Processing of personal data - Expressed interest in receiving news or annual reports

Which personal data will be processed?

Castellum compiles and processes the personal data which you provide voluntarily, for example when you register for, or request that we send, news or other material (irrespective of whether this takes place via our own website or via other external tools that you use). The data we compile includes name, address and/or email address (your “personal data”).

Why do we process your personal data?

Castellum processes your personal data to enable us to send the news and other material you have shown an interest in receiving from us.

If you have expressed interest in receiving news from us, we will also process the data in order to send invitations to events and to send other news about our business.

From where do we obtain personal data?

The personal data is compiled directly from you via our online forms on Castellum’s website or via other external tools that you use.

Who has access to your personal data?

We have taken appropriate technical and organisational security measures to protect your personal data against, for example, loss and unauthorised access. The number of persons who have access to your personal data is limited. Only persons at Castellum who need to process the personal data for the above purposes have access to your personal data.

We may, however, share your personal data with our providers and other cooperation partners who perform services on our behalf. The personal data you provide to us may primarily be shared with providers of information services and distributors to the extent necessary to administer and perform mailouts in accordance with your wishes, and with our IT providers for the supporting and the maintenance of our IT systems.

How long is your personal data stored?

Your personal data will be stored and processed for the above-stated purposes until such time as you choose to unsubscribe from receiving news from us. If you have requested to receive our annual report, your personal data will be stored until we have sent it to you. Anonymized statistical information may also be stored thereafter.

What right does Castellum have to process your personal data?

The processing of your personal data as described above is based on a balancing of interests. Castellum considers that it is entitled to process your personal data since the processing is necessary for purposes which involve Castellum’s legitimate interests.

This is our reasoning

Castellum’s legitimate interest in this case is to be able to communicate information regarding our business to you, a person who has expressed interest in such information. Castellum has weighed its legitimate interest against any encroachment on privacy that Castellum’s processing of your personal data might entail for you. Castellum makes the assessment that the risk of encroachment on privacy is restricted since you have personally requested to receive news information. The personal data which is processed is also not of a privacy-sensitive nature. The personal data which is processed is also restricted to what is needed to perform the purposes for which the processing of personal data takes place. Castellum therefore makes the assessment that, following a balancing of interests, Castellum is entitled to process the personal data.

What happens if you do not provide your personal data?

It is necessary that you provide the personal data stated above to enable Castellum to send you the material you have requested. If the data is not provided, Castellum will be unable to send you the requested material.

Your rights

You are entitled to request access to the personal data that Castellum processes about you. You are entitled to have incorrect personal data about you rectified and may request that personal data be erased. You are also entitled to object to certain processing of your personal data and to request that the processing of personal data be restricted.

If you request that Castellum restricts or erases your personal data, this may have the consequence that Castellum is unable to send the material you wish to receive. You are also entitled to request to receive your personal data in a machine-readable format with the aim of transmitting the data to another controller (referred to as data portability).

If you are dissatisfied with the way in which Castellum processes your personal data you may complain to the supervisory authority regarding Castellum’s processing of personal data.

Castellum is the controller in respect of the processing of your personal data. If you have any questions concerning the way in which your personal data is processed, you are welcome to contact Castellum’s data protection team on gdpr@castellum.se.

Contact details to Castellum:

Postal address: Castellum AB, reg. no. 556475-5550, Box 2269, 403 14 Gothenburg