For Falköpings Hyresbostäder AB, it is important that you feel secure knowing that we process your personal data in a safe and legal manner. All processing of personal data must be conducted in accordance with applicable legislation. This means, among other things, that we protect your personal data with necessary measures and that you always have the right to contact us to find out what personal data we process about you.

We want to inform you about an important and positive change regarding how we will obtain and handle your personal data going forward. The General Data Protection Regulation is a new EU regulation that will take effect throughout the EU on May 25, 2018. The General Data Protection Regulation replaces the Swedish Personal Data Act. Much remains the same, but the requirements for how companies and authorities may process your personal data are being strengthened.

Personal data is information that can be used to directly or indirectly identify a living person. Examples of personal data include names, personal identification numbers, and photographs that enable identification. Processing of personal data refers to all forms of handling of personal data, such as collection, storage, distribution, and deletion.

The entity responsible for how your personal data is handled and ensuring that the handling is legal is called the data controller. Falköpings Hyresbostäder AB (556196-6275) is the data controller for the processing of your personal data that we do ourselves or that other companies do on our behalf. This also applies to cooperation with our wholly owned subsidiary and sister company, as they do not independently handle personal data; this is done by the parent company and its employees. If you have questions or want access to your personal data, you should contact the data controller or the company’s data protection officer. You also have the right to receive a free copy of the personal data that the company processes about you.

Falköpings Hyresbostäder AB processes personal data that is needed for our rental operations and management of our properties, as well as for our personnel administration. To fulfill and administer our obligations as landlord and contracting party, we process personal data in accordance with our personal data policy. There is more information in the respective documents if you are in our queue, are a tenant, contractor, or are seeking employment with us.

We are a municipal public housing company and are covered by the Freedom of the Press Act’s provisions on public documents. This means that we preserve public documents in our archive. Public documents are documents sent to us or documents we prepare ourselves, such as rental agreements, letters, and certificates. We dispose of public documents and data according to our document management plan.

Processing of Personal Data Must be Lawful

For processing of personal data to be lawful, the processing must fall under one of the specific grounds specified in law. These specific grounds are as follows:

• The data subject consents to the processing.
• Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
• Processing is necessary for compliance with a legal obligation to which the data controller is subject.
• Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
• Processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Rights as a Data Subject

As a data subject, certain specific rights are prescribed. A data subject can therefore request from the data controller:

• Access to their personal data (i.e., what personal data about you the data controller processes and why and how the processing occurs).
• Rectification, erasure, or restriction of the processing of their personal data.
• To object to the processing of their personal data.
• Data portability (transfer of personal data to another data controller) in certain cases.
• To withdraw their consent at any time in cases where processing is based on consent. However, this does not affect the lawfulness of processing that occurred before the consent was withdrawn.
• To file a complaint about the company’s processing of personal data with the Swedish Authority for Privacy Protection.

You are welcome to contact us at info@hyresbo.se, or call 0515-88 75 50 if you:

• have questions about how we process personal data within the company
• want to restrict the handling of your personal data
• want to correct incorrect information
• have objections to the processing of personal data
• want to have your data deleted

You have the right to see all information we have about you in our registers. If you have questions about how to request a register extract, contact us at info@hyresbo.se or telephone 0515-88 75 50.

Data Protection Officer

If you believe that we have not processed your personal data in accordance with applicable law, you can contact the data protection officer (see contact information below).

Data Protection Officer: dso.falkoping@insatt.com, 0724-019 703