Studentbostäder i Norden - Privacy Notice
Published on February 15, 2023 Studentbostäder i Norden AB (”Studentbostäder”), reg.no. 556715-7929, address Kungsgatan 47A 753 21 Uppsala is the data controller of the processing of your personal data.
Studentbostäder cares about your privacy. Therefore, we are committed to always protecting your personal data in an appropriate way and to comply with all the applicable data protection laws and regulations. Through this privacy notice, Studentbostäder wants to inform you about how we use your personal data and what your data protection rights are.
Some pages on our website contain links to websites of third parties. These websites have their own privacy notices and Studentbostäder have no responsibility for their information or activities. Users who submit information to or through these third-party websites should therefore review the respective website's privacy notices before sharing their personal data to these websites.
What kind of personal data do we collect?
Studentbostäder collects and processes your personal data when you submit a registration of interest for a vacant premise, apartment, parking lot or similar, when you join our housing queue, when you enter into an agreement with us or when you otherwise communicate with us. Personal data is also collected when you visit our website. Personal data may also be collected from other sources such as, for example, housing agencies, SPAR, the Swedish Tax Agency (Sw. Skatteverket) or from publicly available records.
Examples of categories of personal data collected and processed by Studentbostäder includes your name, social security number, postal address, telephone number, e-mail address, IP address, income information, information from your employment contract, study admission notice, registration certificate, references, browser and device information, information from server log files, information collected through cookies, pixel tags and other technology and information about application use.
How and why are we processing your personal data?
The personal data is processed to conduct Studentbostäder's operations, administer agreements and fulfill obligations as a landlord in relation to you as a tenant, housing applicant or supplier to us. During the tenancy, personal data may be processed for the provision of services, rental notification, payment processing, booking of laundry rooms, handling of fault reports, compilation of electricity, water, or heat consumption, rent negotiation, drawing up inspection reports, sending out newsletters and other information as well as when marketing Studentbostäder's services.
The legal basis for Studentbostäder's processing of your personal data is to fulfill and administer lease agreements, fulfill legal requirements or defend a legal claim in the event of, for example, late or non-payment of rents, or disturbance or damage to the property. Personal data may also be processed with the support of a balancing of interests, for example so that Studentbostäder can streamline, improve and adapt its services and ensure the condition and maintenance of the apartment. We may also have a legitimate interest in sending out information to tenants or offering services through our partners and collaborators.
When you register your interest, or join one of the queues, for our homes, we collect and process your personal data such as name, social security number, contact details and object of interest/queue. The legal basis for the processing of your personal data is our legitimate interest in administering a housing queue and in obtaining information about housing applicants in order to provide rental housing. We receive the personal data directly from you. The personal data remains as long as your registration of interest remains or you remain in the queue. If you wish to withdraw your registration of interest or queue position, you can request that we delete your personal data, see further in the section.Your data protection rights as a data subject.
If you are between the ages of 13 and 18 you can also register your interest and join our housing queue. When processing your personal data, we are extra careful as children's personal data require special protection. When processing your personal data, we do not use contracts as a legal basis. The legal basis for our processing of your personal data is instead a balancing of interests where we have made the assessment that our legitimate interest in processing your personal data in order to be able to administer your registration of interest or position in the queue outweighs your interest in not having your personal data processed.
Who do we share your personal data with?
For the purposes stated above, Studentbostäder may transfer your personal data to relevant authorities, to other companies within Studentbostäder's company group, to companies with which Studentbostäder does business or to companies that provide services to Studentbostäder. Personal data may be transferred, for example, when a contractor is hired to carry out a repair in a leased apartment, during debt collection or when servicing Studentbostäder's provided system for broadband or electricity. Studentbostäder may also, with the support of your consent, transfer your personal data to third parties who are independent data controllers. When your personal data is transferred to a company that is an independent data controller, that company's privacy notice applies to their handling of your personal data. Personal data may also be transferred in the event of a possible acquisition of all or parts of Studentbostäder's operations.
