Privacy policy

Last updated 2026-05-20

1. General

BalticWaters is committed to ensuring that you always feel safe when providing your personal data to us. We respect your privacy and your right to control your personal data. This Privacy Policy describes how we collect, store, and protect personal data. BalticWaters is the data controller for all processing of personal data provided to us. This policy complies with the EU General Data Protection Regulation (GDPR) and other applicable legislation.

2. What personal data we collect

The personal data we collect may include, for example, your name, postal address, telephone number, mobile phone number, email address, bank account number, and personal identity number.

The data is collected primarily when you:

sign up as a subscriber to our newsletter
make a donation, regardless of payment or donation channel, for example monthly giving, tribute or memorial donations, fundraising campaigns, corporate donations, or bequests. We may also make notes about donors’ wishes and interests in connection with different types of donations, such as corporate or memorial gifts
contact us by post, email, or telephone with an inquiry or similar matter
participate in an event organized by BalticWaters
apply for a vacant position
apply for and/or participate in our trainee programme
have a professional relationship with us, for example by representing a service or materials supplier, a collaboration partner, or by being a journalist, politician, or other stakeholder
when we publish photos or videos on our website or social media
when we obtain your address from an external source

3. How collected information is processed

The personal data we collect is recorded and stored digitally, for example in our CRM tool. The data is protected through personal logins, and only those who need access have access to the registers and personal data. We may update or supplement the data you provide, for example with the help of public personal data registers.

BalticWaters processes personal data primarily for the purposes stated below, as well as for any other purposes stated at the time of collection:

to send newsletters and other information
to manage registrations for our events
to provide information about our work and activities
to receive and register donations and manage monthly giving
to thank you for received donations, explain how collected funds are used, and send requests regarding new donations
to provide good donor service/customer care, such as handling your inquiries and requests, correcting inaccurate information, or sending information you have requested
for system administration and to maintain good register management
to compile statistics and conduct analyses for targeted marketing and to increase donations

4. Legal basis, storage, and deletion

As the legal basis for processing personal data, BalticWaters relies on the performance of a contract, legitimate interest, legal obligation, or consent. It is necessary to retain the data for the purposes of BalticWaters’ operations, such as sending newsletters, information, donation requests, and more. Your personal data is stored for as long as it is current or necessary for the purposes for which it was collected.

As a general rule, BalticWaters always processes your personal data within the EU/EEA. In order to maintain good register management, we systematically delete data from our systems. If you have been a donor and we do not hear from you, your data will automatically be deleted no later than three years after your most recent donation. The register is continuously updated from public registers, for example SPAR (the national address register). A high level of confidentiality and security is always observed in all processing of personal data.

You have the right to:

access your personal data
request correction of inaccurate data
request deletion
object to processing
request restriction of processing
receive your data in a structured format
withdraw consent at any time

5. Sharing of personal data

We never sell personal data to third parties. We may share personal data with:

service providers (e.g. IT providers)
project partners, but only when necessary
payment service providers for donations
authorities when required by law

All suppliers process personal data in accordance with agreements and the GDPR.

6. Information about cookies

BalticWaters uses Plausible Analytics to monitor website statistics. Plausible is a privacy-friendly analytics tool that does not process personal data or track individual users. Read more on the Plausible Analytics website.

About cookies

Websites may use so-called cookies. A cookie is a small text file stored on the visitor’s computer that contains information. Cookies are normally used to improve the website for the user. There are two types of cookies:

One type is stored temporarily on your computer while you browse a page. It disappears when you close your browser.
The other type stores a file on your computer for a longer period. It is used, for example, for functions that indicate what is new since you last visited the website in question.

More information about cookies is available on the Swedish Post and Telecom Authority’s website.