Information for contact persons of commercial tenants
Kilenkrysset is committed to protecting your personal privacy
Kilenkrysset is committed to protecting your privacy
The Kilenkrysset group of companies is committed to protecting your privacy. We therefore work actively to always protect your personal data in the best possible way in accordance with applicable legislation.
Who is the data controller for the processing of your personal data?
The company within the Kilenkrysset group that is named as landlord in the lease agreement of your employer or principal is the data controller for the processing of your personal data described in this information notice.
The company that is the data controller for the processing as set out above is hereinafter referred to as “Kilenkrysset”, “we” or “us”.
What personal data about you do we process?
We process the data that you provide to us, for example:
- name and personal identity number,
- telephone number,
- email address,
- public name and address details relating to you from credit information companies, to check that the personal data we hold about you is correct,
- garage or parking space and vehicle registration number (only from those of you who use your employer's garage or parking space),
- details of your employer or principal,
- job title,
- access rights,
- key and/or tag numbers, and
- copies of identity documents (for board members/CEO/specially authorised signatories)
Data about you as a contact person at a subtenant may be obtained from the tenant.
Why do we process your personal data?
The table below sets out the purposes for which Kilenkrysset processes your personal data and the legal bases Kilenkrysset has for processing your personal data.
Purpose of Kilenkrysset's processing Legal basis | Purpose of Kilenkrysset's processing Legal basis |
Negotiate and perform the lease agreement or other agreement with the tenant (your employer or principal) | Contractual obligation and legitimate interest |
Document, administer and follow up the history of the contractual relationship | Contractual obligation and legitimate interest |
Handle complaints, feedback and fault reports Contractual obligation and legitimate interest | Contractual obligation and legitimate interest |
Receipting and other handling of keys and electronic tags | Contractual obligation and legitimate interest |
Administration of rent payments and other invoicing | Contractual obligation and legitimate interest |
Plan, organise and develop the business Legitimate interest | Legitimate interest |
Marketing of our own products and services | Legitimate interest |
Document the business, for example goodwill, security, etc. | Legitimate interest and legal obligation |
Document the administration of insurance matters | Legitimate interest and legal obligation |
System administration | Legitimate interest |
Document fulfilment of the requirements of relevant certifications and demonstrate regulatory compliance | Legitimate interest and legal obligation |
Fulfil bookkeeping obligations | Legal obligation |
Security purposes | Legitimate interest and legal obligation |
Administration and performance of maintenance, adaptations of the leased premises, optional extras orders, etc. | Legitimate interest and legal obligation |
Report and remedy damage and/or abnormal wear to the leased premises | Legitimate interest and legal obligation, and to establish, exercise or defend legal claims |
Report and handle other incidents, for example accidents or vandalism | Legitimate interest and legal obligation, and to establish, exercise or defend legal claims (for the processing of special categories of personal data) |
Establish, exercise or defend legal claims | Legitimate interest |
Prepare name plates and lists for mail handling | Legitimate interest |
Provide tenants and subtenants with important information about the premises and in emergencies | Legitimate interest |
To whom may Kilenkrysset disclose your personal data?
Kilenkrysset may disclose your personal data to other companies within the Kilenkrysset group, our employees and consultants, our suppliers of IT services, computer systems and financial and legal services, other partners, industry organisations, insurance companies, banks, and to authorities and other public bodies.
As a rule, we do not process your personal data outside the EU/EEA. Where your personal data is processed outside the EU/EEA, such processing always takes place in accordance with applicable law and in compliance with the prescribed safeguards.
How long do we process your personal data?
As a general rule, we process your personal data for as long as the tenancy with your employer or principal continues and for no more than three years thereafter. Certain personal data may be retained for a longer period depending on why the personal data is processed. Personal data processed to manage our finances and bookkeeping in accordance with the law is retained for seven years. We may retain your personal data for up to eleven years (or for the duration of any dispute) in order to establish, exercise or defend ourselves against legal claims. In order to establish, exercise or defend ourselves against environmental law claims, we may process your personal data for a longer period.
What rights do you have?
You have the right to access the personal data about you that Kilenkrysset processes. You also have the right to request erasure, rectification or restriction of the processing of your personal data, to object to Kilenkrysset's processing of your personal data and to receive your personal data in a structured, commonly used and machine-readable format for transfer to another provider (data portability). Contact us if you wish to exercise any of these rights.
You always have the right to receive more detailed information about personal data processing carried out on the basis of a balancing of interests (see below) and to object to such processing.
You also always have the right to unsubscribe from direct marketing.
If you have concerns about Kilenkrysset's processing of your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Do not hesitate to ask
If you have any questions or comments about Kilenkrysset's processing of your personal data, do not hesitate to contact Kilenkrysset by post at Kilenkrysset Aktiebolag, Box 554, 645 25 Strängnäs, or by email at gdpr@kilenkrysset.se.
Kilenkrysset
