This is how Trafikverket works with the General Data Protection Regulation (GDPR)

The GDPR strengthens the protection of privacy and personal integrity associated with the collection, processing and retention of personal data. "Personal data" refers to all information that can be linked to a presently living identifiable person. Examples of personal data include name, Swedish personal ID number, e-mail address, IP address, vehicle registration number, property designation/land registry number, as well as photographs, visual or audio recording with an identifiable person.

The Swedish Transport Administration assumes the responsibility for the processing of personal data on this website. Your personal data will be used solely for the purpose(s) we have specified. We retain and process the data for as long as it is needed in order to fulfil the purpose(s) we have collected it for. When we save it, we use the security technology required in order to protect your personal data.

Your rights 

If you have provided your personal data to the Swedish Transport Administration, you have the right your data to have processed pursuant to the General Data Protection Ordinance (GDPR).

• request registry extracts
• request corrections
• request deletion (removal, thinning out)
• request a restricion of processing
• object to the processing
• revoke/withdraw consent (if the processing is based on consent

How can I file a complaint?

You also have the right to file a complaint with the supervisory
authority for the General Data Protection Ordinance. The supervisory authority
is the Integritetsskyddsmyndigheten, Swedish Privacy Protection Authority.

Swedish Authority for Privacy Protection's (IMY)

Are you employed by a supplier/vendor to the Swedish Transport Administration?

Collection of personal data pursuant to contract

In order for us to be able to fulfil our commitments pursuant to contracts, we collect information such as name, address, telephone number, e-mail address, vehicle registration number, position, title, professional qualifications, educational information, training certifications, photographs. The information is also collected as a basis for fulfilling the Swedish Transport Administration's legal obligations, for example for social responsibility or the performance of official duties.

For the secure identification of authorised individuals in our IT systems and facilities, personal ID numbers or similar identification numbers may be collected in order to comply with i.a. the Transport Swedish Transport Administration's rules concerning security permits.

Examples of processing for which the data will be used include are in our management systems for our activities and procedures for access control to facilities, time reporting, billing, document management, project management, e-mail communications and collaboration tools, management of public agency cases/affairs, and such matters.

Who collects the data?

The Swedish Transport Administration's contact persons, the manager responsible for the assignment, project administrators at our suppliers/vendors and at the Swedish Transport Administration, we collect relevant information according to the respective needs of the particular activity.

Who may access the data?

Employees at the Swedish Transport Administration and our suppliers/vendors who need this in order to manage handle rights cases, public agency matters, project management, maintenance services, communicate with you, production of documents, time reporting and billing, as well as other public authorities/agencies such as the Swedish Transport Agency or Swedish Tax Agency.

Does any profiling or automated decision-making occur?

No.

How is the data secured?

Your information is secured via that we apply rules in our system for information security, the General Data Protection Ordinance data protection and other legislation, as required. For example, rights verification applies to accessing your information so that only relevant persons can access it.

How long is the data retained?

Upon termination of an agreement, the data is archived in our management systems for our activities according to the rules governing what constitutes a public document or not, thinning decisions, or other statues or regulations such as the Swedish Accounting Act and Archiving Act. The information contained in which constitutes a public document, is maintained for an unlimited duration of time, provided that there is no support in law, regulation, ordinance or instruction for an earlier deletion (thinning).

If information, such as the case manager's name, their department, position and e-mail address, etc. have been used in the exercise of public authority, this will be subject to applicable laws such as the Swedish Public Access to Official Documents and Secrecy Act, Fundamental Law on the Freedom of Expression, and the Archive Act.

Is personal data transferred to countries outside of the EU/EEA?

No.

Does any profiling or automated decision-making occur?

No.

The management and processing of personal data in social media

The Swedish Transport Administration uses Facebook, Instagram, Twitter, YouTube and LinkedIn for communication with the general public, stakeholders, customers, suppliers/vendors and prospective employees.

The Swedish Transport Administration's processing of personal data in our social media channels complies with the provisions of the General Data Protection Ordinance (GDPR) and occurs in accordance with the legal grounds.

We use a case processing system in order to keep track of posts and comments on Swedish Transport Administration's general Facebook page. It is a processing of personal data based on the "public interest" legal basis, as provided in the General Data Protection Ordinance. The case processing system reflects the posts on the Facebook page, which means that the personal data found in the system consists of a username. We do not store any other personal data in the system.

You have the right to object, request correction, deletion and file a complaint concerning the Swedish Transport Administration's processing of your personal data in social media. See additional information under Your rights pursuant to the General Data Protection Regulation.

Personal data we collect about you