Parties and responsibilities for processing your personal data

The association Alexander Grimeton Veteranradios Vänner, org. 849600-7389 (non-profit association), Radio station Grimeton 72, 432 98 Grimeton, (hereinafter referred to as the association) is the personal data controller for the processing of personal data that takes place within the framework of the association’s activities.

The purpose of the association is to preserve, document and bring the transmitter equipment to the old radio station in Grimeton.

Why do we process your personal data?

In order for the association to be able to conduct its business, personal data is processed for various purposes linked to the business.

The association deals with personal data for administering ongoing association activities (eg course activities, member meetings and other events), communicating with the members (calls for activities etc.) and managing member-related financial transactions (membership fees and course fees etc.).

The personal data is processed when registering for a course, during training and after training for certification.

The association is responsible for the personal data processing of the personal data that takes place at:

• Management of membership in the association
• Association Management
• Participation in the association’s course activities
• Compilation of statistics and follow-up
• Courses arranged by the association
• Contact with member
• Visit our website
• Publishing of material on website and social media

Who do we share personal information with?

The data will not be transferred to third countries and your personal data will not be subject to automated decision making. If the association has to share your personal data with third countries at any one occasion, you will be particularly informed of this.

If you pay by card via PayPal, the specified payment details are handled by PayPal. If you pay by card via Stripe, the specified payment details are handled by Stripe. If you transfer money to our PlusGiro account then the payment details are handled by Nordea. The club’s e-mail is handled by Glesys AB. No personal data is actively given out by the association to these parties.

How long do we save your personal data?

The association will carry out an assessment annually if the purpose of processing the personal data remains. Unless the purposes of processing the personal data remain, the data will be deleted.

Personal data necessary for association administration shall be depleted 24 months after the termination of membership, if the personal data is not necessary for legal obligation or public interest, or other legal basis for which purpose of treatment remains.

Information provided when registering for courses and events held by the club is deleted after the end of the course or event unless the information is necessary for, for example, reporting of activity, legal obligation, public interest or other legal basis for which purpose for treatment remains.

Logs on the website are saved up to 30 days with detailed information (eg IP address, visit time and client) and then in aggregated form without details.

Security

We safeguard your privacy and always strive to protect your data in the best possible way in accordance with the data protection regulation and other data protection laws that apply at the time of the treatment.

What rights do you have?

You who have registered in the association have several rights that you should know about.

You have the right to obtain a registry extract regarding the association’s processing of your personal data. At the request of the registry extract, the association must provide you with a copy of the personal data that is being processed. For any additional copies you request, the association may charge a reasonable fee based on administrative costs.

You have the right to have your personal data corrected if they are incorrect, incomplete or misleading and the right to limit the processing of the personal data until they are changed.

Under certain circumstances you have the right to be deleted:

• If the data is no longer needed for the purposes for which they were collected
• If the treatment is based on the individual’s consent and you withdraw the consent
• If the treatment is for direct marketing and you oppose the processing of the data
• If you oppose personal data processing that takes place within the framework of the exercise of authority or after a balance of interests and there are no legitimate reasons that outweigh your interests
• If the personal data has been treated illegally
• If deletion is required to fulfill a legal obligation
• If the personal data relates to children and has been collected in connection with the child creating a profile in a social network

You also have the right to withdraw a consent, automatically oppose decision-making, profiling and objecting to direct marketing.

You may at any time exercise your rights by requesting access to and rectification or deletion of personal data, request limitation of treatment or object to treatment. Contact the board to exercise your rights