STIM Privacy Policy

To provide our services, we need to process your personal data. It is important to us that you understand and feel safe about the personal data processing we undertake. This Privacy Policy aims to inform you about what personal data we process, why and how we process it, what rights you have, and what responsibility we have for your personal data. You are always welcome to contact us if you have any questions. 

For the sake of simplicity, we have divided our user groups into four categories. Click on each category to learn more. 

1. If you are, or apply to become, affiliated with or a member of STIM, or are an heir to the foregoing 

2. If you are a contact person for a STIM customer or supplier, or represent a sister society or music publisher 

3. If you are an unaffiliated artist or music reporter 

4. If you are a visitor to our website 

 
Any information that can be directly or indirectly linked to you as a natural individual constitutes personal data. If you are affiliated with or a customer of STIM, contact us, or log in to Mina Sidor [My Pages], you provide us with your personal data. Exactly what personal data we process varies depending on the capacity in which you come into contact with us. Information about how you use STIM’s website (how you arrived at and left the page), your IP address, language preferences, and geographical information is also processed. 

STIM handles your personal data is in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016) (“GDPR”). Among other things, this means that STIM does not process your personal data to a greater extent than is necessary based on the purposes encompassed by our business activities, or for purposes other than those specified below. 

Below you will find information about the data about you that STIM processes, for what purposes we do so, the legal basis for the processing, how long the data is retained, and your rights, etc. 

Categories of personal data, purpose, legal basis and retention periods

We process different categories of personal data based on different purposes and with different legal bases. In addition, the retention periods differ depending on the purpose for which we process your personal data. The various processing operations are listed individually below – so that you can easily read about the personal data processing that is relevant to you. 

1. If you are, or apply to become, affiliated with or a member of STIM, or are an heir to the foregoing

What is the purpose of the processing?

STIM’s processing of your personal data is necessary for the administration of your application and, in the long run, to enable you to be renumerated when your works are publicly presented. STIM processes personal data for the purpose of providing you with access to our web services. STIM also processes personal data for the purpose of developing and improving the services we provide, in order to communicate with you, including, e.g. mailings of member magazines, newsletters and the like, as well as to produce and analyse industry statistics in various ways. In addition, STIM processes your personal data in order to fulfil legal obligations regarding, e.g. accounting and taxation. 

Where applicable, processing is carried out in order to provide association information and otherwise fulfil obligations under STIM’s Articles of Association, as well as to be able to determine the right to inheritance. 

Legal basis for the processing

The processing conducted for the purpose of ensuring you collecting remuneration when your works are publicly performed is necessary to fulfil STIM’s obligations under the Affiliation Agreement. 

The processing conducted for the purpose of communicating and providing information is necessary for reasons relating to STIM’s legitimate interest in maintaining good relations with affiliates and members. 

The processing conducted for statistical and analytical purposes is necessary for reasons relating to STIM’s legitimate interest in ensuring that STIM’s operations are conducted in an efficient and relevant manner and in furtherance of the interests of the industry. 

The processing relating to membership and processing pursuant to law or regulation is necessary to fulfil a legal obligation. 

How is the personal data collected?

The majority of the processed personal data is collected directly from the data subject, e.g. when you apply to become affiliated, or if you contact STIM’s Member Services. 

However, where applicable, data may be collected from other actors. This may data such as: 

• current address details and personal identity numbers are retrieved from public records 

• any corporate engagements are retrieved from publicly available business databases 

Disclosure of data

To promote your ability to collect remuneration when your works are performed in public outside Sweden, STIM may transfer relevant data to our foreign counterparts, so-called “sister societies”. To safeguard your rights and contribute to increased precision regarding musical work-related data, STIM will also transfer relevant data to international organisations that administer databases of musical works, such as ICE and CISAC.  

We share your personal data with certain IT providers and survey companies. This data sharing is subject to processing agreements under the GDPR, and we thus ensure a good level of security for your data. 

To fulfiil a legal obligation, government instructions or the like, STIM may disclose your information to actors such as the Swedish Tax Agency or the Swedish Enforcement Authority. 

Disclosure to a STIM-affiliated music published is subject to your agreement with the music publisher in question. 

Where applicable, STIM may also transfer information to associated companies, such as Svensk Musik Swedmic AB, e.g. if you deposit notes or apply for a scholarship or travel grant. 

In the event of any involvement in composers’ associations, such as the Swedish Society of Composers (FST) and the Swedish Society of Songwriters, Composers & Authors (SKAP), STIM may also transfer data to such actors. 

STIM will never sell or transfer your data for direct marketing by third parties. 

Disclosure of data to third countries

In order to enable you to receive remuneration when your works are performed publicly in countries outside the EEA and for the fulfilment of STIM’s obligations under the Affiliation Agreement, it is necessary for STIM to share data with sister societies located in third countries. The data sharing in question is regulated under the reciprocity agreements established with the respective sister societies, thereby ensuring a good level of protection for your data. 

