Cookies used on this website
We use the following types of cookies:
(a) Persistent cookies, i.e. cookies that are stored on your device for a long period of time and then deleted on a pre-set date. They might be used, for example, for functions that tell you, the user, what has changed since you last visited the website. For how long the cookie remains on your device depends on the lifespan of the specific cookie and your browser settings.
(b) Session cookies, i.e. cookies that are temporarily stored in the memory of your browser (e.g. Internet Explorer) and are deleted when you close the browser. They might be used, for example, to identify your chosen languages.
(c) Third-party cookies, i.e. cookies belonging to other domains than those shown in the address field. Third-party cookies make it possible to track the user’s browsing history.
How to block and/or delete cookies
For more information on how to view and remove stored cookies, see the instructions for your browser or the help function that is available in most browsers. If you use different devices to view and access the website (e.g. your computer, smartphone or tablet), you need to ensure that the browser on each device is set according to your cookie preferences.
When your personal data are processed, you have the below rights under the General Data Protection Regulation (GDPR). More information is available on the website of the Swedish Authority for Privacy Protection (IMY) www.imy.se/privatperson/dataskydd/dina-rattigheter/.
Right to be informed (register extracts)
You have a right to be informed by us of whether we are processing your personal data and, if so, to request access to this personal data in the form of a register extract. You also have the right to receive the following information:
- the purpose of the processing,
- the types of personal data processed,
- who the personal data has been shared with, including third country transfers, and the protective measures taken,
- data retention period,
- your rights,
- the source of the personal data, and
- whether automated decision-making occurs.
If you ask to access personal data that we process about you, you will receive a copy of these data. If you request extra copies, you may be charged a fee for administrative costs. If you request your personal data electronically, we will normally provide the copy of the personal data in electronic format, unless otherwise requested.
Right to rectification
If any of the personal data we process about you are incorrect, you have a right to request that we rectify them without undue delay. Depending on the purpose of the processing, you also have a right to amend any incomplete personal data.
Right to erasure
You have a right to request that we erase your personal data without undue delay if:
- the data are no longer necessary for the purposes for which they were collected,
- you have withdrawn your consent, and your consent was the lawful basis for processing the data,
- you object to the processing of data which relied on legitimate interests as the legal basis for processing, and there is no overriding legitimate interest to continue our processing,
- you have objected to direct marketing,
- the processing is unlawful, and
- erasure is necessary in order to comply with legal obligations.
We have a right to refuse your request for erasure if processing is necessary in order to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
If the data are erased at your request, we have an obligation to inform any parties whom we have shared the data with that you have requested to have your personal data erased.
Right to restrict processing
You have a right to request to have your personal data processing restricted under certain circumstances.
The right to restrict processing applies if:
- you contest the accuracy of your personal data (during the time that we are verifying the accuracy of the data),
- the data have been unlawfully processed and you oppose erasure and request restriction instead,
- we no longer need the personal data but you need the data in order to establish, exercise or defend a legal claim, or
- you have objected to processing of data which relied on legitimate interests as the legal basis (during the time that we are investigating whether our legitimate grounds override your grounds for having the data erased).
If we have restricted processing of your data, we will notify you before restriction of the processing ceases.
Right to object
You have a right to object at any time to processing of your personal data on the basis of legitimate interests. If our grounds do not override your grounds, we are no longer allowed to process your data after you have objected.
If you object to direct marketing, we may no longer process your data for such purposes.
Right to data portability
If our processing of your data is automated and based on consent or on the performance of a contract, you have a right to receive the data in a structured, commonly used and machine readable format. You also have a right to transmit the data to another data controller.
If it is possible, you also have a right to request that we transmit your data directly to another data controller.
Data controller and contact details
You have a right to lodge a complaint to the Swedish Authority for Privacy Protection if you think that we are processing your personal data in violation of the GDPR. The contact details of the Swedish Authority for Privacy Protection are available at www.imy.se.
If you have any questions about how your personal data are processed, do not hesitate to contact Castellum’s data protection officer at firstname.lastname@example.org.
Contact details for Castellum
Castellum AB, org.nr 556475-5550
Address: Box 2269, 403 14 Göteborg
Phone number: +46 8-503 052 00
Updates and questions
Castellum may make changes to the information set out above. The most recent update is specified below.
Last updated 11 December 2023.