GDPR — your rights

Controller and privacy contact

DeMenso Sverige Handelsbolag is the controller for its own enquiries and business relationships. Send data-protection requests to hej@demenso.se, or write to Valhallagatan 76, 532 34 Skara, Sweden.

The privacy policy explains purposes, legal grounds, recipients and retention. This page is a guide to exercising your rights, not a replacement for that information.

Rights you can exercise

• Information and access: ask whether your data is processed, receive information about the processing and a copy of your personal data.
• Correction: request correction of inaccurate data or completion of incomplete data.
• Deletion: request erasure when the GDPR conditions apply. Statutory retention or necessary legal claims can mean some data must remain.
• Restriction: request limited processing in the situations provided by the GDPR, for example while disputed accuracy is checked.
• Portability: where processing is automated and based on consent or a contract with you, request the data you provided in a structured, commonly used, machine-readable format and, where technically feasible, transfer to another controller.
• Objection: object on grounds relating to your situation to processing based on legitimate interests. Continued processing then requires the legal conditions to be met. For direct marketing, the objection applies without that balancing.
• Withdrawal: withdraw consent at any time for processing based on consent. Earlier lawful processing is unaffected.
• Automated decisions: where relevant, the GDPR provides protection against certain decisions based solely on automated processing with legal or similarly significant effects. No such decision-making is implemented on this website.

How to make a request

Tell us which right you want to exercise and give enough information to find the relevant records, for example the email address used and the enquiry or project concerned. The subject “GDPR / Data Protection Request” helps route the message but is not mandatory.

We may request additional information only where reasonably needed to confirm your identity or locate the data. Do not send an identity-document copy or sensitive information unless a necessary, proportionate method has been agreed.

Response times and charges

Requests normally receive a response within one month of receipt. For complex or numerous requests, the period may be extended by up to two more months; the reasons and extension must be communicated within the first month.

Requests are normally free. A fee or refusal is possible only under the GDPR conditions for manifestly unfounded or excessive requests; the decision must be explained, including available complaint and judicial remedies.

Complaints

You may complain directly to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY). You may also use the competent authority in your habitual residence, workplace or place of the alleged infringement. Contacting DeMenso first is optional.