Sesh AB Privacy Policy
​
Sesh Medlemsvillkor
Tres World Sweden AB – Onda
This Privacy Policy describes how Tres World Sweden AB (reg. no. [559248-4702]), operating under the brand name “Onda” via the domain ondaverse.app and associated digital platforms (the “Platform”), processes personal data.
Tres World Sweden AB, Evenemangsgatan 34, 169 56 Solna, Stockholm, Sweden, email: letswork@tres.world, is the data controller responsible for the processing of your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
“Personal data” means any information that directly or indirectly identifies an individual.
​
1. Legal Basis for Processing
We process your personal data on the following legal grounds:
• Performance of a contract (e.g. ticket purchases, membership services)
• Compliance with legal obligations (e.g. accounting, safety regulations)
• Legitimate interests (e.g. business development, fraud prevention, analytics)
• Consent (e.g. marketing communications)
Where processing is based on consent, you may withdraw your consent at any time.
​
2. Purpose of Processing
We process personal data in order to:
• Provide membership and ticketing services
• Deliver purchased tickets and event access
• Manage customer support and account administration
• Comply with legal and regulatory obligations
• Prevent fraud and misuse
• Conduct analytics and service improvement
• Send marketing communications where consent has been provided
• Manage event safety and access control
We may also use aggregated or anonymised data for commercial analysis, cultural reporting, and business development.
​
3. Categories of Personal
Data Collected
We may collect and process the following categories of personal data:
• Name
• Date of birth
• Email address
• Telephone number
• Address (where applicable)
• Purchase history
• Attendance history
• Device and technical data
• Payment-related data (processed via secure payment providers)
• Behavioural interaction data on the Platform
Date of birth is collected to verify age requirements and ensure compliance with event restrictions. We do not require national identification numbers unless legally required.
Providing personal data is voluntary; however, we cannot provide membership or ticketing services without necessary information.
​
4. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined above.
Membership and customer data are generally retained for up to three (3) years following your last purchase or activity on the Platform. If you make a new purchase within that period, the retention period may be extended accordingly.
Certain data may be retained longer where required by law, including accounting legislation or consumer protection regulations.
We may update or supplement your data using publicly available or commercial sources to ensure accuracy.
​
5. Sharing of Personal Data
We may share personal data with:
• Event promoters and production partners
• Venues and security providers
• Marketing partners and sponsors
• Payment service providers
• Technical service providers and hosting partners
• Analytics providers
• Authorities where required by law
Where necessary for service delivery, data may be processed outside the EU/EEA. In such cases, appropriate safeguards will be implemented in accordance with GDPR, including adequacy decisions or standard contractual clauses.
We reserve the right to share relevant personal data with partners involved in the organisation, promotion, sponsorship, or operation of events.
We may also share anonymised or aggregated data for commercial or analytical purposes.
​
6. Marketing Communications
If you consent to receive marketing communications, we may contact you via email, SMS, or push notifications regarding events, offers, and related services.
You may withdraw your consent at any time via your account settings or by contacting us.
Transactional communications related to ticket purchases, membership status, and event updates will continue regardless of marketing preferences.
​
7. Media and Event Recording
Events organised or promoted by Tres World Sweden AB may involve photography and video recording. Media content may include attendees and may be used for marketing, promotional, editorial, or commercial purposes.
Such processing is based on our legitimate interest in documenting and promoting events. If you object to being recorded, you may contact event staff.
​
8. Your Rights Under GDPR
You have the right to:
• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data (subject to legal limitations)
• Request restriction of processing
• Object to processing based on legitimate interest
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten)
Requests may be submitted to:
We reserve the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests, or to refuse such requests as permitted under GDPR.
​
9. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration.
​
10. Updates to This Policy
We reserve the right to update this Privacy Policy at any time. The latest version will be published on ondaverse.app.