data Protection Officer at the address shown below and must be signed by you and must include your name, postal address, telephone number, e-mail address (which was used in communication with the Group). The extract is sent to your registration address within one month of the application being received by the Data Protection Officer.
Right to correction: We strive to ensure that the Personal Data that we process about you are correct and relevant for the purpose for which the processing takes place. You have the right to contact the Group’s Data Protection Officer to ask us to correct incorrect information about you that is being processed by us. You can also request information about who we have provided your Personal Information. The group is not responsible for any problems that arise as a result of Personal Data being old or incorrect if you failed to inform us of the change. Each company within the Group will, at your request or when the company discovers it, correct or delete incorrect or incomplete information.
Right to Erase: We have an obligation to delete your Personal Information (i) if they are no longer needed for the purpose (s) for which they were collected, (ii) if their processing is based solely on their consent and you revoke it, or ( iii) whether the processing is for direct marketing.
Please note that you may revoke your consent to further processing (not retroactively) of your Personal Information at any time by contacting the Data Protection Officer at the address below, whereupon the Group will prevent such information from being processed further.
However, you are advised that the withdrawal of consent does not affect the processing that may be done without consent (eg the processing that is being done to provide the Services) but may result in the Services not functioning as intended or that the Group can no longer provide the Services .
Right to limitation of treatment: In some cases, you may request that our processing of your Personal Data be limited to certain limited purposes. You can do that, for example. do when you believe the data is incorrect and have requested correction.
Right to Data Portability: We can help you to transfer Personal Data that you have provided to us another provider of services. A prerequisite is that the person receiving the information processes them with the support of a consent from you or to fulfill an agreement with you. The right applies only in relation to such Personal Data that you have provided to us yourself.
Right to object: You have the right to object at any time to processing your Personal Data for marketing purposes.
Complaints to the Data Inspectorate: If you consider that we treat information about you in violation of the Data Protection Ordinance, you can file a complaint with a supervisory authority where you live or work. In Sweden, the Data Inspectorate is the supervisory authority.
Right to damages: If you have suffered damage because we have processed your Personal Data in violation of the Data Protection Ordinance, you may be entitled to damages.
If we sell, reorganize or otherwise transfer all or part of our business, your Personal Information may be transferred at the same time.
Questions about integrity
Contact Information Data Protection Officer
Name: Johann Schneider
Postal address: Johann Schneider, Cirkus Venues AB, Djurgårdsvägen 68, 115 21 Stockholm