GDPR - Images and Data Protection Regulation

We protect your personal privacy

Kårservice i Östergötland AB, 556802-9333 (Kårservice) is owned by the three student unions at Linköping University. We are an independent company that runs the house operations in the five union houses, as well as the students' tenant association Kombo. Our mission and vision is to, together with all LiU students, create meeting places for a world-class student life! We are not for profit, but the surpluses are reinvested in the business and in student benefit.

 

For Kårservice, it is important to reach out to students and other interested parties, and a good way for us to inform about our activities is through pictures and films. This privacy policy has been specially developed for the processing of your personal data that Kårervice does in communication, i.e. in contexts where we want to inform about our operations through image and film recording.

 

Kårservice is responsible for personal data and ensures that you can feel safe with how we process your personal data. Kårservice applies Regulation (EU) 2016/679 (General Data Protection Regulation; "GDPR") and the Data Protection Act (2018:218) to protect your personal data.

What is a personal data and what is a treatment?

Personal data is any kind of information that can be directly or indirectly attributed to a living natural person. For example, images, video and audio recordings can be personal data if they can be linked to identifiable physical persons.

Every action taken with personal data constitutes processing, regardless of whether it is performed automatically or not. Examples of common treatments are collection, registration, organization, structuring, storage, processing, transmission and deletion.

Our treatments

In order for Kårservice to process your personal data in communications, there must be support in current legislation and a legal basis for the processing.

Your personal data may be processed under the following conditions:

  • When balancing interests, where Kårservice's interest in processing data is weighed against your interest in privacy protection
  • In the event of consent to the processing. Consent is provided separately and you can always revoke it by contacting us as described below.

Image and sound recording

We collect personal data about you by photographing and filming and making audio recordings at our gatherings and events. We try as far as possible to inform you in advance so that you can say if you do not want to participate.

Personal information

From you:
Image, film, sound recording and, if necessary, first and last name, e-mail address and mobile number.

Purpose

To inform about our activities.

Legal basis 

Our legitimate interest in communicating about our business. We judge that our legitimate interest outweighs your interest in your rights and is necessary to achieve the purpose of the processing Consent is used in connection with images and videos being posted on social media. Agreement for materials to be used for a longer period of time.

Shelf life 

Stored for a maximum of 2 years.

Stored until consent is withdrawn.

Stored in accordance with the agreement.

What rights do you have that are included in our communications?

 

Right to information and access

You have the right to receive confirmation as to whether personal data concerning you is being processed and, if so, to access a copy of the personal data (so-called register extract). You have the right to receive information and register extracts free of charge. You can request register extracts by contacting us using the details below.

If you discover that you are in a social media photo and we do not support the processing for consent or agreement, you always have the right to contact us and request information about the processing.

Right to correction

You have the right to have inaccurate personal data concerning you corrected or supplemented without undue delay. When you discover that there are errors in the information we process about you, you can contact us to have your information corrected or supplemented.

Right to erasure (right to be forgotten)

In certain cases, you have the right to have your personal data deleted without undue delay. You have the right to have your personal data deleted

  • the personal data is no longer necessary for us to process for the purpose for which it was collected,
  • you withdraw your consent on which the processing is based,
  • if you objected to the data being processed based on our legitimate interest and there are no legitimate reasons that outweigh your interest in having your data protected. This may become relevant if you discover that you are included in a mingle picture,
  • the personal data has been processed in an illegal manner.

To the extent that it is necessary to continue processing your personal data, for example to fulfill our legal obligations, we are not obliged to delete your personal data. This means that certain data can be stored until we are no longer obliged to process them.

Right to restriction

In certain cases, you have the right to request that our processing of your personal data be limited. A restriction can be made for several reasons.

  • If you believe that the personal data we process about you is incorrect and you have requested correction, you can request limited processing during the time we are working to check whether the personal data is correct or not.
  • The processing is illegal and you object to the deletion of the personal data and instead request a limitation of their use.
  • We no longer need the personal data for the purposes of the processing, but you need it to be able to establish, assert or defend legal claims.
  • If you have objected to processing based on a balancing of interests (legitimate interest), you can request limited processing during the time we are working to check whether our legitimate interests outweigh your legitimate interests.

In the event that the processing has been restricted according to any of the situations above, we may only, in addition to the storage itself, process the data to establish, assert or defend legal claims, to protect someone else's rights or because you have given your consent.

Right to withdraw consent

If Kårservice processes your personal data based on your consent, you have the right to withdraw consent at any time. MarLaw will then cease processing. To withdraw your consent, you can send an email to: gdpr@karservice.se

Right to data portability

In some cases, you have the right to so-called data portability, i.e. right to obtain your personal data that you have provided to us, in a structured, commonly used and machine-readable format and have the right to transfer this data to another personal data controller. A prerequisite for data portability is that the transfer is technically possible and can take place automatically, and that we process the personal data based on your consent or to fulfill an agreement.

Right to object

You have the right to object at any time to our processing of your personal data which is based on a balancing of interests as a legal basis (legitimate interest). It could be, for example, that you discover that you are in a mingle picture.

A continued processing of your personal data requires us to show a justified reason for the current processing. Otherwise, we may only process the data to establish, exercise or defend legal claims. For reasons related to your specific situation, you also have the right to object to profiling and other processing of personal data concerning you.

Complaint

 

Make a complaint

You also have the opportunity to submit a complaint regarding the processing of personal data to the Swedish Data Protection Authority ("IMY") if you believe that the processing of your personal data violates your rights and interests according to current law. Read more on the IMY website https://www.imy.se

The contact details are as follows:
Phone: 08-657 61 00
E-mail: imy@imy.se
Postal address: Box 8114, 104 20 Stockholm

You can also contact Kårservice. The contact details are as follows: gdpr@karservice.se

Changes to Privacy Policy

Should Kårservice make changes to this privacy policy, we will post the changed statement on our website with an indication of the change date. We recommend that you review these Privacy Policy Principles periodically to ensure that you are aware of any changes that have been made. This privacy policy was updated 2023-01-25

 

Translate »