Personal Data Policy
We value your personal privacy. Therefore, we would like to inform you about how we handle your personal data.
GDPR
GDPR (General Data Protection Regulation) is an EU regulation that has been in force throughout the EU since 25 May 2018. An important part of this legislation is the individual’s ability to control their own personal data.
We think this is both important and good! Therefore, we are open about what information we handle and why, and we will protect your information as securely as possible. We will never sell your personal data to another company.
Data Protection Officer
As we process personal data in our business, we have appointed a data protection officer. The data protection officer shall monitor compliance with the GDPR within the organisation and inform employees of the applicable rules. The data protection officer is procured through Uppsala Municipality. Our data protection officer can be reached via e-mail: dso.ukk@jpinfonet.se
Legal Basis
In order to process personal data, we must have a so-called legal basis. Here you can read more about what data we store and on what legal basis we do this.
It may be necessary for us to update this policy in the future. In the event of changes that affect you, we will inform you here, or via e-mail if it concerns you as a subscriber to our newsletter.
For the processing of our private customers’, corporate customers’, subscribers’ and partners’ personal data in accordance with this policy, UKK is the controller.
You can always contact us if you have any questions, info@ukk.se or 018 727 90 00.
In these Situations, We Collect Data
Subscription to Newsletters
Subscribing to our newsletters is free.
When you subscribe to newsletters from UKK, we ask you to read this personal data policy and give your consent. We save your name and e-mail address.
If you choose to subscribe to newsletters from UKK, we will save your data and send information to you until you choose to end your subscription. You can unsubscribe at any time via the ‘unsubscribe’ link that you will always find in the newsletters from us. You can withdraw your consent at any time.
You can also contact us at any time: info@ukk.se or 018 727 90 00.
Legal basis: Consent
Booking Request
Under the Conference & Event tab on ukk.se you can fill in a booking request. A request is in no way binding. We will save the information you provided in order to respond to your request. Furthermore, we will save your name, title, company, e-mail and telephone in order to contact you with offers and information that we deem relevant to you. You can always ask us to delete your data or decline further contact if you wish.
For our corporate customers and other conference and event customers, we have a CRM system called Microsoft Dynamics (data processor).
Agreement (booking request), legitimate interest (offers and information).
Ticket Purchase
UKK uses a ticket system called Tickster (data processor). When you buy a ticket, we will save information that is necessary for us to be able to deliver what you ordered and give you correct information. We will save information about what you have purchased in order to create offers that are relevant to you and to analyse our sales. In addition to the stated purposes, you agree that your personal data may be used as a basis for market and customer analyses as well as risk management and statistics to develop the Organiser’s and Tickster’s range and service. By actively accepting our terms and conditions on tickster.com, when purchasing over the counter via the organiser, ticket agent or Tickster, when purchasing or receiving assistance via e-mail or telephone, you agree to the collection and processing of your personal data in accordance with the purchase and delivery terms and Tickster’s personal data policy.
Legal basis: Fulfilment of contract, legitimate interest
When You Contact Us
When you contact us, for example our reception, our switchboard, our conference booking or one of our employees, we collect the personal data that is needed for us to be able to handle your case. Common information that we use in these cases is name, telephone number and e-mail address.
Legal basis: Legitimate interest
When You Apply for a Job with Us
When recruiting for a position, we save your application with attachments for 6 months after the position has been filled. If you send us a spontaneous application, we will save your data for 12 months. Spontaneous applications are e-mailed to: cv@ukk.se.
Legal basis: Legal obligation
Compliance with Laws
We process data in order to fulfil our statutory obligations. This may, for example, involve saving financial documents in accordance with the Accounting Act.
Legal basis: Legal obligation
Surfing on Ukk.Se – Cookies
We do not know who you are and do not have any personal information about you who are just surfing on ukk.se. The information that we collect with the help of cookies on ukk.se includes how many people visit the website and which devices are used to visit the website. We measure and analyse traffic and user behaviour on our website with Matomo. With the help of these traffic analyses, we can adapt our website better for our visitors and target our digital advertising so that the messages become more relevant to the recipient. If you want, you can read more about our cookies here.
The first time you visit our website from a new device, you choose which cookies you want to allow and which you want to reject. You can change your settings at any time via the button in the lower left corner of your browser. By allowing cookies, you are sure that the website works optimally, safely and with the least possible loading time.
What Data, how, where and why?
What Type of Data We Collect
We collect two types of data – personal data and traffic data.
