Personal data processing

What is personal data?

Personal data is any type of information which can be directly or indirectly linked to you as an individual. Examples of personal data are name, address and personal identity number, but also photos or a reference number of a matter.

What is personal data processing?

Personal data processing means, generally, anything that can be done with the personal data. For example, collecting, registering, storing, combining or printing the data. It is primarily digital processing of personal data that is regulated, but files in hard copy are also subject to the rules.

When does the National Electrical Safety Board process personal data?

Personal data are processed in large parts of our operations, for example when you subscribe for our newsletter, if you send us a question or a notification or order a publication.

Examples of personal data processing

What rules are there about personal data processing?

Rules on how personal data may be processed are set out in the European General Data Protection Regulation GDPR, and in the Swedish data protection act. The purpose of the rules is to protect people from violations of their privacy when personal data are processed. 

 All processing of personal data must comply with the basic principles set out in the General Data Protection Regulation. These principles entail, for example, that personal data may only be collected for legitimate purposes that are not too general and that the amount of information must be limited to what is necessary for these purposes. The information may not be processed later in a manner that is incompatible with these purposes or saved longer than necessary. An entity processing personal data must be able to show compliance with these principles .

More information about the regulations

More information about personal data processing under the new General Data Protection Regulation is available on the Swedish Data Protection Authority's website.

How we process your personal data

The National Electrical Safety Board is personal data controller in relation to the personal data processing carried out on this website and in the National Electrical Safety Board's operations. This means that we have a range of responsibilities in relation to individuals whose personal data we process.

Legal grounds for processing your personal data

The National Electrical Safety Board will never process your personal data unless there are legal grounds and a clear purpose of the processing. When we collect personal data from you, we provide information about, for example, the purpose of the processing and how long the personal data will be saved.

The personal data processed by the National Electrical Safety Board must be adequate and relevant in relation to the purpose of the processing. Therefore, we do not save more personal data about you than necessary, and we do not save your personal data longer than necessary.

Since we are a public authority, we are required to file and archive documents received by us, or that we prepare. Consequently, sometimes we are required to store your personal data for a long time. We always comply with the provisions of the Archives Act and have thinning procedures in place.

We comply with both the data protection legislation and the principle of transparency

We will never process your personal data for any other purpose than the one we have stated to you and we will never sell your personal data. However, the National Electrical Safety Board is a public authority, and consequently documents sent to us, or prepared by us become public documents that may be disclosed if requested. This complies with the principle of transparency and the provisions of the Public Access and Secrecy Act (2009: 400).

For example, we sometimes hire companies for the operation and maintenance of our IT and filing systems or for the e-services that we offer on our website. When we do so, these companies have access to the personal data processed in the relevant system. To prevent the companies from disclosing such personal data to any other company or from unintentionally losing them, we always draft a special agreement under which we impose requirements in relation to how the company must treat the personal data. 

We have guidelines and procedures in relation to our handling of personal data

To fulfil our obligations, we have prepared internal guidelines and procedures for personal data processing. We also keep a register of the various types of processing of personal data that takes place at the National Electrical Safety Board.  

We keep your personal data safe

The National Electrical Safety Board protects the documents and the various systems we use to prevent loss or unintentional disclosure of information. We work continuously by taking both technical and organizational measures to protect the personal data processed by us. We do so by, for example, always having updated virus protection and firewalls, creating a high level of security awareness among our employees and limiting access to, for example, classified documents, so that access is granted only to personnel who need access to such data.

The measures taken are intended to achieve a security level which is adequate based on the following criteria. 

• Sensitivity of personal data processed.
• Special risks involved in the personal data processing.
• Cost of implementing measures.
• Technical possibilities available.

Your rights

Below is a description of your rights when the National Electrical Safety Board processes personal data about you. For example, you have a right to obtain information about how we process your personal data and to correct inaccurate personal data.

Your right to information

You have a right to ask for information and access the personal data that the National Electrical Safety Board processes about you free of charge. Such a request should be sent to us by normal post or e-mail. If you want a digital response to your request, you must have a Swedish digital mailbox for official mail. More information about how to get such a mailbox is available at minameddelanden.se.

You have a right to have personal data rectified or erased 

You may also request to have inaccurate personal data rectified or erased, or request that the processing of your personal data be restricted. You may also, in some cases, have a right to object against the National Electrical Safety Board's processing of your personal data. Please contact us to make any such request. Our contact details are set out at the bottom of the page.

You may submit a complaint to the Swedish Data Protection Authority 

If you believe that the National Electrical Safety Board's processing of your personal data violates the Data Protection Regulation, you may submit a complaint directly to the Swedish Data Protection Authority.

Questions?

If you have questions about our personal data processing, you may contact the National Electrical Safety Board's Personal Data Officer or the National Electrical Safety Board's registrar.

When you provide personal data

What happens when you provide personal data to us on our website or by sending an e-mail to the National Electrical Safety Board?

Subscriptions, orders and notifications

Personal data (e-mail) provided in connection with subscriptions for our newsletter Aktuellt, our newsletter to authorised electricians or electrical contractors and news on sales prohibitions, new rules etc. are saved as long as you are a subscriber. When you cancel your subscription, we delete your personal data.

Personal data (name, address, and e-mail) provided in connection with orders for publications from us are saved only as long as required for purposes of the mailing or the order. In cases where we charge for the material, the invoice data will be saved until the payment is completed.

Personal data (name, address, phone number and e-mail) provided in connection with applications for seminars or training are saved as long as required for administrative purposes, i.e. mailing of course materials and evaluation surveys. In cases where we charge for seminars or training, the invoice data are saved according to applicable accounting rules.

Notifications regarding faults in electrical products, installations or an electrical contractor

A notification regarding faults in electrical products, installations or an electrical contractor will become a public document when received by the National Electrical Safety Board.

The notification, including the personal data you have provided (you may be anonymous) will be filed and archived in accordance with applicable provisions. We may use the personal data you provided to contact you and obtain more information in relation to your notification.

Frequently Asked Questions

Personal data (e-mail address and other contact details) provided to us when you send a question to us via the tool Frequently Asked Questions become a public document when received by the National Electrical Safety Board. The information is saved for two years from the date of the question, following which your question and your personal data will be erased.

E-mail messages

E-mail messages received by the National Electrical Safety Board generally become public documents. Depending on the contents of your message, your message and the personal data you provided will either be deleted according to applicable rules and guidelines regarding thinning or filed and archived.

Social media

The National Electrical Safety Board uses social media both to spread information and conduct a dialogue with our target groups. Since the National Electrical Safety Board is a public authority, posts and comments published in social media become public documents.

The National Electrical Safety Board has a social media policy as well as social media guidelines. These provide, among others, that offensive comments and posts will be deleted with immediate effect. Please feel free to contact us if you feel that a post is offensive.

Examples of personal data processing

Personal data are processed in large parts of the National Electrical Safety Board's operations. Below are a few specific examples of when we may process your personal data.

Example 1

You notify us via our website of a dangerous electrical product and decide to provide your contact details. Your notification will be filed and stored for archiving when the matter has been closed. Since there are personal data in the notification, your personal data will be processed.

Example 2

You send us a question via the Frequently Asked Questions tool. You sign your question with your electronic signature which includes your name, phone number and position. When we have answered your question, the question and the answer will be saved by us and deleted after 2 years. Since there are personal data in the question form, your personal data will be processed.

Example 3

You have registered your company in our register and provided us with your contact details (name, phone number and maybe e-mail). Your application will be filed by us and your contact details will be available in our register of electrical installation companies. Since there are personal data in the documents and in the register, your personal data will be processed.

Example 4

You have applied for authorisation as an authorised electrician and sent all the information we need to process your application (name, personal identity number, address, documents about education etc.). Your application will be filed by us, together with all the other documents created in your matter, and then archived when the matter is closed. Since there are personal data in your application, your personal data will be processed.