Privacy Policy

Palladium values your privacy and maintains transparency regarding how we handle your personal data. This privacy policy describes how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR).

Data Controller

The data controller responsible for processing your personal data is:

What Personal Data Do We Collect?

We collect and process the following categories of personal data:

Photography and Image Recording at Events

Photography and video recording may take place at Palladium events, carried out by us, our partners, or hired photographers.

By purchasing a ticket to an event at Palladium, you consent to photo and video material in which you may appear being used by Next Events Sverige AB and Palladium for marketing purposes, including but not limited to:

• Publication on Palladium's website and digital channels
• Posts on social media (e.g., Instagram, Facebook, TikTok, YouTube)
• Marketing and promotional material, both digital and print
• Press releases and media collaborations
• Newsletters and other communications

Legal basis: Legitimate interest (Article 6(1)(f) GDPR)

The material will not be used in commercial contexts unrelated to Palladium's operations.

Third-Party Services

We use the following third-party services that may process your personal data:

• Nortic: Management of ticket sales and customer records
• Google Maps: Maps and directions. Google may collect data about your usage.
• Add to Calendar: Enables adding events to your calendar

How Long Do We Retain Your Data?

• Newsletter: Until you unsubscribe
• Ticket purchases: In accordance with Nortic's policy and accounting legislation (minimum 7 years)
• Contact inquiries: Up to 2 years following last contact
• Website usage: Until you clear your browser data

Your Rights Under GDPR

• Right of access: Obtain information about what personal data we process about you
• Right to rectification: Have inaccurate data corrected
• Right to erasure: Have your personal data deleted ("right to be forgotten")
• Right to data portability: Receive your data in a machine-readable format
• Right to withdraw consent: Withdraw your consent at any time
• Right to object: Object to processing based on legitimate interest

To exercise your rights, please contact us at info@palladium.nu

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. Our website employs encryption (HTTPS) to safeguard data transmitted between your browser and our servers.

Complaints to the Supervisory Authority

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).