PRIVACY NOTICE
1 GENERAL
AB Sagax (publ), reg. no. 556520-0028 (“Sagax”) is committed to protecting and respecting your privacy. We want you to feel safe when we process your personal data. This Privacy Notice (“ Privacy Notice”) explains how we ensure that your personal data are handled in compliance with applicable legislation.
We use your personal data to enable us to operate our business and meet our obligations and responsibilities to you, applicable laws and directives, and good industry practice. This Privacy Notice applies to you as a tenant of ours or contact person of a tenant of ours and if you are a contact person of one our collaborative partners, suppliers or investors.
This notice also applies to you if you are concerned by Söderport AB’s business operations, as Sagax is the personal data controller for that processing as well.
2 PERSONAL DATA CONTROLLER
Sagax is the personal data controller for the processing of your personal data and is responsible for ensuring that the processing is carried out in accordance with applicable legislation. You will find our contact details at the end of this Privacy Notice.
3 OUR PROCESSING OF YOUR PERSONAL DATA
If you are a contact person of one of our tenants, collaborative partners, suppliers or investors
Sagax processes your contact details, such as name, job title email, phone number and address in order to effectively manage our contract and our tenant or supplier relationship with the company or organisation that you act on behalf of, and, where applicable, for the establishment and defence of legal claims. We process your personal data on the basis of our and your employer’s legitimate interests for the performance and management of the contract or to safeguard our legal interests. For the purpose to administrate the agreement, the data will be retained as long as the contract is in force, or such longer period as required by law. Thereafter we retain the data for 10 years in order for us to be able to establish, exercise or defend any legal claims.
If you are a private tenant
Sagax processes your contact details, such as name, email, phone number, address, information regarding the rented property and personal identification number and payment details, such as payment history, payment information and information regarding any delays in order to effectively manage the rental agreement and customer relationship with you. We process your personal data on the basis of our rental agreement with you. For the purpose to administrate the agreement, the data will be retained as long as the contract is in force, or such longer period as required by law. Thereafter we retain the data for 10 years in order for us to be able to establish or exercise any legal claims.
Marketing
We may market our business operations and invite you to events. Vi base this processing on a legitimate interest, as we assess that our interest in sending to you general or segmented marketing overrides your interest in protection of your privacy.
For company take-overs
We may process your personal data in case of a company take-over or restructuring of Sagax. We base this processing on a legitimate interest, as we assess that our interest in enabling a take-over or restructuring process overrides your interest in protection of your privacy. This presupposes the acquiring company being in a similar line of business as Sagax. If Sagax ceases to exist, e.g. by way of a merger, winding-up or bankruptcy, your personal data will be erased as long as they are not required to be retained for compliance with a legal obligation.
If Sagax is acquired by an acquiring company or is split-up in connection with a restructuring, your personal data will be retained and processed by the acquiring company in accordance with this Privacy Notice, if you are not given information stating otherwise in connection with the take-over. The same will apply if Sagax sells a property that you, as a tenant, supplier or investor, is concerned by.
4 WHERE DO YOUR PERSONAL DATA COME FROM?
The personal data that we use about you are data that you have provided us with. We may also collect data from other sources, e.g. UC and the Swedish Tax Authority (Skatteverket), and other external parties, such as suppliers and authorities.
5 FOR HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
We retain your personal data only for as long as is necessary for the purposes for which we originally gathered them in accordance with this Privacy Notice (please see Section 3). When we no longer need to retain your data, we will remove them from our systems, databases and backups. We may also need to retain your personal data for other reasons, e.g. to comply with legal requirements or to safeguard our legal interests or any other important public interest.
6 WITH WHOM DO WE SHARE YOUR PERSONAL DATA?
Sagax may disclose your personal data to a third party, such as IT providers and companies with which we have a business relationship for the purpose of providing our services. We will therefore share your data with:
- For IT operations, our IT operator – at present Datacom AB.
- For property management and administration, our property service supplier
– at present e3k AB.
- For telephone services, our telephone supplier – at present Its Nordic AB.
- For payment services, banks and payment services suppliers.
- For debt collection matters, debt collection.
- For auditing, our auditing firm.
In certain circumstances, we may also need to disclose data upon the request of authorities or to third parties in connection with court proceedings or other similar processes on the basis of our legitimate interests to prevent and detect criminal activity and to represent our interests during processes. We will not sell your personal data to anyone else.
7 WHERE DO WE PROCESS YOUR PERSONAL DATA?
Your personal data are always processed by Sagax within the EU/EEA.
8 YOUR RIGHTS
|
Right to withdraw consent |
You have the right to withdraw your consent at any time when you have given your consent for a specific type of processing. If you withdraw your consent, we will stop processing your personal data for the purpose for which you had given your consent and will erase the personal data that was being processed only on the basis of consent. |
|
Right of access |
You have the right to obtain information about which personal data we hold about you and how we process these data. You also have the right to be provided with a copy of this information. |
|
Right to rectification and erasure |
You have the right to have any inaccurate data corrected and completed. In certain circumstances, you also have the right to have your personal data erased, for example, if the data are no longer necessary for the purpose for which they were originally collected. |
|
Right to object and right to restrict processing |
You have the right to object to your data being used for direct marketing purposes and where we are relying on the lawful basis of legitimate interest for the processing of the data. You also have the right to request the restriction of your personal data, e.g. if you consider that the data are inaccurate. |
|
Right to data portability |
You have the right to obtain the personal data that you have provided us with when our lawful basis for processing is consent or for the performance of a contract. The data are provided in a structured, commonly used and machine readable format, and you also have the right to request that the data are transmitted to another data controller, where this is technically feasible. |
9 COMPLAINTS
If you believe that your personal data are being processed in breach of the applicable data protection legislation, you have the right to lodge a complaint with the Swedish Data Protection Authority (Datainspektionen).
10 WE PROTECT YOUR PERSONAL DATA
We want you to feel confident at all times about providing us with your personal data. Sagax has therefore taken appropriate security measures to protect your personal data against unauthorised access, alterations and erasure. Should a security breach occur that may materially impact you or your personal data, e.g. when there is a risk of fraud or identity theft, we will contact you to tell you what you can do to mitigate potential adverse effects of the breach.
12 CHANGES TO THIS PRIVACY NOTICE
Sagax has the right at any time to make changes to this Privacy Notice. When we make changes that are not purely formatting or typographical error corrections, we will inform you clearly of these changes and what they mean for you before they become effective.
13 CONTACT INFORMATION
Do not hesitate to contact us if you have any questions about this Privacy Notice, our processing of your personal data or if you wish to exercise your rights
Sagax (publ)
Engelbrektsplan 1
114 34 Stockholm, Sweden
[email protected]
France: [email protected]
The Netherlands: [email protected]
Finland: [email protected]
Spain: [email protected]
Germany: [email protected]