Retention periods

As a general rule, your data will be saved for as long as your contractual relationship with STIM exists and for a period of up to 36 months thereafter, as STIM may, for example, arrange payments even after the contractual relationship has ended. However, STIM may retain certain data for a longer period of time, in order to fulfil its obligations under law, statutes, government regulations, and the like, or in the event of a dispute. Such data, which may be consist of such types as follow from, e.g. the Accounting Act is saved for as long as is specified by law, or as long as an active case is ongoing. 

2. If you are the contact person for a STIM customer or supplier,  or represent a sister society or music publisher

What is the purpose of the processing?

STIM processes your personal data as a step in its compliance with agreements between STIM and your principal and to nurture customer relationships, or as appropriate to facilitate collaboration between music publishers and societies, or between societies. STIM processes personal data for the purpose of providing you with access to our web services. Stim also processes personal data in order to develop and improve the services we provide, to be able to communicate with you, and to produce and analyse industry statistics in various ways. In addition, STIM processes your personal data in order to fulfil legal obligations regarding, e.g. accounting and taxation. 

Legal basis for the processing

The processing conducted to ensure compliance with the agreement is necessary for purposes relating to STIM’s legitimate interest in fulfilling the agreement in question. 

The processing conducted for the purpose of communicating and facilitating cooperation is necessary for reasons relating to STIM’s legitimate interest in maintaining good relations with your principal, as well as to provide it with requested services. 

The processing conducted for statistical and analytical purposes is necessary for reasons relating to STIM’s legitimate interest in ensuring that our operations are conducted in an efficient and relevant manner and in furtherance of the interests of the industry. 

The processing resulting from law or regulation is necessary to fulfil a legal obligation. 

How is the personal data collected? 

The majority of the processed personal data is collected directly from the data subject, e.g. when they enter into an agreement, submit an enquiry, or contact STIM’s customer service, or in connection with music reporting. 

Disclosure of data

We share your personal data with other contact persons for your company, certain IT providers, and survey companies, for example when STIM sends out informational emails via an email provider or when we conduct customer surveys. External data sharing is subject to processing agreements under the GDPR, and we thus ensure a good level of security for your data. 

STIM will never sell or transfer your data for direct marketing by third parties. 

Disclosure of data to third countries 

Your data will not be disclosed to countries outside the EEA. 

Retention periods

If the processing of your data is based on a contractual relationship between STIM and your principal, the data will be retained for as long as the contractual relationship lasts (including warranty periods), or until you or your principal notifies STIM that a new contact person has been appointed. If the processing of your data is based solely on an effort to facilitate cooperation between STIM and your principal, the data will be saved for as long as the cooperation continues, or until you or your principal notifies STIM that a new contact person has been appointed. In addition, STIM will perform automatic culling in affiliate and customer systems, to ensure the deletion of contact persons for customers, suppliers, sister societies, or publishers that have not had a contractual relationship with us for 24 months. 

However, STIM may retain certain data for a longer period of time, in order to fulfil its obligations under law, statutes, government regulations, and the like, or in the event of a dispute. Such data, which may be consist of such types as follow from, e.g. the Accounting Act is saved for as long as is specified by law, or as long as an active case is ongoing. 

3. If you are an unaffiliated artist or music reporter

What is the purpose of the processing?

STIM processes your personal data in order to remunerate rightholders when their musical works are performed in public. STIM also processes personal data in order to communicate with you, e.g. to send reminders to report on music. 

Legal basis for the processing

The processing is necessary for purposes relating to STIM’s legitimate interests in being able, through music reporting, to offset and allocate remuneration to rightholders, to ensure that STIM’s business is conducted in an efficient and relevant manner, and to promote the interests of the industry. 

How is the personal data collected?

The majority of the processed personal data is collected directly from you, normally via Stim’s web service Mina Sidor [My Pages] or when you register as a music reporter via STIM’s member service or www.stim.se. 

However, where applicable, data may be collected from other actors, including such details as the name and email address that your management company provides to STIM when they handle your music reporting on your behalf on STIM’s Mina Sidor. Customers who rent out premises to organisers also submit information about gig dates and artist names, which, like information obtained through market surveillance in, e.g local press and on industry sites, are used in STIM’s licensing work. 

Disclosure of data

We share your personal data with certain IT providers, for example when STIM sends out informational emails via an email provider. This data sharing is subject to processing agreements under the GDPR, and we thus ensure a good level of security for your data. 

STIM will never sell or transfer your data for direct marketing by third parties. 

Disclosure of data to third countries

Your data will not be disclosed to countries outside the EEA. 

Retention periods 

Your data will be saved for as long as you actively report music usage to STIM. If you have been inactive for a continuous period of 36 months, your data will be deleted. 

4. Web visitors

What is the purpose of the processing?

Your personal data is processed for the purpose of improving STIM’s web services, to manage and answer questions and cases received through contact forms and by email and telephone, and to analyse the behaviour of web visitors to stim.se (i.e. cookies). 

