Privacy
Our privacy policy explains how we collect, use, store, disclose and protect your personal data. The policy applies to all our activities.
We naturally comply with all applicable legislation in this area, such as the General Data Protection Regulation (GDPR). In this text, we use the Swedish name.
The purpose of the law is to protect the individual’s right to privacy, which is a fundamental human right. The privacy of private individuals must not be violated in connection with the processing of personal data. This means that we may only process your personal data if there is legal support for doing so or if you have given your consent.
Data controller
The board of Högsboet ekonomisk förening is the data controller and is responsible for ensuring that your personal data is processed in a lawful manner.
What is personal data?
Personal data is any information that can be linked to a living person. The information may be direct or indirect. Examples of personal data include your name, address or personal identity number. Information about your health and political opinions is also considered personal data, as are images, films and audio recordings.
What does the term “processing of personal data” cover?
Processing personal data means everything that can be done with personal data, such as collecting, creating, storing, deleting, disseminating, archiving and copying.
How do we obtain your personal data?
In most cases, you provide it to us yourself when you participate in a training course, a project or a network, or so that we can handle a matter on your behalf.
Sometimes we may obtain your personal data from someone else, such as other authorities, municipalities or companies.
What data do we process?
Here are some examples of personal data that Högsboet ek. för. processes:
- Name and other contact details, including telephone number and email address.
- Occupation and source of income
- Proof of income documents
- Home insurance documents
- Account numbers for payment of rent to us
Why do we process your personal data (purpose)?
Högsboet ek. för. needs information about you in order to carry out our operations. This may involve administration in connection with you registering as a member and resident, for insurance purposes, for fault reporting to our landlord Familjebostäder, and for payment of rent to us.
All processing is based on well-founded grounds and we do not disclose any information in a commercial context.
If we need to process your personal data for a reason other than the original one, you will be informed of this before any new processing begins.
What is our legal basis for processing your data?
When Högsboet ek. för. processes personal data, there is always a legal basis for doing so, and we do not process more data than is necessary. The legal basis may vary depending on the type of processing involved. The legal bases on which Högsboet ek. för. relies are:
- Agreements: Data that we need to process in connection with rental agreements.
- Fundamental interest: The processing is necessary to protect interests that are of fundamental importance to the data subject or to another natural person.
- Consent: Unless one of the other legal bases applies, we need to obtain your consent, i.e. your active agreement to the processing.
How do we process your data?
We always comply with the basic principles set out in the Data Protection Regulation. This means, among other things, that you have the right to know what information we process about you, that your information is secure with us and that we do not use your personal data for purposes other than those we have specified. We also do not process more personal data than is necessary or store it for longer than necessary.
Read more in the Data Protection Regulation, Article 5. Link to another website.
How long do we store your data?
We process your personal data until the purpose of the processing has been fulfilled. After that, we no longer use your data in our daily operations. However, it may be stored with us if required by other legislation, such as the Accounting Act or the Archives Act.
Who has access to your data?
Those who have access to your personal data are board members of Högsboet ek. för. who need it to perform their duties. In some cases, we may disclose your personal data to organisations outside our organisation, such as to our landlord Familjebostäder.
What rights do you have as a registered person?
When we process your personal data, you have certain rights, see the list below. However, your rights depend on the legal basis that applies. In some cases, we may therefore not be able to comply with your request to exercise your rights.
Right to information and register extracts
You have the right to obtain information about the personal data we process about you and can contact us yourself to obtain a register extract. Email to hogsboet@gmail.com
Right to rectification, erasure or restriction of processing
You can always contact us and request that we correct any information that is incorrect or that we supplement any information that is incomplete. In certain cases, you can request that your information be deleted, for example if you no longer wish to receive newsletters.
Withdrawal of consent
If you have given us your consent, you always have the right to withdraw it if you no longer want us to process your data. However, withdrawing your consent does not affect the lawfulness of the processing of personal data for the period prior to the withdrawal of consent.
Right to lodge a complaint
You always have the right to contact the Data Protection Authority, which is the supervisory authority, if you are not satisfied with how Högsboet ek. för. processes your data.
Restriction of rights
As there are special rules governing public documents, some of your rights are restricted. Your rights may also be restricted for other reasons, for example when we process your data on the legal basis of a ‘legal obligation’. Certain data that we process is governed by other legislation, such as the Archives Act, the Accounting Act and legislation for public authorities. In such cases, there are specific provisions on how personal data may be processed and for how long.
Register of personal data processing
Högsboet ek. för. keeps a register of all processing we carry out. According to the Data Protection Regulation, all data controllers must have such a register. The register must contain a list of all processing, the legal basis on which it is carried out, who is responsible for the content and security, and how data is stored and deleted. The register is digital and can be presented to the supervisory authority, the Swedish Data Protection Authority, upon request.
How do we protect your data?
Högsboet ek. för. is committed to complying with the security requirements of the Data Protection Regulation. The level of security may vary depending on the type of data involved. It depends on the risks involved and how sensitive the data is. Based on this, it is handled in a manner that is reasonable in terms of technical possibilities and costs. When assessing the risks, the rights you have as a data subject are the focus.
Transfer to third countries
If we process your personal data outside the EU/EEA (third country), we will inform you of this.
Things to consider if you use our social media
If you write comments or contact us via social media, such as Facebook, LinkedIn or Instagram, the information is always transferred to a third party (i.e. the company that owns the social media). These companies are based outside the EU/EEA, which means that the transfer takes place to what is known as a third country. The terms and conditions applied by the social media channel apply to the further processing of your personal data. Högsboet ek. för. is therefore unable to delete this personal data and cannot guarantee that it will be processed in accordance with the same high level of protection as that provided by the General Data Protection Regulation (GDPR).
If you wish to remain anonymous or have a protected identity
If you wish to submit a comment or contact us anonymously, you must not provide any personal information, as this information will be registered and will then become a public document. We need access to a social security number (protected/unprotected type) for registration of membership and provision of a rental agreement.
Sensitive information and special personal data
Please note that if you provide sensitive information about yourself, email is usually not a secure means of communication. Examples of sensitive information include your personal identity number, account number and login details with passwords.
You also need to consider how you provide special personal data so that it is adequately protected.
Examples of special personal data include health status, religious or philosophical beliefs, ethnic origin, trade union and political affiliations, and sexual orientation.
In order for Högsboet ek. för. to process special personal data, there must be legal support or explicit consent from you as the registered person.
Contact
If you wish to object to the processing of your data, request correction or deletion of your data, or obtain a register extract, please send an email to hogsboet@gmail.com . In the case of such requests, it is important for us to know that you are who you say you are.
We will therefore require you to identify yourself. We will send the register extract to your registered address to ensure that it does not fall into the wrong hands.
More
The Data Protection Authority is the supervisory authority and is responsible for ensuring compliance with the Data Protection Regulation. Here you can read more about the law and find information on what to do if you are not satisfied with how Högsboet ek. för. processes your data.
The Swedish Data Protection Authority Link to another website.