GDPR Information

Understanding your data protection rights

About the GDPR

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy. It aims to give individuals control over their personal data and to simplify the regulatory environment for international business.

As an organisation based in Sweden and serving clients within the European Economic Area, elovvindrexil is fully committed to compliance with the GDPR.

Your Rights Under the GDPR

The GDPR provides you with specific rights regarding your personal data. Below we explain each right and how you can exercise it.

Right to Access

You have the right to request confirmation of whether we process your personal data, and if so, to access that data along with information about how we use it. We will provide a copy of your personal data free of charge. Additional copies may be subject to a reasonable fee.

Right to Rectification

If personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to rectification requests within one month.

Right to Erasure

Also known as the right to be forgotten, this allows you to request deletion of your personal data when:

  • The data is no longer necessary for its original purpose
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data has been unlawfully processed
  • Deletion is required to comply with a legal obligation

This right is not absolute. We may retain data where we have a legal obligation or legitimate grounds that override your request.

Right to Restrict Processing

You can request that we restrict the processing of your personal data when:

  • You contest the accuracy of the data (restriction applies while we verify)
  • Processing is unlawful but you prefer restriction over erasure
  • We no longer need the data but you need it for legal claims
  • You have objected to processing (restriction applies while we verify)

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format. You may also request that we transmit this data directly to another controller where technically feasible.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes. If you object to direct marketing, we will stop processing your data for that purpose immediately.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently engage in such automated decision-making.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. Include:

  • Your full name and contact information
  • A clear description of which right you wish to exercise
  • Any relevant details that will help us locate your data

We may request additional information to verify your identity before processing your request. This helps protect your data from unauthorised access.

Response Time

We will respond to all rights requests within one month of receipt. If your request is complex or we receive multiple requests, we may extend this period by up to two months. We will inform you of any such extension within the initial one-month period.

Fees

We generally process rights requests free of charge. However, we may charge a reasonable fee for manifestly unfounded or excessive requests, particularly where requests are repetitive. We may also refuse to act on such requests.

Data Protection Officer

For questions specifically related to data protection or to exercise your rights, you may contact our data protection representative at [email protected].

Supervisory Authority

If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with a supervisory authority.

In Sweden, the relevant authority is:

Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm
Sweden

Further Information

For comprehensive details about how we collect and use personal data, please refer to our Privacy Policy.