The EU General Data Protection Regulation (GDPR)

GDPR stands for the General Data Protection Regulation. This regulation applies under Swedish law. It replaced the former Swedish Personal Data Act (PuL). The purpose of GDPR is to ensure a consistent and equal level of personal data protection.

The Swedish Election Authority is the personal data processor

The Swedish Election Authority is responsible for the processing of personal data.

Contact us

Valmyndigheten
Box 1010
171 21 Solna

Email the Swedish Authority (the form is in Swedish).

Tel: 010-575 70 00 (from abroad: +46 (0) 8-758 15 50)

What is personal data?

Personal data is any piece of information that can be connected directly or indirectly to a living person. Examples of personal data include an individual’s name, address, email address, IP address and health details. Images also constitute personal data if they depict an identifiable individual.

What do we mean by “processing of personal data”?

Processing of personal data means using it in any way. For example, this includes the collection, storage, transfer, consolidation and deletion of personal data.

Examples: how the Swedish Election Authority processes personal data

The Swedish Election Authority manages a database containing details of elections and referendums. We are permitted to process personal data in this database relating to individuals who can be assumed to be eligible to vote when an election or referendum is scheduled to be held, or who are election candidates. This data is deleted at the latest one month after establishment of the final results of the election or referendum to which the data relates.

Further, the Swedish Election Authority is also permitted to process personal data relating to individuals other than those mentioned if this is necessary in handling a case.

Personal data relating to individuals who are election candidates is deleted at the latest five months after the end of the election period to which the data relates. However, the Swedish Election Authority is permitted to keep personal data relating to election candidates for historical documentation, or statistical or scientific research purposes.

The principle of public access to information: the right to request public records

The Swedish Election Authority is a government agency. All documents and data sent to the Swedish Election Authority, or created by us, constitute public records.

Under the principle of public access to information, access to Swedish public records is normally granted to those who request it. In certain cases, the Swedish Election Authority may prevent the disclosure of sensitive personal data contained in public records.

Sweden’s Public Access to Information and Secrecy Act determines which information the Swedish Election Authority can choose not to disclose.

Which personal data does the Swedish Election Authority process?

The personal data processed in the database relating to individuals who can be assumed to be eligible to vote when an election or referendum is scheduled, includes the following, for example: date of birth, personal identity number, name, address, place of residence, property designation, electoral district, citizenship, and date of moving to Sweden.

In regard to election candidates, the Swedish Election Authority is permitted to process the following data: date of birth, personal identity number, name, address, place of residence, citizenship, place of birth, party affiliation and details shown on ballot papers. The Swedish Election Authority may also process other personal data that is submitted to us.

The Swedish Election Authority also manages a database for Elections to the Sámi Parliament of Sweden, and is permitted to process personal data in this database relating to individuals on the electoral roll, and the candidates in Sámi Parliament elections. We are permitted to process the personal identity number, name and address of individuals on the electoral roll. In regard to election candidates, we are permitted to process their personal identity number, name, address, party affiliation and details shown on ballot papers.

Sensitive personal data

The Swedish Election Authority sometimes has access to sensitive personal data. This may be information about political views, religious or philosophical beliefs, trade union membership, health-related details or other such data.

You should avoid providing unnecessary sensitive personal data relating to you or anyone else.

The purpose and legal basis for the Swedish Election Authority’s processing of personal data

The processing of personal data carried out by the Swedish Election Authority is based on the legal grounds of compliance with a legal obligation, performance of a task carried out in the public interest, exercise of official authority, or consent.

Who has access to personal data?

Staff working for the Swedish Election Authority have access to personal data required to carry out their tasks.

According to the principle of public access to information, public records containing personal data which are held by the Swedish Election Authority can be disclosed to another party on request.

Processing of personal data contained in incoming emails and postal correspondence

The Swedish Election Authority is obliged to process all email and postal correspondence sent to us.

All emails sent to our inbox are deleted one year after the matter in question is closed.

Consent to data processing: requests using online form

The Swedish Election Authority requires your personal data in order to process your request. The information we collect needs to be processed by the Swedish Election Authority staff dealing with your request. You provide your personal data to us on a voluntary basis.

Materials for voting by messenger and postal voting should primarily be requested using the designated form, but they can also be ordered from the Swedish Election Authority by email or phone, or from a municipality, or a Swedish embassy or consulate.

For duplicate voting cards, orders can be placed with the Swedish Election Authority by email or phone, or with the County Administrative Board, the municipality, or in some cases a Swedish embassy or consulate.

We collect the following types of personal data on the request forms for postal voting materials:

• Given name and surname
• Postal address

In regard to duplicate voting card requests, we also collect personal identity numbers.

You have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of data processing based on consent given prior to this withdrawal.

We only keep your personal data for as long as it is needed to fulfil the purpose of processing. This means that your personal data is deleted when it is no longer necessary for processing purposes.

Your rights

You can contact the Swedish Election Authority to:

• request details of your personal data processed by the Swedish Election Authority – i.e. a data extract from our register (in your request, state clearly which information you want us to provide; we normally respond to requests within one month)
• request a correction to, or the deletion of, your personal data, or restriction of processing
• object to the processing of your personal data.

Your rights are limited due to specific regulations concerning the processing of public records.

Data Protection Officers

If you have any questions or comments regarding the processing of personal data by the Swedish Election Authority, please email our data protection officers:

dataskyddsombud@val.se.

Complaints

If you are not satisfied with the Swedish Election Authority’s processing of your personal data, you can make a complaint to the Swedish Authority for Privacy Protection. Further information about the General Data Protection Regulation (GDPR) is available on their website, imy.se.

The Swedish Authority for Privacy Protection’s website, imy.se.