This is how Sveaviken PM AB processes personal data in its business and on the website, and how you exercise your rights. The Swedish text is the original.
Last updated
Introduction
Sveaviken PM AB (559387–1030, below Sveaviken PM / We) protects the privacy of our customers and of others who contact us in one way or another, whether through a visit to our website, our letting channels, by email, the tenant app, My Pages or by other means. Sveaviken PM therefore complies with the General Data Protection Regulation (GDPR). Its purpose is to protect the fundamental rights and freedoms of individuals, in particular personal data. This policy contains information about how Sveaviken PM processes personal data.
With the GDPR, We have clarified here how We store and use your personal data. For example when you rent a home through us and register your interest. When We process personal data on behalf of our customers (property owners), our customers are the controllers. This applies, for example, to you who rent a home in a property or otherwise live in the property.
Sveaviken PM is, however, the controller for personal data processed in relation to our employees, customers, potential customers, job applicants, website visitors and other stakeholders.
In some situations it is necessary for Sveaviken PM to engage other parties, such as IT suppliers of property systems, letting platforms, lock systems, the tenant app, HR systems or electronic driving logs. They are then processors to us. In such circumstances Sveaviken PM ensures that there is a data processing agreement that protects the processing of your personal data by the processor.
What is personal data?
Personal data is any kind of information that directly or indirectly (that is, through other information) can be attributed to an individual. Typical examples are names and personal identity numbers, but images, audio recordings, apartment numbers, IP addresses and much more also count as personal data. Processing personal data means that one or more operations are carried out, such as collecting, storing, reading, editing or transferring the data.
Personal data in the business
The business of Sveaviken PM consists primarily of property management (commercial and residential). In its daily work Sveaviken PM is in contact with a number of different parties whose personal data Sveaviken PM comes into contact with.
In general there is a contractual relationship between the party and Sveaviken PM, which is the main legal basis for the processing of personal data. In other circumstances, but also in relations with parties under contract, there are situations where Sveaviken processes personal data in a way not expressed in a contract. This may be for marketing purposes, on a visit to the website, or the name of a tenant’s partner. Where Sveaviken PM processes personal data in such circumstances, it is done on the basis of a legitimate interest or because there is a legal obligation.
The personal data We process
Customers
As a contact person at one of Sveaviken PM’s customers, We need certain personal data in order to enter into agreements, administer and fulfil our contractual obligations. We therefore handle contact details such as name, address, email, telephone number and other information relevant in the context.
If you contact us on your own initiative, We will process the personal data you provide that is relevant to your matter. The purpose of processing the personal data is then to fulfil our obligations under the agreement, answer questions or provide other service.
Potential customers
To market Sveaviken PM’s services, We collect and register your contact details. The data is obtained from public registers or open sources.
Where you have provided your contact details yourself, the data may be used for marketing Sveaviken PM’s services.
Tenants
We process tenants’ personal data on behalf of our customers. When We process personal data on behalf of our customers (property owners), our customers are the controllers. This applies, for example, to you who rent commercial premises or a home in a property or otherwise live in the property. Examples of personal data processed are name, personal identity number, address, email, telephone number and other information relevant in the context. We will also request a credit report, a background check, references and anything else required by our customers and following from our routines. These are set out more clearly at the time of letting.
The above applies from the moment you are looking for a home or commercial premises with a customer of Sveaviken PM.
Suppliers and partners
As a contact person and/or employee at one of our suppliers or partners, We may, for administrative purposes, process your personal data in order to enter into and fulfil the agreement with the relevant supplier or partner. Examples of personal data processed are name, address, email, telephone number and other information relevant in the context.
Job applicants
If you have applied for a job on Sveaviken PM’s career site or submitted a spontaneous application, We process the data you have provided, for example name, personal identity number, address, email, telephone number and CV/cover letter.
Website visitors
To keep Sveaviken PM’s website secure, We collect web logs containing online identifiers and timestamps. Web logs may also be used to detect and prevent various kinds of unlawful use, prevent abuse of our services and prevent the spread of viruses, spam and trojans.
Other
Beyond the above, We process personal data that you have chosen to provide to us, for example in general email contact (which is deleted automatically after two years).
Our starting point is always not to request sensitive personal data, for example about health. If you nevertheless provide sensitive personal data yourself, or following a request from us, Sveaviken PM will process it only provided that a valid exception under Article 9 or 10 of the GDPR applies. Sensitive personal data will otherwise be deleted without undue delay.
How long personal data is kept
Retention periods vary depending on our relationship and in what respect you have been in contact with us (for example tenant, employee, customer, job applicant). Some data may be kept longer due to statutory retention periods or in order to establish, exercise or defend legal claims. Sveaviken PM also has a legal obligation to keep records for accounting, payments and transactions covered by tax and accounting legislation.
Sveaviken PM takes measures to ensure that your personal data is not kept longer than required by law or to fulfil the purpose for which the data was collected.
All email at Sveaviken PM is deleted automatically after two years. Sensitive personal data, or other data We receive without a legal basis for processing, is however deleted without undue delay.
Security
No data transfer over the internet or any other network can be guaranteed absolute security, but Sveaviken PM works to ensure that your personal data is processed securely and protected against unauthorised access. We make sure that the personal data We process is protected by the necessary technical and organisational measures, in light of what is appropriate given the nature, scope and sensitivity of the personal data.
Rights of the data subject
You have the right to request information about the processing of your personal data.
To request information, you need to provide us with the following: first and last name, address, postcode and postal town, telephone number and email address. You can then choose between the following options for submitting your details:
Email kundservice@sveavikenpm.se and include clear information about which of your rights you wish to exercise.
Under the GDPR you have the following rights:
The right to information
You have the right to know when, how and why your personal data is processed.
The right of access – a copy of your data
You have the right to receive a copy of the information about you that an organisation has stored. The copy must be provided within one month and you must identify yourself in some way.
Rectification of inaccurate data
You have the right to request that the organisation corrects inaccurate or incomplete information about you.
Erasure of certain data
You have the right to request that the organisation erases your personal data under certain conditions, for example if the personal data is no longer necessary for the purpose for which We collected it.
The right to restriction of processing of your personal data
You have the right to request a restriction of the organisation’s processing of your personal data in certain cases. For example, if you have contested the accuracy of your personal data, you may request that processing be restricted for a period that allows the organisation to verify whether the personal data is accurate.
The right to data portability
This means that the data subject has the right, on request, to receive the data registered about them in order to transfer and reuse it with another party, for example another supplier.
The right to object
You have the right, under certain conditions, to object to the organisation’s processing of your personal data.
The right to object to direct marketing
You have the right to object to your data being used for the purpose of sending direct marketing.
Sometimes your rights are affected by applicable legislation or other rules, which may limit our ability to accommodate your right adequately.
Contact
If you have questions or comments about the processing of your personal data, please contact us at kundservice@sveavikenpm.se.
If you have a complaint about how We process your personal data
If you are dissatisfied with how Sveaviken PM handles your personal data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten). You do so at www.imy.se.
Wondering about your data?
Contact customer service and we will help you, whether it concerns a copy of your data or how a form is handled.