Privacy policy & cookies

Due to the fact that the European General Data Protection Regulation (GDPR) came into effect and thus replaces the Swedish Personal Data Act (PUL), this principle document has been drafted. The document clarifies how the current association conducts its activities and how we therefore handle personal data. This policy also explains how our website leader7-sam.se collects and processes your data, what choices and options you have, and how you can exercise your rights.

We believe that the protection of personal data is important and strive to design our activities and website with respect for the visitors' privacy. Our starting point is not to process more personal data than is necessary for the purpose and to use the least privacy-sensitive data.

The association's activities

The association Leader 7-sam Värmland was established in 2022 and is a Swedish publicly governed non-profit association. The activities are conducted based on a strategy for the leader area developed in a tripartite partnership and approved by the Swedish Board of Agriculture. The association works with applications for project support during the EU program period 2023–2027. The three sectors, public, private, and non-profit, collaborate with locally led development through the leader method, based on an agreement with the Swedish Board of Agriculture. The leader area encompasses the entire geographical area and all residents in the seven municipalities of Arvika, Eda, Hagfors, Munkfors, Sunne, Säffle, and Torsby municipalities. The start date for the association's support-related activities was 2023-01-03. After the last final payment of a project support mediated through the Association Leader 7-sam Värmland's project management, EU regulations state that support-related material must be saved and made available for an additional 10 years. This, combined with Swedish legislation, such as the Accounting Act, means that personal data is handled and will need to be saved for a long time within this association.

What a personal data is, how it is collected, and how it is used

Any information that can be directly or indirectly attributed to a living individual is considered a personal data according to the Personal Data Act. When a name is combined with other information that allows the person to be traced and identified, this is regarded as a personal data. This includes, for example, address, email address, phone number, organizational affiliation, and IP address. Photographs and audio recordings of individuals processed on a computer can also be personal data even if no names are mentioned. Images where individuals are clearly visible on the website are a personal data.

We process names, email addresses, and phone numbers provided to us via contact forms on the website. The personal data is processed to take requested actions, such as answering questions or sending materials. By processing, we mean all actions taken with the personal data in question. This can involve collection, registration, and organization as well as processing, storage, and use. The personal data may also be used for marketing project support, invitations to meetings, and other contacts regarding our project support.

Employees and elected representatives within the association are also registered in accordance with the requirements associated with the current payroll and accounting system. The employees and elected representatives are also included in the email list for Leader 7-sam's digital newsletter and are registered in a membership register. The association Växtlust Värmland conducts its own and manages others' projects. During the project period a project is implemented, the association's staff and board manage the project owner's information and data. Information relevant to the project's implementation is stored in a binder or digitally within the Swedish Board of Agriculture's IT system.

To start a project within Leader 7-sam Värmland, a formal application is required. No individual can own a project, but all legal entities that have been granted a project have initially submitted an application through a private person's personal identification number. The application for project support is made via the Swedish Board of Agriculture's website. The category of stakeholders without any completed application step in the Swedish Board of Agriculture's IT system is the only category above where it is possible to remove contact details for those who no longer wish to be recorded within the activities of the Association Leader 7-sam Värmland. 

When visiting the website and downloading documents, we automatically process information that under certain conditions may constitute personal data. This may include data about time, date, downloaded file, file size, volume of transferred data, browser, language settings, operating system, referring domain, and IP address. The purpose of processing this type of information is to provide an interesting, secure, and user-friendly website.

Legal basis

The legal basis for our processing of personal data is a legitimate interest in marketing our services and project support, communicating with customers, suppliers, and other stakeholders, as well as offering an interesting, secure, and user-friendly website. In some cases, the legal basis is that the processing of personal data is necessary to fulfill a contract or to take action at the request of the person who provided the personal data before a contract is concluded. Regarding so-called cookies, the legal basis is consent. More information about this processing is provided in the section on cookies and similar technologies below.

Storage period

In general, we do not store personal data longer than necessary to fulfill the purpose of the processing. The category of stakeholders without any completed application step in the Agricultural Agency's IT system is the only category above where it is possible to remove contact details for those who no longer wish to be recorded within the activities of the Association Leader 7-sam Värmland.

Transfer to third parties

Our starting point is not to disclose personal data to independent third parties unless it is necessary to fulfill our obligations under contract or law. This concerns, for example, our suppliers in areas such as information security, IT, shipping and logistics, finance, and marketing as well as project accounting. We do not sell your personal data or allow any third party for other reasons to use personal data provided to us for their own purposes. Exceptions are certain technical information that under specific conditions is shared with third parties as described below.

Security

We have routines and working methods to ensure that your personal data is handled securely. The starting point is that only individuals within our organization who need the personal data to perform their job duties should have access to it. Our security systems are developed to protect against intrusions, destruction, and other changes that may pose privacy risks.

