Go to the Swedish version

Privacy Policy

This privacy policy describes Länstrafiken i Norrbotten AB’s (hereinafter referred to as Länstrafiken) processing of personal data and applies when travellers/customers use Länstrafiken’s services or are in contact with us in any other way.

Responsible for personal data 

Länstrafiken, organisation number 556156-2058, is the personal data controller for the processing of your personal data and is responsible for processing the data in compliance with applicable laws and regulations.

How Länstrafiken i Norrbotten collects personal data

Länstrafiken collect personal data that the data provider provides to us when traveling with public transport or using our services in other ways. Collection of personal data may happen, for example:

We administer and conduct on-demand transport as well as paratransit services. We investigate events and views from you as our customer and the municipalities and report patient transportation to Region Norrbotten.

Länstrafiken may also obtain personal data from sources other than the personal data provider. The data may come from County Council, the municipalities in Norrbotten, SPAR or other public sources for the purpose of being used for e.g., credit information and address updates.

What data is processed?

We process the personal data provided to us. This may be your name, e-mail address, phone number, postal address, date of birth, purchase and travel history, payment information and/or other information that you have provided to us or data that is necessary for us to fulfil our obligations towards you.

Why does Länstrafiken i Norrbotten process personal data?

The personal data can be used for, among other things, the following purposes:

Länstrafiken i Norrbotten’s right to process personal data

Länstrafiken has the right to process the personal data that is required for the fulfilment of the commitment to you or if the data provider has given their consent to the processing. Länstrafiken may also need to process personal data due to requirements in laws and regulations.

In some cases, we may need the personal data provider’s consent to process the data. When you give your consent in these cases, you will always receive clear and detailed information about what you are consenting to.

Who has access to the personal data?

Your personal data is used by Länstrafiken and our data processors. We do not disclose personal data with other companies unless it is necessary by law, regulations or upon decisions by authorities or to protect our rights or the rights of third parties.

We never forward, sell or exchange your personal data for marketing purposes to third parties outside Länstrafiken. Data is forwarded to third parties (e.g., transport companies) only if this is required for the provision of public transport, the sales of Länstrafiken’s tickets and other services.

Länstrafiken is subject to the principle of publicity. This means that certain documents are so-called public documents which we must disclose on request. Before disclosure, a confidentiality assessment is carried out in accordance with the Publicity and Confidentiality Act.

Transfer to third countries

Länstrafiken does not currently transfer personal data to countries outside the EU/EEA. If this were to happen, personal data will only be transferred to countries outside the EU/EEA if the country has an adequate level of protection according to the EU or the EU Commission or if this has been specifically stated in connection with you providing your personal data to us.

How long do we store personal data?

Länstrafiken saves personal data as long as it is required for our commitments and according to applicable legislation regarding the preservation of documents and is deleted or anonymised thereafter.

What are your rights as the personal data provider?

You have the right to request information at any time about what personal data we have stored on you (free of charge once a year). The request must be in writing and signed and must contain information such as your name and personal identity number. We need this to ensure that we release the data to the right person.

If the personal data is incomplete, incorrect, or irrelevant, the data provider can request to have it corrected. The data provider also has the right to have the personal data deleted. We cannot delete information that constitutes public documents or when there is a statutory storage requirement, such as accounting regulations, or when there are other legitimate reasons why the information must be saved, such as unpaid debts.

The data provider can at any time withdraw their consent to let us use the data if it is compatible with current legislation or does not prevent Länstrafiken to fulfil its obligations.

Requests for register extracts, information, deletion, or correction of incorrect information can be sent to:

Länstrafiken i Norrbotten AB
Att: Dataskyddsombud
Box 183
956 23 ÖVERKALIX

The information will be sent to the population registration address of the person making the request.

The data provider also has the right to file a complaint with the data inspection authority, which is the supervisory authority for the processing of personal data.

How the data is protected

Länstrafiken is committed to protect your privacy. We are therefore constantly working on taking all appropriate technical and organisational measures that are required in each individual case to protect your personal data and to ensure that the processing takes place in accordance with applicable laws and regulations.

Länstrafiken has also appointed a data protection officer.

Updates of the privacy policy

Länstrafiken makes ongoing changes to this policy. A new version becomes effective when it is made available in our app and on our website.