Privacy Policy

Graffitisthlm takes care of your privacy. It is important for us that you feel confident in how we handle your personal data. This Privacy Policy explains how we collect, use, protect and share your information in accordance with the General Data Protection Regulation (GDPR).

1. Who is the data controller?

Graffitisthlm AB with registration number 559157-8090 is the data controller for the processing of your personal data on this website and for bookings and purchases with us.

2. What personal data do we collect?

We collect the data you provide to us when you interact with our business. It can be about:

Contact information:Name, email address, telephone number and postal address.
Invoice and payment information: payment history, invoice address and, if applicable, social security number (if you are shopping as an individual or booking against invoice).
Booking Details:Information about the event, party, course or venue rental you booked (e.g. number of participants or specific requests).

3. Why do we process your data? (Purpose and legal basis)

We process your data in order to be able to run our business and keep what we promised you. Specifically, we do it because:

Fulfill contracts: Manage and confirm your bookings (parties, courses, events, venue rental) and deliver products you purchased in our webshop (boards, gift cards).
Customer Service:Be able to answer your questions by email or phone regarding quotes, prices or availability.
Accounting legislation:Save financial documents (invoices and receipts) in accordance with the current accounting law.
Marketing (if approved):Send newsletters or information about upcoming events and courses. You can unsubscribe from these mailings at any time.

4. How long do we store your data?

We never store your personal data longer than is necessary for the respective purposes:

Customer and Booking Data:Stored for as long as necessary to carry out the event/delivery and handle any complaints or support issues.
Accounting:Invoices, payments and accounting documents are saved by law for 7 years.
Newsletter:Your email address will be saved for mailing until you choose to unsubscribe.

5. Who do we share your data with?

We never sell your data to third parties. However, in order to operate our business, we sometimes share your data with trusted partners (personal data processors):

Payment solutions:Banks and payment service providers (e.g. Klarna, Swish) to handle your payment.
IT providers:Companies that manage our booking systems, web hosting and email mailing.

All partners are bound by agreements that guarantee that your data is handled securely and in accordance with GDPR.

6. Your rights

You have full control over your own data. According to the GDPR, you have the right to:

Right of access (record extracts):You have the right to know what data we have stored about you.
Right to correct:If a statement is incorrect or incomplete, you have the right to have it corrected.
Right to erasure (“right to be forgotten”):You can request that we delete your data, provided that we are not legally obliged to save it (e.g. for accounting purposes).
Right to Object:You can opt out of direct marketing from us at any time.

7. How do we protect your data?

We take technical and organizational security measures to protect your personal data against unauthorized access, loss or alteration. Our website uses encryption (SSL) for secure data transfers.

8. Changes to this Policy

We may update this Privacy Policy as necessary (e.g. if legislation changes or if we launch new services). The latest version is always available on our website.

If you have any questions about how we handle your personal data, or if you want to exercise any of your rights, you are welcome to contact us:

Email: event@graffitisthlm.se
Phone:0732-615615