Information on how we comply with the data protection regulation
GDPR (General Data Protection Regulation) is the EU's data protection regulation that came into force on May 25, 2018. The regulation gives you as an individual greater control over your personal data and sets requirements for how organizations may collect, use, and store personal data.
vibrant-fjord is committed to protecting your privacy and ensuring that your personal data is processed in accordance with GDPR and Swedish data protection legislation. We have implemented appropriate technical and organizational measures to ensure a level of protection appropriate to the risks.
You have the right to receive clear and transparent information about how we collect and use your personal data. This information can be found in our privacy policy.
You have the right to request a copy of the personal data we hold about you. This is known as a register extract. We will respond to your request within 30 days.
If you discover that the data we hold about you is incorrect or incomplete, you have the right to request that we correct it.
Under certain circumstances, you have the right to request that we delete your personal data. This applies, for example, if the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
You have the right under certain conditions to request that we restrict the processing of your personal data. While the restriction applies, we may only store the data.
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another data controller.
You have the right to object to certain processing of your personal data based on our legitimate interest.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not use automated decision-making of this type.
To exercise any of your rights under GDPR, contact us via:
We may need to verify your identity before processing your request. We respond to all inquiries within 30 days of receipt.
We process personal data only when we have a legal basis under GDPR:
We strive to process your personal data within the EU/EEA. If transfer to a country outside the EU/EEA occurs, we ensure that appropriate safeguards are in place in accordance with GDPR, such as standard contractual clauses approved by the European Commission.
We have implemented technical and organizational security measures to protect your personal data, including:
If a personal data incident occurs that is likely to pose a risk to the rights and freedoms of natural persons, we will report this to the Swedish Authority for Privacy Protection within 72 hours. If the incident is likely to result in a high risk to your rights, we will also inform you directly.
If you believe that we are processing your personal data in violation of GDPR, you have the right to file a complaint with:
Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm
imy.se
For questions about GDPR and how we process your personal data: