SVENSKA MÄSSAN GOTHIA TOWERS WEB POLICY

Svenska Mässan Gothia Towers, corporate identity number 559080-8290 (“Svenska Mässan”), is responsible for the processing of your personal data when you use our websites. We want you to feel safe when your personal data is processed by us at Svenska Mässan, and we process the information you provide to us in a responsible manner.

This policy is long, so please feel free to use our summary and table of contents to click through to the section of the text that you are interested in. Please do not hesitate to contact us if you have any questions or wish to exercise your rights. You will find our contact details below.

Summary – why do we process your personal data?

Our processing of personal data means that your personal data is shared with suppliers who may process it outside the EU/EEA. You can find more information about this below.

You have the following rights: the right to lodge a complaint with the Swedish Authority for Privacy Protection, the right to withdraw your consent, the right of access, the right to object, the right to erasure, the right to rectification, the right to restrict the processing of personal data and the right to data portability.

Table of contents

  • How can you contact us?
  • Do you have to provide your personal data to us?
  • Detailed information about how we process and store your personal data.
  • Who processes the data?
  • Do we share your personal data outside the EU/EEA?
  • What rights do you have to influence how we process your personal data?

How can you contact us?

If you have questions about how we process your personal data or if you wish to exercise any of your rights described below, you are welcome to contact us. Our contact details are:

Do you have to provide your personal data to us?

When you visit our websites, personal data about you is collected from your device (for example, computer, mobile phone or tablet). It is up to you to consent to us collecting data that we then use to analyse how our website is used and to offer you interesting and customised marketing. You may also choose to consent only to certain parts of this data.

We also collect personal data that we use to ensure that the website functions and to remember what you have previously consented to. You must provide this personal data to us in order for the website to function when you use it.

Detailed information about how we process and store your personal data

Would you like to know more about how we process your personal data? Below you can read more about:

  • Why we process your personal data
  • Which personal data we process about you
  • The legal basis under applicable data protection laws and regulations (“GDPR”) on which we rely in order to process your personal data
  • How long we process your personal data
  • Where we obtain your personal data from

If you consent to analytics and marketing services

We analyse how our website is used and show you relevant offers on other pages you visit based on such analysis. We explain this in detail in the tables below. To protect your privacy, we and our suppliers have taken measures to avoid identifying you as a user of our website; for example, we only share an encrypted version of your IP address with Google.

Personal data is collected from your device (for example, mobile phone, computer or tablet) when you visit our website. Some of our suppliers also use information they already have to carry out analysis and to show you interesting offers from us.

In order to collect personal data for analytics and marketing as described below, we use cookies and/or similar technologies. In our information text about cookies, we explain in more detail how this works.

To improve the website
Purpose:

  • To analyse how you use our website with the help of cookies. We do this to improve the functionality of the website, to adapt the website so that it suits our visitors, and to provide us with information about approximately what types of target groups visit our website
  • To do this, we use an analytics service from Google Analytics, which means that a random ID is used to distinguish your device from other visitors and to confirm patterns in how our website is used
  • We are only interested in how visitors interact with us at an overall level. We at Svenska Mässan do not know who you are and do not take any measures to find out
Personal data:

  • An encrypted version of your IP address that we at Svenska Mässan cannot link to you as an individual
  • Information about how you use the website, for example what you click on
  • Which area of the country you use our website from
  • Information about how many times you have visited the website, which provides us with information to calculate the total number of visitors to the website
  • Information about your device/browser, for example your screen resolution
  • Other information that Google has about you, for example information about which website you found us from
 Storage period:

The personal data will be used by us for 6 months after your visit to our website.
Legal basis:

Consent (GDPR Article 6.1.a). We only process your personal data for this purpose if you give your consent on our website. You have the right to withdraw your consent at any time. Your withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn. You can avoid Google Analytics by, for example, downloading and installing this browser add-on.
To show interesting offers from us on other pages
Purpose:

  • To market our services by showing offers and new products that we believe may be of interest to you. We show marketing tailored specifically to you on other websites and social media that you visit.
  • We may show offers by using marketing services from, for example, Google and/or Meta (Facebook and Instagram). We do this based on analysis of our website, through cookies or similar technology, as well as information that these parties already have about you.
  • We may customise the marketing to suit you based on information that the marketing services already have about you and based on your previous browsing history with us, known as profiling. The marketing services we use utilise profiling in order to determine which offers they and we believe are best suited to you. Without profiling, we would not be able to show relevant offers and marketing specifically to you; instead, you would see offers that you are not interested in. You have the right at any time to object to profiling.
Personal data:

  • Encrypted IP address that we at Svenska Mässan cannot link specifically to you.
  • Information about how you interact with our website and advertisements. For example, information about which pages you have visited after clicking on our advertisement, as well as analysis of how and when you use our website.
  • Which area of the country you use our website from.
  • Information that the marketing services already have about you.
 Storage period:

You will see marketing from us for six months after your visit to our website.
Legal basis:

Consent (GDPR Article 6.1.a). We only process your personal data for this purpose if you give your consent on our website. You have the right to withdraw your consent at any time. Your withdrawal does not affect the lawfulness of processing carried out before the consent was withdrawn.

