GDPR - Images and Data Protection Regulation

We protect your personal privacy

Kårservice in Östergötland AB, org. no. 556802-9333 (“Kårservice”), is owned by the three student unions at Linköping University. We are an independent company that runs the housing operations in the five union houses and the students' tenant association Kombo. Our mission and vision is to create meeting places for a world-class student life together with all LiU students! We are not for profit, and surpluses are reinvested in the operations and in student benefits.

For Kårservice It is important to reach out to students and other stakeholders, and a good way to inform about our activities is through images and films. This privacy policy describes how we process personal data when taking photos and films in our communication.

Kårservice is the data controller and complies with applicable legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation; GDPR) and the Data Protection Act (2018:218).

What is a personal data and what is a treatment?

Personal data is any information that can be directly or indirectly attributed to a living natural person. Examples of this are images, films and audio recordings where individuals can be identified.

Any action taken with personal data is considered processing. Examples of processing are collection, registration, storage, publication and deletion.

How do we process your personal information?

In order for the Kårservice is to be allowed to process personal data in communication, there must be support in applicable legislation. We have carried out a balance of interests and have assessed that in some cases we can publish images and films without consent, because our legitimate interest in providing information about the business outweighs the individual's interest in privacy protection.

Your personal data may be processed under the following conditions:

Balance of interests: We may publish images and films where people appear in contexts related to our business, for example at events or social gatherings where no individual person is in focus.
Consent: If a person is clearly identifiable and in focus or if the image is used in marketing, we always obtain consent before publication.

Image and sound recording

We collect personal data about you by photographing and filming and making audio recordings at our gatherings and events. We try as far as possible to inform you in advance so that you can say if you do not want to participate.

Personal information

From you:
Image, film, sound recording and, if necessary, first and last name, e-mail address and mobile number.

Purpose

To inform about our activities.

Legal basis

Our legitimate interest in communicating about our business. We judge that our legitimate interest outweighs your interest in your rights and is necessary to achieve the purpose of the processing Consent is used in connection with images and videos being posted on social media. Agreement for materials to be used for a longer period of time.

Shelf life

Stored for a maximum of 2 years.

Stored until consent is withdrawn.

Stored in accordance with the agreement.

Right to information and access

You have the right to receive confirmation as to whether personal data concerning you is being processed and, if so, to access a copy of it.

Right to correction

You have the right to have inaccurate personal data corrected or supplemented without undue delay.

Right to erasure (right to be forgotten)

You have the right to request deletion of your personal data if:

The data is no longer needed for the purpose for which it was collected.
You withdraw your consent.
You object to processing and there are no legitimate reasons that outweigh the protection of your privacy.
The data has been processed illegally.

Right to restriction

You can request that we restrict the processing of your personal data if, for example, you believe it is inaccurate or if you object to its deletion.

Right to withdraw consent

If the processing is based on consent, you can withdraw this at any time by contacting us.

MarLaw will then cease processing. To withdraw your consent, you can send an email to: gdpr@karservice.se

Right to data portability

If we process your data based on consent or contract, you have the right to request a copy in a machine-readable format and to transfer it to another data controller.

Right to object

If we process your personal data based on legitimate interest, you can object to this and request that we cease processing unless we can demonstrate compelling legitimate grounds.

Make a complaint

You also have the opportunity to submit a complaint regarding the processing of personal data to the Swedish Data Protection Authority ("IMY") if you believe that the processing of your personal data violates your rights and interests according to current law. Read more on the IMY website https://www.imy.se

The contact details are as follows:

Phone: 08-657 61 00

E-mail: imy@imy.se

Postal address: Box 8114, 104 20 Stockholm

You can also contact Kårservice. The contact details are as follows: gdpr@karservice.se

Changes to Privacy Policy

Would Kårservice make changes to this privacy policy, we will post the amended statement on our website indicating the date of the amendment. We recommend that you review these Privacy Policy Principles periodically to ensure that you are aware of any changes that have been made. This privacy policy was updated 2025-02-20