Privacy Policy

Last updated: 2025-03-19. Previous version: 2024-05-07

1. Policy

Studentbostäder i Norden AB (“Studentbostäder”), organization number 556715-7929, with address Kungsgatan 47A 753 21 Uppsala, is the data controller for the personal data processed by the company. Studentbostäder values personal privacy and is therefore committed to always protecting personal data in an appropriate manner and complying with all applicable data protection regulations at any given time. Through this privacy policy, Studentbostäder wants to inform you about how personal data is processed by Studentbostäder.

Certain pages on our website contain links to third-party websites. Studentbostäder is not responsible for their operations or information. Users who send information to or through these third-party websites should therefore review the respective websites’ privacy policies before providing personal data.

2. Personal data collected by Studentbostäder

Studentbostäder collects and processes personal data when you submit an expression of interest for a vacant property, apartment, parking space or similar, when you join Studentbostäder’s housing queue, when you enter into an agreement with Studentbostäder, participate in Studentbostäder’s events, or when you otherwise communicate with Studentbostäder. Personal data is also collected when you visit our website. Personal data may be collected from other sources such as housing agencies, SPAR, the Swedish Tax Agency, or from publicly available registers.

Examples of categories of personal data collected and processed by Studentbostäder include name, personal identification number, postal address, telephone number, email address, IP address, income information, information from employment contracts, admission notices, registration certificates, references, information about browsers and devices, information from server log files, information collected through cookies, pixel tags and other technology and information about application usage, images or videos as well as footage from camera surveillance and logs with telephone numbers from our access system.

3. How and why Studentbostäder processes your personal data

Personal data is processed to conduct Studentbostäder’s operations, administer agreements and fulfill obligations as a landlord in relation to you as a tenant, housing seeker or supplier to us. During the rental relationship, personal data is processed, for example, when providing services, rent billing, payment processing, laundry room booking, handling fault reports, to improve security and safety for everyone staying in our properties, compilation of electricity and/or water/heating consumption as a basis, rent negotiations, preparation of inspection protocols, distribution of newsletters and other information and in connection with marketing Studentbostäder’s service offerings through publication on our website, in our marketing materials or publication on social media platforms.

The legal basis for Studentbostäder’s processing of your personal data is to fulfill and administer rental agreements, meet legal requirements or assert a legal claim in cases such as late or missed rent payments, disturbances or damage to the property. Personal data may also be processed based on a balancing of interests, for example, so that Studentbostäder can streamline, improve and adapt Studentbostäder’s services and ensure the condition and maintenance of the apartment as well as to improve security and safety for everyone staying in our properties. Studentbostäder may also have a legitimate interest in sending information to tenants or offering services through partners.

When you register interest or join the queue for our housing, we collect and process your personal data such as name, personal identification number, contact information and objects of interest/queue. The legal basis for the processing is our legitimate interest in administering a queue system and obtaining information about housing seekers to facilitate housing within rental operations. We receive the personal data directly from you. The data remains as long as your expression of interest remains or you are in the queue. If you wish to withdraw your expression of interest or queue position, you can request that we delete your personal data, see further in the section Your rights.

You who are between 13 years and 18 years can also register interest and join our housing queue. When processing your personal data, we are extra careful as children’s personal data requires special protection. When processing your personal data, we do not use contracts as a legal basis. The legal basis for our processing of your personal data is instead a balancing of interests where we have made the assessment that our legitimate interest in processing your personal data to be able to administer your expression of interest or queue position outweighs your interest in not having your personal data processed.

When you participate in our events, we collect and process your personal data such as name and contact information as well as images taken at such events. The legal basis for the processing is consent obtained in advance in connection with registration, which consent can be withdrawn at any time by the person who provided it.

4. Who we share your personal data with

Studentbostäder may, for the purposes stated above, transfer your personal data to relevant authorities, to other companies within Studentbostäder’s group, to companies that Studentbostäder does business with or to companies that provide services to Studentbostäder. Personal data may be transferred, for example, when a contractor is hired to perform a repair in the rented apartment, during debt collection or when servicing Studentbostäder’s provided systems for broadband or electricity. Studentbostäder may also, with your approval, transfer your personal data to third parties who are independently responsible for personal data. When your personal data is transferred to a company that is independently responsible for personal data, that company’s privacy policy applies to their handling of your personal data. Personal data may also be transferred in the event of a possible acquisition of all or part of Studentbostäder’s operations.

