GDPR and personal data

The Gothenburg Port Authority may need to collect, receive, or in some other way process your personal data. When personal data is acquired by the Gothenburg Port Authority, it is generally regarded as being in the public domain and can be requested. There are also special rules governing documents in the public domain. The rules relate specifically to filing (retention) and erasure (discarding). To enable the Gothenburg Port Authority to file or discard your personal data and other information, there must be specially documented support for such a move. For further information, please contact the Regional Archives for the Västra Götaland Region and the City of Gothenburg. The Gothenburg Port Authority processes your personal data in compliance with the stipulations in the Data Protection Regulation (EU) 2016/679, as well as other governing legislation.

Personal data and processing

Personal data is any form of information that can identify a living person. Personal data processing covers all the means employed to process personal data. This could take the form of collection, retention, deletion, dissemination, filing and copying.

How have we obtained your personal data?

In the majority of cases you have personally provided us with personal data for us to deal with a matter on your behalf, although sometimes we could have received your personal data from a third party. If you have any questions about where your personal data has been obtained, please contact the personal data controller or the data protection officer.

Personal data controller

The personal data controller is the Board of Directors of the Gothenburg Port Authority, which is the body that processes your personal data. They are thus responsible for your personal data being processed lawfully, securely, and in all respects correctly.

If you have any questions about the processing of your personal data, please contact the personal data controller at info@portgot.se, Göteborgs Hamn AB, Emigrantvägen 2B, 414 63 Göteborg.

Why do we process your personal data?

If, for example, you submit an application to us, if you wish to enter the port area, or if you require a service from us, we must be able to verify that you really are the person you say you are in order to deal with the matter at hand. We also need information about you in order to be able to deal correctly with a particular matter, a request you may have made, your employment at the port etc. We will not process your personal data if we do not have  good reason for doing so.

Why are we permitted to process your personal data?

It can be said, for example, that when the Gothenburg Port Authority is under a legal obligation to offer access to certain services, such as a call by a vessel or entry into the port area, the port has the right to process personal data about you in order to comply with statutory requirements (legal obligations). The Gothenburg Port Authority is entitled to process your personal data when carrying out its official duties. When you have an agreement with the Gothenburg Port Authority, processing your personal data is permitted in order to fulfil the agreement. One or more of the following requirements must be satisfied for us to process your personal data.

• The data subject has granted her/his consent that her/his personal data may be processed for one or more specific purposes.
• The processing is necessary to fulfil an agreement to which the data subject is a party, or to take action at the request of the data subject before such an agreement is entered into.
• The processing is necessary to discharge a legal obligation that rests with the personal data controller.
• The processing is necessary to safeguard interests that are of fundamental importance to the data subject or to another physical person.
• The processing is necessary to perform a task that is of general interest or as part of the exercising of official duties by the personal data controller.
• The processing is necessary for purposes pertaining to the legitimate interests of the personal data controller or a third party, unless the data subject’s interests or fundamental rights and freedoms weigh more heavily and require that personal data is protected, particularly when the data subject is a child.

Who has access to your personal data?

The employees at the Gothenburg Port Authority who need to access your personal data in order to carry out their duties and deal with a particular matter or issue. It could be your contact person, an IT technician, a member of the administrative staff, or an external supplier. The party in question obviously depends on the nature of the matter.

Third country

If your personal data is processed outside the EU/EEA (third country), we will inform you. The processing will in that case take place in accordance with the protection rules embodied in data protection legislation.

How long will your personal data be retained?

Your personal data will be retained by the Gothenburg Port Authority until the purpose of the processing of the personal data has been fulfilled. The personal data will then be processed according to the rules applicable to the Gothenburg Port Authority relating to what are termed document management plans and erasure decisions. Personal data received by the Gothenburg Port Authority is generally in the public domain. Consequently, the Gothenburg Port Authority is not permitted to erase or retain data arbitrarily. Contact the personal data controller or the data security officer for further information.

Your rights when personal data is processed by us

You can do the following:

• Request access to your personal data
• Request rectification or erasure of personal data or the imposition of a processing restriction
• Object to processing of your personal data
• Request data portability
• At any time revoke any consent that may have been granted. If you revoke your consent, revocation becomes effective from the date on which revocation was made.
• File a complaint regarding our processing of your personal data with the Integrity Protection Authority

As there are special rules regarding the processing of documents that are in the public domain, some of these rights are limited. If you want to exercise any of your rights concerning your personal data, please contact the personal data controller at info@portgot.se Göteborgs Hamn AB, Emigrantvägen 2B, 414 63 Gothenburg

Automated decision-making and profiling

It could be the case that we use automated decision-making and profiling. This means that a decision can be reached automatically based on the data you have furnished to us, and that we can use a record of your data to form a complete picture of you and your needs.

Further processing

If your personal data is to be processed for any reason other than the original reason, you will be notified about this before new processing commences.