Personal data is information that is linked to you – e.g. name, address, e-mail address, telephone number. It can also be information about which goods you have purchased, bookings and orders.
Traffic data is information that shows how many people visit our website, what time of day the most tickets are sold, how many of our customers come from Uppsala, etc. This data is not linked to you as a person.
How We Collect Data
We collect and process data that:
- you provide when you become a customer with us and when you communicate with us – e.g. when you buy a ticket, fill in a booking request, apply for a job with us, contact us to get information by mail or telephone or subscribe to newsletters.
- we retrieve from other sources – e.g. membership registers from Musikens Hus vänner, publicly available personal registers, and from partners.
- is collected through our website and our ticket system where we use cookies that collect information on and from your browser.
- is collected in forms on our website, for example customer surveys.
What We Use Personal Data For
In order to process personal data, there must be support in the Data Protection Act. This is called a legal basis. This means that in order for our processing of your personal data to be legal, it needs to be necessary and fulfil one or more of these purposes:
- Fulfilment of contract (send ticket by e-mail, deliver the goods that are ordered)
- Consent (active ‘yes please’ from you, such as when subscribing to Newsletters)
- Legal obligation (e.g. warranty issues, accounting law, labour law legislation)
- Legitimate interest (e.g. contact existing customer with offer of similar goods, invite to event that is of interest to a certain professional role)
We save Personal Data
We do not save any personal data longer than we need to. Some data is deleted directly, other data is saved for different lengths of time depending on what the data is to be used for and our obligations under the law. Personal data is handled in authorisation-controlled systems intended for the purpose. Data that we save for statistics is de-identified as far as possible. Personal data for ticket customers is culled three years after the latest ticket purchase.
Where We save Personal Data
We strive to always store your personal data within the EU/EEA and in accordance with the regulations that apply to Information Security according to ISO 27001. In some cases, they may be processed outside the EU/EEA, but then the security is regulated within the framework of the EU Commission’s approved standard clauses.
We have Personal Data Processing Agreements with all suppliers who store and manage data for us.
Our IT partner ensures our IT security and protection against intrusion.
You have control over your data
You have the right to access the personal data we have about you, so-called register extracts, have the data corrected or supplemented. In some cases, you have the right to delete your personal data.
Register Extract
You have the right to request, free of charge, to take part of the personal data we have about you.
If you want to get a register extract, send in a request with your first and last name, personal identification number and telephone number or e-mail. When we have received your request, it will be processed without delay.
We will compile the data we have that relates to you.
Regardless of how you want to get the register extract, you need to identify yourself because we need to verify your identity before the data is disclosed.
You can get a register extract in one of the following ways:
- Electronic reply – you will receive an e-mail from Uppsala municipality with a link to the documents, you need to identify yourself with BankId, Freja eID+ or Telia in order to open the link.
- Registered letter – the register extract is sent to your registered address and you need to identify yourself when you pick up the letter at an agent.
- Pick up at UKK’s reception – you need to identify yourself with valid identification at the reception in order to get the documents.
Correction and Deletion
Requests for correction, supplementation or deletion of your personal data can be made directly to us at info@ukk.se or on 018 727 90 00. Information about changes and requests for deletion of your personal data will also be communicated to the possible personal data assistants who store data for us.
Please note that there may be legal reasons why we cannot delete your data.
Right to Object
In some cases, you have the right to object to our processing of your personal data. Then you should contact us at info@ukk.se and tell us what you think is wrong in our processing of your personal data.
Right to Complain to the Swedish Authority for Privacy Protection
If you are not satisfied with our handling of your personal data, you can turn to the Swedish Authority for Privacy Protection with complaints.
Data Portability
You have the right to get your personal data electronically. The right to data portability applies if you have consented to provide your personal data or if you have provided the data in connection with an agreement.
this is how We View Integrity and Personal Data (UKK’s Internal Policy)
UKK respects the right to control one’s own data. We work with transparency and clarity. We inform to give the individual insight into how we work with personal data and for what purposes.
UKK is aware that sensitive personal data requires extra caution and frequent culling.
UKK has a clear purpose with all the data we collect. All purposes are ensured to have a legal basis.
UKK is careful with all data management, but extra careful when it comes to personal data that is used to process private individuals for commercial purposes (marketing and sales).
UKK works continuously with register maintenance and culling to ensure data minimisation, correctness and relevance.
UKK trains its staff and follows routines to ensure quality in personal data work.
UKK takes personal privacy very seriously and sees it as self-evident to follow the laws and regulations that exist in the area. Because we want to. Not because we have to.