This document was updated most recently on: 2022-09-26
Processing of personal data
Göteborg Opera processes the personal data of its customers and users within the company. Göteborg Opera maintains a database of the company’s customers and users who have registered with or purchased something from Göteborg Opera.
The database may contain personal data such as names, postal addresses, phone numbers and e-mail addresses and, if a purchase is made, delivery, payment and purchasing details, profiling based on address, and data based on use of digital services.
Data controller
The Göteborg Opera AB (556121-7828, Christina Nilssons gata, 411 04 Gothenburg) is responsible for the processing of personal data. The data controller is responsible for ensuring that the Göteborg Opera's processing of personal data is done in accordance with current legislation.
What personal information does the Göteborg Opera collect about you as a customer and why?
A. In order to handle orders/purchases via our ticket provider.
The personal data is processed in order to:
- Be able to deliver the ordered performance ticket/product or service.
- Provide basic information about the service/visit/product.
- Manage complaints and changes.
Legal basis: Completion of a sales contract.
Storage period: Until the purchase has been completed (including delivery and payment) and for a period of 36 months thereafter, for the purpose of dealing with any refunds.
B. In order to promote products and services:
The personal data processed:
Data about registered newsletter recipients
To be able to offer customers relevant offers and information in the form of newsletters or information linked to purchases from and visits to the Göteborg Opera.
Data about purchasers of products, services, memberships or subscriptions:
To be able to offer customers relevant offers and information in the form of newsletters or information linked to purchases from and visits to the Göteborg Opera.
In order to understand what type of marketing to use, analyses are made of:
How web pages and other digital channels are used (e.g., which pages and parts of pages are visited and what searches have been made).
Purchase history.
Age and place of residence. Results from customer satisfaction or market research surveys.
Legal basis:
- Newsletter recipients – consent.
- Registered and unregistered customers – legitimate interest.
The processing is necessary to satisfy our mutual interest in marketing products.
Storage period: For a period of 36 months from the time of collection or until consent has been revoked.
C. To manage table bookings via opera.se
The personal data is processed in order to:
- Allow customers to make restaurant bookings in advance.
- Manage reservations and changes.
- Communicate with the customer and respond to inquiries.
Legal basis: Legitimate interest. The processing that is necessary in the interests of both the Göteborg Opera and yourself to be able to manage table bookings.
Storage period: For a period of 36 months from the time of collection or until consent has been revoked.
D. To be able to enter and manage participation in competitions run by the Göteborg Opera:
The personal data is processed in order to:
- Communicate with competition participants.
- Communicate with participants before and after an event. (e.g. Receipt of entry confirmations, questions or evaluations).
- Select winners and pass on prizes.
Legal basis: Legitimate interest. The processing that is necessary in the interests of both the Göteborg Opera and yourself to be able to manage competitions and events.
Storage period: For a period of 36 months from the time of collection.
E. In order to manage customer service cases:
The personal data is processed in order to:
- Communicate with the customer and respond to requests that come in to the customer service department via telephone or digital channels (including social media)
- Investigate complaints and support requests (including technical support)
Legal basis: Legitimate interest. The processing that is necessary in the interests of both the Göteborg Opera and yourself to be able to manage customer service cases.
Storage period: Until the customer service case has been concluded and for a period of 36 months thereafter
F. In order to fulfil legal obligations:
The personal data is processed in order to:
- Comply with legal obligations, legislative requirements, judgments or official decisions
- In order to fulfil legal obligations (e.g. in respect of requirements in the Swedish Bookkeeping Act and the protection of personal data in IT systems).
Legal basis: Legal obligation.
Storage period: Until the purchase has been completed (including delivery and payment) and for a period of 36 months thereafter.
G. In order to be able to evaluate, develop and improve our services, products and systems for all customers:
The personal data is processed in order to:
- Make services more user-friendly, such as changing user interfaces to simplify the flow of information or to highlight features that are commonly used in digital channels.
- Produce basic data to improve the purchase flow, e.g. purchasing of tickets via opera.se
- Produce basic data to improve our services and products.
- Produce basic data to improve IT systems in order to increase security for our visitors and customers in general
- In order to achieve the end goal, we carry out general analyses in an aggregated form, i.e. not at the individual level, regarding:
- How our web pages and other digital channels are used (for example, which pages or parts of pages are visited and what searches have been made).
- Purchase history
- Approximate age
- Geographical and/or demographic location.
- Feedback regarding our services and products and results from customer satisfaction or market research surveys.
- Data from customers' devices and technical settings.
Legal basis: Legitimate interest. The processing is necessary to satisfy our mutual interest in evaluating, developing and improving our services, products and systems.
Storage period: Storage period: For a period of 36 months from the time of collection.
H. In order to prevent the misuse of a service or to avoid, prevent and investigate crimes against the company:
The personal data is processed in order to:
- Investigate or prevent theft, fraud or other offences.
- Prevent spamming, phishing, harassment, attempts to unlawfully sign in to user accounts, or any other actions that are prohibited.
- Protect and improve our IT environment against attacks and intrusions.
- Data about devices that the customer uses and settings, such as language preference, IP address, browser settings, timezone, operating system, screen resolution, and platform.
- Details of how our digital services are used.