Legal basis for the processing

The processing is necessary for purposes relating to STIM’s legitimate interests in providing services requested by the website visitors and to develop the website according to the visitors’ use of the website. Cookies are used to determine and save the language selected by the user, the current session ID, whether the user has javascript enabled, to determine whether you have access to certain information, and whether the user has consented to the use of cookies. 

Read more about cookies from STIM. 

How is the personal data collected? 

All personal data is collected directly from the data subject, preferably via cookies, but also when you use contact forms (where applicable). 

Disclosure of data

STIM may hire IT subcontractors to help develop our web services. In the event that personal data processing is necessary for them to be able to carry out their assignments, STIM’s ensures a good level of security for your data, by contractual agreement. STIM also uses Google Analytics to measure website traffic. 

Stim will never sell or transfer your data for direct marketing by third parties. 

Retention periods

The personal data processing will cease when you close your browser. Thus, no personal data about visitors is retained. The information processed after you have closed your browser does not constitute personal data and thus cannot be traced to you. 

Your rights

In accordance with applicable law, you have a number of rights that allow you to obtain information about and exercise control over your own personal data. STIM is not entitled to use your personal data for purposes other than those stated above without informing you first. STIM does not use any form of automated decision-making (including profiling). 

Your rights are listed below, and at the end of the document you will find contact details for STIM that you can use if you wish to exercise them. 

You are normally entitled to exercise the below rights free of charge. However, if a request is manifestly unfounded or unreasonable, we may either charge a reasonable fee or choose not to comply with the request. 

We will respond to your request without undue delay and normally within one month. Should additional time be required or if we are unable to comply with your request for any reason, we will inform you accordingly. We may also request additional information from you, if it is necessary for us to verify your identity and ensure that it is you who are trying to access or control your personal data, and not someone else. 

Right to information and access to your personal data

You have the right to request confirmation of whether we process personal data about you. If we do, we will inform you about how your personal data is processed. You also have the right to receive a copy of the data we process (through a register extract). If you request additional copies, we are entitled to charge a reasonable fee for this service. 

Right to rectification

It is important to us that the personal data we have about you is correct. If the data is incorrect, you have the right to contact us and ask to have the data rectified. You also have the right to request that data be added if something is missing, if the supplemental information is relevant with regard to the purpose of the processing. We will notify the parties to whom we have disclosed your information that rectification has taken place. At your request, we will also inform you about what information about rectification has been disclosed, and to whom. 

Right to deletion

You have the right to contact us to request that your personal data be deleted: 

• If the data is no longer needed for the purposes for which it was collected; 

• If, after a balance of interests, you object to personal data processing that is occurring and there are no legitimate reasons that outweigh your interest; 

• If the processing of your data has not been carried out in compliance with applicable law, or 

• Where deletion is required to comply with a legal obligation. 

In some cases, however, we cannot comply with a request for deletion, e.g. if we are required by law to save the data. If deletion occurs, we will notify those to whom we have disclosed your information that deletion has occurred. At your request, we will also inform you about what information about deletion has been disclosed, and to whom. 

Right to object

• You also have the right to object to our processing of your data on the basis of a balance of interests. If we are unable to demonstrate that there are compelling legitimate grounds for the processing that outweigh your reasons, the processing must cease. 

Right to restriction of processing

You have the right to contact us and request that the processing of your personal data be restricted, in which case we may only retain your data in the following situations: 

• For the time it takes us to check whether the personal data is correct, if you dispute the accuracy of the personal data; 

• If the processing is unlawful and you object to the deletion of the data and instead want us to restrict its use; 

• If, although we no longer need the data, you want us to keep it in order for you to use it to establish, assert or defend legal claims, or 

• Pending examination of whose legitimate reasons (yours or ours) weigh the heaviest, if you have objected to the processing. 

In some cases, however, we are unable to comply with a request for restriction, e.g. if the data is necessary for us to defend our rights or protect the rights of another person. In the event of restriction, we will notify those to whom we have disclosed your data that restriction has occurred. At your request, we will also inform you about which information about restriction has been disclosed, and to whom. 

Right to data portability

You have the right to request to receive your personal data in a machine-readable format and have the right to use such personal data elsewhere. This right applies to personal data that you have provided to us, as the processing is based on agreements with STIM and the processing is automated. 

Contact details for STIM 

If you have questions, wish to request a register extract, or otherwise wish to exercise your rights 

Please contact Stim at +46 (0)878 388 00 or email [email protected]. 

Requests for registrer extracts can also be submitted via Mina Sidor.

Complaints 

If you believe that your personal data is being processed in violation of applicable law, you can lodge a complaint directly with us by calling +46 (0)878 388 00 or emailing [email protected]. You can also lodge a complaint withthe Swedish Authority for Privacy Protection (IMY). 

Data controller

The Swedish Performing Rights Society (STIM), Box 17092, SE-104 62 Stockholm, is responsible for the personal data processing that takes place within STIM’s operations. As the data controller, STIM determines the purpose and means of the processing. 

  

This Privacy Policy was last revised on 11 October 2024