About your personal information
How we protect your personal information
This privacy policy describes how Öresundståg processes your personal data and applies when you use Öresundståg’s services or are in contact with us in a different way.
It is important that you feel safe with Öresundståg. Including when it comes to your privacy. On this page you can read about what personal data we store and why.
Everything is done in a secure and legal manner in accordance with the EU’s GDPR, the General Data Protection Regulation.
Öresundståg AB is responsible for your data
Öresundståg AB, org. no. 556794-3492, is responsible for your personal data being processed in a legal manner.
Öresundståg's privacy policy
How we protect your personal data
Öresundståg safeguards your privacy and always protects your personal data using the technical and organisational measures necessary in each individual case and ensures that processing takes place in accordance with relevant legislation.
How Öresundståg obtains your data
When you travel by public transport or use one of Öresundståg’s services, you provide some form of information to Öresundståg. For example, when you purchase your ticket on our website, take part in competitions and promotions, make a claim for delay compensation, etc.
Sometimes Öresundståg also obtains personal data from sources other than you. This may be data, for example, from your municipal authority, the Swedish Transport Agency, SPAR or other public sources, for the purposes of credit checks and address updates, for example.
Examples of the kind of data we process
This may include your name, e-mail address, telephone number, postal address, date of birth, personal identity number, purchase and travel history, payment information, information about your customer status and other information that you have provided to us or which is necessary in order for us to fulfil our obligations to you.
How we use our personal data
Öresundståg has the right to process the personal data necessary to fulfil our obligations to you or if you have given your consent to our processing of your data. Öresundståg may also need to process your personal data as a result of legal or statutory requirements.
In some cases, Öresundståg may need your consent before processing your personal data. When you give consent in such cases, you will always be given clear information about what you are consenting to and you will always have the right to withdraw your consent at any time.
We may use your personal data for purposes including the following:
To provide you with good service:
- We administer and process your ticket purchase.
- We handle and administer your questions to Öresundståg’s Customer service.(bokningssupport)
To provide you with relevant information and offers:
- We administer your participation in competitions and promotions.
- We perform analyses so that we can provide you with relevant marketing offers and information.
To develop public transport:
- We collect statistics in order to develop Öresundståg’s services and so improve transport for as many people as possible.
- We carry out voluntary market surveys and questionnaires that give you the opportunity to influence our range and services
To conduct checks:
- When you buy online, we need to confirm that you are of the legal minimum age.
- We prevent misuse or inappropriate use of our services.
- We check the validity of your ticket and if necessary issue a penalty fare.
Who has access to your data
Your personal data is used by Öresundståg and by Öresundståg’s data processors. We do not pass your personal data to other companies unless we need to do so on the basis of law, ordinance or public authority decision or in order to protect our rights or those of third parties.
We never pass on, sell or exchange your personal data for marketing purposes to third parties outside Öresundståg. Data is passed to third parties (such as transport companies) only where this is necessary for the provision of public transport services, ticket sales or other necessary services.
Öresundståg is subject to the principle of public access. This means that certain documents constitute what are called official documents, which Öresundståg must disclose if someone requests this. Before disclosure, a secrecy review is performed in accordance with the Swedish Public Access to Information and Secrecy Act.
How long we store your data for
Öresundståg will save your personal data as long as there is a need for it. When there no longer is a need, e.g. if an agreement no longer is valid or a case has been processed, your personal data will be handled in accordance with valid laws and regulations for archiving and disclosure of personal data.
Your rights
You have the right to request information about what personal data we have stored about you at any time (free of charge once a year). Your request must be made in writing, signed by you and include your name and personal identity number. We need this in order to ensure that we provide information to the right person.
Send your request for a register extract or information or for the correction of incorrect data to: Öresundståg AB.
The information will be sent to your registered address in the population register.
If your data at Öresundståg is incorrect, incomplete or irrelevant, you can request to have it corrected. We cannot delete data that constitutes an official document or where there is a statutory requirement for it to be stored, such as under accounting regulations. Nor can we delete data where there are other legitimate reasons why the data must be stored, such as unpaid debts.
You can withdraw your consent to our use of your data for marketing purposes at any time. You also have the right to complain to the Swedish Data Protection Authority, which is the supervisory authority for the processing of personal data.
Transfer to third countries
Öresundståg transfers personal data to countries outside the EU/EEA only if the country has an adequate level of protection according to the EU or the European Commission, or if this is specifically indicated when you provide your personal data to us.
Cookies
Öresundståg’s website uses small text files, called cookies, to make navigating our website easier for you. They are mainly used to collect statistics about users’ visits and improve the user experience. This may include storing selections you make on our website, for example. We also use cookies for certain types of marketing.
Cameras
On board the Öresund trains there are surveillance cameras (CCTV). Recorded material is only released at the request of a police authority in a criminal investigation and to another authority that investigates incidents in accordance with a given camera permit.
If you want to know more
Please do not hesitate to contact us if you have any questions about our processing of your personal data. The regional public transport company where you started your train journey can help you in most cases.
You can also visit datainspektionen.se for general information about your rights in relation to personal data.
For questions specifically about Öresundståg AB and our processing of your personal data you can contact us by e-mail or by post.