As the controller, we are responsible for processing your personal data in accordance with applicable data protection laws and ensuring that you can exercise your rights under the General Data Protection Regulation (GDPR). The following is an explanation of the rights granted to you under the GDPR. If you wish to exercise any of these rights, please contact us at email@example.com. More information about your rights can be found on the website of the Swedish Authority for Privacy Protection (“IMY”).
Right to information: You have the right to receive information about how we process your personal data. We primarily provide this information through this Policy, but we also respond to your inquiries.
Right of access: You have the right to know whether we process your personal data and, if so, to access the personal data in the form of a free copy of the register and information about how we process your personal data. Requests for a register extract can be sent to firstname.lastname@example.org. Please note that we may charge a reasonable fee for administering repeated requests for a register extract. We reserve the right to take reasonable measures to verify the identity of the person making the request for a register extract.
Right to rectification: You have the right to have inaccurate personal data we process about you rectified without undue delay, as well as the right to have incomplete personal data we process about you completed.
Right to erasure (“right to be forgotten”): You have the right to have the personal data we process about you erased under certain circumstances. This applies if:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
- the processing is based on your consent, and you withdraw your consent while there is no other legal basis for the processing;
- you object to the processing of personal data based on our legitimate interests, and there are no overriding legitimate grounds for the processing;
- we process your personal data for direct marketing purposes, and you object to such processing;
- we have processed your personal data unlawfully;
- erasure is required for us to comply with a legal obligation to which we are subject;
- the personal data relates to a child for whom you have parental responsibility, and the data was collected in connection with the offer of information society services (e.g., social media).
To the extent that our processing of your personal data is necessary for a specific purpose, such as defending a legal claim, we are not obliged to erase your personal data and may therefore deny your request.
Right to restriction of processing: You have the right to obtain restriction of our processing of your personal data under certain circumstances. This applies if:
- you contest the accuracy of the personal data during the period in which we verify the accuracy of the personal data;
- our processing of your personal data is unlawful, but you oppose the erasure of the personal data and instead request restriction of its use;
- we no longer need the personal data for the purposes of the processing, but you need it to establish, exercise, or defend legal claims;
- you have objected to our processing of your personal data based on our legitimate interests during the period in which we verify whether our legitimate grounds override your interests.
Right to data portability: You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this personal data to another controller without hindrance from us. Where technically feasible, you have the right to request that we transmit such personal data directly to another controller. Your right to data portability presupposes that the processing is based on your consent or on a contract and is carried out by automated means.
Right to object: Under certain conditions, you have the right to object to our processing of your personal data. This applies when we process personal data to perform a task of public interest, as part of the exercise of public authority, or based on a legitimate interest. In such cases, we may only continue processing your personal data if we have compelling legitimate grounds that override your interests. You always have the right to object to the processing of your personal data for direct marketing purposes. After such objection, we are obligated to cease the processing your personal data for such purposes.
Right to withdrawal of consent: You have the right to withdraw your consent at any time regarding the processing of your personal data based on your consent. In that case, we will cease with the processing of your personal data. Requests for withdrawal of consent can be sent to email@example.com.
Right to lodge a complaint: If you have complaints about our processing of personal data, you have the right to lodge a complaint with IMY, which is the Swedish supervisory authority. You can find IMY’s contact information here.