Privacy Policy

1.1 – Data controller

Fabnite is the data controller for all processing of personal data where we ourselves determine the purpose of processing the data and the means we use for this.

If you have any questions about this Privacy Policy or the assessments we have made, you may contact us at privacy@fabnite.com.

1.2 – Data Protection Representative

Fabnite has appointed a Data Protection Representative (DPR) who you can contact if you have questions about how we process personal data about you, or if you need help exercising your rights with Fabnite. The Data Protection Representative has a duty of confidentiality.

The Data Protection Representative may be contacted at privacy@fabnite.com.

3.1 – You have purchased ticket(s) for an event

When you buy tickets from us, we use the information you provide us to fulfill both our own and the organizer's obligations to deliver the services to you.

Organizers who sell tickets through Fabnite have the opportunity to receive ticket and customer information from us. In these cases, the organizer acts as a data processor for these personal data.

We share, among other things, your contact information, information about which tickets you have purchased and any other information that is necessary for the organizer to be able to fulfill its tasks and obligations with you.

The organizer uses this information to make the event safer and better for guests by performing access control, analyzing guest behaviour, as well as sending out necessary and important information (not marketing) before and after the event by e-mail.

Our processing basis for the processing and disclosure of personal data in connection with the purchase of tickets is the General Data Protection Regulation article 6 no. 1 letter b which allows us to process and disclose information that is necessary to be able to fulfill an agreement to which the data subject is a party

3.2 – You have become a member of an organizer's customer loyalty club

Your information will be available to the organizer in the organizer's administration panel at Fabnite.

By signing up, you also agree that the organizer can use your information to tailor communications and offers to you, and send you this communication via e-mail and/or SMS.

You can unsubscribe from an organizer's customer club in Fabnite at any time. You do this by going to My Memberships, which you can find under My Account.

Note that if you choose to opt out of a customer loyalty club, it may be that you no longer meet the requirements if you e.g. purchased discounted membership tickets as part of a customer loyalty club campaign for a future event with the organizer.

The organizer reserves the right to deny you entry to the event if you are no longer a member of their customer loyalty club.

Upon opting out, the organizer will no longer have access to see or use your information in its administration panel in Fabnite, and the organizer will no longer have the opportunity to send you communications as mentioned above.

3.3 – You create a Fabnite user account

Everyone who buys tickets through Fabnite must create an account and provide some information about themselves in a user profile. Some of the information we ask for is necessary for us to deliver our services to you and some gives us the opportunity to make Fabnite a more inspiring place to be.

We can use this information to e.g. give you recommendations based on where you live, what other people similar to you like, etc.

You can delete your Fabnite user account at any time. You do this by going to My account.

3.4 – You visit the fabnite.com website or use the Fabnite app

When you visit the fabnite.com website or use the Fabnite app, we collect certain information using Cookies.

Cookies are small text files that are stored on your device when you visit a website. When you visit a website for the first time, a Cookie file is sent to your device. This file identifies your browser.

By using Cookies, you help us improve the functionality of our website. They are important for reducing download times and improving the user experience. Cookies collect information about how visitors use our website, thereby providing us with useful information about how we can deliver a better customer experience and improve our services.

We use four different types of Cookies:

3.5 – You have sent us an inquiry by e-mail

We use e-mail to carry out our daily work tasks. Emails we receive must be deleted when they are no longer necessary for our daily tasks. In practice, this means that such e-mails should not usually be stored for longer than approximately one year.

We ask that special categories of personal data are not sent unencrypted by e-mail.

We scan all incoming and outgoing e-mail for viruses and malware to ensure the integrity, confidentiality and availability of our systems that process personal data.

The processing basis for the scan is the General Data Protection Regulation Article 6 no. 1 letter c. Fabnite has a legal duty to ensure information security according to the General Data Protection Regulation Article 5 no. 1 letter f and 32. After a concrete risk assessment, we have come to the conclusion that this measure is necessary so that Fabnite must fulfill this obligation. At the same time, we have assessed that the processing of personal data does not go beyond what is necessary to fulfill the duty.

