Data Protection Policy (GDPR)
1. General information on the GDPR
As of 25 May 2018, Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), applies. The GDPR aims to strengthen the protection of personal data of individuals within the European Union by imposing stricter requirements on organisations that process and store personal data.
Matchcentermedia AB is committed to protecting your privacy and processes personal data in accordance with the GDPR and applicable data protection legislation.
This policy describes how your personal data is processed and explains your rights in relation to such processing. By using the services provided by Matchcentermedia AB, you acknowledge that you have read and understood this Data Protection Policy. We encourage you to read this policy carefully before using our services.
2. Our data protection policy
We may collect, store and process certain categories of personal data relating to you, including, but not limited to:
- Personal and contact information, such as name, personal identity number (where applicable), date of birth, telephone number, email address, billing address and delivery address
- Information relating to the services you use or have purchased from us
- Payment history and, where applicable, limited credit-related information
- Information about how you use our services, including interaction data and automated communications sent by Matchcentermedia AB
- Technical data such as browser settings, time zone, operating system, language preferences, IP address and other digital identifiers collected when you visit our website
The processing of such data is necessary for us to fulfil our contractual obligations towards you, to verify your identity where required, and to ensure accurate personal and contact information. Personal data may also be processed for analytical purposes and to improve, develop and optimise our services.
Your personal data will not be sold or disclosed to third parties for marketing purposes without your explicit consent.
3. Sharing of personal data
We take appropriate legal, technical and organisational measures to ensure that your personal data is processed securely and protected against unauthorised access, loss or misuse.
Your personal data may be shared with third parties only where necessary to fulfil our obligations to you, such as service providers and subcontractors supplying business systems, payment services or accounting functions. Such third parties process personal data solely on our behalf and in accordance with applicable data protection laws.
We may also disclose personal data where required by law, regulation or a binding decision from a competent authority, including public authorities such as tax authorities or law enforcement agencies.
4. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and processed, including the performance of our contractual obligations, or for as long as required by applicable law.
Where personal data is processed for purposes subject to statutory retention requirements, such as accounting or tax obligations, the data will be retained for the duration prescribed by applicable legislation and no longer than necessary for each specific purpose.
5. How long we retain your personal data
We retain personal data only for as long as necessary to fulfil the purposes for which the data was collected, including to comply with our contractual obligations towards you and to meet applicable legal requirements.
Where personal data is processed for additional purposes, such as compliance with accounting or tax legislation, the data will be retained only for the period required by applicable statutory retention obligations. Once the retention period has expired, the personal data will be securely deleted or anonymised.
6. Sharing of personal data
We take all reasonable legal, technical and organisational measures to ensure that personal data is handled securely and with an appropriate level of protection, both internally and when shared with third parties.
Personal data may be shared with third-party service providers or subcontractors where necessary to fulfil our obligations to you, such as providers of IT systems, hosting services, payment solutions or accounting services. Such parties process personal data only in accordance with our instructions and under data processing agreements that comply with the GDPR.
Personal data may also be disclosed where required by applicable law or legal process, including to public authorities such as courts, law enforcement agencies or tax authorities.
We do not sell personal data to third parties.
7. Your rights as a data subject
In accordance with the GDPR, you have the right to:
- Request access to the personal data we process about you
- Request rectification of inaccurate or incomplete personal data
- Request erasure of personal data ("the right to be forgotten")
- Request restriction of processing
- Object to the processing of your personal data
- Request data portability, where applicable
To exercise any of these rights, you may contact us using the contact details provided below. We will respond to your request without undue delay and in accordance with applicable law.
8. Complaints and supervisory authority
If you believe that your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with a competent supervisory authority.
In Sweden, the competent supervisory authority is: The Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY)
You may also lodge a complaint with the supervisory authority in the EU/EEA member state where you reside, work, or where the alleged infringement occurred.
Contact: kontakt@matchcentermedia.se