Stiftelsen Länsmuseet Västernorrland Privacy Policy
Last updated: 2025-05-09
(This privacy policy has been machine translated. Please contact us via hej@vnmuseum.se if you find any errors or have suggestions for improvement.)
Our handling of personal data
Västernorrland County Museum Foundation protects personal privacy and always strives for a high level of data protection. For example, we do not pass on information from our mailing lists. This privacy policy explains how we collect and use any personal information. It also describes your rights under the Data Protection Act.
Personal data and processing of personal data
Personal data is all kinds of information that can be attributed to a living natural person. For example, images and sound recordings processed on a computer can be personal data even if no names are mentioned. Encrypted data and various types of electronic identities (e.g. IP numbers) are personal data if they can be linked to natural persons.
Who is responsible
The person who decides how the personal data is to be processed is called the data controller, for example a municipality, an authority or an organization.
The Västernorrland County Museum Foundation is responsible for the information we store. Corporate registration number 888000-3143. Address: Murbergsvägen 31, 871 50 Härnösand, Sweden. If you have any questions about your personal information, you can contact us via hej@vnmuseum.se
Any changes to the privacy policy
We may make changes to the privacy policy. It can always be found in the footer menu on our website www.vnmuseum.se.
Personal data we collect and the purpose:
Information in connection with bookings for events, tours, weddings, school visits and other activities.
The following information may be processed about you:
Name, email address, telephone number, postal address, personal identification number and organizational affiliation and in some cases payment information. In some cases, information is collected from another person in your group who has booked an activity.
The data is processed for these purposes and on the following legal basis:
Administer your booking
The processing is necessary to enter into an agreement regarding the booking and to administer the agreement. If the agreement is not concluded with you personally as the contact person, the processing is based on a balancing of interests. Our legitimate interest in processing your personal data is to administer your booking.
Retain data for accounting purposes and other legal obligations
The processing is necessary to fulfill a legal obligation.
How long will your data be saved:
The data is retained for 18 months after the activity you have booked has been completed. Your data may be retained for a longer period of time to fulfill our legal obligations, including under the Accounting Act (1999:1078).
For those of you who contact the museum with questions, inquiries or have comments regarding our operations
The following data is processed about you:
Name and contact details. In some cases, information about your position, profession or education or other information that is relevant to the current situation.
The data is processed for these purposes and on the following legal basis: Administer contact with you
The processing is based on a balancing of interests. Our legitimate interest in processing your data is to be able to answer your questions, meet your requests and be able to improve our operations based on your views.
How long will your data be stored:
Your personal data will be stored until we have answered your questions and/or registered your views, which is normally a period of 18 months thereafter. In some cases, your data may be stored longer in accordance with law, to defend a legal claim, because you have given your consent or on the basis of a balancing of interests or a public interest.
For those of you applying for a job or internship
The following information is processed about you:
Name, social security number, postal address, telephone number, information about education and work experience, information in a personal letter, information in a CV and references. Information may also be obtained from consultants who help us in the recruitment process.
The information is processed for these purposes and on the following legal basis:
Administer and enable an efficient recruitment process
The processing is based on a balancing of interests. Our legitimate interest in processing your personal data is to be able to handle your application in our recruitment process in an efficient and correct manner.
Comply with the rules on providing information about qualifications according to the Discrimination Act (2008:567)
The processing is necessary to fulfill a legal obligation.
How long is your information stored:
Personal information that we process about you is normally stored for as long as is necessary for the current recruitment process. If the process is completed and you are not offered the position, we will delete your data. If you have given your consent, your personal data may be retained for a longer period of time to facilitate future recruitment processes. Data may also be ma to be saved for a longer period of time to fulfill our obligations under the Discrimination Act (2008:567) in the event that you have been selected for a job interview or offered the position. In these cases, the data is stored for a maximum of 2 years.
For those who receive newsletters and other mailings
The following data is processed about you:
E-mail address. In some cases, data about name, address, position, professional role and organizational affiliation is processed. In some cases, data is collected from news sources and company and organization websites so that we can contact you with information about our activities and our business that may be of interest to you, especially in your professional role.
The data is processed for these purposes and on the following legal basis:
Dispatch of newsletters and other information
The processing is based on a balancing of interests. Our legitimate interest in processing your personal data is that you have notified us that you wish to receive our newsletter or that the museum should be able to convey information about its activities to people who may be interested in our activities and exhibitions.
How long will your data be saved:
Your data will be deleted when you indicate that you no longer wish to receive our newsletter. For mailings sent to you because you have previously participated in activities arranged by the museum, data will be saved for a maximum of 18 months after the last activity you participated in. If you have given your consent for the museum to contact you, we may, however, keep data for a longer period.
For those of you who visit our storage facilities/archive
The following data may be processed about you:
Name, e-mail address, postal address, telephone number, organizational affiliation, social security number and other information provided in connection with justification for loans or visits and in some cases payment details.
The data is processed for these purposes and on the following legal basis:
Administer your visits to our archives and warehouses
The processing is necessary to fulfill the contract with you.
Documentation of visits to storage facilities for security reasons
The processing is based on a balance of interests. Our legitimate interest in processing your personal data is to prevent and investigate crimes and to investigate accidents.
Retain data about visits to warehouses for security reasons and for traceability
The processing is based on a balance of interests. Our legitimate interest in processing your personal data is to prevent and investigate crimes and to investigate accidents and to trace these incidents back in time.
