1.1 This website is operated by Hektara AB, organisation number 559375-7429 ("Hektar", "we", "us", or "our"). Hektar is the so-called "data controller" for the processing of your personal data and is thus responsible for the processing in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR", "Data Protection Regulation") and other applicable legislation. In order for Hektar to conduct its daily operations, different types of personal data are processed, such as name, e-mail address and other information that may be needed to conduct these operations.

1.2 In this privacy policy (this "Policy"), we will explain how we collect, store, use and potentially disclose personal data collected from you during your use of the website and what measures we take to protect the integrity and confidentiality of your personal data. Our aim with this privacy policy is to make you feel safe to provide your personal data to Hektar. Thus, we have established this policy that describes how we use the personal data we receive about you. It will thus be reported when data is collected, what data is covered and for what purposes it is collected. It also clarifies what rights you have towards us and how you can exercise them.

2.1 Personal data means any information that can be used directly or indirectly to identify a natural person who is alive.

2.2 The personal data that is processed constitutes information that we receive from you as a customer in order to conduct our business of brokering hunting. This personal data includes first name and surname, e-mail address, telephone number, social security number, address, hunting licence and hunter's licence and payment information, but also other personal information you choose to provide/send to us when you use our services, see section 6 below. This personal data must be provided in order for us to carry out and secure the brokerage of hunting in Sweden. In addition, we may collect IP address and technical information about our users. However, this information is not linked to any particular user, but is about Hektar being able to analyse and track web traffic to Hektar's website.

2.3 Hektar may also process personal data that you voluntarily provide to us, for example in connection with communicating with us by e-mail, letter, or otherwise, see section 6 below. In these cases, the personal data generally includes name, postal address, e-mail address, telephone number and title.

2.4 We may obtain personal data about you from business partners and other third parties.

2.5 In cases where you also book on behalf of someone else or otherwise disclose another person's personal data, we rely on you to obtain their prior consent.

2.6 We do not collect so-called "special categories of personal data" about you, i.e. data that can be considered particularly sensitive.

3.1 Hektar does not process any personal data about you unless there is a clear purpose and a legal basis for the processing.

3.2 Personal data is processed to fulfil agreements entered into with you, and thus our obligation to fulfil this agreement.

3.3 Processing also takes place to fulfil the legal obligations incumbent on Hektar under court or authority decisions or under law or regulation, such as bokföringslagen (1999:1078).

3.4 The handling of personal data for the purpose of communicating with you, including through newsletters, is based on Hektar's legitimate interest in maintaining client and business relationships. If you do not wish to receive newsletters, you are welcome to contact Hektar at policy@hektar.se.

3.5 Personal numbers have a high protection value in the Data Protection Regulation, which is why they are processed with the support of consent, agreement or when it is required with regard to the purpose and the importance of being able to identify people in a secure way.

4.1 Personal information submitted to us via our website will be used for the purposes set out in this Policy or on the relevant pages of the website. We may use your personal information for the following:
1. to administer our website and business;
2. to customise our website for you;
3. to enable you to use the services available on our website;
4. to send you goods that you have purchased through our website;
5. to deliver services purchased through our website;
6. sending statements, invoices and payment reminders to you and collecting payments from you;
7. to send commercial communications that are not for marketing purposes;
8. to send emails that you have specifically requested;
9. to send you our email newsletter if you have requested it (you can inform us at any time if you no longer need the newsletter);
10. to send marketing communications to you relating to our business or the business of carefully selected third parties that we think may be of interest to you by post or, where you have specifically consented to this, by email or similar technology (you can inform us at any time if you no longer require marketing communications);
11. to provide third parties with statistical information about our users (but these third parties will not be able to identify an individual user from the information);
12. to deal with enquiries and complaints from or about you regarding our website;
13. to keep our website secure and prevent fraud;
14. to confirm your acceptance of our website's terms of use (including monitoring private messages sent via our website's private messaging service);
15. to prevent misuse of the Hectar service (see Terms of Use); and
16. other uses.

5.1 Those who have access to your personal data are exclusively employees of Hektar who need to have access to it in order to fulfil the purposes set out in this privacy policy.

5.2 We may disclose your personal data to any of our employees, directors, insurers, professional advisers, agents, suppliers or subcontractors as is reasonable and/or necessary for the purposes set out in this policy.

5.3 In the event that Hektar discloses your personal data to third parties who are independent data controllers, the privacy policy of the respective third party independent data controller(s) applies to the processing of your personal data.

5.4 We may disclose your personal information:
1. to the extent we are required to do so by law;
2. in connection with pending or future legal proceedings;
3. to establish, exercise or defend our legal rights (including disclosing information to others for the purposes of fraud prevention and credit risk mitigation);
4. to the purchaser (or prospective purchaser) of any business or assets that we are in the process (or considering) of selling; and
5. to any person whom we reasonably believe may request from a court or other competent authority that we disclose the personal information if, in our reasonable opinion, such court or authority could reasonably order us to disclose the personal information.

