Privacy Policy 2024 - Malå Visitor Center

We protect your personal information

Your trust is important to us at Malå Visitor Center. We want you to feel secure, and we are committed to clearly and transparently informing you about how we collect, display, use, transfer, and store your information so that you can be confident that your personal data is protected and not misused.

We continuously review and take necessary actions to comply with the principles of 'privacy by design and default.'

Malå Visitor Center conducts all processing of personal data in accordance with the European Union's privacy legislation (GDPR).

The data controller responsible for processing your personal data is Malå Municipality, and you should contact us if you have any questions or wish to exercise your rights under GDPR."

WHAT PERSONAL DATA WE COLLECT DO AND WHY?

First, we want to explain what personal data means. Personal data is any kind of information that can be directly or indirectly linked to a living individual. For example, names, personal identification numbers, addresses, email addresses, and telephone numbers. It can also include, for example, IP addresses (if they can be linked to physical persons).

Data collected when using the Malå Visitor Center website:

When you use our website, we collect data about your use of the service. Some of this data may be personal data, such as your IP address if it can be linked to physical persons. We also collect data about how you navigate the service, what searches you make, and what products you are interested in. For more information about the type of data collected in connection with the use of our digital services, you can read our cookie policy at the bottom of this document.

How we use and store your data:

(Malå Visitor Center/Malå Municipality's legal basis for processing your personal data)

Malå Visitor Center processes your personal data lawfully. It may occur that the same personal data is processed based on several legal grounds, such as the performance of a contract, based on a balancing of interests, or specifically with your consent, or based on the necessity of the data to fulfill other legal obligations. This means that even if you withdraw your consent and the processing based on the consent ceases, the personal data may still need to be retained for other purposes where the personal data is still needed.

Primarily, we process your data to fulfill a contract in which you are a party.

MARKETING AND PERSONALIZATION

We would like to send relevant offers and news to you about our products and services. Data such as information about your previous purchases, browsing habits, and search settings may be used by us to contact you by mail, email, or telephone for marketing purposes. This way, we can tailor our communication to be more relevant to you. We may also send information about our partners' products and services that we believe may be of interest to you. If you do not wish to receive marketing communications from us, you can opt out at any time by declining such communications.

Service Development

We use the data we collect about our customers to develop and improve our products and services. This applies to both our digital services, where we analyze user behavior to develop how we present information, offers, and design features. Primarily, we use anonymous or anonymized data on an aggregated level for this type of analysis. However, it may occur that we also use personal data we have collected if it is relevant. We do this to fulfill our contract with you and based on our legitimate interest in improving our services and customer service.

Legal Requirements

Processing of your personal data may also occur to fulfill obligations under laws and regulations, such as regarding security and accounting.

Storage Periods

We never retain data longer than necessary and only use your personal data for the purposes outlined in this policy. After that, we will securely delete your personal data. However, the same personal data may be stored in several different locations for different purposes. This means that we may delete a piece of information from one system when it is no longer needed there, while the information may continue to be stored in another system if the purpose still exists for that system. If data is needed beyond this period for analytical, historical, or other legitimate commercial purposes, we will take appropriate measures to anonymize this data so that it no longer constitutes personal data.

Contractual Partners and IT Providers

We use a number of different IT services and systems in our operations. Personal data is stored and processed in some of these. We are committed to your privacy and the security of your data in all such processing. Some systems are installed locally with us, and only our staff have access to the data. In these cases, there is no transfer to third parties. However, some systems are cloud-based solutions or installed with the provider and involve us transferring personal data to the provider. In these cases, the provider is our data processor and processes the data on our behalf and according to our instructions.

Web Analytics Companies

We use external vendors for personalization and analysis of user behaviors on our websites and for user feedback. These companies process personal data as data processors on our behalf. The data involved mainly consists of data collected through cookies and is processed anonymously and on an aggregated level.

Authorities

If required by law or permitted by law, we may share personal data with state and authorities to the extent necessary.

 

YOUR RIGHTS

Necessary processing of personal data and processing based on consent:

Processing of personal data necessary for us to fulfill a contract with you or to fulfill a legal obligation is permissible without consent. However, for us to collect and process your personal data for any other purpose, your consent to the processing is required.

Withdrawal of Consent:

You can choose to withdraw your consent at any time by contacting us using the contact details provided below. If you withdraw your consent, we will anonymize the personal data we have about you. It may occur that the same personal data is processed based on consent and based on the necessity of the data or based on other rules. This means that even if you withdraw your consent and the processing based on consent ceases, the personal data may still remain with us for other purposes.

Right to Access Information about the Personal Data We Have Stored about You:

You have the right to receive a copy of the personal data we hold about you.

Right to Control Your Personal Data:

You have the right to request that your data be deleted, supplemented, or corrected. You also have the right to request that the processing of your personal data be restricted for certain purposes and, for example, not used for direct marketing or profiling. You are welcome to contact us at any time to receive an extract of your personal data, have them amended or deleted. Please note! You must submit your request in writing as it must include your signature.

Contact Information for Malå Visitor Center/Malå Municipality Regarding Personal Data:

Malå Visitor Center/Malå Municipality

Storgatan 13

93931 MALÅ

SWEDEN

 

Cookies Policy

We use cookies on our digital platforms to improve your experience, to collect information for our marketing, and to develop the websites. The information is stored anonymously. It may occur that certain personal data is handled by cookies on our digital platforms. In addition to this privacy policy, our cookie policy also applies to this processing.

 

Contact

If you have any questions about the processing of your personal data, please feel free to contact us. Contact details are provided above. If you are not satisfied with the response you have received, you have the right to lodge a complaint with the Swedish Data Protection Authority. Learn more at the Swedish Data Protection Authority's website https://www.imy.se.