EKN is controller for the processing of personal data carried out as part of EKN’s operations and on its website ekn.se. If you have any questions, please contact EKN’s DPO, Eva Kullberg Tideman at firstname.lastname@example.org.
Personal data is all types of information that can be directly or indirectly related to a living private individual. Examples of personal data are name, identification number and e-mail address. The General Data Protection Regulation (GDPR) contains rules governing the way that personal data may be processed.
Under GDPR, all processing of personal data must be based on a lawful ground.
A fundamental lawful ground for processing of personal data at EKN is that EKN performs a task carried out in the public interest. Guidance to ensure that EKN carries out personal data processing in the public interest may be found in EKN’s instructions and EKN’s public service agreement.
Examples are given below from section 2 of the EKN Instructions Regulation (Förordning (2007:1217) med instruktion för Exportkreditnämnden), showing when EKN performs tasks in the public interest.
Section 2: In particular, EKN must:
1. determine whether the prerequisites for granting a guarantee are met;
7. provide information about forms of guarantee offered by EKN and about the general requirements and conditions applying in order to be granted a guarantee;
8. monitor international developments within EKN’s sphere of responsibility.
Some extracts are also given below from EKN’s public service agreement (EKN:s Regleringsbrev), illustrating when EKN performs tasks in the public interest:
In some cases EKN processes personal data because it has a legal obligation to do so, e.g. under the Accounting Act.
In some cases EKN processes personal data on the basis of consent. Consent must be given voluntarily and the data subject must be able to withdraw their consent at any time. Consent must be clearly distinguishable from other text and information. Consent is given in writing or orally.
EKN processes personal data in different situations. EKN processes personal data in accordance with the Freedom of the Press Act (1949:105) and the Public Access to Information and Secrecy Act (2009:400). For instance, personal data that are provided to us are processed so we can:
Once each calendar year you have the right to receive, free of charge, a copy of information about the personal data about you that EKN processes. EKN has the right to charge a reasonable fee for administrative costs for any additional copies of personal data. EKN provides the information in an electronic format if the request is made by electronic means.
You have the right to request rectification if EKN has processed/processes personal data about you incorrectly.
If you consider that EKN’s processing of your personal data is in breach of GDPR, you have the right to complain to the Swedish Data Protection Authority.
|Data Protection Policy||2018|