Introduction
The purpose of data protection is to safeguard an individual’s right to privacy in connection with personal data processing. The Jämtkraft AB data protection policy explains the approach Jämtkraft AB and its subsidiaries take to data protection, how we process personal data, and your rights as a data subject when we process your personal data. Jämtkraft AB and its subsidiaries care about the privacy of the individual and strive for a high level of data protection. Regardless of whether you are a customer, an employee or have any other relationship with Jämtkraft, you should feel complete confidence in the way that we manage your personal data.
By using the services of Jämtkraft AB and its subsidiaries, or by virtue of your employment with the Jämtkraft Group, you accept our policy and our processing of your personal data. You also consent to Jämtkraft AB and its subsidiaries using digital communication channels to send information to you. It is important that you read and understand our data protection policy before using our services.
General
Personal data, data subjects and processing of personal data
Personal data is data relating to an identified or identifiable natural person. The decisive factor is that the data, individually or in combination with other data, can be linked to a physical, living individual. Examples of personal data include name and personal identity number. The individual to whom the data relates is called the data subject. Processing of personal data is everything that happens with the personal data. Examples of common processing include collection, registration, organisation and storage.
The processing of personal data is an important part of day-to-day operations for many organisations. For Jämtkraft AB and its subsidiaries, personal data processing is often essential for our ability to run our business – e.g. providing services or information to our customers, paying salaries and ensuring the well-being of our staff, developing new products, and marketing our products and services.
Jämtkraft's personal data responsibility
Jämtkraft AB and its subsidiaries are data controllers for the processing of personal data for which we determine the purpose and means. In certain cases, we are the data processor and process personal data on behalf of another party. In those cases where we are data controllers or data processors, we must ensure that personal data processing complies with the General Data Protection Regulation (GDPR) and other applicable data protection legislation. Jämtkraft AB and its subsidiaries undertake to respect and protect your personal data and your privacy in accordance with this legislation and on the basis of relevant industry regulations.
Contact details
Jämtkraft AB is registered with the Swedish Companies Registration Office, with company registration number 556001–6064, and has its head office at Kyrkgatan 21, SE-831 50 Östersund, Sweden.
You are welcome to contact our customer service if you have any questions about our personal data processing or to exercise your rights. You can reach us via the following contact details:
- Postal address: Jämtkraft AB, Box 394, SE-831 25 Östersund, Sweden
Telephone: +46 63 14 90 00
Email: [email protected]
You can also contact our data protection officer via email at: [email protected].
Jämtkraft’s personal data processing
Jämtkraft AB and its subsidiaries’ personal data processing includes different categories of personal data and different categories of data subjects. Processing is carried out on different legal bases, for different purposes and different durations, and sometimes involves us disclosing personal data to recipients outside the Group. In this section, you can read more about Jämtkraft’s personal data processing.
Categories of personal data
The following are examples of personal data that Jämtkraft AB and its subsidiaries process:
- Personal and contact information: Name, personal ID number, invoice and delivery address, email address, mobile phone number.
- Data used for debiting purposes: Contract, meter readings, installation information.
- Payment information: Invoice information, invoice history, bank account number.
- How you interact with us: Data you register willingly and voluntarily, how you use our services, website response time, download errors, how you reached and left the service, delivery notices when we contact you.
- Device information: IP addresses, cookies, browsers, time zone, operating system, platform.
Categories of data subjects
The people whose personal data Jämtkraft AB and its subsidiaries process include:
- Customers and the private individuals who contact us in general
- Employees (staff and consultants), suppliers’ employees, partners’ employees, job applicants and trainees
- Natural persons whose names and/or images appear in our media (on our website and intranet, and in social media)
Collection of personal data
Jämtkraft AB and its subsidiaries offer you the opportunity to become a customer, order services, make enquiries or register to access information via our digital channels. In these channels, we may ask you to provide personal data in order to complete your request or deliver your service.
