Privacy policy

The data controller is Sydsveriges Guidebyrå, organisation number 580119-8937, Björngången 57, 275 63 Blentarp (hereinafter referred to as the “Company”). The Company operates the website www.ssgb.se.

As the data controller, it is our responsibility to ensure that your information is processed correctly and securely in accordance with applicable legislation.

In this privacy policy, we use the term “personal data” to describe information that can directly or indirectly identify a natural person. You have the right to object to our processing of your personal data in certain circumstances. Please read more below under each respective purpose.

It is important that you read and understand our privacy policy before using our Service.

1. What information we collect and why

1.1 Sydsveriges Guidebyrå’s courses and events

Purpose:
To provide Sydsveriges Guidebyrå’s courses and events (hereinafter referred to as the “Service”).

Categories of personal data

We collect and process the following categories of personal data in connection with your use of our Service: name, personal identification number, telephone number and email address. We also collect the name and telephone number of a next of kin (ICE), medical conditions, allergies and medication.

Personal data processing activities performed

We process personal data in the following ways: collection, registration, contact via email, contact via telephone and contact via SMS.

From which sources do we collect your personal data?

The personal data we process has been provided by you.

Who else may have access to your personal data?

The following company may have access to your personal data within the scope of the Service:

• Fienta (booking system)

Legal basis

The legal basis for the processing of personal data is the performance of the agreement with you as a user of the Service.

Your right to object to the processing

This processing of your personal data is necessary for us to provide the Service. If you wish to object to this type of processing, we unfortunately cannot provide you with the Service.

Retention period

We process and store your personal data for this purpose for 3 years from the date when the customer relationship is considered terminated.

1.2 Marketing

Purpose:
To market Sydsveriges Guidebyrå’s courses and events.

Categories of personal data

We process the following categories of personal data for marketing purposes: name and email address.

Personal data processing activities performed for marketing purposes

We process personal data for marketing purposes in the following way: email.

From which sources do we collect your personal data?

The personal data we process for marketing purposes has been provided by you.

Who else may have access to your personal data?

The following companies may have access to your personal data within the scope of our marketing:

• MailerLite (distribution of email campaigns)

• MailerSend (automated email sending)

Legal basis

The legal basis for the processing of personal data is consent. We only process your data for this purpose if you have previously provided us with active consent.

Your right to object to the processing

You can withdraw your consent by emailing your request to christian@ssgb.se.

Retention period

We process and store your personal data for this purpose for 3 years from the date when the customer relationship is considered terminated.

1.3 Product development

Purpose:
To develop the Company’s products.

Categories of personal data

We process the following categories of personal data for product development purposes: images.

Personal data processing activities performed

Analysis for product development purposes.

From which sources do we collect your personal data?

The personal data we process has been provided by you.

Who else may have access to your personal data?

No one. We never disclose your data without your permission.

Legal basis

The legal basis for the processing of personal data is our legitimate interest in developing our services.

This processing is carried out based on a so-called balancing of interests, where we assess that the processing does not significantly infringe on your privacy.

Your right to object to the processing

We value your privacy and promise not to process your personal data for this purpose if you no longer wish us to do so.

You can object to the processing by emailing your request to christian@ssgb.se.

Retention period

We process your personal data for this purpose for 10 years from the date when the customer relationship is considered terminated.

1.4 Statistics

Purpose:
For statistical purposes.

Categories of personal data

We process the following categories of personal data for statistical purposes: IP address and cookie data.

Personal data processing activities performed

Analysis for statistical purposes.

From which sources do we collect your personal data?

The personal data we process has been provided by you.

Who else may have access to your personal data?

The following company may have access to your personal data within the scope of our statistical analysis:

• PostHog (web analytics)

Legal basis

The legal basis for the processing of personal data is our legitimate interest in producing statistics.

This processing is carried out based on a so-called balancing of interests, where we assess that the processing does not significantly infringe on your privacy.

Your right to object to the processing

We value your privacy and promise not to process your personal data for this purpose if you no longer wish us to do so.

You can object to the processing by emailing your request to christian@ssgb.se.

