GDPR and Personal Data Management
Last updated: 2026-09-03
General Information on GDPR
The General Data Protection Regulation (GDPR) is the EU's regulatory framework for how personal data must be processed. The regulation entered into force on May 25, 2018, and applies in all EU countries, including Sweden.
Our Commitment
ochre-isle complies with GDPR and processes your personal data with utmost care and transparency. We only use the data necessary to deliver our services and protect your information with appropriate security measures.
Your Rights Under GDPR
Right of Access (Article 15)
You have the right to receive information about what personal data we process about you, why we process it, and who we might share it with.
Right to Rectification (Article 16)
If your personal data is incorrect or incomplete, you have the right to have it corrected.
Right to Erasure (Article 17)
Under certain circumstances, you have the right to have your personal data deleted. This does not apply if we have a legal obligation to retain the data.
Right to Restriction (Article 18)
You can request that the processing of your personal data be restricted while we investigate an objection or request for rectification.
Right to Data Portability (Article 20)
You have the right to receive the personal data you have provided to us in a structured and machine-readable format.
Right to Object (Article 21)
You have the right to object at any time to the processing of your personal data based on legitimate interest.
Right to Withdraw Consent (Article 7)
If the processing is based on your consent, you have the right to withdraw this consent at any time.
How to Exercise Your Rights
To exercise any of your rights, send an email to [email protected] with the following information:
- Your name and contact details
- Which right you wish to exercise
- Relevant information to identify you in our systems
We will respond to your request within 30 days. In complex cases, this time may be extended by an additional 60 days, and you will be informed of this.
Complaints to Supervisory Authority
If you believe we are processing your personal data in violation of GDPR, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY):
Integritetsskyddsmyndigheten (IMY)
Box 8114
104 20 Stockholm
Phone: 08-657 61 00
Email: [email protected]
Data Protection Officer
For questions about how we process personal data, contact us at [email protected]
Data Transfers Outside the EU/EEA
We do not transfer your personal data to countries outside the EU/EEA.
Automated Decision-Making and Profiling
We do not use automated decision-making or profiling that has legal effects on you or affects you in a significant way.