How we process personal data

Personal data constitutes all kinds of information that can be linked to a single, living individual – directly or indirectly.

When and how personal data may be used is regulated in, among other things, the General Data Protection Regulation (GDPR).

The Swedish Agency for Economic and Regional Growth is controller for the data that we collect.

The legal basis in GDPR that is primarily relevant for the Swedish Agency for Economic and Regional Growth is what is known as public interest and the exercising of authority. Or, in other words: we may process personal data when it is necessary in order to work effectively on assignments we receive in our regulation or in specific government assignments, and when it is necessary in order to make decisions that affect individuals.

The kinds of personal data that we use most frequently are names and contact details of people with whom we collaborate or who represent activities that we finance.

We only use personal data for the purpose for which we collect it and only for as long as it is necessary for the purpose.

What are your rights?

• You have the right to know whether we process personal data about you and, if so, to receive information about the processing and a copy of the personal data we hold about you.
• You have the right to request that incorrect personal data about you be corrected. In certain situations, you may also request that we restrict the processing of your personal data, object to how it is processed, or request that your personal data be erased. Please note that as a public authority we are often required by law to retain information. This means that we may not always be able to erase personal data, for example when the information must be preserved under the Swedish Archives Act. If you believe that we process your personal data in violation of data protection legislation, you have the right to lodge a complaint with supervisory authority Integritetsskyddsmyndigheten (IMY).

Personal data often comprises public documents

As an authority, the Swedish Agency for Economic and Regional Growth is subject to the principle of public access to public documents. This means that all documents, including personal data, that are not working material are public documents and may be disclosed to anyone who requests it. In certain cases, however, data may be considered to be confidential and will therefore not be disclosed.