Collection of personal data pursuant to contract
In order for us to be able to fulfil our commitments pursuant to contracts, we collect information such as name, address, telephone number, e-mail address, vehicle registration number, position, title, professional qualifications, educational information, training certifications, photographs. The information is also collected as a basis for fulfilling the Swedish Transport Administration's legal obligations, for example for social responsibility or the performance of official duties.
For the secure identification of authorised individuals in our IT systems and facilities, personal ID numbers or similar identification numbers may be collected in order to comply with i.a. the Transport Swedish Transport Administration's rules concerning security permits.
Examples of processing for which the data will be used include are in our management systems for our activities and procedures for access control to facilities, time reporting, billing, document management, project management, e-mail communications and collaboration tools, management of public agency cases/affairs, and such matters.
Who collects the data?
The Swedish Transport Administration's contact persons, the manager responsible for the assignment, project administrators at our suppliers/vendors and at the Swedish Transport Administration, we collect relevant information according to the respective needs of the particular activity.
Who may access the data?
Employees at the Swedish Transport Administration and our suppliers/vendors who need this in order to manage handle rights cases, public agency matters, project management, maintenance services, communicate with you, production of documents, time reporting and billing, as well as other public authorities/agencies such as the Swedish Transport Agency or Swedish Tax Agency.
Does any profiling or automated decision-making occur?
No.
How is the data secured?
Your information is secured via that we apply rules in our system for information security, the General Data Protection Ordinance data protection and other legislation, as required. For example, rights verification applies to accessing your information so that only relevant persons can access it.
How long is the data retained?
Upon termination of an agreement, the data is archived in our management systems for our activities according to the rules governing what constitutes a public document or not, thinning decisions, or other statues or regulations such as the Swedish Accounting Act and Archiving Act. The information contained in which constitutes a public document, is maintained for an unlimited duration of time, provided that there is no support in law, regulation, ordinance or instruction for an earlier deletion (thinning).
If information, such as the case manager's name, their department, position and e-mail address, etc. have been used in the exercise of public authority, this will be subject to applicable laws such as the Swedish Public Access to Official Documents and Secrecy Act, Fundamental Law on the Freedom of Expression, and the Archive Act.
Is personal data transferred to countries outside of the EU/EEA?
No.
Does any profiling or automated decision-making occur?
No.
