Privacy policy and conditions

Gifts to Naturarvet are covered by the Swedish Gift Act, once a gift has been received by Naturarvet , there is no possibility for the donor to change his mind, but before the gift is made, the donor has no obligation to give a gift. The General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as GDPR) protects your personal data and how it is processed at Naturarvet.

Personal data is information that can be linked to an individual's identity, such as a name (if unique or combined with e.g. contact details), social security number, contact details, online identifier, bank accounts, facial image or any other information that can be linked to an identifiable person.

The data controller is the legal entity that collects and processes personal data and is responsible under GDPR Art.5.2. The data controller is: Insamlingsstiftelsen Naturarvet (hereinafter referred to as Naturarvet) Org.nr 802424-1393 Address: Björksäter 1, 64991 Sparreholm Phone: 070-648 47 89 E-mail: naturarvet@naturarvet.se Website: https://naturarvet.se

Data processors are legal entities that process personal data on behalf of Natural Heritage. This may, for example, be suppliers we work with to run our business, such as IT suppliers or printers. However, it is always Naturarvet that is responsible for the processing of personal data and we always enter into agreements with the data processors, which state that they may not process personal data for any other purpose than what Naturarvet has allowed.

Pseudonymization is the processing of personal data in such a way that the personal data can no longer identify a specific data subject without the use of supplementary information.

A data subject is a natural person who visits our website, receives newsletters, gives us gifts, orders gift certificates or otherwise provides personal data to Naturarvet. Naturarvet never registers personal data for children other than when a data subject has provided a child's name or e.g. facial image in order to receive a gift certificate. Data subjects have rights regarding how personal data is processed according to GDPR Art. 5.1 and applicable points under Art. 12-19, 21, 22 which concern the right to receive information about processing, the right to access processed data and the purpose of the processing, the right to correct data, the right to erase data, the right to restrict the processing of data, the right to object and the right to lodge a complaint with the supervisory authority, which in Sweden is the Data Inspectorate. You can read more about how to file a complaint here.

A third party is a natural or legal person, public authority, institution or other body that is not one of the above, or the persons who, under the direct responsibility of the controller or processor, are authorized to process the personal data and who performs a public task or provides, for example, a service or a technical platform where the collection of certain personal data is necessary to provide the service. Naturarvet never processes personal data with third parties as recipients for purposes other than those listed under the heading "Purpose" below.

The purpose of Natural Heritage's collection and processing of personal data is based on legitimate interest (GDPR Art.6.1.f). The concept of legitimate interest means that Naturarvet through its activities as a fundraising organization has a legitimate and balanced interest in collecting and processing personal data linked to donors and others who communicate with Naturarvet in various roles. The purpose of collecting and managing personal data may be as follows:

• Signing up to receive newsletters. The information collected is at least name and e-mail address but may also include other contact information and social security number. The data is stored at Naturarvet or personal data assistant as long as the data subject continues to receive newsletters and is anonymized or deleted upon request or at the latest one year after e-mail is no longer received at the registered e-mail address.
• Completion of donation by the data subject to Naturarvet. Data collected may include name, contact details, social security number, bank, giro or plusgiro number, mobile number associated with Swish payment, relationship to another person (e.g. in the case of a holiday or memorial gift). If the data includes an e-mail address, this will be registered as a recipient of newsletters until the data subject requests unsubscription from that service. The data is stored at Naturarvet or personal data assistant as recommended by Giva Sweden for up to three years after the last donation received, at which time they are pseudonymized or deleted. The reason for storing the data during this period is that data subjects often make recurring donations. In some cases, data may be stored for a longer period, e.g. when personal data is linked to the fact that the donation relates to a geographically specified location with representation on our website (forest plots, umbrella tree, etc.).
• To enable good service, such as handling donor queries, correcting incorrect data or sending information. Data collected may be deleted for other purposes. Data is retained for the duration of a project and for no longer than the duration of the other purposes.
• Analyze donor data for marketing purposes or to send offers of a general or targeted nature. Data collected may be screened for other purposes. Data is stored for as long as a campaign or project is ongoing and no longer than the other purposes indicate.
• Manage systems and produce statistics on donors and gifts as aggregated data (i.e. without identifying donors as individuals). Data collected may be screened for other purposes. Data are archived pseudonymously.
• Archiving in accordance with the Swedish Bookkeeping Act (1999:1078). Information collected may be such as is included on archived vouchers, e.g. name, account information, message text, etc. Information stored as vouchers at Naturarvet or with a third party must, according to the Swedish Bookkeeping Act, be archived for seven years, whereby Naturarvet deletes the information during the following year.
• Acquisition of forest. Data collected is linked to the owner of the property subject to potential forest acquisition or to the person involved in the documentation or management of the forest. Information can be obtained from third parties such as Lantmäteriet or providers of platforms that provide personal data. Data is stored as long as the potential acquisition of the forest is relevant up to three years or if the forest is acquired as long as necessary to fulfill agreements or rules by law.
• Communication with Employees, Board Members, Volunteers and others who in various ways have a different role than stated in the above purposes in Naturarvet. Data collected is adapted to the respective person's role in Naturarvet. Data is stored at Naturarvet or personal data assistant and for as long as necessary under contract or other agreement.

 

In addition to the above purposes, Naturarvet also collects data or places cookies on people's devices as below, these processing operations are not covered by the GDPR but we think you should know what we do anyway.

• Compilation of statistics to collect statistics about unique visitors, how visitors come to the website, which technical platforms the visitors use, etc. which gives Naturarvet support in offering visitors good service and customization of the website, marketing channels, etc. Information collected is IP address and technical information linked to this. The information is stored for 13 months or more and is anonymous at the time of collection.

 

This privacy policy applies from 2018-05-25 until further notice and may be amended to further adapt to GDPR, changes to GDPR, other legislation or the Natural Heritage's own policy.