Who is the data controller?
Swedish Match North Europe AB, company registration number 556571-6924, 118 85 Stockholm, Sweden, tel: +46 200 113 114, is the data controller for the processing of the personal data you submit to the Snus and Match Museum. If you have any questions about Swedish Match’s processing of your personal data, the easiest way for you to contact us is by email at firstname.lastname@example.org.
For what purposes does Swedish Match process your personal data?
The main reason why we process your personal data is to enable us to perform our obligations to you, e.g. administering your booking enquiry and sending out newsletters. See below for further information on all of the ways in which we use your personal data and the legal basis for our data processing in each case.
When you submit a booking enquiry via the Website, we ask you to enter, amongst other things, your name and contact details, so that we can process your enquiry and any of the services and events (“Event”) organised by the Snus and Match Museum, including but not limited to guided tours, city tours, talks, tastings, or premises rental. When you pay for an Event by credit/debit card, we process the payment information for payment administration purposes.
The legal basis for this processing is our legitimate interest in processing your booking enquiry and, when a Service has been booked, in order to enable both our fulfilment of the agreement with you and our compliance with our legal obligations, e.g. pursuant to the Swedish Bookkeeping Act. If you do not supply the data requested when making your booking, you will not be able to hold the Event you have requested.
We also process your contact data in order to conduct market surveys in conjunction with Snus and Match Museum Events. The legal basis for this processing is our legitimate interest in conducting such surveys in order to enable the evaluation and improvement of our products and services.
We also process your email address for marketing purposes. This marketing comprises newsletters and offers regarding the Snus and Match Museum’s activities and operations that are sent out by email. You have the right to decline receipt of this marketing and can also, at any time whatsoever, choose to unsubscribe from our newsletter and other forms of marketing that you receive by email. To unsubscribe, please contact us at email@example.com or use the unsubscribe link contained in every newsletter/email communication. The legal basis for our processing of your email address is our legitimate interest in marketing the Snus and Match Museum’s activities and operations to existing customers.
How long is the data saved?
Your data will be processed for as long as necessary in enabling us to administer booking enquiries and any Event bookings, to provide you with services, and to handle any complaints and legislative requirements. This period shall not, however, exceed one year after your order was placed in the absence of any legal obligation to hold the data for longer than one year. We will also, provided that you have not declined receipt of newsletters and other marketing by email, use your email address for the marketing of similar operations and activities for a period of up to one year after your most recent order was placed.
For newsletter subscribers
When you sign up for our newsletter, you provide your name and email address, which will then be processed for marketing purposes. The legal basis for this processing is your and our legitimate interest in administering the dispatch of our newsletter.
Your name and email address may, in your capacity as a contact person or in the capacity of your professional role within an organisation, be processed to enable us to send you information about the Snus and Match Museum’s activities and operations that may be of interest to you or the organisation you represent. The legal basis for this processing is our legitimate interest in keeping you informed about the Snus and Match Museum’s activities and operations.
You may contact us at any time – the easiest way is via firstname.lastname@example.org – to unsubscribe from our newsletter. You can also unsubscribe via the link in the newsletter.
We will delete your data as soon as you unsubscribe from our newsletter or otherwise decline to receive marketing from us.
For customers of the Snus and Match Museum store
When you pay by credit/debit card in the Snus and Match Museum store, we process the payment information to enable us to administer your purchase. The legal basis for this is that the processing is needed to enable Swedish Match to fulfil its agreement with you and to enable us to comply with our legal obligations, e.g. pursuant to the Swedish Bookkeeping Act.
For visitors to the Website
When you visit the Website, Swedish Match collects information about your IP address (see also Swedish Match’s Information about cookies). Note that certain other companies besides Swedish Match also collect your IP address when you visit the Website, in connection with the use of third-party cookies. How this occurs, and how you can go about limiting or turning off cookies in your Web browser, are described in Swedish Match’s Information about cookies.
We use your IP address to prevent infringements, incidents and other misuse of our services on the Website, to run statistics on visitors to the Website, and to update and improve the Website. The legal basis for this processing is our legitimate interest in preventing misuse and in having a properly functioning Website.
