Last updated: 2026-10-02 · This is a translation. In case of any discrepancy, the Swedish version applies.
1. Data controller
Pedro Johansson Produktion AB (corporate ID no. 556444-8453)
Göteborgsvägen 10 A, SE-504 35 Borås, Sweden
Email: info@spelplan.com · Phone: +46 708 85 66 90
We are the data controller for the data we collect about visitors to the website, about people who contact us
and about our customers' contact persons and user accounts.
2. When we act as a data processor
The data that our customers (booking agencies, venues, theatres, etc.) enter into GigManager/Spelplan themselves – for example
artists, members, contact persons, bookings, contracts and documents – is processed by us on the customer's behalf.
For that data, the customer is the data controller and we are the data processor under the agreement we have with the customer.
If you have questions about such data, please contact the booking agency or promoter you are dealing with in the first instance.
3. What data we process and why
Visits to the website
When you visit the website, technical data is recorded in our server logs: IP address, time, requested page,
browser and referring page. We use this data to operate the website, troubleshoot and protect the service against
intrusion and misuse. Legal basis: legitimate interest.
The contact form
When you send a message via the contact form, we process your name, email address, company/organisation, subject and
message. The message is sent to us by email and is not stored in any database on the website. We use
the data to answer your enquiry. Legal basis: legitimate interest (to be able to reply to you) or,
if you are a customer, performance of a contract. To prevent spam, the number of messages per IP address is temporarily limited.
Customers and users of GigManager
So that you can log in and use the service, we process your username, password, name, email, phone, which company you belong to and your
access level. Failed login attempts are counted to protect the account. Legal basis: performance of a contract
and legitimate interest (security). Invoicing records are kept for as long as the Swedish Bookkeeping Act requires (legal obligation).
4. Cookies and local storage
We currently only use cookies that are needed for the website and the service to work or that store your own
settings. We use no analytics or marketing cookies. Your choice in the cookie banner is saved,
and if we introduce such cookies in the future, they will only be used if you have accepted them.
| Name | Purpose | Retention |
|---|
| ASP.NET_SessionId | Keeps your session (login, choices) between page views. | Until the browser is closed |
| cookie_consent | Stores your choice in the cookie banner. | 1 year |
| SiteLang | Stores the selected language. | 1 year |
| uid, db | Remembers your username and selected booking agency on the login page. | 31 days |
| tabselect, calselect, yearselect, etc. | Stores your view choices (tab, calendar view, year) when you are logged in. | Until the browser is closed |
| Login cookie for the portal | Keeps you logged in to the artist/client portal. | Up to 14 days |
5. Recipients and third parties
We never sell personal data. Data may be processed by the following suppliers on our behalf:
- Operation of servers and databases: PCL Data/Nätkraft, Borås, Sweden
- Microsoft Azure – storage of certain uploaded files.
- Email – to send and receive email, e.g. from the contact form.
- Google Fonts – the fonts on the website are loaded from Google's servers, which means that your IP address
is sent to Google when the page loads. Google may process data outside the EU/EEA.
If data is transferred to a country outside the EU/EEA, this is done on the basis of a European Commission adequacy
decision (e.g. the EU–US Data Privacy Framework) or standard contractual clauses.
6. How long we keep the data
- Server logs: 90 days
- Email from the contact form: for as long as the matter is ongoing and thereafter 12 months
- Customer data and user accounts: for the term of the agreement and thereafter 3 months, unless the customer requests earlier deletion
- Accounting records: 7 years under the Swedish Bookkeeping Act
7. How we protect the data
All traffic to the website and the service is encrypted (HTTPS). Access is controlled by login and access levels,
repeated failed logins are limited and known malicious IP addresses are blocked.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- know what data we hold about you and receive a copy of it,
- have inaccurate data corrected,
- have data erased or restricted when there is no reason for us to keep it,
- object to processing based on legitimate interest,
- receive data you have provided to us in a machine-readable format (data portability).
Contact us at info@spelplan.com. If it concerns data that a booking agency or a
promoter has entered about you, we will help you get in touch with them.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY),
www.imy.se, or with the data protection authority in the country where you live.
9. Changes
We may update this policy, for example if we introduce new features or services.
The date of the latest change is shown at the top of the page.