Privacy Policy for Øresundsbro Konsortiet

1. DATA CONTROLLER

The legal person responsible for the processing of your personal data is:

Øresundsbro Konsortiet
Box 4278
203 14 Malmö, Sweden
Phone: + 46(0)40 676 60 00
Email: kontakt@oresundsbron.com
Registration number: 946001-3387

2. USE OF PERSONAL DATA

We use your personal data for the following purposes:

a) Provision of services:

Personal data is used to enable Øresundsbro Konsortiet’s provision of requested services, to provide you with optimized support and to communicate with you and inform about the services.

b) Marketing: 

Personal data is used for marketing purposes, such as adapting our communication with you based on your areas of interest and focus and to provide you with a relevant, straightforward and inspiring experience in relation to our communication with you, for example through newsletters.

c) Optimizing the user experience on our digital platforms: 

Personal data is collected through your use of our digital platforms. This data is used by us to optimize the user experience through customized content, and to develop and improve our digital platforms. This is described more in detail in our cookie policy. Furthermore, personal data is used to uphold the IT security.

d) Statistics and analyzes: 

Personal data is used to compile statistics and analyzes regarding the use of our services, use of our digital platsforms, customer satisfaction and traffic data to enable us to develop and further improve our services.

e) Surveillance:  

We are monitoring the Øresund Bridge and our other facilities in order to avoid and prevent accidents, control the traffic, support emergency operations, document accidents, enable control of the traffic, get an overview of potential traffic jams at the toll station, and to secure the quality of the automated payment methods (e.g. bizz and license plate number).

f) Recovering of debts and cooperation with authorities and private entities:

Photos and video material from the video surveillance cameras may  be used to support our claims when we are recovering debts, including collecting payment for crossings on the bridge and handling of insurance cases etc.

Photos and video material may be handed over or transferred electronically to police or other authorities on the basis of legal grounds, cf. section 6b.

3. CATEGORIES OF PERSONAL DATA

We may collect and process the following data about you for the following purposes:

a) Provision of services:

Personal data: name, address, e-mail address, phone number, fax number, personal identification number, population registration certificate, registration certificate, license plate number, crossing information, bank information, customer number, customer numbers with other issuers, contract number, credit card number (masked), bizz number, invoice number, photo/picture/video, iTicket number, signature, case number, vehicle data, receipt number. In Sweden, personal identification number may be the same as the VAT and registration number of a sole trader.

b) Marketing: 

Personal data: name, address, e-mail address, license plate number, crossing information, customer number, contract number, bizz number, iTicket number, areas of interest.

c) Optimizing the user experience on our digital platforms: 

Personal data: name, address, e-mail address, license plate number, crossing information, customer number, contract number, areas of interest, IP address.

d) Statistics and analyzes: 

Personal data: customer number, contract number, e-mail address, address, license plate number, crossing information, bizz number, iTicket number, case number.

e) Surveillance:

Personal data: photo/picture/video, crossing information, license plate number.

f) Recovering of debts and cooperation with authorities and private entities:

Personal data: name, address, e-mail address, phone number, personal identification number, license plate number, crossing information, invoice number, photo/picture/video.

4. SOURCE

When we are collecting personal data from other sources than from you personally, such sources may be:

a) Online sources, for example social media or providers of information which is publicly available.

b) Authorities, providers of address directory assistance, providers of credit assessments, dept collection companies and partners, such as EasyGo and BroBizz A/S.

The personal data collected about you may be derived from other parts of the EU/EEA.

c) On social media, it is both Øresundsbro Konsortiet and the providers of the media that together are responsible for the data. Activities on Øresundsbro Konsortiet's platforms on the media, such as "likes" and sharing, are shared with the media provider.

