Aventyrs

Privacy Policy

Last updated: 24/01/2026

This Privacy Policy explains Äventyrs Museum Stockholm (“we”, “us”, “our”) collects, uses, and protects your personal data when you purchase tickets, visit our exhibitions, or interact with us.

1. Data Controller

Äventyrs Museum Stockholm Org.nr: 559558-8004 Address: Kabelverksgatan 39, 125 49 Älvsjö Email: privacy@aventyrs.se

2. What personal data we collect

Depending on how you interact with us, we may collect the following personal data:

When purchasing tickets

  • Name (if provided)
  • Email address
  • Phone number (optional)
  • Ticket and order information
  • Payment reference (no card details are stored by us)

When visiting the exhibition

  • Ticket validation data (QR code status, entry time)

For marketing (only with consent)

  • Email address and/or phone number
  • Communication preferences

3. How we use your personal data

We process personal data for the following purposes:

  • To process ticket purchases and payments
  • To deliver tickets and receipts
  • To manage entry and ticket validation
  • To provide customer support
  • To comply with legal and accounting obligations
  • To send marketing communications only if you have given consent

4. Legal basis for processing

We process personal data based on the following legal grounds under GDPR:

  • Contract – to fulfill your ticket purchase
  • Legal obligation – accounting and tax requirements
  • Legitimate interest – basic customer communication and security
  • Consent – marketing communications (optional)

5. Sharing of personal data

We may share personal data with trusted service providers acting as data processors, such as:

  • Payment service providers (e.g. card payment, Klarna)
  • Ticketing and QR validation systems
  • Email or messaging service providers

We do not sell your personal data to third parties.

All processors handle data according to GDPR and data-processing agreements.

6. Data retention

We retain personal data only as long as necessary:

  • Ticket and transaction data: according to Swedish accounting law
  • Marketing data: until you withdraw consent
  • Support inquiries: for as long as needed to resolve the matter

7. Your rights

You have the right to:

  • Request access to your personal data
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Object to or restrict processing
  • Withdraw consent at any time
  • Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

Requests can be sent to privacy@aventyrs.se

8. Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

9. Cookies and tracking

Our website may use cookies or similar technologies to ensure functionality and improve user experience. For more information, please refer to our Cookie Policy (if applicable).

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

11. Contact

If you have questions about this Privacy Policy or how we process personal data, please contact:

privacy@aventyrs.se