Who do we share your personal data with?
Swedish Match may share your personal data with other companies within the Swedish Match Group, as well as with collaborating partners, for example when providing IT and marketing services. These recipients only process your personal data on our behalf and in accordance with our instructions. Swedish Match takes all appropriate legal, technological and organizational measures to ensure that your personal data is processed securely, and with an adequate level of security when transferring to, or sharing with, selected recipients of this kind.
Swedish Match may also share your personal data with other companies who process your personal data independently, outside of our control. We only share your information with these companies in order to fulfill our commitments towards you. When your personal data is shared with these companies, which are independent controllers, your personal data is processed in accordance with what is outlined in these companies’ privacy notices.
Swedish Match may also share your personal data with government agencies if we are obligated under the law to do so, or on suspicion of criminal activity.
Where do we process your personal data?
Your personal data will primarily be processed within the EU/EEA but may also be transferred to a country outside the EU/EEA, such as the United States, for example, if we share your information with other companies in the Swedish Match Group.
Swedish Match will only transfer your personal data to a country outside the EU/EEA if there are legal grounds to do so and sufficient guarantees that your personal data will be handled in a lawful manner. In such cases, Swedish Match takes all appropriate legal, technological and organizational measures to ensure that your personal data is processed securely, and with an adequate level of security comparable to the level of protection offered within the EU/EEA.
How long do we save your personal data?
We save your personal data only as long as is necessary for the purpose for which you submitted your data. See more information under each purpose above.
We may also save your personal data for a longer time if it is necessary to fulfill a legal obligation that requires processing in accordance with applicable laws, or so that we can establish, enforce, or defend legal claims.
What are your rights?
You have certain specific legal rights that you can enforce against us. A summary of these rights follows below.
Right to access/extracts from the register. You have the right to know what personal data about you we are processing. Upon request from you, we will provide you with information in writing about our processing of your personal data, free of charge.
Right to data portability. You have the right to request a copy of the personal data you have provided to us in a structured, commonly used and machine-readable format. Provided that it is technologically possible – which is determined by Swedish Match – you also have the right to request that we transfer this personal data to another controller. The right to data portability applies to personal data that is processed via automated means, and is based on an agreement with you.
Correction of erroneous information. You have the right to request that we correct erroneous or incomplete information about yourself.
Deletion of certain data. You have the right to request that we delete your personal data under certain conditions, for example if your personal data is no longer necessary for the purpose for which we collected the data, if you object to a weighing of legitimate interests we have carried out and support for our legitimate interest is lacking, if your personal data was processed in an unlawful manner or if your personal data has to be deleted in order to fulfill a legal obligation.
In certain cases, we must save your personal data despite your request owing to legal requirements such as accounting and tax legislation, or for example if we need to retain certain data in order to establish, enforce or defend a legal claim.
Right to restrict processing of your personal data. You have the right to demand a restriction on our processing of your personal data in certain cases. If, for example, you have contested the fact that your personal data is correct, you can request a restriction on processing for a period of time that will give us the opportunity to check if your personal data is correct.
Right to object to our processing of personal data.
You have the right, under certain conditions, to object to our processing of your personal data.
You have the right to object to processing that is based on the legal grounds of our legitimate interest. However, we may continue processing your data despite your objection to the processing if we have compelling legitimate reasons for the processing that outweigh your privacy interests.
At any time, you have the right to object to our processing of your personal data for direct marketing purposes. If you object to such processing, we will stop sending direct marketing to you without undue delay.
Questions and complaints
If you have any questions regarding our processing of your personal data, or if you would like to present a request about an excerpt from the registry, data portability, correction or deletion – or present an objection or a restriction – please contact us at email@example.com.
If you have a complaint regarding Swedish Match’s processing of your personal data, you have the right to submit such complaints to the Swedish Data Inspection Board.
How do we protect your personal data?
Swedish Match takes the security measures needed to protect your personal data.
Links to other websites
Changes to this Privacy Notice
Swedish Match reserves the right to make changes to this Privacy Notice. Any such changes will be sent you to by e-mail and are also to be published on the Website.
Latest update to this Privacy Notice: 2018-05-25 (Version 1.0)