6.1 In order to enable communication between users, and to make available information that users benefit from in the utilisation of Hektar's service, Hektar will make available to other users some of the personal data that users provide upon registration and/or later. The information that will be displayed is based on the information that the user provides about himself or herself. The information will be displayed to both Landowners and Hunters in order for them to be able to make informed decisions about access to hunts, read reviews of other users, and to facilitate communication between users, etc.

6.2 Personal data that Landowners will be able to see, are the following, but not limited to, (to the extent provided by the user): username, name, email address, phone number, age, description(s), rating(s), recommendation(s), certification(s), diplomas, shooting results, friends (and number), hunting reports (which may include geographical data, time stamps, etc. etc.), dog information, information on hunting equipment (weapons, optics, scopes, etc. - equipment used for hunting), and other information provided by the user about himself/herself.

6.3 Personal data that other users will be able to see, are the following, but not limited to, (to the extent provided by the user): username, name, email address, phone number, age, description(s), rating(s), recommendation(s), certification(s), diploma(s), shooting results, friends (and number), hunting reports (which may include geographical data, time stamps, etc. etc.), dog information, information on hunting equipment (weapons, optics, scopes, etc. - equipment used for hunting), and other information provided by the user about himself/herself.

7.1 All data is stored on servers within the EU and will not be transferred to countries outside the EU/EEA.

8.1 As stated above, Hektar collects personal data for specific, explicitly stated and legitimate purposes. These personal data are not stored for a longer period than is necessary for the purposes for which the personal data are processed.

8.2 All personal data collected is deleted according to established procedures as soon as it is no longer necessary to fulfil the purposes for which it was collected.

8.3 Hektar may, however, save personal data for which the purpose has ceased if required by law or by court or authority decision. In addition, personal data may be saved for a longer period of time for the fulfilment of an agreement or in connection with a dispute.

9.1 In line with making you feel safe to share personal information with Hektar, we take reasonable technical and organisational precautions to prevent the loss, misuse or alteration of your personal information. We will also ensure that any personal information you provide to us is stored on secure servers. All electronic financial transactions made through our website are protected by encryption technology.

9.2 Despite our measures, you acknowledge that information transmission via the internet is inherently insecure, and we cannot guarantee the security of your personal data, although we always endeavour to do so.

10.1 You can ask us to provide you with any personal information we hold about you ("records"). We may withhold the personal information you request as permitted by law. You can ask us at any time not to process your personal information for marketing purposes. In practice, you will usually either expressly agree to our use of your personal information for marketing purposes, or we will give you the opportunity to opt out of the use of your personal information for marketing purposes.

10.2 In addition to the register extract, you as a data subject also have the right to 1) request correction of incorrect or incomplete data, 2) request deletion or restriction of the processing of personal data, 3) object to the processing, 4) if applicable, obtain and transfer these to another data controller if technically possible. You also have the right to withdraw any consent you have given us at any time.

10.3 If a request as above is made, it will be examined by Hektar in the individual case. Please note that in some cases Hektar cannot delete data or restrict its use, with reference to a contractual relationship.

10.4 If your user account is suspended or deleted - on our or your own initiative - we may save personal data about you that is deemed necessary to protect Hektar's legitimate interests. Some personal data may be retained to, inter alia, counter fraud or increase the security of the platform. For example, Hektar may store information about an account that has been suspended due to fraud or security risks, in order to prevent that user from opening a new account with Hektar in the future.

11.1 Our website may contain hyperlinks to and/or details of third party websites. Any personal data you choose to share with these third parties, we have no control over and are not responsible for.

12.1 In the first instance, you can change the personal information you have provided yourself at www.hektar.se.

12.2 If you are unable to change the information Hektar holds about you, please contact us.

13.3 Our website uses cookies. A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and stored by the browser. The identifier is then sent back to the server every time the browser requests a page from the server. Cookies can be either "persistent cookies" or "session cookies": a persistent cookie is stored by a browser and remains valid until the specified expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the browser is closed. Cookies do not usually contain information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.

14.1 If you have any questions about the collection, processing or use of your personal data, you can contact us at policy@hektar.se. Via that address, you can also request that we amend, block or delete your personal data.

14.2 If you have complaints or questions regarding Hektar's personal data processing, you can also turn to the Swedish Integritetsskyddsmyndigheten (formerly Datainspektionen).

15.1 This privacy policy may, from time to time, be updated or amended. If our handling of your personal data changes, this privacy policy will be updated immediately and published on this website. In addition, the text line below will be updated to when the privacy policy was last updated. In connection with changes to the Privacy Policy, you may be asked to consent to the new Privacy Policy.