Information for residential tenants about Kilenkrysset's processing of personal data

Kilenkrysset is committed to protecting your personal privacy

Kilenkrysset is committed to protecting your personal privacy

The Kilenkrysset group of companies is committed to protecting your personal privacy. We therefore work actively to always protect your personal data in the best possible way in accordance with applicable legislation.

Who is the data controller for the processing of your personal data?

The company within the Kilenkrysset group of companies that is stated as the landlord in your tenancy agreement is the data controller for the processing of your personal data described in this information text.

The company that is the data controller for the processing as set out above is referred to below as “Kilenkrysset”, “we” or “us”.

What personal data about you do we process?

We process the data that you and any references (previous landlords) provide to us, for example:

  • name and personal identity number,
  • address,
  • telephone number,
  • email address,
  • public name and address details about you from credit information agencies, to check that the personal data we hold about you is correct,
  • contract and apartment number,
  • key and/or tag number,
  • rental period and rent, and any deposit,
  • payment history,
  • any deposit,
  • consumption data, for example consumption of heating, water and electricity (to the extent that there are systems for individual metering in the property where you live),
  • garage or parking space and vehicle registration number (only from those who rent a garage or parking space).

Why do we process your personal data?

You must provide your personal data to us so that we can enter into an agreement with you as a tenant.

The table below sets out the purposes for which Kilenkrysset processes your personal data and the legal bases Kilenkrysset has for processing your personal data.

Purpose of Kilenkrysset's processing 

Legal basis

Negotiating and performing the lease agreement or other agreement with you

Contractual obligation

Documenting, administering and following up the history of the contractual relationship

Contractual obligation

Handling complaints, comments and fault reports

Contractual obligation and legitimate interest

Receipting and other handling of keys and electronic tags

Contractual obligation

Administration of rent payments and other invoicing

Contractual obligation

Planning, organising and developing the business

Legitimate interest

Marketing of our own products and services

Legitimate interest

Documenting the business, for example goodwill, security, etc.

Legitimate interest and legal obligation

Documenting the administration of insurance matters

Legitimate interest and legal obligation

System administration

Legitimate interest

Documenting compliance with the requirements of relevant certifications and demonstrating regulatory compliance

Legitimate interest and legal obligation

Fulfilling accounting obligations
under law, statutory credit requirements and other statutory requirements

Legal obligation

Security purposes

Legitimate interest and legal obligation

Administration and performance of maintenance, adaptations of the rental property, orders for optional extras, etc.

Legitimate interest and legal obligation

Reporting and remedying damage and/or abnormal wear to the rental property

Legitimate interest and legal obligation, and to establish, exercise or defend legal claims

Handling disturbances in the residence and other misconduct

Legitimate interest and legal obligation, and to establish, exercise or defend legal claims

Reporting and handling other incidents, for example accidents or vandalism

Legitimate interest and legal obligation, and to establish, exercise or defend legal claims

Establishing, exercising or defending legal claims

Legitimate interest

Preparing name plates and lists for mail handling

Legitimate interest

Providing tenants, lodgers and subtenants with important information about the residence and in emergencies

Legitimate interest

Assessing applications for subletting or transfer of the lease agreement

Legitimate interest and legal obligation, and to establish, exercise or defend legal claims

Handling termination of the lease agreement

Contractual obligation

To whom may Kilenkrysset disclose your personal data?

Kilenkrysset may disclose your personal data to other companies within the Kilenkrysset group of companies, our employees and consultants, partners, our suppliers of IT services and computer systems and of financial and legal services, industry organisations, insurance companies, banks, process servers, and to authorities and other public bodies.

As a rule, we do not process your personal data outside the EU/EEA. To the extent that your personal data is processed outside the EU/EEA, such processing always takes place in accordance with applicable law and in compliance with the prescribed safeguards.

How long do we process your personal data?

As a starting point, we process your personal data for as long as the tenancy lasts and for no more than three years after that. Some personal data may be kept for a longer period depending on why the personal data is processed. Personal data processed so that we can manage our finances and accounting in accordance with law is kept for seven years. We may keep your personal data for up to eleven years (or for the duration of any dispute) in order to establish, exercise or defend ourselves against legal claims. In order to establish, exercise or defend ourselves against environmental law claims, we may process your personal data for a longer period.

What rights do you have?

You have the right to access the personal data about you that Kilenkrysset processes. You also have the right to request erasure, rectification or restriction of the processing of your personal data, to object to Kilenkrysset's processing of your personal data, and to receive your personal data in a structured, commonly used and machine-readable format for transfer to another provider (data portability). Contact us if you want to exercise any of these rights.

You always have the right to receive more detailed information about personal data processing that is based on a balancing of interests (see below) and to object to such processing.

You also always have the right to unsubscribe from direct marketing.

If you have comments on Kilenkrysset's processing of your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Do not hesitate to ask

If you have questions or comments about Kilenkrysset's processing of your personal data, do not hesitate to contact Kilenkrysset by post at Kilenkrysset Aktiebolag, Box 554, 645 25 Strängnäs, or by email at gdpr@kilenkrysset.se.

Kilenkrysset

News