Privacy policy - Processing of personal data
We are committed to protecting your privacy. The information below explains the reasons for the processing of your personal data, how that information is used and how you can exercise your rights.
How and why we process personal data
General questions or requests
When you submit personal data in connection with a general question or request, the data are processed for the management of the contact made. The processing is necessary to perform tasks carried out in the public interest.
Applications
When we handle an application, e.g. an application for a license, a government grant, employment or participation in training, we process personal data in order to carry out the administrative tasks connected to the application. This processing is necessary to perform tasks carried out in the public interest and to exercise the official authority vested in us. In some cases sensitive data are processed, since this is necessary for reasons of substantial public interest.
Contracts
When you submit personal data in order to enter into an agreement/contract, data are processed for the purpose of entering into or fulfilling the agreement/contract.
Orders of publications and information materials
When you submit personal data in connection with an order for publications or information materials, your name and contact details are processed to administer and fulfil the order.
Requests of access to official documents
When you submit personal data in connection with a request to obtain official documents, these data are processed within the scope of your request. The processing is necessary to perform tasks carried out in the public interest and to meet a legal obligation.
Requests to exercise your rights under the data protection legislation
When you exercise your rights as a data subject, e.g. your rights to rectification and erasure, or to obtain a copy of personal data undergoing processing, your personal data are processed to the extent necessary within the scope of the request. This processing is necessary to perform tasks carried out in the public interest and to exercise the official authority vested in us.
Requests of data for research and statistical purposes
When we handle requests of data for research and statistical purposes, your name and contact details are processed in order for us to be able to communicate with you. The processing is necessary to perform tasks carried out in the public interest and to exercise the official authority vested in us.
Research
We conduct certain research regarding social services. The processing of personal data for research purposes is necessary to perform tasks carried out in the public interest, or based on consent. The processing of sensitive personal data is necessary for reasons of substantial public interest.
Social media
We communicate via social media, e.g. LinkedIn, Instagram and Facebook. In doing so we process various personal data. This processing is necessary to perform tasks carried out in the public interest.
Subscriptions
When you sign up for a subscription to our press releases and newsletters, we process your name and contact details in order to manage the subscription. This processing is based on your consent, in order to fulfil an agreement with you.
National registers regarding healthcare and social services
We maintain a number of national registers to facilitate analyses and development of Swedish healthcare and social services. The processing of personal data in these registers is necessary to perform tasks carried out in the public interest. The processing of sensitive data is necessary for reasons of substantial public interest. Personal data from these registers may only be disclosed for research and statistical purposes.
The National Donor Register
We maintain the Swedish National Donor Register. The register keeps a record of organ donation decisions. The processing of personal data in the register is necessary to perform tasks carried out in the public interest.
The Legal Advisory Board
The Legal Advisory Board at the Swedish National Board of Health and Welfare handles cases regarding forensics, sterilisation, authorisations of certain abortions and inseminations, amongst others. Personal data required to handle these cases are processed. This processing is necessary to perform tasks carried out in the public interest and to exercise the official authority vested in us. The processing of sensitive data is necessary for reasons of substantial public interest.
The Medical Responsibility Board
The Medical Responsibility Board examines cases regarding registered health and medical care staff. During the procedures, personal data necessary for handling the cases are processed. The processing is necessary to perform tasks carried out in the public interest and to exercise the official authority vested in us. Sensitive data and data relating to crime may be processed. This processing is necessary for reasons of substantial public interest.
Other purposes for processing personal data
When you submit personal data in a context and for a purpose other than those stated above, and wish to ask questions in English about how and why we then process your personal data, you are welcome to contact us. More comprehensive information (in Swedish) about our processing of personal data can also be found on our website.
How long are personal data kept?
We only retain personal data for as long as is needed for the purposes of processing such data. As a Swedish government authority, we are however subject to Swedish archiving legislation. Therefore, personal data may be processed for archival purposes in the public interest.
Who can access personal data?
Employees of the National Board of Health and Welfare have access to personal data to the extent necessary in order to carry out their duties. Personal data may also be disclosed to data processors, if applicable. Personal data processors may only process personal data in accordance with the purposes and instructions provided by us.
We are a government authority. Messages and information sent to us will hence become official documents and may be disclosed in accordance with the principle of public access to official records.
Under certain conditions outlined in law, we may be obliged to disclose your information to other third parties if it is necessary and proportionate for lawful, specific purposes.
Transfer of personal data to third countries
Transfer of personal data to a country outside the EU and the EEA (so-called ‘transfer of personal data to a third country’) may occur if the recipient has an adequate level of protection, or the transfer is subject to appropriate safeguards or binding corporate rules. We are very restrictive regarding such transfers of personal data.
Your rights
You have the right to access information about our processing of your personal data, and to obtain access to your personal data held by us. You have the right to request that incorrect, inaccurate or incomplete personal data are corrected. You can also request that your personal data are erased when no longer needed, or if the processing is unlawful. You may also, in specific cases, request restriction of the processing of your personal data.
You have the right to complain at any time if you believe your data protection rights have been breached. If you would like to exercise your rights, please send us a written request by e-mail or by post.
E-mail: socialstyrelsen@socialstyrelsen.se
Socialstyrelsen
106 30 Stockholm
Sweden
Supervisory Authority
If you wish to file a complaint about our processing of your personal data you can contact the supervisory authority, the Swedish Data Protection Authority.
Questions
If you have any questions regarding our personal data processing you can contact our Data Protection Officer.