Privacy Policy (GDPR)
2026-01-01
Data Controller
Äventyrsgruvan Economic Association (Adventuremine), company registration no. 769621-5537, is the data controller for the processing of personal data.
Contact: info@adventuremine.se
What Personal Data We Process
We may process the following personal data depending on which service you use and how you contact us:
-
Name
-
Address
-
Email address
-
Phone number
-
Booking and customer information (e.g., booking history, participant details and related communication)
-
Invoicing and accounting documentation (we normally do not process card details when payment is made via a payment service provider)
Purpose and Legal Basis for Processing
We process personal data for the following purposes:
Booking, Delivery and Customer Service
To administer bookings, deliver experiences/events/
Legal basis: Contract (GDPR Article 6.1 b).
Legal Obligations
To comply with legal requirements, for example accounting regulations.
Legal basis: Legal obligation (GDPR Article 6.1 c).
Business Development and Statistics
To monitor, develop and improve our services and operations (e.g., statistics and analysis).
Legal basis: Legitimate interest (GDPR Article 6.1 f). We conduct a balancing test between our interests and your right to privacy.
Marketing
To inform you about our services and offers.
Legal basis: Legitimate interest (GDPR Article 6.1 f) and/or consent (GDPR Article 6.1 a), depending on the channel and type of communication. You may object to direct marketing at any time.
Data Retention
We retain personal data only for as long as necessary for each respective purpose.
-
Booking and customer matters are normally stored for as long as required to manage the case and any related claims.
-
Data that must be retained by law (e.g., accounting documentation) is stored in accordance with applicable legislation.
-
We apply internal data retention routines that are continuously reviewed.
Recipients and Data Processors
We never sell personal data.
We may share personal data with suppliers who process data on our behalf, such as IT and system providers, booking systems, hosting providers and payment service providers. These parties act as data processors and may only process personal data in accordance with our instructions and data processing agreements.
We may also disclose personal data if required by law or official decision, or if necessary to establish, exercise or defend legal claims.
Transfers Outside the EU/EEA
We strive to process personal data within the EU/EEA. If personal data is transferred outside the EU/EEA, we ensure that the transfer complies with GDPR, for example through the use of the European Commission’s Standard Contractual Clauses or other approved safeguards.
Your Rights
Depending on the circumstances, you have the right to:
-
Access your personal data (data subject access request)
-
Have inaccurate data corrected
-
Request erasure (where the data is no longer necessary and we are not legally required to retain it or have other legitimate grounds)
-
Request restriction of processing
-
Object to processing based on legitimate interest, including direct marketing
-
In certain cases, receive your data in a structured format (data portability)
-
Withdraw consent (if processing is based on consent), without affecting the lawfulness of processing prior to withdrawal
Complaints
If you believe that our processing violates data protection regulations, you may contact us. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
CCTV Surveillance at Adventuremine
CCTV surveillance is carried out in order to:
-
Prevent and deter crime (e.g., vandalism and burglary)
-
Increase safety for visitors and staff
-
Investigate incidents, accidents and operational disruptions
Data Controller
Äventyrsgruvan, company registration no. 769621-5537, is the data controller for recorded material.
Contact: info@adventuremine.se
Legal Basis
Processing is based on legitimate interest (GDPR Article 6.1 f). We have conducted a balancing test where the need for security and damage prevention is weighed against personal privacy. CCTV surveillance is only carried out where the need is considered justified.
Where Surveillance Takes Place and How You Are Informed
Areas under CCTV surveillance are clearly signposted. Underground, signage is placed near entrances. (If signage is not possible in certain locations, we ensure that information is provided in a clear manner, for example through entrance signage and additional information on the website.)
Audio Recording
Audio is recorded on certain cameras where necessary for the intended purpose.
Retention Period
Recorded material is normally stored for a maximum of 30 days. If an incident occurs, relevant material may be stored for a longer period, but only for as long as necessary to investigate the incident or handle legal claims.
Access to Recorded Material
Only specifically authorized personnel within our organization and our security provider Belo Elektriska have access to the recorded material. Our security provider processes the material as a data processor under agreement and according to our instructions.
Disclosure to the Police
If recorded material indicates suspected criminal activity, relevant material may be disclosed to the Swedish Police Authority in connection with a police report or upon request.
Your Rights Regarding CCTV Surveillance
You have the right to request information about whether we process personal data about you and, if so, to access such data.
If you request a copy of video material, we may need to blur other individuals and information. In certain cases, we may refuse or restrict disclosure if it would affect the rights and freedoms of others or interfere with an ongoing investigation.
Requests should be sent to: info@adventuremine.se