The museum and GDPR
From 25 May 2018, the new European General Data Protection Regulation (GDPR) applies throughout the European Union, replacing the Personal Information Act (PUL).
Västerbottens Museum follows this regulation.
What is personal data?
The concept of personal data includes all information that can identify a living individual. This can include such data as name, personal identification number, address, photographs, sound recordings or video recordings.
Lawful basis for our processing of personal data
We process personal data as part of our activities and to meet our legal obligations.
Sending e-mail to or receiving e-mail from Västerbottens Museum results in your personal data being processed by the museum. The data stored is primarily information that you have chosen to share when contacting us. Your personal data may be shared with other public authorities or companies if we have a legal obligation to do so. Your data may also be processed by our data processors.
When visiting our website, a cookie may be saved on your computer, phone or tablet. This cookie contains information about how you use your web browser and can be used to enhance your user experience. Information about IP addresses, operating systems and which search engine you use may be used for administrative purposes. This information is anonymised and cannot be linked to a specific individual.
Västerbottens Museum maintains the data it stores under high security. Encryption, limited access authorisations and confidentiality protect the personal data we store.
The regulation gives you, among other things, the following rights:
- You have the right to receive a copy of your personal data and other data that we have stored about you, e.g. photographs.
- You have the right to have your data erased from our system.
- You have the right to correct data.
- You have the right to revoke your consent where consent has been given.
If you have questions, want to receive a copy of your personal data or correct data, please contact firstname.lastname@example.org.