How we take care of your privacy

What data do we collect?

Personal data means any data that can be linked to you as an individual. It may be your name, personal identity number, address, e-mail address, telephone number etc. Or it may be information about your personal circumstances, such as medical information, which forms the basis of the examination of some of our cases- It may also be information about what permits or permissions you have or which vehicles you own.

How do we collect your personal data?

The Swedish Transport Agency collects personal data from you when you submit an application or contact us for any other reason. We also collect personal data about you from other authorities, for example from the Swedish Tax Agency. We may also receive information from companies or doctors that report data to us because they are required to do so by rules and regulations.

Why do we collect and process your personal data?

The Swedish Transport Agency processes your personal data in order to

• handle and administer matters in our licensing and supervision activities
• fulfil our obligation to keep various registers
• be able to receive and answer questions that reach us via various communication channels, for example e-mail
• produce statistics on, monitor and evaluate traffic safety work
• administer charges and invoices on account of our licensing, supervision and register activities
• plan and carry out monitoring and reporting of results, as well as evaluation and supervision of our activities
• produce statistics for the handling of matters and for the planning, monitoring, reporting, evaluation and supervision of our activities
• fulfil the disclosure of information requirements that follow from rules and regulations
• test and further develop the IT systems used in our handling of matters and register activities.

We have support for our processing of personal data because it is necessary when we perform tasks in the public interest or in the exercise of public authority (for example when we process personal data as part of our handling of matters). We also have a responsibility for keeping various registers; processing is then necessary on account of a legal obligation. In some cases we process your personal data because we have your consent to do so or because we have entered into an agreement with you.

Authorities

After an examination, your personal data may be disclosed to public authorities that need to access the data because they are performing a task in the public interest or in connection with the exercise of public authority. It may be the Swedish Police Authority, the Swedish Transport Administration, the Swedish Civil Aviation Administration, the Swedish Maritime Administration or Statistics Sweden. How the data is to be disclosed is regulated in special provisions such as register regulations or the Public Access to Information and Secrecy Act.

Transfer to a third country or international organisation

In some cases, the Swedish Transport Agency transfers personal data to a third country (non-EU country) or to an international organisation. We only transfer personal data to such a country if the European Commission has assessed that the country meets the requirements for an adequate level of protection. If the third country is not approved by the EU, we write a data protection agreement instead, and use the contractual clauses adopted by the European Commission that provide protection for personal integrity. In certain cases the law requires us to supply information to other states or international organisations. The personal data are then being transferred to satisfy an important public interest.

The Commission's website provides information about the countries approved by the Commission and about the Commission's standard contractual clauses.

Processors of personal data

The Swedish Transport Agency can also engage external suppliers to handle the operation and administration of our systems; these suppliers are called processors of personal data. Processors of personal data may need to have access to your personal data to be able to perform their task.

The principle of public access to official records

The Swedish Transport Agency is a Government authority and has to observe the principle of public access to official records. This means that any document, including those containing personal data, that is submitted to the Swedish Transport Agency may be disclosed to the person requesting it. In some cases, however, data may be classified as confidential and must therefore not be disclosed.

According to the Archive Act, the Swedish Transport Agency is required to preserve data in documents that constitute public documents under the Freedom of the Press Act. However, data may in some cases be destructed in accordance with the provisions of the Archive Act and the regulations issued pursuant to that Act. Details on which rules apply to which actions are contained in the National Archives' Regulations on Return and Destruction at the Swedish Transport Agency (RA-MS 2013:12), amended by RA-MS 2016: 39.

Provisions regarding the destruction of data in the Swedish Road Traffic Register are contained in the Swedish Road Traffic Register Regulation.

In some cases, the Swedish Transport Agency applies automated decisions. Such decisions are based on special regulations, for example the Congestion Tax Act and the Ordinance on Road Infrastructure Charges.

We use cookies on our web site. A cookie is a small text file that is stored on your computer and contains certain information, but no personal data. We only use cookies for purely technical reasons, to improve site functionality.

According to law, everyone who visits a web site must be informed about what cookies are used for. The user shall also be given the opportunity to consent to cookies being used to store or retrieve data from computers, mobile phones etc. Most browsers allow you to block cookies

To protect your personal data, our storage of information is protected with appropriate security technology.

If the Swedish Transport Agency hires external suppliers – processors – to process personal data on our behalf, we only hire suppliers that can provide sufficient guarantees and implement the security measures that we require.

The right to request information

If you wish to find out whether the Swedish Transport Agency is processing personal data about you and, if so, what data, you can request that information free of charge. We will send it to your registered address.

The right to request rectification, erasure or restriction

You can always contact us and request a rectification of your personal data if the data are inaccurate or incomplete. Under the Archives Act, the Swedish Transport Agency is obliged to preserve data in public documents, so our possibility of erasing your information is limited. But you can submit a request and we are obliged to examine it. You can also request that we – while examining your request for rectification or erasure – restrict our processing of the personal data you consider to be inaccurate or incomplete.

The right to object to processing and request restriction

If you consider that we should no longer process your personal data, you may contact us and object to our processing. In that case, you need to state what special circumstances your request is based on. At the same time, you may request that we, while examining your objection, restrict our processing of the personal data that you consider we should no longer process.

Barrier to advertising

In the case of personal data in the road traffic register, we may, if you wish, register a "promotional barrier". This means that if someone requests a mass extraction of personal data from the road traffic register for advertising purposes, we will not disclose any information about you.

Would you like us to insert a promotional barrier in the road traffic register? Then please notify us by sending a letter to Swedish Transport Agency, 701 88 Örebro, Sweden.

The Swedish Transport Agency also checks personal data against "NIX adresserat", which is a register for those who wish to block direct mail advertising. If your name is included in this register, we will not disclose personal data from the road traffic register in connection with bulk mail for advertising.

The right to move your data – data portability

When it comes to data that you have submitted to us yourself, you have the right to have those data disclosed, so that you can use them elsewhere (this is also called porting). For example: you have the right to move your data to another operator or IT environment. This applies if you have consented to the processing of data or if the processing is needed because we have entered into an agreement with you.

The right to make a complaint to the Swedish Authority for Privacy Protection about our processing

If you are dissatisfied with our processing of your personal data and consider that it is contrary to the Data Protection Regulation, you can make a complaint.

• Go to the website www.imy.se
• Send an email to imy@imy.se
• Write to the Swedish Authority for Privacy Protection, Box 8114, 104 20 Stockholm
• Call +46 8 657 61 00.

You can contact the Swedish Transport Agency (controller) and our data protection officer via e-mail. You can also call 0771-503 503 or write to them at the following address: Swedish Transport Agency, 601 73 Norrköping.

Do you want to make use of your rights or do you have questions about your right to information, rectification, erasure, limitation and data portability or about your right to object? Then you can reach us in the same way.