Here you can make choices about the marketing you see from Google. Here you can find more information about your choices on Instagram and here on Facebook, under the heading ad settings, you can choose which marketing you want to see on Facebook.
To provide a functioning website and to remember your choices
Purpose:

  • To ensure that the website functions in a satisfactory and secure manner. To do this, we collect information about your IP address. We do not use your IP address to actually identify you.
  • To adapt the website based on your use.
  • To remember your choices, for example your consent.
Personal data:

  • IP address
  • Information about how you use the website.
  • Information about your choices.
 Storage period:

The personal data collected with the help of cookies for the functionality of the website will stop being used when you close your browser. The personal data collected with the help of cookies to remember your choices is stored for 6 months after you have consented.
Legal basis:

Balancing of interests (GDPR Article 6.1 f). The processing is necessary for our legitimate interest in being able to provide a well-functioning website and to remember your choices. In the balancing of interests, we have assessed that our legitimate interest in carrying out the processing outweighs your interest and your fundamental rights not to have your personal data processed. Contact us if you would like detailed information about the balancing of interests that we have carried out.

Who processes the data?

Your personal data is primarily processed by us at Svenska Mässan. We never sell your personal data. In some cases, however, we need to share your personal data with external parties, namely the suppliers we have listed in our cookie policy. As far as possible, we do not share your personal data in plain text, and we also take other measures to minimise how many parties have access to your personal data.

The sharing constitutes very limited processing of personal data, and in practice these suppliers can essentially not identify you specifically. In general, the following applies:

  • When you visit our website, your personal data is processed through the suppliers we use on the website. We list these as “necessary” in the cookie policy. They are used so that we can conduct our business in an efficient manner, and these suppliers act on our behalf as our processor.
  • If you consent on the website, your personal data is also processed by analytics and marketing services such as Google and Meta. These suppliers process personal data on our behalf as our processor, but also process your personal data independently as data controllers. These suppliers also inform you separately about the processing of personal data for which they themselves are responsible.

If you would like more information about how we share your personal data, you are always welcome to contact us.

Do we share your personal data outside the EU/EEA?

We work continuously to ensure that your personal data is not transferred outside the EU/EEA. However, some of the external parties we use may be considered to transfer your personal data outside the EU/EEA. This is the case if you visit our website and give your consent, in which case your personal data will be transferred outside the EU/EEA to, for example, Google and Meta (Facebook and Instagram). In our cookie policy, you can find more information about which suppliers apply to the website you visit.

For us at Svenska Mässan, it is of utmost importance that all transfers outside the EU/EEA take place in accordance with the requirements of the GDPR. We have also minimised the information that our suppliers have access to and have taken several measures to reduce the risks that your personal data is transferred outside the EU/EEA – all to make it as difficult as possible for anyone outside the EU/EEA to understand which personal data is involved.

  • Many of the suppliers we use are based in the United States. When your personal data is transferred outside the EU/EEA to the United States, this is done on the basis of a so-called adequacy decision from the European Commission. This means that the EU has assessed that a certain country has an adequate level of protection for your personal data. As a result, the EU and the United States have entered into an arrangement called the EU-US Data Privacy Framework.
  • For recipients that are not certified under the EU-US Data Privacy Framework, we may transfer your personal data outside the EU/EEA on the basis of the European Commission’s standard contractual clauses. We will transfer your personal data in accordance with the standard contractual clauses (Article 46.2 (c) GDPR), Module 1 (controller to controller) and Module 2 (controller to processor), together with supplementary measures. You can find the standard contractual clauses here. In cases where we conclude that legislation or similar in a specific country outside the EU/EEA to which we transfer your personal data affects the effectiveness of the standard contractual clauses, we will take additional safeguards to ensure an adequate level of protection for your personal data.

If you would like to know more about the safeguards we implement for transfers of personal data, you are welcome to contact us.

What rights do you have to influence how we process your personal data?

In accordance with the GDPR, you have certain rights – see more information below.

If you have any questions about the rights or wish to exercise any of your rights, you are welcome to contact us using the contact details above. At the Swedish Authority for Privacy Protection, you can also find more detailed information about when your rights apply and what exceptions exist.

  • Right to lodge a complaint (Article 77 of the GDPR): You have the right to lodge a complaint with the competent supervisory authority if you consider that the processing of your personal data violates the GDPR. In Sweden, the competent supervisory authority is the Swedish Authority for Privacy Protection.
  • Right to withdraw consent (Article 7.3 of the GDPR): You have the right to withdraw your consent at any time by contacting us. Any consent you give on the website can always be withdrawn directly on the website by visiting our cookie policy.
  • Right of access (“the right to obtain a register extract”)(Article 15 of the GDPR): You have the right to receive confirmation as to whether or not we process your personal data. You can send a request by contacting us. If we process your personal data, you also have the right to receive a copy of the personal data we process, as well as information about the processing, such as the purposes of the processing and how long the data is stored.
  • Right to object (Article 21 of the GDPR): You have the right at any time to object to your personal data being processed for direct marketing purposes (including any profiling) and to the processing of your personal data based on a balancing of interests (including any profiling).
  • Right to rectification (Article 16 of the GDPR): You have the right to have inaccurate personal data concerning you rectified without undue delay. You also have the right to complete incomplete personal data.
  • Right to erasure (“the right to be forgotten”)(Article 17 of the GDPR): Under certain conditions, you have the right to have your personal data erased by us without undue delay. For example, if you withdraw your consent and there is no other legal basis for the processing, or if the personal data is no longer necessary for the purposes for which it was collected or processed.
  • Right to restriction of processing (Article 18 of the GDPR): Under certain conditions, you have the right to request that we restrict our processing of your personal data. For example, if you contest the accuracy of the data, or if the processing is unlawful and you oppose the erasure of the personal data and instead request restriction of its use.
  • Right to data portability (Article 20 of the GDPR): If we process your personal data on the basis of your consent, you have the right to receive the personal data concerning you. The right applies to data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transfer this personal data to another data controller, where technically feasible.

This web policy was adopted by Svenska Mässan Gothia Towers AB on 18 June 2024

Go back to Privacy Policy
Privacy Policy