Transfer to countries outside the EU/EEA

Normally, we only process personal data within the EU/EEA. However, your personal data and technical information may, in certain situations, be transferred to recipients outside the EU/EEA that have an adequate level of protection for personal data. Exceptionally, personal data may also, after we have taken specific security measures, be transferred to recipients outside the EU/EEA that lack an adequate level of protection for personal data.

Rights regarding personal data

You have the right to request and receive access to your personal data without unnecessary delay, to have your personal data corrected or, in certain cases, deleted. You also have the right to have the processing of your personal data restricted and to have your personal data transferred to someone else. Finally, you have the right to request that your personal data not be used for direct marketing. If you have questions or are not satisfied with how we handle your personal data, you are always welcome to contact us. There is also an option to contact the competent supervisory authority.

Changes

This Privacy Policy is continuously updated, and we recommend that you regularly check for any changes before using the website.

Links

Our website sometimes contains links to other websites. Those websites are normally not under our control and are not covered by this privacy policy. Therefore, you are encouraged to review the privacy policy of the website before providing your personal data.

How your personal data is processed

The following sections explain what types of data we may process about you and for what purposes. We also explain how the data is collected and how long the data is retained.

Collection of web statistics

When you visit our website, we collect logs that contain network identifiers and timestamps using a provider. We collect this data so that we can see how many users visit our website. Our legal basis for processing is our legitimate interest in knowing how our website is used. The data collected through these logs is immediately anonymized and therefore not stored in our systems.

Cookies and similar technologies

When you visit our website, you are asked to indicate whether you consent to cookies that are used, among other things, to identify you as a returning visitor and analyze the usage of our website.

We use cookies to provide our website, to collect web statistics, and to keep track of your choices when you log in.

Your browser or device allows you to change the settings for the use and extent of cookies. For example, you can choose to block all cookies, only accept certain cookies, or delete cookies when you close your browser. Please note that some parts of our website may not function if you block or delete cookies. For more information about cookies and how you can change your browser settings, you can visit www.aboutcookies.org or www.allaboutcookies.org.

With whom the data is shared

We will not share, sell, transfer, or otherwise disclose your data beyond what is stated in this policy, unless we are required to do so to fulfill a legal obligation or if we have obtained your consent for such disclosure. This does not exclude that we may use data processors who process data on our behalf in accordance with written data processing agreements and our instructions. Data processors who have access to your data (e.g., when we use a third party to store data on a server) are not granted any right to use your data for purposes other than those stated in this policy.

Where the data is processed

We always strive to process your data within the EU/EEA. However, your data may, in certain situations, be transferred to and processed in a country outside the EU/EEA. We will then take all reasonable legal, technical, and organizational measures to ensure that your data is handled securely and with an adequate level of protection comparable to and at the same level as the protection offered within the EU/EEA.

Your rights

Right of access

You have the right to request a copy of the data we process about you. The copy is free to request.

Right to rectification

You have the right to correct inaccurate or incomplete data about yourself.

Right to be erased

You have the right to request the deletion of your data in cases where the data is no longer necessary for the purpose for which it was collected. However, there may be legal obligations that prevent us from immediately deleting parts of your data.

Right to data portability

You have the right to request that your data be transferred from us to yourself or to another provider. However, there may be legal obligations that prevent us from transferring parts of your data.

Right to object

You have the right to object to the processing of your personal data that we carry out based on balancing of interests. You must then specify which processing you are objecting to. If your personal data is processed for direct marketing, you always have the right to object to the processing at any time.

Right to restriction

You have the right to request a temporary restriction of the processing of your personal data. This means that we temporarily move the personal data to another processing system or make the data unavailable to a user.

Right to withdraw consent

You have the right to withdraw your consent for information dissemination at any time by contacting us using the details below.

Right to lodge complaints

You have the right to lodge a complaint with us or with the competent supervisory authority at any time.

How to exercise your rights

If you wish to exercise any of your rights, you are welcome to send us a message. If you wish to lodge a complaint with a supervisory authority, we ask you to contact the Data Inspection Authority at www.datainspektionen.se.

Changes to this policy

If we make changes to this policy, we will notify you by publishing the updated version on the website leader7-sam.se. If the changes are significant, we will also notify you appropriately and, if required, ask for your consent.

Who is the data controller?

The association Leader 7-sam Värmland (org. no. 802540-3786) is the data controller for the processing of your data under this policy.

How do you contact us?

Leader7-sam.se has a person responsible for data protection issues. If you have any questions regarding this policy, the processing of your data, or how to exercise your rights, you are welcome to contact us via email at info@leader7-sam.se.

The privacy policy was last updated on 2023-02-14.