Retain data for accounting purposes
The processing is necessary to fulfill a legal obligation.
How long your data is stored:
When visiting our archives or warehouses, the data is stored for a maximum of 18 months after your visit for administrative reasons. Data about visits to the storage rooms is retained for security reasons and for traceability for 5 years after your visit. Your data may be retained for a longer period of time to fulfill our legal obligations, including under the Accounting Act (1999:1078).
If your data is submitted to or is in our collections and our cultural history material:
The following data may be processed about you within the framework of our collections:
Name, address, gender, personal identity number, citizenship, e-mail address, telephone number, birthday, year of birth, registry number, education/profession/employment, place of birth, film, audio recording, image, interests, opinions, experiences, statements about third parties, birth and death data, marital status, sensitive data such as medical condition, sexual orientation, political residence, ethnicity and functional variations. In some cases, we collect data indirectly in connection with documentation, collection, research or through other actors who share cultural history content with the museum.
The data is processed for these purposes and on the following legal basis:
Collecting material of cultural and historical value
The processing is carried out on the basis of a public interest. Sensitive data about you are only processed in situations where you have clearly made this data public or where there is an important public interest in preserving the data.
Communicating material of cultural and historical value to the public, for example through exhibitions, publications and posting on the internet and social media
The processing is carried out on the basis of a public interest. Sensitive data about you are only processed in situations where you have clearly made this data public or where there is an important public interest in preserving the data.
Communicating material of cultural and historical value for research
The processing is carried out on the basis of a public interest. Sensitive data about you are only processed in situations where you have clearly made this data public or where there is an important public interest in preserving the data.
Preserving and archiving material of cultural and historical value for future generations
The processing is carried out on the basis of a public interest. Sensitive information concerns Your data is only processed in situations where it is necessary for archiving purposes in the public interest, scientific or historical research purposes.
How long is your data stored:
The data is processed for as long as it is necessary for the purposes of the processing. To determine whether personal data should continue to be stored, we assess whether the material has a continuing cultural and historical value and a public interest in processing the data still exists. Personal data is discarded, among other things, when material is damaged or is otherwise no longer relevant to preserve. Preservation may also take place on the basis of historical and scientific research purposes. Data may in other cases be stored in accordance with legal requirements or if you consent to it.
Gifts, donations and loans to or from our collections
Name, contact details (e-mail, address, telephone number) and in some cases payment details.
The data is processed for these purposes and on the following legal basis:
Administering the giving of gifts and donations and the deposit and lending of objects of cultural and historical value
The processing is necessary to enter into agreements regarding gifts, donations and loans and to administer the agreement.
Retaining data for accounting purposes
The processing is necessary to fulfill a legal obligation.
How long will your data be stored:
The data is retained for administrative purposes for 12 months after the gift, donation or deposit or loan has been completed. Your data may be retained for a longer period of time to fulfill our legal obligations, including under the Accounting Act (1999:1078) or if there are reasons to retain data based on a public interest or on the basis of historical and scientific research purposes.
Information mailings and newsletters
The museum will process your personal data to provide information about our activities and events. In some cases, your information may be used to send you information about our business until you object to being contacted by us for this purpose.
Where is the information obtained from?
We only obtain personal data from information you have provided to us, not from third parties.
When you send us an e-mail with personal data that is to be saved, we transfer it to an appropriate system.
Personal data is always processed within Sweden.
Personal data is never saved longer than necessary.
Your rights as a data subject
All information about your rights can be found on the Swedish Data Protection Authority's website:
https://www.imy.se/en/individuals/data-protection/
Right of access (register extract)
If you would like to know more about which personal data we process about you, please contact us.
Right to rectification and/or erasure
In accordance with applicable data protection legislation, you have the right to access information about the personal data we process about you and the right to request rectification of your personal data.
Under certain conditions, you also have the right to request the erasure of personal data or restriction of the processing of your personal data or to object to our processing. You also have the right, under certain conditions, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and have the right to transmit these to another data controller.
In cases where the processing of personal data is based on the legal basis of consent, you have the right to withdraw all or part of the consent given at any time with effect from the date of withdrawal. You also have the right to object at any time to the processing of your personal data for direct marketing and profiling or which is otherwise based on a public interest or a balancing of interests.
If you have any complaints regarding our processing of your personal data, you have the right to file a complaint with the Swedish Data Protection Authority or another competent authority that supervises the museum's handling of personal data.
How personal data is protected
We use IT systems to protect the confidentiality, integrity and access to your personal data. We have taken special security measures to protect your data against unlawful or unauthorized processing. Only those people who actually need to process your data have access to it.
Swedish Authority for Privacy Protection's
Swedish Authority for Privacy Protection's (IMY) is responsible for monitoring the application of the legislation. Anyone who believes that personal data has been handled incorrectly can file a complaint with the IMY If a personal data incident occurs, we are obliged to report it to the IMY. An incident is an event that leads to the accidental or unlawful destruction, loss or alteration of your personal data. It can also be if the event leads to unauthorized disclosure of or unnecessary access to the processed personal data. The incident must be reported to the Swedish Data Protection Authority within 72 hours of its discovery. Read more on https://www.imy.se/en/organisations/forms-and-e-services/notification-of-a-personal-data-breach/