Handling of personal data

From 25 May 2018, the new data protection regulation (GDPR) applies throughout the EU, it replaces the previous Personal Data Act (PUL). Norrbotten's museum complies with this regulation.

What is considered personal data?

The term personal data includes all information that can identify an individual person who is alive. Such information can be name, social security number, address, photographs, audio recordings or video recordings.

Legal basis for our processing of personal data

The processing of personal data means all handling that is done with personal data, regardless of whether it takes place electronically or otherwise. We process personal data based on the business we conduct and to fulfill the legal obligations incumbent upon us.

E-mail

When you send or receive e-mail from Norrbottens Museum, it means that your personal data will be handled by Norrbottens Museum. Data that is stored is primarily that which you share with us when you contact us. Your personal data may be disclosed to other authorities or companies if we have a legal obligation to disclose them. Your data can also be handled by our personal data assistants.

Safety

Norrbotten's museum uses high security for stored data. Encryption, limited access and confidentiality protect the personal data we store.

Your rights

The regulation includes the following rights:

  • You have the right to receive extracts of your personal data and other data we have stored about you, such as photographs
  • You have the right to be deleted from our systems
  • You have the right to receive correction of information
  • You have the right to revoke consent to the extent that consent is used

Region Norrbotten's handling of personal data

Updated: