Processing of personal data from reindeer herding records

Information on the processing of personal data

To the Sámi villages in Norrbotten County, to be distributed to the members concerned

Viscaria Kiruna AB (“Viscaria” or “we”) has access to reindeer registers (Sw. renlängder) up to and including year 2003, which contain personal data on reindeer owners’ names, personal identity numbers, reindeer owner codes (Sw. renägarkod) and addresses, including postcode and postal address, as well as information on the number of reindeers owned by each reindeer owner. The personal data in the reindeer registers may be attributable to members of the Sámi villages in Norrbotten County. We also have access to reindeer registers from 2004 to 2023, but these do not contain any personal data.

The personal data in the reindeer registers is processed in order to investigate information that has arisen in connection with an environmental assessment and permit process about the development of the reindeer husbandry over time related to the establishment of various activities, including previous mining activities at Viscaria, and to be able to effectively defend Viscaria’s rights in connection with the environmental assessment and permit process. In order to fulfil the purpose of the processing, it is necessary and proportionate to access, digitise and analyse the reindeer registers. The legal basis for the processing of personal data is a balance of interests. We consider that the processing of personal data is necessary to fulfil the purpose of the processing and to establish, exercise or defend legal claims. We also consider that these interests outweigh any conflicting interests and fundamental rights and freedoms.

Viscaria has accessed the personal data through public documents that have been released by the Norrbotten County Administrative Board (Sw. Länsstyrelsen i Norbottens län).

The personal data will only be processed by Viscaria for as long as the processing is necessary for the purpose. The personal data will be continuously deleted or masked, and it will never be processed longer than during the ongoing environmental assessment or permit process.

Viscaria Kiruna AB, reg. no. 556747-7798, Viscariavägen 10, 981 99 Kiruna, is the controller for the processing of personal data as described above. This means that we are responsible for ensuring that the personal data is processed correctly and in accordance with applicable personal data legislation. If we process your personal data, you have several rights. The rights applicable to the personal data processing activity in question are described below. If you have any questions about our processing of your personal data or if you wish to exercise your rights, you can contact us by e-mail at anna.tyni@viscaria.com or by letter to the address above. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection(Sw. Integritetsskyddsmyndigheten).

• Right to information and access: You can request to be informed whether we are processing your personal data and to receive a copy of it (known as a ‘record extract’) together with some more detailed information about how we process your personal data.

• Right to rectification: If you consider that your personal data is inaccurate or incomplete, you can request that it be corrected or completed.

• Right to object: You have the right to object to the processing of your personal data which is based on a balance of interests. If we cannot demonstrate that there are compelling legitimate grounds to continue processing the personal data, we must cease the processing.

• Right to restriction: In certain cases, you have the possibility to require restriction of the processing of your personal data, which means that the data is marked so that it may only be processed for certain limited purposes in the future. By requesting a restriction of processing, you have the possibility, at least for a certain period of time, to stop us from using the personal data for purposes other than, for example, the defence of our legal claims.

• Right to erasure: In some cases, you can have your personal data erased. Erasure may apply, for example, to personal data that is no longer necessary to process or keep for the purpose for which it was collected. In some circumstances, we may not be able to delete your personal data, for example where your personal data is still necessary to process for the purpose for which it was collected or where our interest in continuing to process the data outweighs your interest in having it deleted.