3.6 – You have applied for a job with us

If you apply for a job with us, we need to process information about you to assess your application. The employment process involves processing the information you provide to us through the documents you send us, including applications, CVs, diplomas and certificates. In addition to any interviews, Fabnite can also carry out its own investigations, typically conversations with the job applicants references.

Fabnite uses the Finn.no job search portal to manage submitted applications for our vacancies.

In order to assess submitted documentation, conduct interviews and call references, the basis for processing is the General Data Protection Regulation article 6 no. 1 letter b. This provision allows us to process personal data when it is necessary to carry out measures at the request of the job applicant before an agreement is entered into. By applying for the position and uploading documents, we consider that the job applicant is asking us to assess submitted documentation, conduct interviews and call references with a view to entering into an employment agreement.

If we carry out our own investigations in addition to this, for example contacting someone who has issued a certificate, but who is not given as a reference, the processing basis for such investigations is the General Data Protection Regulation Article 6 no. 1 letter f, which allows us to process information that is necessary to safeguard a legitimate interest that outweighs consideration of the individual's interests or fundamental rights and freedoms. The legitimate interest is to find the right candidate for the position.

Job applications are stored in Finn.no's job applicant system. General applications are deleted within 210 days and applications with the status of employee or interview are deleted within 300 days.

3.7 – You are a journalist and have contacted us for a statement

Fabnite keeps a register of which journalists we have been in contact with and what the inquiry was about. The purpose of the register is to coordinate if several people respond to similar inquiries at the same time, to have contact information if follow-up is necessary and to have an overview of which journalists may be interested in writing about different topics. The journalist's contact details are stored for five years.

The processing basis for this is the General Data Protection Regulation Article 6 no. 1 letter f, which allows us to process information that is necessary to protect a legitimate interest that outweighs consideration of the individual's interests or fundamental rights and freedoms. The legitimate interest is to communicate in the media in an efficient and consistent manner.

3.8 – An organizer contacts us regarding errors when scanning tickets you have purchased

If the organizer of an event for which you have bought tickets experiences an error when scanning the tickets, the organizer may contact us to resolve the error. In such cases, we and the organizer may exchange information about you in order to troubleshoot and resolve the problem.

Our processing basis for the processing and disclosure of personal data in connection with troubleshooting tickets is the General Data Protection Regulation article 6 no. 1 letter b which allows us to process and disclose information that is necessary to be able to fulfill an agreement to which the data subject is a party.

3.9 – An organizer contacts us regarding attempted ticket fraud where you are registered as the ticket buyer

If the organizer of an event suspects attempted ticket fraud by scanning tickets where you are registered as the ticket buyer, the organizer may contact us to verify certain information. In such cases, we and the organizer may exchange information about you in order to be able to verify this information.

Our processing basis for the processing and disclosure of personal data in connection with troubleshooting tickets is the General Data Protection Regulation article 6 no. 1 letter b which allows us to process and disclose information that is necessary to be able to fulfill an agreement to which the data subject is a party.

6.1 – Access to own data

You can request a copy of all data we process about you.

6.2 – Correction of personal data

You can ask us to correct or supplement data that is incorrect or misleading.

6.3 – Deletion of personal data

In certain situations, you can ask us to delete data about you.

6.4 – Limitation of processing of personal data

In some situations, you can also ask us to limit the processing of data about you.

6.5 – Object to processing of personal data

If we process data about you based on our tasks or on the basis of a balancing of interests, you have the right to object to our processing of data about you.

6.6 – Data portability

If we process information about you based on consent or a contract, you can ask us to transfer data about you to you or to another data controller.

6.7 – Complaint about our processing of personal data

We hope you will speak up if you think we are not complying with the rules in the General Data Protection Regulation. Please let us know first through the contact or channel you have already established with us. You can also contact our Data Protection Representative to seek advice and guidance. The Data Protection Representative has a duty of confidentiality if you wish to disclose something in confidence.

You can also complain about our processing of personal data. You do this by sending a complaint to the Norwegian Data Protection Authority here.