Sveaskog Förvaltnings AB org. no. 556016-9020, with registered address Torsgatan 4, SE-111 23 Stockholm, processes personal data in its operations, which also includes the businesses Mörrums Kronolaxfiske and Svenska Skogsplantor.This privacy policy explains what personal data Sveaskog will process and for what purposes processing occurs, as well as what your rights are and what Sveaskog’s obligations are regarding the processing of personal data. Please note that Sveaskog cannot provide its services to you if your personal data are not processed in accordance with what is specified in this privacy policy.

Sveaskog is the data controller for the processing carried out by Sveaskog, and which is described in this privacy policy. If you have questions regarding the processing of your personal data, please contact Sveaskog via the contact information given below, under section 4.

1. Our processing of your personal data

Mailings and subscriptions to our newsletters or magazine
We collect personal data about you in the form of your name, telephone number, email address and address in order to send mailings and provide you with a subscription to our newsletter or our magazine. Our legal basis for personal data processing is legitimate interest. The personal data are processed as long as necessary for administering mailings and providing you with the subscription.

Different types of purchases
We collect personal data about you in the form of your name, personal identity number, telephone number, email address, address and payment information with different types of purchases. Our legal basis for personal data processing is compliance with contractual and legal obligations. The personal data are processed as long as necessary for fulfilling our contract of sale with you and as long as necessary in accordance with imperative law to be able to assist you with matters pertaining to complaints and guarantees, for example.

When you send us an email via the website, for example to leave a comment or ask a question
We collect personal data about you in the form of your name, telephone number, email address and address when you send us an email via the website, for example to leave a comment or ask a question. Our legal basis for personal data processing is legitimate interest. The personal data are processed as long as necessary for handling the case initiated by your email message.

Participation in conferences, seminars or other events
We collect personal data about you in the form of your name, telephone number, email address, address and audio and video recordings of your participation in our conferences, seminars and other events. Our legal basis for personal data processing is consent. The personal data are processed as long as necessary to be able to administer your participation as well as to publish material from the event for marketing purposes.

When you apply for an available position
We collect personal data about you in the form of your name, personal identity number, telephone number, email address and address when you apply for an available position with Sveaskog. Our legal basis for personal data processing is legitimate interest. The personal data in your application documents are processed while hiring is underway and thereafter for an additional two years. Spontaneous notifications of interest and personal data contained therein are processed for twelve months and then erased.

When you sign a contract with us, for example a right-of-use lease, when carrying out a service for Sveaskog for a fee, or with sponsorship
We collect personal data about you in the form of your name, personal identity number, telephone number, email address, address and payment information (for example, credit card number) when you sign a contract with Sveaskog (such as a right-of-use lease), when you carry out a service for Sveaskog for a fee, or with sponsorship. Our legal basis for personal data processing is compliance with contractual and/or legal obligations. The personal data are processed as long as necessary for fulfilling our contract with you.

Legal inquiries and prevention of damage
Sveaskog will process personal data about you in the form of your name, personal identity number, telephone number, email address, address and payment information (for example, credit card number) in response to legal inquiries (such as a search of the premises, court decision, summons or similar), or when this is necessary to discover, prevent and address fraud and other criminal activity, in order to protect ourselves, you and other users, including as part of an investigation if required by applicable law. Our legal basis for personal data processing is legal obligation, fulfilment of contracts and/or legitimate interest. The personal data are processed as long as necessary for responding to legal inquiries and prevent damage.

Camera surveillance
Sveaskog carries out camera surveillance in or adjacent to some of Sveaskog’s office premises and other properties where Sveaskog conducts business. Camera surveillance takes place through video recordings, and in exceptional cases, through both audio and video recordings. Camera surveillance involves personal data processing and takes place for the purposes of preventing and/or taking measures against crime or to monitor wildlife. Our legal basis for personal data processing in both of these cases is legitimate interest. For the purposes of preventing and taking measures against crime, personal data are processed as long as necessary for handling a case involving the suspicion of crime. In cases with no suspicion of crime, personal data will be processed for 60 days at most. Personal data processed through Sveaskog’s wildlife monitoring are erased immediately upon detection, but no later than within five business days. Sveaskog has limited authority for access to personal data with camera surveillance, so that only designated individuals who are bound by a confidentiality obligation within Sveaskog may access the personal data.

Processing of personal data in our whistleblower function
Provided that you do not choose to be anonymous, Sveaskog will process personal data about you in the form of your name, telephone number and email address in order to take a position on reports submitted through the whistleblower function and to investigate whether individuals in Sveaskog have been participants in severe irregularities or noncompliance pertaining to, for example, accounting, internal accounting control, audits, fighting bribery, banking and financial crimes, or other serious irregularities pertaining to the organisation’s vital interests or the life or health of an individual.

Authority for access to personal data in the whistleblower function is strongly limited so that only a small number of designated individuals may access the personal data. These individuals are bound by a confidentiality obligation and given certain conditions, a whistleblower also has some statutory protection, for example it is prohibited for an employer to retaliate against an employee who has sounded the alarm regarding irregularities. Only personal data that are necessary for investigating and assessing a current whistleblower case are stored and processed. After a whistleblower case has been closed, all personal data that Sveaskog is not legally obligated to save are erased.

2. Access to your personal data

Sveaskog will share your personal data with service suppliers that provide our IT systems, help us to send newsletters as well as other administrative tasks. Sveaskog may also share your personal data with competent authorities as needed, for example with police, the judicial system, or applicable oversight authorities.

3. Your rights

You have the absolute right to object at any time to the processing of your personal data with regard to direct marketing. You also have the right to withdraw your consent, if consent has been given. Withdrawing your consent will not impact the legality of processing carried out prior to withdrawal of consent, and based on other legal grounds, we may continue to process your personal data, except for direct marketing.
You have the right to request access to and additional information about the processing of your personal data, or to request that we correct, adjust, complete, erase or limit processing of your personal data. You have the right to obtain a copy of the personal data that we process relating to you, without cost, one (1) time per year. If you would like to request additional copies, we may charge a reasonable fee based on administrative costs.

If the processing is based on the legal grounds of consent or fulfilment of contracts, you have the right to data portability. Data portability means that you may receive the personal data which you have provided to us, in a structured, commonly used and machine-readable format, and have the right to transmit those personal data to another data controller.

4. Contact

To exercise your rights or if you have questions about our processing of your personal data, please contact us at the following address: legal@sveaskog.se or call +46 (0)771–787 000. Enter your complete name and note that you may need to verify your identity before your request can be processed.
If you have any complaints regarding our processing of your personal data, you may submit a complaint to the relevant data protection oversight authority.

5. Notification of changes

If we make changes to this privacy policy, we will notify you via announcement at www.sveaskog.se. If the changes are substantial, we will provide additional notice as appropriate under the circumstances, and request your consent if required in accordance with applicable law.