Processing of Personal Data

Data protection regulations

The rules for data protection are laid out in the EU’s General Data Protection Regulation (GDPR), complemented by Swedish laws.

What is personal data?

Personal data is any kind of information that can be linked to an individual. Common examples include national ID numbers, names, addresses, and email addresses—but even a photo can be considered personal data.

What does processing of personal data mean?

Processing refers to any handling of personal data, whether it is done electronically or not. This can include collecting, recording, storing, merging, or printing the data.

Data controller

The Music and Theatre Library of Sweden is a part of Statens musikverk. Statens musikverk (organisation number 202100-3666, email: info@statensmusikverk.se) is the data controller responsible for ensuring that personal data is processed lawfully.

Our Data Protection Officer (email: dataskydd@statensmusikverk.se) monitors our compliance with the GDPR and other data protection legislation. You can also contact the Data Protection Officer with any questions related to personal data.

Purpose and legal basis for processing your personal data

We process personal data for a variety of reasons, including:

• To carry out our mission as a government agency
• To comply with legal obligations, such as keeping records for accounting purposes
• When you subscribe to our newsletter or have consented to receive information from us in other ways. You can withdraw your consent at any time
• When responding to your enquiries
• When handling your job application
• When collecting, managing, preserving, and making material accessible to the public
• When conducting research or documenting the present for future generations
• When you make payments to us, for example for admission to the museum, purchases in the shop, or copies of materials
• When you visit our websites and cookies are saved on your device (see below)

Cookies on our website

We use cookies to improve your experience. Cookies are small text files stored on your device when you visit our website. They help us understand how visitors use the site and allow us to tailor content to their needs.

• You can choose to accept or reject cookies when visiting our website
• You can also change your cookie settings in your browser at any time
• You can adjust your cookie settings at any time by clicking the “Consent Settings” tab at the bottom of the screen
• We do not collect personal data or your computer’s IP address through cookies

How your personal data is stored

As a government agency, all material you send to us, or that is created and saved by us, becomes a public document. This includes, for example, emails you send to us.

Swedish law requires government agencies to retain public documents. Statens musikverk determines what to keep or delete based on these rules. We store personal data in these documents for as long as required by law.

Personal data that is not part of a public document is only retained as long as necessary.

Who can access the data?

Anyone can request access to public documents. If such a request is made, we may be required to release them—unless they are protected by confidentiality. This means that personal data in public documents may be disclosed under the principle of public access to official records.

In certain cases, we may need to transfer personal data to parties outside the EU to fulfil our mission.

We never share, sell, or trade your personal data with other companies for marketing purposes.

Your rights as a data subject

If you are registered with Statens musikverk, you have several rights under the GDPR. To exercise your rights or if you have questions about how your data is processed, contact our Data Protection Officer: dataskydd@statensmusikverk.se.

You have the right to:

• Access: Learn how your personal data is being processed (as described in this document) and request a copy of the data we hold about you
• Rectification: Request that inaccurate or incomplete data be corrected or completed
• Erasure (“right to be forgotten”): Request that your data be erased. However, we are not obliged to erase personal data processed to meet legal obligations, perform a task in the public interest, exercise official authority, or for archiving purposes. This means the right to erasure is limited
• Restriction: Request a restriction of processing, for example if you contest the accuracy of the data or have objected to its use
• Data portability: Request a copy of your personal data in a structured, commonly used, and machine-readable format, to be used elsewhere or transferred to another data controller
• Object: Object to our processing of your personal data. If we cannot demonstrate compelling legitimate grounds to continue processing, we must stop

Complaints about our processing of your personal data

You can contact our Data Protection Officer at dataskydd@statensmusikverk.se.

If you believe we have processed your personal data in breach of applicable rules, you also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), which is the supervisory authority for data protection in Sweden.

Learn more about your rights on imy.se.