Last updated: 7 October 2026
This policy explains which personal data we process when you visit biorio.se, buy tickets, become a member or shop with us, why we do it and what rights you have.
Controller
- Bio Rio AB (559050-4964) is responsible for tickets, memberships, your account and the website.
- Rio Pictures AB is responsible for purchases in the shop.
Both can be reached at Hornstulls Strand 3, 117 39 Stockholm, cinema@biorio.se.
What we process
- Contact details: name, email address and phone number.
- Account and membership: login details, member number, membership tier, date of birth if you give it, and how you have used your benefits.
- Purchases: what you bought, when, which seats you booked, amounts, payment method and order history. Card numbers are handled by our payment providers and never stored by us.
- Delivery: address, door code if you give one, and the pickup point you chose.
- Contact with us: what you write to us and our replies.
- Technical information: IP address, device and browser, and how you use the website, to the extent you have agreed to it (see Cookies below).
Why, and on what basis
- To carry out your purchase or membership (contract): take payment, send tickets and order confirmations, deliver goods, manage your membership and handle refunds.
- To comply with the law (legal obligation): bookkeeping and tax.
- To give good service and improve (legitimate interest): answer when you contact us, prevent fraud and misuse, troubleshoot and keep our systems secure, and follow up how the cinema and the shop are doing.
- Newsletters and offers (consent): we send marketing by email and text message only if you have said yes. You can unsubscribe at any time through the link in the message.
- Analytics and advertising (consent): see Cookies below.
Who we share data with
We never sell your data. We share it with providers who help us run the business, and they may only use it on our behalf:
- Payments: Stripe, Windcave, and Swish together with your bank.
- Login: Google Firebase.
- Email and text messages: Klaviyo.
- Delivery: PostNord, and the partners who make and ship some of the shop's items.
- Bookkeeping: Fortnox.
- Hosting and logging: DigitalOcean, Vercel and Better Stack.
- Customer service: when you email us, an AI service (Anthropic) may help us read and answer your message.
- Analytics and advertising, if you have agreed: Google (Analytics and Ads), Meta, TikTok and Hotjar.
- Digital wallets: Apple and Google, if you add your member card or a ticket to Wallet.
We also disclose data to authorities when the law requires it.
Transfers outside the EU/EEA
Some providers are located outside the EU/EEA, for example in the USA. Such transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep data
- Account and membership: for as long as you have an account, and after that for as long as needed to close any open matters.
- Purchases and bookkeeping: seven years after the end of the financial year of the purchase, as the Swedish Bookkeeping Act requires.
- Contact with us: while the matter is open and for a while after, in case you get back to us about it.
- Marketing: until you unsubscribe.
- Logs: a limited time, for troubleshooting and security.
Cookies
The website uses cookies and similar technologies:
- Necessary: so that checkout, login and the cart work. These do not require consent.
- Analytics: to understand how the website is used (Google Analytics and Hotjar).
- Marketing: to measure and target ads (Google Ads, Meta and TikTok).
Analytics and marketing are only used if you have accepted them in the cookie banner. To change your choice, clear cookies for biorio.se in your browser and the banner appears again.
Your rights
You have the right to:
- know what data we hold about you and get a copy,
- have incorrect data corrected,
- have data erased, unless the law requires us to keep it,
- restrict or object to processing based on legitimate interest,
- receive data you gave us in a machine-readable format,
- withdraw consent at any time.
Email cinema@biorio.se and we will help. If you are unhappy with how we handle your data you can complain to the Swedish Authority for Privacy Protection, imy.se.
Changes
We update this policy when our processing changes. The date at the top shows when it was last changed.