Privacy Policy for the app Pantamera
Returpack (we/us) cares about your personal integrity, and in this privacy policy, we describe how we handle personal data. We also describe the rights you have under the General Data Protection Regulation (GDPR) and how you can exercise them.
Returpack-Burk Svenska AB with organization number 556218-9117 is responsible for the processing described, and if you have any questions, you can always contact us at dataskydd@returpack.se.
What information do we collect?
We collect the information that you provide to us. You can provide us with information about yourself in several ways, such as when you register on our website, in our app MinPant or use any other of our services.
Do we transfer personal data outside the EU/EEA?
We always strive to process personal data within the EU/EEA. In some situations, personal data may be shared with recipients, such as system providers, in countries outside the EU/EEA. In such cases, we ensure that there is an adequate level of protection for the personal data during the transfer or that appropriate safeguards have been taken according to applicable legislation.
If you want more information, such as the safeguards taken, you are welcome to contact us at dataskydd@returpack.se
The personal data processing we perform
Administer deposit payment to private person
|
Purpose |
Personal data we process |
Legal basis for processing |
Recipients of the personal data |
|
Administer deposit payment via the Pantamera app To enable the payment of deposits. |
In cases where you choose payment via Swish, we collect your social security number and your telephone number, which is transferred to Swish. SEB processes the deposit payment. |
Agreement |
Swish - Social security number and telephone number are transferred to Swish. Swish and SEB are responsible for the personal data processing they perform. |
|
Storage period We store the personal data until the user deletes the account. |
|||
Your rights
You have several rights under the General Data Protection Regulation. The rights you have depend on the legal basis for the processing of personal data. Below is a description of the rights:
Right to information – As a registered person, you have the right to receive information about how we process your personal data. We inform you through this information and by answering questions from you.
Right to access (record extract) – As a registered person, you have the right to confirm whether we process personal data about you, and you have the right to access the personal data and certain information about the processing.
Right to rectification – As a registered person, you have the right to have incorrect personal data about you corrected, and you have the right to supplement incomplete information.
Right to erasure – As a registered person, you have in some extent the right to have your personal data erased without undue delay. The right to erasure does not apply if the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation that requires processing under Union law or the national law of a Member State to which we are subject, or to establish, exercise or defend legal claims. The right to erasure may, depending on the basis of your request, also be limited if the data are still necessary for the purpose or if there are overriding legitimate grounds for the processing than for your right to erasure under Article 21.1 GDPR.
Right to restriction of processing – As a registered person, you have the right to request that processing be restricted if you contest the accuracy of the data, if the processing is unlawful, if the data are no longer needed for the purposes but you need them to establish, exercise or defend legal claims. The right also applies pending verification of whose interests prevail, if you have objected to processing in accordance with Article 21.1 GDPR.
Right to object – As a registered person, you have the right to object to processing based on public interest, exercise of public authority, or legitimate interest. In such a situation, processing ceases unless there are compelling legitimate grounds for the processing that override your interests or if the purpose of the processing is to establish, exercise or defend legal claims.
Right to data portability – As a registered person, you have in certain cases the right to receive data you have provided to us and to have the data transferred to another data controller. The right exists when we process personal data automatically and with your consent or based on a contract.
Right to lodge a complaint – As a registered person, you have the right to lodge a complaint with the supervisory authority if you believe that the processing is in violation of the General Data Protection Regulation. The supervisory authority for our processing of your personal data is the Swedish Data Protection Authority.
You can read more about your rights on the Swedish Data Protection Authority's website.
Contact us at dataskydd@returpack.se if you want to exercise any of your rights.
Contact us
You can always contact us with questions about privacy and data protection by sending an email to dataskydd@returpack.se.
This privacy policy was last updated on 2024-08-22.