Privacy Policy – Personal Data & GDPR
Introduction
This document outlines how Aktivt Uteliv Uppsala AB (“we”, “our”, “us”) processes personal data in accordance with the General Data Protection Regulation (GDPR – EU 2016/679).
“You” refers to any individual whose data we process, including customers, representatives of customers, or visitors to our website.
Who is responsible?
Aktivt Uteliv Uppsala AB
Org. no. 556979-3168
Dag Hammarskjölds Väg 270
756 52 Uppsala, Sweden
Email: uppsala@aktivtuteliv.se
Phone: +46 (0)18–10 88 04
We are the data controller and responsible for ensuring all processing of your personal data is done securely and lawfully.
Our guiding principles
-
We only collect personal data that we truly need.
-
We store your data only as long as necessary.
-
We want to make it easy for you to control and access your data.
-
We aim for full transparency in how we collect, use, and share data.
What data do we collect?
When you make a booking, place an order, or visit us in person, we may collect:
-
Name
-
Personal ID number (when required)
-
Email address
-
Phone number
-
Postal address
-
Contact details
-
Health-related data relevant to your booking (e.g. allergies, medical conditions)
-
Equipment-related information (e.g. height, weight, shoe size)
We may also collect information when you visit our website (via cookies), register at the counter, provide feedback, participate in events, contests, or surveys.
If you sign up for a newsletter, your name and email address will be used until you unsubscribe – which you can do anytime via the link in the email.
When do we collect your data?
We collect data when you:
-
Register for an activity or course
-
Book equipment, venues, or accommodations
-
Make a purchase online or in-store
-
Visit us and register at the counter
-
Give feedback, enter competitions, or respond to surveys
-
Use our website (via cookies)
Why do we collect and process your data?
We process your data for the following purposes:
-
To manage your booking, registration, or purchase
-
To manage your customer account
-
To process payments and invoices
-
To send important information, updates, and offers
-
To improve our products and services
-
To develop new activities and experiences
-
To analyze usage patterns and trends
All processing is carried out with confidentiality and care. Your data is only used for the purposes it was collected for and is supported by a legal basis.
Legal basis for processing
We process your data based on:
-
Contractual necessity – when fulfilling a booking or purchase
-
Legal obligations – e.g. accounting and financial records
-
Legitimate interest – to improve services and customer experience
-
Consent – e.g. for newsletters or sensitive health data (like allergies)
How long do we keep your data?
We retain your data as long as it is needed to fulfill our agreement with you, or as required by law. For example, accounting records must be stored for 7 years under Swedish law.
Inactive user accounts or data that no longer serve a purpose will be deleted or anonymized after 5 years.
Cookies
We use cookies on our website (aktivtuteliv.se and aktivtuteliv.nu) to make the site function properly for you. Cookies are small text files stored on your device (computer or phone). They do not contain harmful code and do not store personally identifiable information.
We use:
-
Persistent cookies – for saving preferences over time
-
Session cookies – for easier navigation and smooth use of the booking system. These disappear when you close your browser.
No personal data like names or email addresses is stored in cookies.
Third-party websites
This policy applies only to our own websites. We may link to external sites, but we are not responsible for their content or how they handle data.
Your rights
Under GDPR, you have the right to:
-
Request access to the personal data we hold about you
-
Request correction of inaccurate or outdated data
-
Request deletion of your data when legally possible
-
Withdraw any previously given consent
-
Object to certain types of processing
-
File a complaint with the Swedish Authority for Privacy Protection (IMY)
To exercise your rights, email us at: vasteras@aktivtuteliv.nu
Questions or complaints
If you have questions about how we process your data, or if you believe we’ve handled your data incorrectly, you can contact our data protection representative:
info@aktivtuteliv.nu
You can also file a complaint with the national data protection authority:
Integritetsskyddsmyndigheten (IMY) – www.imy.se