Retention period

We process your personal data for this purpose for 3 years from your first visit to the website.

2. Sensitive personal data

Some types of personal data are particularly sensitive, and we only collect and process such personal data when it is absolutely necessary.

We process the following categories of sensitive personal data: health data.

The legal basis for processing sensitive personal data is consent. We only process your data if you have previously provided us with active consent.

You can withdraw your consent by emailing your request to christian@ssgb.se.

3. Where do we process your data?

We always strive to ensure that your personal data is processed within the EU/EEA, and all our own IT systems are located within the EU/EEA.

4. Your rights

Right of access (data extract)

We are always open and transparent about how we process your personal data. If you would like a better overview of which personal data we process about you, you can request access to that information.

Please note that if we receive a request for access, we may ask for additional information to ensure efficient handling of your request and that the information is provided to the correct person.

Right to rectification

You have the right to have inaccurate personal data about you corrected. Depending on the purpose of the processing, you also have the right to supplement incomplete personal data.

Right to erasure

You can request the deletion of personal data we process about you if:

• The data is no longer necessary for the purposes for which it was collected or processed.

• You object to a balancing of interests we have carried out based on legitimate interest, and your reason for objecting outweighs our legitimate interest.

• You object to processing for direct marketing purposes.

• The personal data is processed unlawfully.

• The personal data must be deleted to fulfil a legal obligation to which we are subject.

Please note that we may have the right to refuse your request if there are legal obligations preventing us from immediately deleting certain personal data, for example accounting legislation. It may also be the case that processing is necessary for us to establish, exercise or defend legal claims.

If we are prevented from complying with a request for erasure, we will instead block the personal data from being used for purposes other than the purpose that prevents the requested deletion.

Right to restriction

You have the right to request that our processing of your personal data is restricted.

If you dispute the accuracy of the personal data we process, you may request restricted processing for the period we need to verify whether the personal data is correct.

If we no longer need the personal data for the specified purposes, but you need it in order to establish, exercise or defend legal claims, you may request restricted processing of the data from us. This means that you can request that we do not delete your data.

If you have objected to a balancing of interests based on legitimate interest that we have used as the legal basis for a purpose, you may request restricted processing while we assess whether our legitimate interests outweigh your interests in having the data deleted.

If processing has been restricted under any of the situations above, we may, in addition to storing the data, only process it to establish, exercise or defend legal claims, protect someone else’s rights, or if you have given your consent.

Right to object to certain types of processing

You always have the right to opt out of marketing and to object to any processing of personal data based on a balancing of interests.

See more about the specific legal bases under each respective purpose.

If you object to direct marketing, we will stop processing your personal data for that purpose and stop all types of direct marketing.

Right to data portability

In certain cases, you have the right to request that the data concerning you and that you have provided to us is transferred to another data controller (known as data portability).

A prerequisite for data portability is that the transfer is technically possible and can be carried out automatically.

Exercising your rights

You exercise your rights by emailing your request to christian@ssgb.se.

5. How we protect your data

We use IT systems to protect the confidentiality, integrity and availability of personal data.

Only those individuals who actually need to process your personal data in order for us to fulfil our stated purposes have access to it.

We have implemented specific security measures to protect your personal data. This means that personal data is stored in systems with restricted access and that encryption is used when transferring data.

6. The Swedish Authority for Privacy Protection

The Swedish Authority for Privacy Protection (IMY) is the supervisory authority responsible for monitoring compliance with data protection legislation/GDPR.

If you believe that we process personal data incorrectly, you can submit a complaint to this authority.

You can contact them by calling +46 8 657 61 00 or by emailing imy@imy.se.

7. Contact information

If you have questions about our processing of personal data, you are welcome to send an email to christian@ssgb.se.

8. Changes to this policy

If we change our privacy policy, we will publish the updated policy here, together with the date of the change.

In the event of significant changes to our policy that substantially alter our privacy principles, we may also notify you in another way, for example by email or by publishing a notice on our website stating that the change has entered into force.

This privacy policy entered into force on 2026-06-01.