5. Transfers outside the EU/EEA

We primarily process your personal data only within the EU/EEA. If Studentbostäder has a supplier or business partner in a country outside the EU/EEA, your personal data may be transferred to them. Studentbostäder will in each such case take appropriate protective measures to protect your personal data. The transfer will only take place in accordance with applicable legislation and requires that the country in question has an adequate level of protection or that there is another sufficient protective measure that makes the transfer lawful. This means that the transfer can be based on, for example, the European Commission’s decision on adequate level of protection or standard contractual clauses with supplementary security measures. You can at any time request additional information about such transfer and the protective measures that Studentbostäder takes.

6. How long we store your personal data

Studentbostäder stores personal data for the time there is a business or customer relationship with you or as long as it is otherwise necessary to fulfill the purpose of the processing or as long as there is an obligation to store the data according to law, regulation or authority decision. Studentbostäder has, for example, a legal obligation to store rental agreements, rent claims, decisions from social services and study certificates. Furthermore, personal data in accounting material (e.g., payments) will be stored for seven years including the current year because we have a legal obligation to do so. However, Studentbostäder applies a strict retention policy, which means that personal data from, for example, camera surveillance or access systems is stored for a limited time according to applicable laws and guidelines. After the specified storage time, the material will be deleted or archived for future reference. You can at any time unsubscribe from subscriptions to newsletters and similar, and your data will then no longer be stored for this purpose.

7. Sensitive personal data

If there should be sensitive personal data about you with us, the basis for this is either that we need the data to assert a legal claim or that you have given your consent for us to process the data. An example is that we may need to store information about housing adaptations, which may be indirect information about health and therefore sensitive data.

8. Your rights

Right to have information deleted: You can request that the personal data we process about you be deleted if you believe that the data is no longer necessary for the purposes for which it was collected. Following your request, the personal data will be deleted without delay. In some cases, however, we have no possibility to delete your personal data, which may be because the data is still necessary to process for the purpose for which it was collected, that our interest in continuing to process the data outweighs your interest in having it deleted, or because there is a legal requirement for us to retain it.

Right to be informed: You have the right to be informed about how we process your personal data, which we do through this privacy policy and by answering any questions from you.

Right to access your personal data: You have the right to be informed about how we process your personal data. If you want to know what data we process about you, you can request access to it by contacting us via dataskyddsombud@sbsstudent.se.

Right to data portability: You have the right to request a copy of the personal data we have about you in a machine-readable format so that you can transfer your personal data to another recipient.

Right to rectification: In the event that you believe that any information about you is incorrect, you can request that the information be corrected. Within the scope of the stated purpose, you also have the right to supplement any incomplete information.

Right to restriction: In certain special cases, you may have the right to request that our processing of your personal data be restricted. If you have, for example, requested correction of incorrect data, you can request that processing be restricted during the time we need to check whether the personal data is correct. If our processing of your personal data would be unlawful and you oppose deletion of the data, you can instead request that the data be restricted. If we no longer need the personal data for the established purposes, but you need it to establish, assert or defend legal claims, you can request that we do not delete your data. In case of restriction, the data is marked so that it may only be processed for certain purposes. When a restriction is lifted, we will inform you.

Right to object: You can object to our processing that takes place based on legitimate interest (balancing of interests). You can also always object to us using your personal data for direct marketing. When you notify us that you no longer want to receive direct marketing from us, we will turn off the marketing and thus stop marketing to you.

Right to withdraw consent: In cases where we process your personal data based on your consent or explicit consent, you have the right to withdraw your consent at any time. When you withdraw your consent, we will stop the processing.

Right to file a complaint: If you want to exercise any of your rights or have any questions regarding Studentbostäder’s processing of personal data, you can contact Studentbostäder here:

Studentbostäder i Norden AB
Kungsgatan 47A
753 21 Uppsala

dataskyddsombud@sbsstudent.se

If you have complaints about our processing of your personal data, you also have the right to contact a competent supervisory authority. The competent supervisory authority in Sweden is the Swedish Authority for Privacy Protection, www.imy.se.