N\u00f8rrebro Teater is the data controller responsible for the processing of your personal data.<\/p>\n
<\/p>\n
If you have any questions regarding the processing of personal data, you can contact us by phone at +45 35 35 27 60 (Mon\u2013Fri, 11:00\u201312:00) or by email at nbt@nbt.dk.<\/p>\n
<\/p>\n
You have the following rights:<\/p>\n
a) You have the right to request access to, rectification, or erasure of your personal data.
\nb) You have the right to object to the processing of your personal data and to request restriction of processing.
\nc) You have the unconditional right to object to the processing of your personal data for direct marketing purposes, such as receiving newsletters.
\nd) If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.
\ne) You have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format (data portability).
\nf) You have the right to lodge a complaint with the Danish Data Protection Agency at www.datatilsynet.dk.<\/p>\n
<\/p>\n
We process personal data about you when:<\/p>\n
4.1 You are a customer \/ purchase tickets
\n4.2 You follow us on social media
\n4.3 You visit our website
\n4.4 You receive our newsletter
\n4.5 You are a job applicant
\n4.6 You are an employee
\n4.7 You are a board member<\/p>\n
Below, we outline the specific purposes for processing your data:<\/p>\n
<\/p>\n
When you purchase tickets, we process personal data about you.<\/p>\n
If you purchase tickets for guest performances, there may be joint controllership between us and the producer. In such cases, the producer will act as an independent data controller for their own purposes, and we will act independently according to this policy. Joint responsibility applies only during the registration phase.<\/p>\n
a) Purpose<\/strong> b) Legal basis<\/strong> c) Retention period<\/strong> d) Recipients<\/strong> e) Obligation <\/p>\n When you interact with us on social media, both we and the platform act as independent data controllers beyond the initial collection.<\/p>\n Purpose: Marketing and communication <\/p>\n We collect data through cookies when you visit our website.<\/p>\n Purpose: Optimisation of website and user experience <\/p>\n We send newsletters and collect engagement statistics.<\/p>\n Purpose: Marketing and communication, including partner theatres <\/p>\n Purpose: Recruitment <\/p>\n Purpose: HR and payroll administration, documentation, and communication <\/p>\n Purpose: Governance and organisational responsibilities <\/p>\n N\u00f8rrebro Teater uses CCTV in and around entrances and common areas to ensure safety and prevent incidents.<\/p>\n Data controller: N\u00f8rrebro Teater, Ravnsborggade 3, Copenhagen
\nTo enter into agreements, sell, and deliver the service or product you have purchased.
\nWe also use your data to inform you about relevant performances or events, including changes or cancellations.
\nAdditionally, we process data to comply with legal obligations under accounting laws and for business development purposes, such as surveys and market analysis.
\nFinally, data is used to create a customer profile for managing your purchases.<\/p>\n
\nProcessing is necessary to perform a contract.
\nAfter delivery, processing is based on our legitimate interests (e.g. business development, legal claims).
\nWe are also legally required to store certain data under accounting legislation.<\/p>\n
\nPurchase data is stored for 5 years in accordance with accounting laws.
\nCustomer profile data is stored for up to 3 years after your last interaction.
\nMarketing-related data is anonymised or deleted after 3 years.<\/p>\n
\nData is shared with data processors handling ticket sales and with partners such as Scenit\/Teaterbilletter.
\nData may be transferred to third countries (e.g. the USA) under the EU-U.S. Data Privacy Framework.<\/p>\n
\n<\/strong>Providing personal data is necessary to complete a purchase.<\/p>\n4.2 SOCIAL MEDIA<\/h4>\n
\nLegal basis: Legitimate interest
\nRetention: As long as you follow or interact with us
\nRecipients: Social media platforms and data processors
\nObligation: Required to interact with us on these platforms<\/p>\n4.3 WEBSITE VISITS<\/h4>\n
\nLegal basis: Consent
\nRetention: Up to 2 years
\nRecipients: Data processors and possible transfers to the USA
\nObligation: Not required to provide data<\/p>\n4.4 NEWSLETTERS<\/h4>\n
\nLegal basis: Consent or legitimate interest (existing customers)
\nRetention: Up to 5 years after last newsletter
\nRecipients: Data processors, possibly in third countries (e.g. USA)
\nObligation: Required to receive newsletters<\/p>\n4.5 JOB APPLICANTS<\/h4>\n
\nLegal basis: Pre-contractual measures or disclosed data
\nRetention:
\n\u2022 Up to 3 months after recruitment process
\n\u2022 Unsolicited applications: up to 6 months<\/p>\n4.6 EMPLOYEES<\/h4>\n
\nLegal basis: Contract, legal obligations, or legitimate interests
\nRetention: Typically 5 years after employment ends (longer in specific cases)<\/p>\n4.7 BOARD MEMBERS<\/h4>\n
\nLegal basis: Legal obligations and legitimate interests
\nRetention: Minimum 5 years<\/p>\n5) CCTV SURVEILLANCE<\/h3>\n
\nLegal basis: Legitimate interest (GDPR Art. 6(1)(f))
\nRetention: Typically 30 days unless required for a specific incident
\nAccess: Limited to relevant staff; may be shared with police if necessary<\/p>\n