GDPR and Data Protection

Data Protection Regulation (GDPR)

gentle-harbor complies with the EU General Data Protection Regulation (GDPR) and Swedish data protection legislation in all processing of personal data.

Your rights under GDPR

Right of access

You have the right to obtain confirmation as to whether or not we are processing personal data concerning you and, if so, access to such data.

Right to rectification

You have the right to have inaccurate personal data corrected without undue delay.

Right to erasure

You have the right to have your personal data deleted if:

• The data is no longer necessary
• You withdraw your consent
• You object to the processing
• The data is processed unlawfully

Right to restriction

You have the right to request that the processing of your personal data be restricted under certain circumstances.

Right to data portability

You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and transmit it to another controller.

Right to object

You have the right to object to the processing of your personal data based on legitimate interest.

Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time.

How to exercise your rights

To exercise any of your rights, contact us via:

Email: [email protected]
Address: Storgatan 45, 114 55 Stockholm, Sweden

We will respond to your request within 30 days.

Complaints to supervisory authority

If you believe that we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm
Web: www.imy.se

Processing of personal data

We process the following categories of personal data:

• Identification data (name)
• Contact details (email address)
• Service information (chosen program)
• Technical data (IP address, browser)

Purpose and legal basis

We process your personal data for the following purposes:

• Manage your inquiry (legal basis: performance of a contract)
• Communicate with you (legal basis: legitimate interest)
• Improve our services (legal basis: legitimate interest)
• Comply with legal requirements (legal basis: legal obligation)

Retention period

We store your personal data only as long as necessary for the purposes described in this policy or according to legal requirements.

Inquiries via forms: 24 months after last contact
Customers: 7 years after the end of the business relationship (bookkeeping requirements)

Security measures

We take appropriate technical and organizational security measures to protect your personal data against:

• Unauthorized access
• Loss or destruction
• Unauthorized use
• Accidental alteration