Processing of Personal Data According to GDPR
Byggmästare Sven-Harrys Konst- och Bostadsstiftelse protects your personal integrity, and we strive for a high level of security in our data protection work. You should feel confident that we handle your personal data in a correct manner in accordance with current regulations.
Our goal with this policy is to clearly and transparently describe how we collect, use, and store your information. We care about your privacy and do not collect more data than we need.
The policy also describes what rights you have regarding the processing of your personal data, and how you should go about exercising those rights.
We process your personal data in accordance with the General Data Protection Regulation (Regulation No 2016/679 of the European Parliament and of the Council, also known as "GDPR"). It is the EU's data protection regulation that applies in all countries of the Union as of May 25, 2018.
If you have any questions about our data protection policy, you can always contact us at:
info@sven-harrys.se.
How we collect personal data
Personal data is any information that can be directly or indirectly linked to you as an individual. This includes, for example, name, social security number, address, email address, telephone number, photograph, and CCTV. The personal data we process depends on the relationship you have with us.
1. We collect personal data and information that is necessary either to enter a contractual relationship with us, for events, bookings or for other purposes.
2. We collect and process personal data that you provide to us, e.g., when you visit our website, purchase a certain product or service, sign up for our newsletter, click on digital advertising, contact us, or use our digital channels.
3. Please note that we do not collect any information on credit card payments. All payment information is handled by third-party providers who are independent data controllers for the processing.
4. Personal numbers are only processed in exceptional cases for specific services that require proof of identity.
5. We sometimes document our events and exhibitions with photos, video, or audio recordings, and these may in some cases constitute personal data. Please notify our staff if you do not wish to be photographed during our events.
6. We have permission from the County Administrative Board in Stockholm to monitor the art museum using camera surveillance. We do this to prevent or detect crime or other similar purposes.
How we use personal data
Byggmästare Sven-Harrys Konst- och Bostadsstiftelse processes personal data for various purposes. The main purposes are for us to be able to:
1. manage orders, bookings, purchases, customer service matters and communication with visitors, exhibitors/lenders, organizers, and other partners.
2. document, develop, market, and evaluate our activities.
3. fulfill our commitments as an art institution, landlord and social actor.
4. prevent and deter crime.
5. compliance with a legal obligation: we need to process some personal data to comply with laws and regulations.
How we store and protect your information
Your personal data is only processed for as long as it is necessary for the purposes for which it was collected - for example, if it is necessary for us to fulfill our obligations under a contract with you. We may save the data for longer if required by law or to protect our legal interests, e.g., if a legal process is ongoing.
1. We are constantly working to improve our security measures. We protect ourselves against intrusions into our IT system, virus attacks and good backup. In the event of a data breach, we are obliged to report to the Data Inspectorate within 72 hours.
2. Only the people who need your personal data for their work have access to it.
3 Your personal data is deleted when it is no longer relevant for the purposes for which it was collected.
4. Your personal data is deleted when it is no longer relevant for the purposes for which it was collected.
Personal data to third parties
We never sell your data to third parties. However, we may disclose your personal data to the following categories of recipients:
1. Authorities such as the Swedish Tax Agency or the Police if we are required by law to do so.
2. Personal data assistant. When the Foundation engages another business to perform certain services, such as transportation, operation of IT systems, property management, this may mean that we share personal data that we have collected. In this case, we are the data controller, and the other organization is the processor. We then enter into a data processor agreement to ensure that the personal data is handled correctly and securely.
Personal data to third parties
We never sell your data to third parties. However, we may disclose your personal data to the following categories of recipients:
- Authorities such as the Swedish Tax Agency or the Police if we are required by law to do so.
- Personal data assistant. When the Foundation engages another business to perform certain services, such as transportation, operation of IT systems, property management, this may mean that we share personal data that we have collected. In this case, we are the data controller, and the other organization is the processor. We then enter into a data processor agreement to ensure that the personal data is handled correctly and securely.
Your rights
Here we describe the rights you have regarding our processing of your personal data and how to exercise these rights.
- You have the right, at any time, to request the rectification of inaccurate data, and to modify or delete the personal data you have provided. You also have the right to know what personal data we have registered about you. You can do this by contacting us.
- In the case of marketing such as newsletters, e-mails, or letters, you can contact us at any time and let us know if you no longer wish to receive our information (see contact details below). You can also unsubscribe by clicking on a link in the relevant mailing.
- If you are a visitor at one of our events, we will ask for your consent when taking photos of individuals. The same applies to video and audio recordings.
- You have the right to object to photography, such as general pictures such as crowd or mingle pictures that we have taken based on a balance of interests and without asking everyone in the picture.
- If you have given us your consent to collect personal data, you can withdraw it at any time by contacting us by email or phone. If you withdraw your consent, we will delete your personal data that was covered by the consent.
- Under certain circumstances, you do not have the right to have your personal data deleted. This applies if, for example, we are obliged by law to keep the data.
Changes to the data protection policy
We may update and make changes to our privacy policy. You can always find the latest version on the website. In case of updates that are essential for our processing of personal data (e.g., change of stated purposes), this will be communicated to you.
Personal data controller:
Byggmästare Sven-Harrys Konst- och Bostadsstiftelse.
Organisationsnummer: 802411-2735
Eastmansvägen 10-12
113 61 Stockholm
info@sven-harrys.se