Privacy Policy

MTR Nordic AB (“MTR”) is committed to protecting your personal privacy. This privacy policy explains how we collect and use your personal data. It also describes your rights in relation to us and how you can exercise those rights.

How We Process Your Personal Data

Personal data refers to any information that directly or indirectly (i.e., together with other data) can be linked to you, such as your name, photo, personal identity number, or IP address.
Processing includes any action taken in relation to your personal data, such as collection, registration, organisation, structuring, storage, processing, transfer, or deletion.
This section explains how your personal data is used.

What Personal Data Do We Collect?

We process personal data collected from various sources:

Data you provide to us, such as:

  • Name and contact information (email, phone number, etc.)
  • Correspondence when you contact us (email, letters, etc.)

Data we generate when you visit our website, such as:

  • Your IP address and information about your visits to our website, collected through cookies.
    For more information about our use of cookies, please see our cookie policy.

Data collected from third parties (applies to Lost Property handling):

  • Address information obtained from SPAR (the Swedish state personal address register).

For What Purposes Do We Use Your Personal Data?

We always process your personal data in accordance with applicable data protection legislation. This means that each processing activity is based on a legal ground. In most cases, processing is based on a legitimate interest or consent. If we process your personal data for a purpose that requires consent, we will obtain your consent before such processing begins.

Below are examples of purposes for which we process your personal data and the corresponding legal grounds.


Communication with You

We process your personal data in connection with communication with you — for example, when you contact us via our website to apply for film and photography permits or to subscribe to our recruitment service or press releases.
Legal ground: Consent
Retention period: Personal data relating to film and photography permits is stored until the application has been processed and closed. For subscriptions, the data is stored as long as the subscription is active.

To Whom Do We Disclose Your Personal Data?

We may share your personal data with the following recipients:

  • Other companies within the MTR Nordic Group, e.g., for processing film and photography permits or subscriptions.
  • External partners, both within and outside the EU/EEA, such as IT service providers, or for analysis and statistical purposes.
  • Other recipients when required by law or government decision.

Any company processing personal data on our behalf must sign a data processing agreement with us to ensure a high level of protection for your personal data. We only share personal data for purposes compatible with those for which the data was originally collected.

If we use partners or suppliers outside the EU/EEA, we apply specific safeguards — for example, signing agreements that include the standard contractual clauses adopted by the European Commission, available on the Commission’s website.


How We Protect Your Personal Data

We protect your personal data through technical and organisational security measures. Our IT systems are designed to safeguard the confidentiality, integrity, and availability of personal data. Special measures are in place to prevent unauthorised access, loss, destruction, or damage.
Only persons who need to process your personal data to fulfil the stated purposes have access to it.

Cookies

When you visit our website, we may collect information about you using cookies.
For more details, please see our cookie policy.

Your Rights

You have certain rights in relation to us. If you wish to exercise any of these rights, please contact us using the details below.

  • Right of access (data extract) – the right to obtain confirmation and information about how your personal data is processed.
  • Right to rectification – the right to have incorrect data corrected.
  • Right to erasure – the right to have your data deleted.
  • Right to restriction – the right to request limitation of processing, e.g., if you dispute the accuracy of data.
  • Right to object – the right to object to processing based on legitimate interests, e.g., for direct marketing.
  • Right to data portability – the right to request that personal data you have provided be transferred to another controller.

If you believe our processing of your personal data does not comply with applicable data protection laws, you have the right to lodge a complaint with the supervisory authority (the Swedish Authority for Privacy Protection, IMY).

Contact Details

MTR Nordic AB is the data controller for the processing carried out under this privacy policy.
If you would like more information about how your personal data is processed or wish to exercise your rights, please contact us:

MTR Nordic AB