This Privacy Policy explains what personal data we collect through https://bobbiloproduktion.com, why we collect it, who has access to it and what rights you have. For details on the individual cookies used on the website, please see our Cookie Policy.
The data controller is:
Bobbi Lo Produktion AB Bergsgatan 29, 214 22 Malmö, Sweden Org. nr: 556254-6514 Contact: Lava Markusson — bobbiloproduktion@gmail.com
For any question about this policy, or to exercise the rights described in section 6, write to the address above.
When you write to us through the form on our contact page, we collect the information you enter — your name, your email address and the content of your message — so that we can read it and reply.
The legal basis is our legitimate interest in answering enquiries about our work and performances (Article 6(1)(f) GDPR), or the performance of an agreement where your message concerns a booking.
Your message reaches us by email and is also stored in the website’s database, where it can be read from the site’s administration area. We keep enquiries for 24 months and delete them afterwards, unless they have become part of an ongoing working relationship, in which case we keep them for as long as that relationship and our accounting obligations require.
Our email is handled by Google (Gmail), which processes the content of messages on our behalf as part of providing that service.
With your consent, we use Google Analytics to understand how many people visit the website and which pages they read. This helps us decide what to publish and how to organise the site. Google Analytics collects your IP address, technical information about your device and browser, the pages you view and how you arrived at the site, and assigns you a randomly generated identifier.
The legal basis is your consent (Article 6(1)(a) GDPR), which you give through the cookie banner and can withdraw at any time. If you do not consent, no statistics are collected and nothing is sent to Google.
Data in our Analytics account is retained for 2 months in the case of event data, and 14 months in the case of user-level data, after which Google deletes it.
Some pages contain recordings of our performances hosted on YouTube. The video player is loaded from Google’s servers, which means Google receives your IP address and can set cookies on your device when such a page is opened, including cookies used for measurement and for personalising advertising on Google services. This happens under Google’s own responsibility and according to its privacy policy.
Pages without embedded videos do not contact YouTube at all. If you prefer to avoid this processing, you can block third-party cookies in your browser settings.
Our hosting provider keeps server logs recording requests to the website, including IP addresses. These logs are used only to keep the website running, to diagnose faults and to detect abuse, on the basis of our legitimate interest in the security and availability of the site (Article 6(1)(f) GDPR). They are kept for a short period and then overwritten.
We do not use your data for automated decision-making or profiling, and we do not sell it. This policy covers the personal data we collect through the website; we do not collect email addresses for our mailing list through this website.
We share data only with the service providers we need in order to run the website, and only to the extent required. These act as processors on our behalf, or as independent controllers where indicated:
We may also disclose data where we are legally obliged to do so, or where it is necessary to establish or defend a legal claim.
Google may process data outside the European Economic Area, including in the United States. Such transfers rely on the safeguards provided by Google, in particular the standard contractual clauses adopted by the European Commission and the EU–U.S. Data Privacy Framework. You can find details in Google’s own privacy documentation.
We keep personal data only for as long as we need it for the purposes described above, and no longer, unless a legal obligation requires us to keep it. The specific periods are given in each section of part 2. When a period expires, the data is deleted; note that once deleted, we can no longer act on requests concerning it.
Under the GDPR you have the right to:
To exercise any of these rights, contact us using the details in section 1. We will reply within one month. If you are not satisfied with how we handle your data, you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se).
The website uses cookies and similar technologies, described in detail — including their names, purposes and duration — in our Cookie Policy. You can change or withdraw your cookie consent at any time through the cookie settings on any page.
We may update this policy when the website changes or when the law requires it. The date at the top always shows the most recent version. If a change concerns processing based on your consent, we will ask for your consent again.