Privacy policy

Here you can find information on what personal data is, in what contexts the regions’ office for sustainable procurement needs to process personal data about you, how we handle the data, and what rights you have.

Laws and regulations apply
The processing of your personal data is governed by several laws intended to protect your personal privacy; for example the GDPR – General Data Protection Regulation – and the Public Access to Information and Secrecy Act.

Personal data may only be collected and processed for legitimate purposes. It is not permitted to collect more personal data than is necessary for the purpose. Nor may the data be stored longer than necessary or processed in ways other than those originally intended.

What is personal data?
Personal data is any information that can be linked to a living person. This may be, for example, a name, a photo, an address, a phone number, or an audio recording. It may also include more sensitive information about health or about personal values and opinions.

Controller
The controller for the processing of your personal data is the regional executive committee (Region Stockholm).

The regional executive committee has a data protection officer who provides advice and support and ensures that the rules on personal data processing are followed.

Why do we process your personal data?
Your personal data is processed to administer the distribution of newsletters and when handling and responding to enquiries from you.

The legal basis for the processing is article 6.1 (e) GDPR, public interest.

What personal data is processed?
We process the following data: name, email address, and organisational affiliation.

How did we obtain your personal data?
The personal data we process has been provided by you when you signed up to receive newsletters or submitted a question.

Who has access to your personal data?
Those who have access to your personal data are employees at the regions’ office for sustainable procurement who need the data to perform their tasks, such as administering newsletter mailings and answering your questions. We also engage a processor to process/administer personal data on behalf of the regional executive committee.

Where is your personal data processed?
Your personal data is processed within the EU/EEA but may be transferred to a country with an adequate level of protection under GDPR, or to another country outside the EU/EEA.

How long is your personal data stored?
Your personal data will be processed until the purpose of the processing has been fulfilled. When the purpose is no longer relevant – for example if you end your newsletter subscription or once your enquiry has been answered – your personal data will be handled in accordance with the rules on disposal and retention applicable within Region Stockholm.

Personal data received by the regional executive committee generally becomes official documents (public records).

What rights do I have?
If your personal data is registered with the regional executive committee, you have rights regarding information about and control over your data.

You have the right to request access to the data we hold about you. You also have the right to request rectification where the registered data is incorrect. Furthermore, you have the right to object to the processing of your personal data, the right to request restriction, and in certain cases the right to have the data erased.

Your rights depend on the legal basis for the processing of personal data. This means that some rights only apply under certain conditions.

Questions and feedback
If you have questions regarding the processing of your personal data or your rights under the GDPR, you can contact the regional executive committee at kontakt@regionstockholm.se or +46 (0)8-123 100 00 (switchboard).

If you want to contact the data protection officer, email: integritetsskydd@regionstockholm.se.

You have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe your personal data has been processed in an incorrect manner. For more information, see IMY’s website www.imy.se