Joint data controller with social media platforms
When we administer our pages and interactions on social media platforms, we process personal data together with the platform provider as joint data controllers. This applies, among other things, to the statistics and page insights functions as well as the advertising and communication tools provided by the platform.
You can exercise your data protection rights against both IMI and the respective platform. For questions about the platforms’ own processing, we refer to their privacy policies and contact channels. We receive aggregated page insights and statistics from the Platforms but do not have access to your personal user data beyond what you yourself make visible in your interactions with our pages. Below is a link to each platform’s privacy policy and information on how the joint personal data responsibility is distributed.
Your rights
You have several rights under applicable data protection legislation. Below we briefly describe what they mean. You can read more about your rights on the Swedish Authority for privacy protection’s website.
Right of access
You can request confirmation as to whether we are processing your personal data. If this is the case, you have the right to receive a copy of the data as well as information about, among other things, the purposes of the processing, the categories of data processed, how long they are stored, which recipients have received it and where the data comes from.
Right to rectification
You have the right to have incorrect personal data corrected and to complete incomplete data when relevant to the purposes of the processing.
Right to erasure
You can request that we erase your personal data in certain cases, for example when the data is no longer needed for the purposes for which it was collected, if you object to processing based on legitimate interest and there are no compelling reasons for continued processing, or if the processing has taken place in violation of law.
Right to limitation of processing
You can request that we temporarily restrict the processing of your data in certain situations, for example while we are checking the accuracy of the data, if the processing is unlawful but you oppose erasure, if we no longer need the data but you need it for legal claims, or pending the assessment of an objection.
Right to data portability
When our processing is automated and based on your consent or on an agreement with you, you can request to receive the personal data you have provided us in a structured, commonly used and machine-readable format, and to the extent technically feasible, have it transferred to another data controller.
Right to object
You can object at any time to processing based on our legitimate interest (weighing of interests), including any profiling that takes place based on such legal basis. Following an objection, we may only continue the processing if we can demonstrate legitimate reasons that override your interests, rights and freedoms or if the processing is necessary for legal claims. You always have an absolute right to object to processing for direct marketing purposes.
Right to withdraw consent
If the processing is based on consent, you can withdraw it at any time. The withdrawal does not affect the lawfulness of the processing that took place before the consent was withdrawn.
Complaints to supervisory authorities
If you have any comments on our processing of your personal data, you have the right to submit a complaint with the relevant supervisory authority, which in Sweden is the Swedish Authority for privacy protection (IMY). We would appreciate it if you contacted us first and we will try to address your concerns.
How to exercise your rights
Please contact us at [email protected] or by post at the address above if you wish to exercise any of your rights.
Jurisdiction-specific information
Individuals in the United Kingdom (UK GDPR)
If and to the extent that we offer products/services to or monitor the behavior of individuals in the UK, we process personal data in accordance with the UK GDPR and supplementary UK legislation. Your rights are essentially similar to those described in the ”Your Rights” section above. You can also lodge a complaint with the Information Commissioner’s Office (ICO). For transfers from the UK to countries outside the UK, we use, where required, UK approved transfer mechanisms, such as the European Commission’s Standard Contractual Clauses in combination with the UK Addendum or the UK International Data Transfer Agreement (IDTA), as well as additional safeguards where necessary. We can also rely on UK adequacy rules where they exist.
California residents (CCPA/CPRA)
This supplement applies to consumers residing in California. It describes how we collect, use, and disclose personal data under the California Consumer Privacy Act, as amended (CPRA).
- Categories, sources, purposes, and recipients: The categories of personal information, typical sources, business purposes, and recipient categories described in the respective tables above correspond to the information we are required to disclose under the CCPA/CPRA.
- Sale/sharing: We do not sell personal information and do not share personal information beyond what is stated above. Any use of non-essential cookies or similar technologies that may constitute sharing under California law is managed through our cookie settings on our website.
- Rights of California consumers: the right to access including categories and specific data, rectification, erasure, opt-out of sale/sharing, the right to limit the use of sensitive personal information where applicable, and the right not to be discriminated against for exercising your rights.
- How to exercise these rights: contact us at [email protected]. We will verify your identity (and, if applicable, California residency) before processing the request. You can appoint an authorized representative if the representative can demonstrate valid authorization.
- Storage time: According to the tables above.
Other similar regulations
To the extent that other local data protection regulations become applicable (e.g. Swiss Data Protection Law or Brazil’s LGPD), we process personal data in accordance with these. The rights are essentially similar to those described above, and complaints can be submitted with the relevant local supervisory authority. For cross-border transfers, we use applicable transfer mechanisms (e.g. standard contractual clauses, adequacy decisions, and supplementary safeguards).
Version
This privacy policy was last updated on 27 April 2026.