Transfers outside of the EU/EEA
As a starting point, we only process your personal data within the EU/EEA. However, if Studentbostäder has a supplier or business partner in a country outside the EU/EEA, your personal data may be transferred to them. Studentbostäder will in each such case take all the appropriate safeguards to protect your personal data. Any such transfer will only take place in accordance with applicable legislation and requires that the country in question has an adequate level of protection or that other appropriate safeguards are provided, meaning that the transfer is lawful. This means that the transfer can be based on, for example, the European Commission's adequacy decision or standard contractual clauses with additional security measures.
You can, at any time, request additional information about such transfer and the security measures that Studentbostäder takes.
How long we store your personal data
Studentbostäder stores personal data during the time that we have a business or customer relationship with you or as long as it is otherwise necessary to fulfill the purpose of the processing, or as long as there is an obligation to store the personal data according to law, regulation or a decision by authorities. Studentbostäder has, for example, a legal obligation to store lease agreements, rent claims, decisions from the social welfare committee (Socialnämnden) and study certificates. Furthermore, personal data in accounting materials (e.g. payments) will be stored for seven years, including the current year, since we have a legal obligation to do so. You can unsubscribe from subscriptions to newsletters and similar at any time and your personal data will then no longer be stored for this purpose.
Sensitive personal data
In some cases, Studentbostäder may process sensitive personal data about you. If we process sensitive personal data about you, the basis for this is either that we need the data to defend a legal claim or that you have given your consent to the processing of the data. An example is that we may need to store data on housing adaptations (Sw. bostadsanpassning), which indirectly may be personal data about your health and thus a sensitive personal data.
Your data protection rights
Right to have personal data deleted (“right to be forgotten”): You can request that the personal data we process about you is deleted if you consider that the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent to the processing. After your request, the personal data will be deleted without delay. In some cases, however, we have no possibility to delete your personal data, which may be because the data is either still necessary to process for the purpose for which it was collected, or that our interest in continuing to process the data outweighs your interest in having it deleted, or because there is a legal requirement for us to retain them.
Right to be informed: You have the right to be informed about how we process your personal data, which we do through this privacy notice and by answering any questions from you.
Right to receive access your personal data: You have the right to be informed about which personal data we process about you, a so-called data extract. If you want to know what information we process about you, you can request access to it by contacting us via info@sbsstudent.se.
Right to data portability: You have the right to request a copy of the personal data we hold about you in a machine-readable format so that you can transfer your personal data to another recipient.
Right to rectification: In the event that you consider that any personal data that we hold about you is incorrect, you can request that we correct the data. You also have the right to supplement any incomplete data.
Right to restriction: In certain situations, you may have the right to demand that our processing of your personal data is restricted. If you, for example, have requested the correction of incorrect personal data, you have, during the time it takes to adjust the data or the matter is investigated, the right to demand that we restrict the processing of the data. If our processing of your personal data would be illegal and you object to the deletion of your personal data, you can instead request that the data should be restricted. If we no longer need the personal data for the stated purposes, but you, on the other hand, need them to be able to establish, exercise or defend legal claims, you can request that we do not delete your data. In the event of a restriction, the data is marked so that it may only be processed for certain purposes. When a restriction ends, we will inform you.
Right to object: You can object to our processing of your personal data that takes place based on legitimate interest as a legal basis. You can also always object to us using your personal data for direct marketing. When you notify us that you no longer wish to receive direct marketing from us, we will stop marketing to you.
Right to withdraw consent: In cases where we process your personal data based on your consent or explicit consent, you have the right to withdraw your consent at any time. When you withdraw your consent, we will stop the processing based on this legal basis.
Right to lodge a complaint: If you want to exercise any of your rights or have any questions regarding Studentbostäder's processing of your personal data, you can contact Studentbostäder here:
Studentbostäder i Norden AB, Kungsgatan 47A 753 21 Uppsala, info@sbsstudent.se.
If you have a complaint about our processing of your personal data, you also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in Sweden is the Swedish Authority for Privacy Protection (Sw. Integritetsskyddsmyndigheten), www.imy.se. You may also lodge a complaint with your national supervisory authority.