iv. you have objected to the processing as set out in section 10.3, while pending
verification of whether our legitimate grounds override yours.
We will take all reasonable measures possible to notify all recipients of your personal data as set
out in section 8 above if we have rectified, erased or restricted access to your personal data
after you have requested us to do so, provided that it is not impossible or if it would involve a
disproportionate effort. At your request, we will inform you about who we have disclosed
personal data to.
9.3 Your right to object to our processing of your personal data
You have the right to object to our processing of your personal data if we base the processing on
a legitimate interest or public interest as a legal basis (see section 4 above). When you object,
you must provide reasons for your objection that are related to your specific situation. If you
object to a processing, we will only continue the processing if we have compelling legitimate
grounds to continue the processing which override your specific reasons, interests, rights and
freedoms or if the processing is necessary to establish, exercise or defend legal claims.
9.4 Your right to object to direct marketing including profiling (if applicable)
If you do not want us to process your personal data for direct marketing purposes, which include
profiling, you always have the right to object to such processing (including profiling) by
contacting us. Once we have received your objection, we will cease to process your personal
data for this purpose.
9.5 Your right to withdraw your consent
If we process your personal data based on your consent as a legal basis (see section 4 above),
you have the right to withdraw your consent at any time by contacting us. We are then not
entitled to continue the processing of your personal data if there is no other legal basis for the
processing. You will find our contact details in section 2 of this Privacy Notice.
9.6 Your right to data portability
You have the right to data portability when we process your personal data by, for example,
automated means and when the legal basis for the processing is your consent or performance of
a contract. Your right to data portability means that you have the right to receive the personal
data that you have provided to us in a structured, commonly used, and machine-readable
format and to transfer this personal data to another data controller. You may also request that
we transfer the personal data directly to another data controller, provided that such direct
transfer is technically possible.
9.7 Your right to lodge a complaint with the relevant supervisory authority
You always have the right to lodge a complaint with the relevant supervisory authority if you
believe that our processing of your personal data violates the GDPR. This is particularly the case
in the member state where you have your habitual residence, place of work or where the
infringement was committed. The supervisory authority in Sweden is the Swedish Authority for
Privacy Protection (IMY). You can contact IMY through the e-mail address imy@imy.se or
through the contact details provided on IMY's website, available here.
10 We protect your personal data
Our mission is that you feel comfortable when we process your personal data. We have
therefore implemented both technical and organizational security measures, including access
restrictions and regular internal controls, to protect your personal data against, for example,
unauthorized access, alteration, or loss. In the event of a personal data breach that could
significantly affect you or your personal data, such as the risk of fraud or identity theft, we will
9