Privacy Policy
Lina Vesterlund AB (“we,” “us,” or “the Company”) is the data controller responsible for the processing of personal data in accordance with this Privacy Policy. In this policy, we explain what type of personal data we collect, how we process it, and what rights you have. This policy applies to www.linavesterlund.se and www.freedombyyou.com.
You are always welcome to contact us if you have questions about how we process your personal data.
What personal data do we collect about you and when?
Data you provide to us
We process the personal data that you provide to us when you interact with us. This may be through our website, when using our services, or when you contact us via email, SMS, phone, or similar channels.
What is our legal basis for processing your personal data?
We only process your personal data where a legal basis exists. This includes:
To perform, administer, or enter into a contract with you or your employer.
Where we have a legitimate interest in processing your personal data, for example, for marketing our products and services, or compiling usage statistics.
Where we are legally required to process your personal data, such as for accounting purposes.
Who may we share your personal data with?
Data Processors
In certain cases, it is necessary for us to engage third parties in order to perform our work, such as IT service providers. These parties act as data processors on our behalf, and we enter into data processing agreements in such cases. We remain the data controller, and the processor may only process your data in accordance with our instructions.
We review all processors to ensure that they provide adequate guarantees regarding the security and confidentiality of personal data. Processors are engaged only for purposes consistent with our own purposes, as we remain responsible for the data.
We may also disclose personal data to third parties, such as the police or other authorities, if required by law, court order, or to protect our legal interests.
Where do we process your personal data?
Your personal data is processed only within the EU/EEA.
How long do we retain your personal data?
We never retain your personal data longer than necessary for the respective purpose. We have established data retention routines to ensure that personal data is not stored longer than needed. If and when you wish to terminate your account with us, we delete your data related to the service within 3 months.
Retention time varies depending on the purpose of processing and the necessity of retaining the data. After this, we securely delete or anonymize your data so that it can no longer be linked to you. Certain data, such as accounting records, must be retained for at least seven (7) years in accordance with statutory requirements.
Personal data collected for marketing purposes is deleted no later than 2 years after collection.
Cookies
Our website uses cookies. More information about our use of cookies can be found on our website.
What are your rights as a data subject?
As a data subject, you have a number of rights under applicable legislation. These include:
Right of access – You have the right to request information about the personal data we process about you. To ensure secure handling, we may ask for additional information to verify your identity.
Right to rectification – You have the right to request that your personal data be corrected if it is inaccurate or incomplete.
Right to erasure – You may request that we delete your personal data, for example if:
The data is no longer necessary for the purposes for which it was collected.
You object to processing based on legitimate interests, and your objection outweighs our interests.
The personal data is being unlawfully processed.
The data concerns a child under the age of 13 for whom you hold parental responsibility.
The data was collected based on consent, which you now withdraw.
We may, however, be legally required to retain certain personal data and may deny your request if deletion conflicts with such obligations or if the data is necessary for establishing, exercising, or defending legal claims.
Right to restriction of processing – You may request that we restrict the processing of your data, for example while verifying its accuracy or during an objection process.
Right to object – You have the right to object to processing based on legitimate interests, as well as to direct marketing.
Right to data portability – Where our processing is based on consent or a contract, and the processing is automated, you have the right to request the transfer of your data to another controller, where technically feasible.
Exercising your rights
Requests to exercise your rights must be submitted in writing and signed by you. We will respond without undue delay and no later than 30 days. Please send your request by email to the address below, ideally from the same email address you are registered with.
Supervisory authority
The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) is the supervisory authority responsible for monitoring compliance with data protection law. If you believe we are acting in violation of the law, you can contact IMY at https://www.imy.se.
Contact information
If you have any questions about how we process personal data, or if you wish to exercise your rights, please contact us:
Lina Vesterlund AB
559468-5546
lina@freedombyyou.com
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy. The latest version will always be available on our website. In the event of material changes to the processing of your personal data, we will notify you accordingly.