9.1 Our responsibility for your rights
9.1.1 In its capacity of personal data officer Eckerö Line is responsible for ensuring that your personal data is used in accordance with legislation and that your rights are observed. You may contact us at any time if you wish to exercise your rights. You can find our contact details at the end of this Integrity Policy.
9.1.2 Eckerö Line has an obligation to respond to your request to exercise your rights within a month of you submitting your request. If your request is complicated, or if a large number of such requests have been received, we are entitled to extend the processing time by two months. If we believe that we are unable to meet your request we are obliged, by at the latest a month from receipt of your request, to notify you of the reasons for this and inform you that you have the right to lodge a complaint with the regulatory authority.
9.1.3 You will not be charged for any information, communication or measures that we implement. However, if your request is manifestly unfounded or excessive, we may charge an administrative fee for providing the information or taking the action requested, or refuse to act on your request altogether.
9.2 Your rights to access, rectify, delete and restrict processing of data
9.2.1 You have the right to request from Eckerö Line
a) Access to your personal data. This means that you have the right to request access to personal data that we store concerning you. You also have the right to be provided, at no cost to yourself, with a copy of the personal data that we are processing. We have the right to charge an administration fee for any additional copies. If you make a request in electronic form, e.g. via email, we will provide you with the information in a commonly-used electronic format.
b) Rectification of your personal data. At your request or on our own initiative, we will correct, anonymise, delete or supplement data that we know to be inaccurate, incomplete or misleading. You also have the right to supplement any incomplete personal data if something relevant is missing.
c) Erasure of your personal data. You have the right to request that we delete your personal data if there is no compelling reason for us to continue processing this data. Personal data should, therefore, be deleted if:
(i) it is no longer needed for the purpose for which we collected it
(ii) we use your data on the basis of consent provided by you and you withdraw your consent
(iii) you object to us processing your data after a legitimate interest assessment and we have no compelling interest that overrides your interests and rights
(iv) we have used the personal data in an unauthorised manner
(v) we have a legal obligation to delete personal data, or
(vi) you are a minor and we have gathered the personal data in connection with the provision of services from the information society.
However, there may be legal requirements or other compelling reasons that prevent us from immediately deleting your personal data. We will then stop processing your personal data for purposes other than compliance with the law or where there are no compelling legitimate grounds for doing so.
d) Right to restrict processing. This means that we temporarily restrict the processing of your data. You have the right to request restriction when:
(i) you believe that your data is incorrect and you have requested for it to be corrected pursuant to Item 9.2.1b), during the period we check the accuracy of the data in question
(ii) the processing is unlawful and you do not want the data to be deleted
(iii) we, as personal data administrators no longer need the personal data for our purposes, but you need it to determine, enforce or defend a legal claim, or
(iv) you object to its use pursuant to Item 9.3.1, while awaiting a review of whether our key interests outweigh yours.
9.2.2 Here at Eckerö Line we will make all reasonable efforts to inform anyone who has been provided with your personal data pursuant to Section 7 above that we have corrected, deleted or limited access to your personal data after you have requested that we do so. If you request information on recipients of your personal data, we will inform you about the recipients.
9.3 Your right to object to processing
9.3.1 You have the right to object to such use of your personal data which we make on the strength of balancing of interests or in the public interest (see Section 3 above). If you object to such processing, we will only continue to process your data if we have compelling reasons for doing so that override your interests.
9.3.2 If you do not wish Eckerö Line to make use of your personal data for the purposes of targeted marketing you at all times have the right to object to such use by notifying us of this. Once we have received your objection, we will cease to use your personal data for the purpose of such marketing.
9.4 Your right to withdraw consent
9.4.1 With respect to use which has as its legal basis your consent (see Section 3 above) you may at any time withdraw your consent by contacting us. You can find our contact details at the end of this Integrity Policy. If you withdraw your consent, you may not be able to use our services as intended.
9.5 Your right to data portability
9.6 You have the right to data portability. This means the right to receive your personal data in a structured, commonly used and machine-readable format, and to request that this data is transmitted to another personal data controller. The right to data portability only applies when the processing is carried out by automated means and our lawful basis for processing your data is your consent or for the fulfilment of an agreement between you and us. This requires that you for instance have the right to receive and transmit all personal data you have submitted in order to create your user account with us, such as your contact details and demographic data.
9.7 Your right to complain to a supervisory authority
9.8 You have the right to lodge a complaint with the Swedish Data Protection Authority (Datainspektionen) concerning our processing of your personal data.