How we process
your personal data.

This is how Business Region Väst handles personal data

Business Region Väst handles a lot of data in order to be able to deliver services and carry out tasks that the municipalities have determined. Personal data is any information about you that can be linked to your person. This can be, for example, your name, social security number, telephone number, postal address and e-mail address. We always strive to store as little personal data as possible. We only collect the data that we need to perform a task. We save the data for as short a time as possible, how long time depends on us being able to perform the service or task for which the data is collected. Business Region Väst is the data controller for the processing of personal data that we use in our operations.

What are the rules for personal data?

How we may process personal data is primarily stated in the EU’s General Data Protection Regulation (GDPR), but also in the Data Protection Act (2018:218) and the Data Protection Regulation (2018:219). The purpose of the rules is to protect people so that their personal integrity is not violated.

More about GDPR on the Swedish Data Protection Authority’s website

What does it mean to process personal data?

Processing of personal data includes, for example, collecting, registering, storing, collating, printing, electronically transmitting, using and processing the data.

When may we collect and process personal data?

Business Region Väst may only process personal data on one of the legal grounds set out in the data protection regulations. Whenever we process your personal data, we are obliged to inform you of the legal basis that applies.

These legal grounds are the ones that are most often relevant when Business Region Väst processes personal data:

• If you have given your consent (for example, by registering, notifying or signing up for a subscription)
• So that we can fulfill a contract with you or carry out something that you request from us (for example, so that we can later sign a contract with you)
• If it is necessary for us to be able to do something that is in the public interest or is part of our responsibility as an authority
• Exceptionally, we may also need to use the legal basis to protect interests that are of great importance to you or another natural person.
• Data when ordering information material, newsletters, subscriptions, registrations for training and conferences

Personal data is only stored for as long as you are a subscriber or as long as it is necessary for us to be able to send out the order or to carry out an event. When you register, make a notification or sign up for a subscription, you agree to us processing your data. You can of course end your subscriptions at any time.

If one of Business Region Väst´s suppliers processes personal data to perform a service on behalf of us, Business Region Väst has a personal data processing agreement with the supplier. The agreement describes how personal data may be processed and the personal data processor must of course comply with the law.

Publicity principle

Business Region Väst is part of Fyrbodals Kommunalförbund which is a municipal authority. Information sent to us becomes public documents and may need to be disclosed in accordance with the public policy.

Your rights and register extracts

You can request a register extract with your own personal data free of charge, information about, for example, how we obtained your personal data, why we have it and whether it has possibly been disclosed to another party. If your request is unfounded or unreasonable (for example, requested repeatedly), we may charge a fee or simply not disclose the information.

If we have incorrect, incomplete or misleading information about you, you have the right to request that we correct or supplement it. When Business Region Väst processes personal data because it is part of our responsibility as an authority or so that we can do something that is in the public interest, you have the right to object to the processing at any time. In certain cases, you can demand a restriction on the processing of your personal data.

You can also demand that your personal data be deleted, however, this is not possible when the personal data is needed for us to be able to fulfill our mission or if it is in a public document. If we process your personal data in order to fulfill an agreement, in some cases you may be able to obtain your personal data in order to, for example, transfer the data to another data controller.