Privacy policy

This policy describes how Jocky AB ("Jocky", "we", "us") processes your personal data when you use our website, jockybooking.com, and our services. We care about your privacy and process your data in accordance with the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (lag (2018:218) med kompletterande bestämmelser till EU:s dataskyddsförordning).

Data controller

Jocky AB, a Swedish limited company (corporate identity no. 559541-8384), Engelbrektsgatan 21, 114 32 Stockholm, Sweden, is the controller responsible for the processing. If you have questions about how we handle your data, you can reach us at info@jocky.se.

What data we collect and why

Booking requests

When you send a booking request to an artist, we collect your name, email address, phone number and the details you give about your event (type, date, times, budget and any message). We use this data to pass your request on to the artists you have chosen and to get back to you.

Gig posts

When you post a gig, we collect your name, email address, phone number, the event location and the details you give about the gig (type of artist, city, date, times, budget and any message). We use this data to publish the gig to relevant artists, pass on their applications and get back to you.

Demo bookings

If you book a demo, your name, email address and chosen time are collected via our scheduling provider, Calendly, so that we can hold the meeting.

Chat and support

If you open the chat on the website, your name, email address, messages and technical information (such as your IP address) are processed via our chat provider Crisp, so that we can give you support. No chat data is stored until you choose to start a conversation yourself.

Web analytics

We use PostHog to understand how the website is used and to improve it. If you have not consented to cookies, the analysis is cookieless: nothing is stored on your device and each visit is counted separately. The data is processed within the EU, and we never send names, email addresses or phone numbers to PostHog.

Analytics and advertising measurement (with consent)

If you accept cookies in our cookie banner, we also use Google Analytics and let PostHog recognise you on return visits by means of a random identifier. The purpose is to see how the website is used over time and which of our Google ads lead to enquiries. With your consent, PostHog may also record how you use the page during your visit (such as clicks, scrolling and moving between pages), so that we can see where things are awkward and make the website easier to use. Anything you type in forms and in the chat is hidden in the recording, and recordings are deleted after 30 days. Google Analytics is linked to our Google Ads account. The data processed includes cookie identifiers, your IP address, device and browser type, which pages you visit and which ad, if any, you came from. You can withdraw your consent at any time via "Cookie settings" at the bottom of the page. Read more in our cookie policy.

Technical data

When you visit the website, technical data such as your IP address, browser type and logs is processed by our hosting and infrastructure providers in order to deliver and secure the service.

Legal basis

• Booking requests, gig posts and demos - to respond to your request and take steps at your request before entering into a contract (performance of a contract), or our legitimate interests.
• Chat and support - our legitimate interest in being able to help you.
• Cookieless web analytics and operations - our legitimate interest in running, securing and improving the website.
• Analytics, improvements and advertising measurement with cookies (Google Analytics, PostHog with an identifier and session recording) - your consent, which you can withdraw at any time.

Who we share data with

We never sell your data. To deliver the service, we use processors that process data on our behalf under data processing agreements:

• Crisp (chat support) - based in the EU (France).
• PostHog (web analytics) - data stored in the EU.
• Google (Google Analytics and Google Ads, only with your consent) - Google Ireland Ltd. Google may also process data for its own purposes, such as personalised ads, in which case Google acts as an independent controller. See Google's privacy policy.
• Calendly (demo booking) - USA, under Standard Contractual Clauses (SCCs).
• MailerSend (email delivery) - based in the EU.
• Discord (internal notifications about new requests) - USA, under SCCs.
• Vercel and Cloudflare (hosting and infrastructure) - under SCCs where data is processed outside the EU/EEA.

Transfers outside the EU/EEA

Some of our providers process data in the USA. Such transfers are protected by the European Commission's Standard Contractual Clauses and supplementary measures, or by the EU-US Data Privacy Framework for providers certified under it, such as Google. Chat (Crisp) and web analytics (PostHog) are handled within the EU/EEA.

How long we keep data

We keep your personal data for as long as necessary for the purposes for which it was collected, or for as long as we are required to by law (for example, under accounting and tax legislation). Booking requests, gig posts and chat conversations are deleted when they are no longer needed. Event data in Google Analytics is kept for 14 months. How long cookies remain on your device is set out in our cookie policy.

Your rights

Under the GDPR, you have the right to:

• request access to the data we process about you,
• have inaccurate data corrected,
• request erasure ("the right to be forgotten"),
• request restriction of processing,
• object to processing based on our legitimate interests,
• receive your data in a structured, commonly used and machine-readable format (data portability), and
• withdraw any consent you have given at any time.

If you wish to exercise any of these rights, contact us at info@jocky.se.

Complaints

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), which is the supervisory authority for Jocky: Integritetsskyddsmyndigheten, Box 8114, 104 20 Stockholm, Sweden, www.imy.se. You also have the right to lodge a complaint with the data protection authority in the EU/EEA country where you live or work (Article 77 GDPR).

Cookies

Read about how we use cookies and similar technologies in our cookie policy.

Changes

We may update this policy. The latest version is always available on this page, with the date of the most recent change shown at the top.