Processing of personal data

Below you can read about how EKN processes the personal data we collect via our website ekn.se and that we otherwise manage as part of our operations.

Data protection officer (DPO)

EKN is controller for the processing of personal data carried out as part of EKN’s operations and on its website ekn.se. If you have any questions, please contact EKN’s DPO, Eva Kullberg Tideman at dpo@ekn.se.

What is personal data?

Personal data are all types of information that can be directly or indirectly related to a living private individual. Examples of personal data are name, identification number and e-mail address. The General Data Protection Regulation (GDPR) contains rules governing the way that personal data may be processed.

Read more about GDPR on the Swedish Data Protection Authority website.

Lawful grounds

Under GDPR, all processing of personal data must be based on a lawful ground. Depending on the reason for processing personal data, EKN uses different lawful grounds.

Public interest

A fundamental lawful ground for processing of personal data at EKN is that EKN performs a task in the public interest. This lawful ground is based on EKN’s remit as a public authority to promote Swedish export by insuring exporting companies, banks and purchasers in export transactions. EKN’s government remit is governed by law, EKN’s instructions and its public service agreement.

Below are some excerpts from section 2 of the EKN Instructions Ordinance (2007:1217), giving examples of when EKN carries out tasks in the public interest.

Section 2: In particular, EKN must

1. determine whether the prerequisites for granting a guarantee are met;

7. provide information about forms of guarantee offered by EKN and about the general requirements and conditions applying in order to be granted a guarantee;

8. monitor international developments within EKN’s sphere of responsibility.

Some excerpts are also given below from EKN’s public service agreement (click here to read the full agreement), illustrating when EKN performs tasks in the public interest:

  • EKN should promote Swedish export by issuing guarantees.
  • EKN should collaborate with other actors promoting Swedish export, and be presented as part of Sweden’s overall efforts to promote export.
  • EKN should continue the initiative to increase awareness of its services among small and medium-sized enterprises.

Legal obligation

In some cases EKN processes personal data because it has a legal obligation to do so.

Consent

In some cases EKN processes personal data on the basis of consent. Consent must be given voluntarily, and the data subject must be able to withdraw their consent at any time. Consent must be clearly distinguishable from other text and information. Consent is given in writing or orally.

In some cases where we process personal data based on the lawful ground of public interest, we also obtain consent as confirmation from those whose personal data we process.

Purpose of processing and lawful grounds

EKN processes personal data in different situations. Below are some of the reasons that we process personal data provided to us.

Purposes based on the lawful ground of public interest:

  • Processing guarantee applications
  • Assessment of relevant parties, e.g. guarantee-holders and purchasers
  • Processing of loss claims
  • Management of e-mails
  • Management of purchases from suppliers

Purposes based on the lawful ground of legal obligation:

  • Preservation of official documents in accordance with archive legislation
  • Book-keeping legislation

Purposes based on the lawful ground of consent:

  • Job applications

Purposes based on the lawful ground of public interest, where consent is obtained as confirmation that processing is to take place:

  • Communication of information about EKN’s offering
  • Invitations to events
  • Ordering reports, etc.

Freedom of information, diarising and archiving

Since EKN is a public authority, it abides by the freedom of information provisions set out in the Freedom of the Press Ordinance (1949:105) and the Public Access to Information and Secrecy Act (2009:400), as well as the rules on diarising and archiving in the Archives Act (1990:782).

EKN and market communication

Under our instructions (section 2 (7)) and our public service agreement (paragraph 1 (iii), EKN has been tasked with increasing public awareness of our services. Our efforts focus on people who, in their professional role, may have an interest in EKN’s operations. We therefore believe that people who read our guides and standard documents, or who otherwise visit our web pages for specific communication initiatives, will wish to remain in contact with us. We therefore give you the option of registering your professional contact details.

As part of our market communication, we use third-party tools for tracking, statistics and processing in the form of retargeting, for a limited period. Tools of this kind include Google Analytics, Hotjar och Adform.

EKN’s use of cookies

A cookie is a text file containing information and stored on the device you use when you visit a website so that the website will work smoothly. Under the Electronic Communications Act (2003:389), all visitors must consent to, and be informed of, use of cookies by a website. A cookie may be a permanent or a session cookie. EKN’s cookies also process IP numbers, which often constitute personal data.

We always ensure that you are informed about our use of cookies when you visit our website, and give you the option of consenting to their use or turning them off.

When you visit our website, a session cookie is downloaded to your computer to enhance your experience of visiting the site. A session cookie disappears when you close the page on your web browser. We use permanent cookies to store your personal user preferences when you make repeated visits to the site.

A third type of cookie may also be supplied to EKN by a third party to perform web analysis and traffic monitoring.

If you do not want cookies to be stored on your computer, you can always change your web browser settings on the web. Disabling cookies may affect your user experience.

Your rights

Right of access

You have the right to request information about the personal data about you that are processed by EKN or to request a register excerpt showing the personal data. EKN provides the information in a digital format if the request is sent in a digital format.

Right to request rectification

You have the right to request rectification if EKN has processed/processes personal data about you incorrectly.

If you would like to request a register excerpt or exercise your other statutory rights, please contact our Data Protection Officer, Eva Kullberg Tideman by e-mail at: dpo@ekn.se.

If you consider that EKN’s processing of your personal data is in breach of GDPR, you have the right to complain to the Swedish Data Protection Authority.

Contact details Swedish Data Protection Authority
Telephone number: +44 8 657 61 00
E-mail: datainspektionen@datainspektionen.se

Documents

Data Protection Policy 2018