5. LEGAL GROUND FOR THE PROCESSING OF PERSONAL DATA

Our processing of your personal data pursuant to the description above is based upon the folllowing legal grounds in relation to each of the below mentioned purposes:

a) Provision of our services:

The processing of your personal data is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into such contract.

b) Marketing:

Processing of your personal data to adapt our marketing communication to you is based on your consent.

c) Optimizing the user experience on our digital platforms:

Processing of your personal data to optimize your experience on our digital platforms is based on your consent. Please see our cookie policy

d) Statistics and service development:

Processing of your personal data is based on our legitimate intrerest to compile statistics and to perform surveys and analyzes for the purpose of ensuring the functionality and quality of our services.

e) Surveillance:

Processing of your personal data is based on our legitimate interest to prevent accidents, assist in relation to emergency operations, ensure that our automated payment methods work correctly and to ensure identification in relation to recovery of debts.

f) Recovering of debts and cooperation with authorities and private entities:

Processing of personal data is based on our legitimate interest in securing correct collection of payments, ensuring correct functioning of our automated payment means and to ensure correct identification and cooperation with police and authorities is based on legitimate interest.

6. DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data to the following categories of recipients:

a) Providers of on-board-units (bizz), operators which we are cooperating with and suppliers who support our business (such as service providers, technical support and financial institutes).

b) Public authorities, such as the Police and the Tax Agency if they have a legal ground to be granted access to the personal data.

c) Debt collection companies in connection with recovery of debt, and insurance companies in connection with the handling of insurance cases.

7. TRANSFER TO COUNTRIES OUTSIDE THE EU/EEA

Øresundsbro Konsortiet transfers your personal data to countries outside the EU/EEA through cooperation with global service providers and partners who after our approval may be given access to our systems. In case personal data via access to our systems is transferred to countries outside the EU/EEA, we will ensure that such transfer is made in a secure way and in accordance with applicable data protection legislation. Øresundsbro Konsortiet may for example use standard data protection clauses (the so called ”Standard Contractual Clauses”) which have been adopted by the Commission, Privacy Shield (in case the recipient has joined the Privacy Shield) or other cerfication mechanism.

8. STORAGE AND RETENTION OF YOUR PERSONAL DATA

We will store and retain your personal data that consists of:

i. Basic data about you: during up to 1 year from when your relationship with Øresundsbro Konsortiet has been cancelled by you.

ii. Transactions information and verifications: during up to 7 years from the date of the transaction in accordance with applicable legislation.

iii. Data for the purpose of handling an ongoing case, for example a claim or an incident: during up to 3 years after completion in accordance with applicable rules.

iv. Photo/picture/video: during up to 90 days in accordance with Øresundsbro Konsortiet’s permit for camera surveillance.

9. YOUR RIGHTS

You are always entitled to:

• Request rectification of your personal data;

• Request access to your personal data;

• Object to processing of your personal data for direct marketing purposes; and

• Withdraw your consent in case our processing of your personal data is based on your consent. However, the withdrawal of your consent will not affect the legality of the processing of personal data that has been performed prior to your withdrawal of your consent.

Under certain circumstances, which are set out more in detail in applicable data protection legislation, you are also entitled to:

• Object to processing of personal data and to obtain restriction of the processing of your personal data;

• Request that we delete your personal data; and • Receive the personal data concerning you and which you have provided in a structured, commonly used and machine-readable format (data portability).

You may exercise your rights by: logging in to My Account or by contacting our Customer Service Center on Lernacken (Malmö).

10. QUESTIONS AND POTENTIAL COMPLIANTS

If you have any questions regarding this privacy policy or our processing of your personal data, please contact any of our Customer Service Center on Lernacken or contact us via mail or e-mail on the address stated in the beginning of this privacy policy.

Should you be dissatisfied with our processing of your personal data, please let us know, and we will do our best to meet your complaints. Your integrity is very important to us, and we always strive to protect and secure your personal data in the best possible way. However, should you feel that we fail in this ambition, please note that you are also entitled to lodge a complaint with the Swedish Data Protection Authority (Sw. Integritetsskyddsmyndigheten) or the Danish Data Protection Agency (Da. Datatilsynet):

Integritetsskyddsmyndigheten (Sweden)

Datatilsynet (Denmark)

 Last update: May 2021