We gain access to your personal data by:
- You providing it to us directly, e.g. when you become a customer
- Recording your personal data when you visit our website
- Obtaining your data from public registers
- You providing it to us directly when you sign up for our briefings, seminars, events, newsletters and other mailouts
- You providing it to us directly when you respond to questionnaires and surveys
- Registering your personal data when you choose to follow us or comment on our social media
- You contacting or visiting us
- You applying for employment with us or you becoming our employee
Purpose of Jämtkraft's personal data processing
Jämtkraft AB and its subsidiaries only process your personal data when there is a purpose for the processing, for example:
- To fulfil legal obligations, such as statutory and regulatory requirements.
- To manage orders, expressions of interest, contracts, invoicing and payments
- To maintain customer relationships such as customer service or during follow-up, feedback and customer dialogues.
- To address staff-related issues, such as payment of wages, benefits, fitness/wellness, health and safety, and provision of work equipment.
- For collection, storage, presentation and analysis of meter data.
- To improve the customer experience through evaluation, development and improvement of products.
- To be able to offer marketing, manage competitions or newsletters.
Legal basis (Legal support) for processing
Jämtkraft AB and its subsidiaries process your personal data on one or more of the following legal bases:
- Performance of a contract: When we need to process your personal data in order to fulfil a contract to which you are a party or to be able to take measures prior to entering into such a contract. For example, processing that is required to be able to enter into a contract with a customer, in connection with payroll administration or other commitments to our staff.
- Legal requirement: If we are required by law or by the authorities to provide certain information about our customers, employees or suppliers.
- Vital interest: When we need to process personal data to protect a data subject. For example, when we wish to register a person who is moving into a property before we know whether or not they will become our customer, where it is of vital interest to the customer that their power not be cut off simply because we were unable to reach that person in time.
- Legitimate interest: When the processing is necessary for our purpose and our interests outweigh those of the data subject. For example, when we need to register a designated contact for a supplier or partner company in order to be able to communicate and collaborate.
- Consent: When you have consented to our processing of your personal data. For example, when we meet people at trade fairs or other spontaneous contacts, and we need to get back to them on some issue, or when someone applies for a job with us.
The legal bases for our processing of personal data are primarily applicable legislation and associated regulations (e.g. The Swedish Archives Act, the Swedish Electricity Act and the Swedish Accounting Act), performance of contracts and legitimate interest. Legitimate interest means that the value of processing the data exceeds the interest in protection. In some cases, our processing is based on consent.
Who has access to your personal data?
Employees of Jämtkraft AB or its subsidiaries who access your personal data do so on the grounds that this is necessary for their ability to do their job. In those cases in which it is necessary for our ability to provide our services, we may transfer or share your personal data with selected third parties, suppliers and subcontractors. For example, personal data processors are used for various types of IT services. In these cases, we draw up special agreements to ensure that the personal data is processed in a secure manner. As far as those people who access your personal data are concerned, regardless of whether they are Jämtkraft’s own employees, suppliers or subcontractors, Jämtkraft AB and its subsidiaries always strive to ensure that only the personal data that is necessary for the purpose of the processing is shared both internally and externally.
As a municipal company, Jämtkraft AB is bound by the principle of public access to official documents. As a general rule, documents drawn up within or received by Jämtkraft will be public documents that can be disclosed upon request if the information is not subject to confidentiality. This means that personal data may be disclosed in accordance with the principle of public access to official documents if that interest is stronger than the need for privacy protection under the General Data Protection Regulation (GDPR).
Storage and duration
Jämtkraft AB and our subsidiaries undertake to store your data in a secure manner, and not to collect more personal data than necessary or to store your data for longer than is required to fulfil our obligations to you and to comply with current legislation. In certain situations, personal data may be transferred to, and processed in, countries outside the EU/EEA by Jämtkraft or by another supplier or subcontractor. Prior to this, data protection and security assessments will be carried out to ensure that the personal data will be managed in a secure and correct manner.
We only process your data for as long as necessary to fulfil the purposes of our processing in individual cases, and for as long as required by statutory and regulatory provisions. The duration of each individual processing depends on the purposes for which we are processing your personal data.
Your rights as a data subject
When Jämtkraft AB or its subsidiaries process your personal data, as a data subject you have a number of rights related to the processing of personal data. In this section you can read more about your rights.
Right to be informed
You can request confirmation of whether or not Jämtkraft AB or its subsidiaries are processing your personal data and, if so, obtain a copy of it – an Extract from the Register.
