At Nyfosa, we process personal data about our tenants to be able to fulfil our obligations as a landlord and to take smaller, day-to-day measures that are necessary as part of Nyfosa’s operations (“the Purpose”). The data we process for this Purpose are primarily name, personal identity number, address, email and telephone number. For tenants who use electronic entry cards, the data may also include information on the tenant’s access to common areas in properties (“Personal Data”). Certain information may also be obtained from public registers. Nyfosa AB, organisation no. 559131-0833, and the company that is the actual landlord are the joint data controllers for processing of the Personal Data. These companies have entered into an agreement as joint data controllers stating that each party shall ensure compliance with applicable data protection legislation and that appropriate security measures are taken. The agreement also states that the parties shall cooperate in the event of personal data incidents and if a supervisory authority should carry out an inspection. Pursuant to the agreement, the landlord shall be the tenant’s main contact for personal data issues.
The primary legal basis for data processing is that it is necessary to be able to fulfil our obligations as landlord both pursuant to the tenancy agreement and legal obligations incumbent on Nyfosa. Certain less common and standardised forms of processing of Personal Data for the Purpose are also based on Nyfosa’s legitimate interest in being able to run its business efficiently and securely, for example being able to provide electronic key systems for tenants. However, this only happens in situations where this interest outweighs our tenants’ interests or fundamental rights and freedoms. Nyfosa may share the Personal Data with authorities and the third parties it engages to fulfil the Purpose.
Nyfosa will process the Personal Data for as long as the tenancy relationship continues and will subsequently erase the Personal Data within 12 months, provided that Nyfosa is not obliged to continue processing the data. In certain cases, when the Personal Data are no longer necessary for the Purpose, the processing shall cease sooner. When the processing ceases, the Personal Data are erased.
Tenants with questions concerning Nyfosa’s processing of Personal Data may contact the company.
All tenants are entitled to request access to and correction or erasure of their Personal Data. Moreover, tenants may request that processing of their data be restricted, object to certain forms of processing and exercise the right to “data portability”. In addition, tenants have the right to submit complaints to the Swedish Data Protection Authority, which can be contacted via firstname.lastname@example.org or 08-657 61 00.