Under the Swedish Personal Data Act (1998:2004), which implements the EU Directive 95/46/EC, and Dataskyddslagen and the General Data Protection Regulation (EU 2016/679) we will be liable for the processing of personal data where we decide the purposes and the means of the processing.