About your personal information
How we protect your personal information
This privacy policy describes how Öresundståg processes your personal data and applies when you use Öresundståg’s services or are in contact with us in a different way.
It is important that you feel safe with Öresundståg. Including when it comes to your privacy. On this page you can read about what personal data we store and why.
Everything is done in a secure and legal manner in accordance with the EU’s GDPR, the General Data Protection Regulation.
Öresundståg AB is responsible for your data
Öresundståg AB, org. no. 556794-3492, is responsible for your personal data being processed in a legal manner.
Öresundståg's privacy policy
How we protect your personal data
Öresundståg safeguards your privacy and always protects your personal data using the technical and organisational measures necessary in each individual case and ensures that processing takes place in accordance with relevant legislation.
How Öresundståg obtains your data
When you travel by public transport or use one of Öresundståg’s services, you provide some form of information to Öresundståg. For example, when you purchase your ticket on our website, take part in competitions and promotions, make a claim for delay compensation, etc.
Sometimes Öresundståg also obtains personal data from sources other than you. This may be data, for example, from your municipal authority, the Swedish Transport Agency, SPAR or other public sources, for the purposes of credit checks and address updates, for example.
Examples of the kind of data we process
This may include your name, e-mail address, telephone number, postal address, date of birth, personal identity number, purchase and travel history, payment information, information about your customer status and other information that you have provided to us or which is necessary in order for us to fulfil our obligations to you.
How we use our personal data
Öresundståg has the right to process the personal data necessary to fulfil our obligations to you or if you have given your consent to our processing of your data. Öresundståg may also need to process your personal data as a result of legal or statutory requirements.
In some cases, Öresundståg may need your consent before processing your personal data. When you give consent in such cases, you will always be given clear information about what you are consenting to and you will always have the right to withdraw your consent at any time.
We may use your personal data for purposes including the following:
To provide you with good service:
- We administer and process your ticket purchase.
- We handle and administer your questions to Öresundståg’s Customer service.(bokningssupport)
To provide you with relevant information and offers:
- We administer your participation in competitions and promotions.
- We perform analyses so that we can provide you with relevant marketing offers and information.
To develop public transport:
- We collect statistics in order to develop Öresundståg’s services and so improve transport for as many people as possible.
- We carry out voluntary market surveys and questionnaires that give you the opportunity to influence our range and services
To conduct checks:
- When you buy online, we need to confirm that you are of the legal minimum age.
- We prevent misuse or inappropriate use of our services.
- We check the validity of your ticket and if necessary issue a penalty fare.
Who has access to your data
Your personal data is used by Öresundståg and by Öresundståg’s data processors. We do not pass your personal data to other companies or authorities unless we need to do so on the basis of law, ordinance or public authority decision or in order to protect our rights or those of third parties.
We never pass on, sell or exchange your personal data for marketing purposes to third parties outside Öresundståg. Data is passed to third parties (such as transport companies) only where this is necessary for the provision of public transport services, ticket sales or other necessary services.
Öresundståg is subject to the principle of public access. This means that certain documents constitute what are called official documents, which Öresundståg must disclose if someone requests this. Before disclosure, a secrecy review is performed in accordance with the Swedish Public Access to Information and Secrecy Act.
How long we store your data for
Öresundståg will save your personal data as long as there is a need for it. When there no longer is a need, e.g. if an agreement no longer is valid or a case has been processed, your personal data will be handled in accordance with valid laws and regulations for archiving and disclosure of personal data.
Your rights
You have the right to request information about what personal data we have stored about you at any time (free of charge once a year). Your request must be made in writing, signed by you and include your name and personal identity number. We need this in order to ensure that we provide information to the right person.
Send your request for a register extract or information or for the correction of incorrect data to: Öresundståg AB.
The information will be sent to your registered address in the population register.
If your data at Öresundståg is incorrect, incomplete or irrelevant, you can request to have it corrected. We cannot delete data that constitutes an official document or where there is a statutory requirement for it to be stored, such as under accounting regulations. Nor can we delete data where there are other legitimate reasons why the data must be stored, such as unpaid debts.
You can withdraw your consent to our use of your data for marketing purposes at any time. You also have the right to complain to the Swedish Data Protection Authority, which is the supervisory authority for the processing of personal data.
Transfer to third countries
Öresundståg transfers personal data to countries outside the EU/EEA only if the country has an adequate level of protection according to the EU or the European Commission, or if this is specifically indicated when you provide your personal data to us.
Cookies
Öresundståg’s website uses small text files, called cookies, to make navigating our website easier for you. They are mainly used to collect statistics about users’ visits and improve the user experience. This may include storing selections you make on our website, for example. We also use cookies for certain types of marketing.
Cameras - for a safer journey
Today, there are surveillance cameras installed on Öresundståg that record images. Train staff and ticket inspectors can also wear body cameras as part of their equipment, which record both images and sound.
With the cameras, Öresundståg scan monitor what happens in public transport and store the material for investigation purposes. Should something happen, authorized investigators such as the police authority can use the material as part of the investigation into the incident.
1. Purpose of camera surveillance
• Increase safety for passengers and staff.
• Prevent and avert crime, accidents and public order disturbances.
• Detect and secure evidence in the event of vandalism.
• At the request of the police authority or other relevant investigator, assist with visual material in their criminal investigations.
• Contribute with visual material in safety and accident investigations.
Legal basis for camera surveillance in public transport
• Exercise of authority and task of public interest
• Balancing of interests
2. Body-worn cameras
Train conductors and other professionals such as ticket inspectors and security guards can use body-worn cameras to prevent and investigate threatening situations and crimes. The cameras can be used on the train, in the vicinity of the train and on the platform.
The cameras are about the same size as a mobile phone and are worn visibly on the upper body or on the staff's uniform. Unlike security cameras on board vehicles that are always switched on, the staff themselves switch the camera on manually when necessary. The recorded footage is encrypted and saved on protected data servers at the respective company and only the police or other authorized investigators can request footage if they need to investigate a possible crime. Öresundståg staff never have access to the image and audio material.
If you would like to know more, contact the respective company that is responsible for personal data for body-worn cameras.
• Train conductors: VR Sverige: https://www.vrsverige.com/kameror/
3. If you have been the victim of a crime on an Öresundståg journey
If you have been the victim of a crime, you should immediately file a police report so that the police authority or another authorized investigator can request stored footage via their own image analysis group. A crime and/or accident investigation is then conducted. Only the police authority or another authorized investigator has access to stored footage.
When filing a police report, you state that there may be stored footage at Öresundståg available. This must be done within 24 hours of the crime, otherwise there is a risk that the footage will be lost.
4. How long is the recorded footage saved?
If recorded footage is not part of an investigation, it will be deleted after a reasonable time. The storage period for recorded footage from permanently mounted cameras is 14 days.
Recorded footage from VR Sweden's body cameras will be deleted no later than 7 days after a threatening or violent situation that required the staff to press the record button.
The material is stored and handled within the EU/EEA.
5. Contact information for our transport company
Öresundståg's transport company VR Sverige: https://www.vrsverige.com/behandling-av-personuppgifter/
If you want to know more
Please do not hesitate to contact us if you have any questions about our processing of your personal data. The regional public transport company where you started your train journey can help you in most cases.
You can also visit datainspektionen.se for general information about your rights in relation to personal data.
For questions specifically about Öresundståg AB and our processing of your personal data you can contact us by e-mail or by post.