Privacy policy

How Rimbeat Studio handles personal data under the EU GDPR and Swedish practice supervised by IMY.

Controller: Rimbeat Studio, Magasinsgatan 15, 411 18 Göteborg, Sweden. Email: [email protected]. Phone: +46 31 12 55 80. We process personal data in line with Regulation (EU) 2016/679 (GDPR) and applicable Swedish law. The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) is the supervisory authority.

What we collect

When you book lessons, join a workshop list, or send a message, we may store your name, email address, phone number, preferred lesson times, instrument interest, and payment references needed for lesson cards. If you visit the studio, we may keep simple attendance notes. Website logs may include IP address and basic technical data from our hosting provider for security.

Why we process data

  • To schedule and deliver lessons and workshops (contract / pre-contract steps)
  • To answer enquiries you send us (legitimate interest in responding)
  • To issue invoices and keep accounting records (legal obligation)
  • To store cookie consent choices you make on this site (consent / necessary storage)

Retention

Enquiry messages are kept up to twenty-four months after the last contact unless a student relationship continues. Active student records stay for the duration of lessons plus the period required for Swedish bookkeeping. You may ask us to erase data that is no longer needed for those purposes.

Sharing

We do not sell personal data. We may use processors for email hosting, payment terminals, or website hosting under agreements that require GDPR-level protection. Transfers outside the EEA only occur with appropriate safeguards if a tool requires it.

Your rights

You may request access, rectification, erasure, restriction, or portability where applicable, and object to processing based on legitimate interest. Where we rely on consent, you may withdraw it at any time. Complaints can be filed with IMY (imy.se). Contact us first at [email protected] so we can help quickly.

Security

We limit access to student records to people who need them for teaching or administration, and we use common-sense digital hygiene on studio devices. No method is perfect; if a breach risks your rights, we will notify as required by GDPR.

Last updated: July 2026.