Right to rectification and erasure ("Right to be forgotten")
If any of the personal data we are processing about you is incorrect, you have the right to request that it be rectified without delay. In certain cases, you can also have your personal data erased. You have the right to request erasure of your personal data if the personal data is no longer required for the purpose for which it was collected. However, there may be legal obligations that prevent us from immediately deleting parts of your personal data. These obligations stem from accounting and tax legislation, as well as from consumer rights legislation.
Right to withdraw consent
If the legal basis for our processing of your personal data is that you have consented to the processing and you wish the processing to cease, you have the right to withdraw your consent. Please note, however, that your withdrawal of consent will not affect the processing that we have already carried out.
Right to restrict processing
In certain cases, you have the right to request that the processing of your personal data be restricted. In this case, we will continue to process your personal data only insofar as we are legally obliged to do so or if this is necessary in order to protect legal claims.
Right to data portability
In certain circumstances, you have the right to data portability. This means that you have the right to request your personal data in a ‘structured, commonly used and machine-readable format’ and the right to move this personal data to another data controller.
Right to object to processing
In certain circumstances, you have the right to object to our processing of your personal data, such as direct marketing. However, certain processing must be carried out in accordance with the law or in order for legal claims to be asserted.
Right to lodge complaints with the Swedish authority for privacy protection
If you consider that our processing of your personal data violates the provisions of the General Data Protection Regulation (GDPR), you will be entitled to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), which is the supervisory authority for Jämtkraft AB and our subsidiaries with regard to data protection.
Cookies
A cookie is a small text file that can be placed on your computer’s hardware with your consent. If you consent, your browser will add the text to a separate file. Jämtkraft AB and its subsidiaries use cookies to facilitate analysis of the traffic on our websites by informing us of who has visited a particular website at a certain time. You can allow or disallow cookies in the settings of your browser. You can also delete cookies placed on your computer at any time.
When you visit the parts of Jämtkraft’s or our subsidiaries’ websites that can be adapted to your user profile or that require you to be logged in, your browser must be set to accept cookies. Otherwise, you can visit all parts of our websites without accepting cookies and without disclosing your identity.
Cookies on Jämtkraft website
We use cookies to improve your experience when you visit our website. Some cookies are necessary for the website to work, others help us to analyse the website so that we can improve it. We use Facebook and LinkedIn Pixels, Matomo, Google Tag Manager and Hotjar. Information about visitors to jamtkraft.se cannot be traced.
We use cookies to:
- Facilitate the use of the website and enable pages to be loaded quickly via the device you are using to visit us.
- With the help of the analysis tools Matomo and Hotjar, we collect statistics on how our visitors move around the website, so that we can create a better user experience. The statistics we collect include:
- how the visitors use the website
- if the visitor has visited the website before
- number of page views
- where visitors come from
- which pages are visited on the website
- duration of website visit
- marketing information
Customising cookies
If you choose to only accept the necessary cookies when you visit our website, the website will function properly, but the aforementioned analysis tool will not be used during your visit.
Deny cookies
You can set your browser to inform you that a website is using cookies, or to disable cookies. How you do this depends on the version and platform, see the Help in your browser. If you turn off this function, no cookies will be stored, but you will be unable to use certain functions on the website.
Security
Jämtkraft AB and our subsidiaries undertake to protect your personal data through technical and organisational security measures. This is achieved through physical, electronic and practical measures, including education and training of our staff. Jämtkraft AB and our subsidiaries strive to provide the highest possible protection for the personal data we process in terms of e.g. unauthorised (illicit) use, access, modification or deletion.
Target group
Our data protection policy is primarily aimed at data subjects whose personal data Jämtkraft AB and its subsidiaries process, and who are entitled to receive information about the processing in accordance with specific requirements set out in the General Data Protection Regulation.
The descriptions of how personal data will be managed, and how processing must comply with the General Data Protection Regulation (GDPR) and other applicable data protection legislation, apply to everyone at Jämtkraft, both managers and employees, within the entire Jämtkraft Group. Where applicable, the policy and associated rules and regulations also apply to suppliers, partners, external personnel and other contractors who perform work for Jämtkraft. Operational managers and function representatives should ensure that both personnel and other relevant parties are aware of this policy and related rules and regulations.