Under the GDPR you have a range of rights as regards the processing of your personal data as described below. To exercise your rights, you are welcome to contact us using the contact information given at the end of this policy.
Right to access personal data
You have the right to receive confirmation of whether personal data concerning you are processed by the SIFA and, if so, be given access to the personal data and, for example, obtain information about:
- the purposes of the processing,
- the categories of personal data that the processing concerns,
- the recipients to whom the personal data have been or will be provided or disclosed, and
- if possible, the predicted period during which the personal data will be stored or, should this not be possible, the criteria used to establish this period.
If we process your personal data you are entitled to receive, free of charge, information about the processing, a so‐called register extract. If your request is evidently unfounded or unreasonable, we may charge a reasonable fee for such request in accordance with the provisions of the GDPR. In order to meet our security requirements, we also reserve the right to verify that it is the right person who is requesting personal data about him‐ or herself.
Right to rectification of inaccurate personal data
You have the right, without undue delay, to have your inaccurate personal data rectified and to have incomplete personal data completed.
Right to deletion (“right to be forgotten”)
In certain cases, you have the right to have your personal data deleted, for example if:
- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
- the processing of your personal data is based on consent and you have subsequently revoked your consent, provided that no other lawful grounds exist for the processing of the personal data,
- you object to the processing based on a legitimate interest and there are no legitimate reasons for the processing that override your interest of protection for your personal data, or
- if the personal data has been unlawfully processed.
The right to deletion does not apply if the personal data is required for the SIFA to fulfil a legal obligation.
Right to restriction
In certain cases, you have the right to request that the processing of your personal data be restricted, i.e. that it may only be processed with your consent. This may be, for example, if you do not consider that the personal data is correct and wish to restrict the use of the data while the SIFA verifies the data.
Right to data portability
You have the right to obtain personal data that you have provided to the SIFA in a structured, widely used and machine‐readable format in order to transfer it to another data controller in case the processing of the personal data is based on consent or performance of a contractual obligation.
Right to object
You have the right to object to processing of your personal data that is based on a legitimate interest. The SIFA may no longer process the personal data unless we can prove that compelling legitimate grounds exist for such processing which outweighs your interests and rights.
Right to lodge a complaint with a supervisory authority
If you consider that we are not respecting your rights, you also have the right to lodge a complaint with the Swedish Authority for Privacy Protection.