1. WHAT PERSONAL DATA DO WE PROCESS?
1.1. IVL collects and processes such personal data that you submit to us when signing up for our newsletters or when you register on any of our courses, seminars or other events that we arrange. The personal data collected are name, e-mail address and, if applicable, employer and invoice address. This processing of personal data is based on you giving your consent to the processing, in connection with submitting the personal data.
1.2. We use the tool Google Analytics in order to measure traffic on the Website and evaluate the functions of the Website. This means that personal data about you, i.e. your IP-address is collected, as well as indirect personal data about, you regarding information on how long your visit on the Website has been and what pages you have visited, will be transferred to Google Inc. (”Google”). Before initiating this kind of processing, we have conducted a weighing of interests and concluded that this processing is necessary for us to evaluate our business in order to offer the best possible experience when visiting the Website. More information about how Google processes the transferred personal data is found [here], and there you can also find information on how to disable or moderate what data is transferred to Google.
1.3. We sometimes publish photographs on the Website, from events we arrange or participate in. These photographs may be of such nature that they constitute personal data. Before publishing photographs, we always examine them and evaluate if publishing of the photograph may be integrity sensitive. If we find that this is not the case, we publish the photograph, for the purpose of informing about the event or otherwise circumstances under which the photograph was taken.
2. THE PROCESSING
2.1. IVL is part of a group, in which IVL is the parent company. The group also consists of BASTAonline AB (”BASTA”) and eBVD i Norden AB (”eBVD”) . IVL, BASTA and eBVD are joint personal data controllers for the processing of personal data conducted within the group. This means that your personal data will be shared and jointly stored within the group. You will, however, only receive the newsletters and other mailings that you have signed up for. What is mentioned in this policy regarding IVL also covers BASTA and eBVD, and you can enforce your rights against any of the companies.
2.2. IVL is cautions of your integrity and right to privacy, and it is therefore of key importance for IVL that all processing of your personal data is made in a safe and proper manner, in accordance with the applicable laws and in a manner that ensures a safe and appropriate processing. For this reason, your personal data will only be processed for the purposes specified when the personal data was collected, unless you have been informed otherwise and have been given the opportunity to consent, if applicable.
2.3. If you want to know what personal data IVL processes about you, you have the right to request access to these personal data. You also have the right to request rectification or erasure of incorrect personal data. If you are of the opinion that IVL’s processing of your personal data is incorrect, you may request restriction of our processing of the personal data or object to the processing. You may also have the right to so called ‘data portability’. If you want to use any of your granted rights, please contact us on the information given below in section 2.5.
2.4. Other than what is mentioned above, IVL will not transfer your personal data to any third party or transfer them to a country other than Sweden, unless you are given information about this and is given the opportunity to consent, if applicable. For newsletters and other mailings, we always use technology that ensures that addresses of the recipients are not shown.
2.5. If you have any comments about our processing of your personal data, if you want to use any of your in section 2.3 granted rights or if you for any other reason wish to contact us, we are reached using the following information
IVL Svenska Miljöinstitutet AB
Swedish companies reg. no 556116-2446
100 31 Stockholm
010-788 65 00
2.6. You also have the right to contact the responsible supervisory authority, which is the Swedish Data Protection Authority. Contact information is found on their website, www.datainspektionen.se.
3. FOR HOW LONG TO WE STOR THE PERSONAL DATA?
3.1. The term under which we process your personal data depends on the processing – meaning that processing is carried out until the purpose for the processing has been reached. This assessment is made through the following principles.
3.2. Processing of personal data for mailings and newsletters will be made for as long as you wish to receive them. The easiest way for us to become aware that you no longer wish to receive our mailings is if you opt-out from further mailings in accordance with the information provided in each mailing. However, we are regularly follow up our mailings, and should we discover that you have not been opening our mailings, or if you have in other ways been passive regarding them for a continuous period of [one] year, we reserve the right to erase your personal data from our systems. You are however always more than welcome to re-sign up.
3.3. The personal data we collect for seminars, courses and other events are needed in order for us to be able to administrate the event, and under some circumstances in order to send information or handouts before or after the event. We therefore keep your personal data until [thirty] days from the event have passed.
3.4. Personal data collected at the Website, through cookies or Google Analytics, are only processed by us for the period when you are active on the Website. No such data are stored once the session has ended.