GDPR Compliance

Our Commitment to GDPR

elovvindrexil is committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We recognise the importance of protecting personal data and respecting the privacy rights of individuals.

This page provides information about how we meet our obligations under the GDPR and explains your rights as a data subject.

Data Controller Information

For the purposes of the GDPR, elovvindrexil acts as the data controller for personal information collected through our website and services.

Contact details:
elovvindrexil
Sveavägen 42
111 34 Stockholm
Sweden
Email: [email protected]

Lawful Bases for Processing

We process personal data only when we have a valid legal basis. The lawful bases we rely upon include:

Contract Performance

We process personal data when necessary to fulfil our contractual obligations to you, such as providing training services you have booked.

Legitimate Interests

We may process data based on our legitimate business interests, provided these do not override your fundamental rights. This includes improving our services and maintaining website security.

Consent

Where required, we obtain your explicit consent before processing personal data. You may withdraw consent at any time.

Legal Obligations

We process data when required to comply with legal requirements, such as tax reporting and regulatory compliance.

Your Rights Under GDPR

The GDPR provides you with several rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.

Right to Rectification

You have the right to request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

Also known as the "right to be forgotten", you may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restriction of Processing

You may request that we limit how we use your data in specific situations, such as while we verify the accuracy of contested data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not currently use automated decision-making in our services.

Data Protection Measures

We implement appropriate technical and organisational measures to ensure the security of personal data, including:

• Encryption of data in transit using SSL/TLS protocols
• Secure storage with access controls
• Regular security assessments and updates
• Staff training on data protection practices
• Data minimisation principles

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. Where the breach is likely to result in a high risk, we will also notify affected individuals directly.

International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission or transfers to countries with adequate data protection frameworks.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods are determined based on legal requirements, contractual obligations, and our legitimate business needs.

Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. In Sweden, the relevant authority is:

Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm
Sweden
Website: www.imy.se

Exercising Your Rights

To exercise any of your rights or to ask questions about our data protection practices, please contact us:

Email: [email protected]

We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, in which case we will inform you of the extension and the reasons for it.

Updates to This Information

We may update this GDPR information periodically. The date of the most recent revision will be indicated at the top of the page.