The categories of personal data processed are:
- Purchase and user-generated data (for example, click and visit history).
- Data about devices that the customer uses and settings, such as language preference, IP address, browser settings, timezone, operating system, screen resolution, and platform.
- Details of how our digital services are used.
Legal basis: Legal obligation, if a legitimate alternative interest exists (if no legal obligation exists), if processing is necessary to meet our legitimate interest in preventing the abuse of a service or to prevent, investigate and guard against crimes against the company. For camera surveillance of our premises we have a legitimate interest. A balance of interests has been completed and documented but is not public for security reasons.
Storage period: For a period of 36 months from the time of collection.
Storage of camera surveillance material: From the date of collection and for 30 days thereafter.
About cookies
The Göteborg Opera uses cookies and similar technologies to collect information about how our digital services are used and to give users a customised experience.
Cookies are small text files and are widely used on the internet. The files are read and stored by the browser on the device that is being used to visit the websites. The Göteborg Opera’s customers and registered users give their consent to the use of cookies upon their first visit to the site.
You can disable cookies in the browser’s settings and can delete cookies that have already been saved. In some cases, disabling cookies might limit the functionality of the services and affect the online experience. For further information about cookies, visit minacookies.se.
It is also possible to control targeted advertising on the browser. For further information, visit youronlinechoices.com
Who manages and owns the information?
Göteborg Opera is the sole owner of the personal data collected. We do not sell this information to third parties. The Göteborg Opera will not, without your consent, pass on information about you except if it is required to deliver one of our services or products (e.g. for distribution purposes, printing, reselling, and IT services in the form of operation and maintenance), to a so-called personal data processor.
When your personal data is shared with the personal data processor, it is only for purposes that are consistent with the purposes for which we have collected the information. We have written agreements with all the personal data processors in which they guarantee the security of the personal data processed.
Learn more about the third-party web services we use
When your personal information is shared with a company that is and independent data controller e.g. Government agencies, acquiring banks, etc., the privacy and personal data management policy of that company applies.
A transfer of personal data to authorities only takes place where this is required by law or a decision of an authority.
How do you as a customer withdraw your consent or request rectification or deletion of data?
All users have the right, free of charge, to withdraw their consent, request rectification/erasure of any inaccurate data, or request, in writing, access to their personal data, and object to processing and use of their personal data for marketing purposes. To exercise these rights, send your request by email to: marknad@opera.se.
Newsletter recipients may adjust their details or cancel their subscription at any time by using the links provided in the footer of each email.
You have the right to request the deletion of personal data that we process if:
- The data is no longer necessary for the purposes for which it has been collected or processed.
- You have withdrawn the consent which the processing is based on and there is no other legal basis for the processing.
- You object to the balance of interest that we have and Göteborg Opera has no legitimate interest that weighs heavier.
- You object to processing for direct marketing purposes.
- The personal data is being processed in an unlawful manner.
- The personal data must be erased in order to comply with a legal obligation that we are subject to.
- The personal data has been collected from a child (under the age of 13) for whom you have parental responsibility, in connection with the offer of information society services, such as social media.
There may be a reason for us not to meet your request for deletion if there are legal obligations that prevent us from doing so. It may be that the processing is necessary to exercise our right to freedom of expression and information, to fulfil a legal obligation that we are subject to, or to be able to ascertain, enforce or defend legal claims.
If the registered believes that we contravene laws, rules or contracts, a complaint can be left with the Swedish Data Protection Authority.
How long are the personal data saved?
Personal data are saved while the user relationship is active and for up to three (3) years thereafter, or in accordance with the consent given. The consent is valid until the user personally withdraws it. The consent remains valid even if the service is not being used. The consent is not dependent on any purchase of services/products.
The processing takes place in accordance with the applicable legislation, which means that personal data is not retained for longer than is necessary in consideration of the purposes of the processing.
Right to data portability:
If our right to process your personal data is based on your consent or the performance of an undertaking in a contract with you, you have the right to request that the information relating to you and submitted to us is transferred to another controller (so-called data porting).
About cookies
The Göteborg Opera uses cookies and similar technologies to collect information about how Göteborg Opera’s digital services are used and to give users a customised experience.
Cookies are small text files and are widely used on the Internet. The files are read and stored by the browser on the device that is being used to visit the websites. Göteborg Opera’s customers and registered users give their consent to the use of cookies when first visiting the website, or after having deleted their cookies.
How do I manage cookies in my browser?
When you first visit our website, you will be given the choice whether to accept or reject cookies. You may change your choices at any time, using the Manage Cookies link in the footer of each page on the website. Please note that if you choose to disable "functional cookies", this may limit the functionality of the website and affect your online experience.
It is also possible to control targeted advertising on the browser. For further information, visit www.youronlinechoices.com
You can also find instructions on how to manage or remove cookies in the most popular browsers on their own support pages.
Contact details
For further information on personal data management or if you have any questions, please feel free to contact us at:
The Göteborg Opera
Christina Nilssons gata
411 04 Gothenburg
info@opera.se
Tel. +46 31 108 000
Changes to the policy
This privacy policy may be updated to address disruptions or to comply with new legal or technical requirements. The latest updated version of our personal data management policy will always be available on this page. In the event of significant changes (e.g. personal data processing purposes), you will be informed by email.