How we process your personal data
Region Skåne, corporate identity number 232100-0255, is the data controller for the processing of your personal data. All our processing of personal data takes place in accordance with applicable data protection legislation.
This means, among other things, that we protect your personal data with the necessary measures and that you always have the right to contact us to find out what personal data we have stored about you.
What constitutes personal data?
Personal data is data that in one way or another can be linked to your person, whether that connection is direct or indirect. It can be a name, email address, phone number, postal address, and date of birth. Images are also a form of personal data if you can be clearly distinguished in the photo.
What does the processing of personal data mean?
Personal data processing is all that is done with the personal data, such as the collection, registration, dissemination, processing, and sorting of data.
Why do we process your personal data?
There are various legal grounds for Region Skåne to process your personal data: that it is necessary to perform a task of general interest, that it is part of Region Skåne’s exercise of authority or that we should be able to fulfil a legal obligation.
In some cases, Region Skåne may need your consent to process your personal data. When you give your consent, you should always receive clear information about what you are consenting to. You have the right to withdraw your consent at any time.
We may need to process your personal data for, among other things, the following purposes:
- To fulfil our duties to you.
- For archival purposes of general interest.
- For scientific or historical research purposes.
- For statistical purposes of general interest.
- To provide a good service and be able to offer well-functioning, efficient, and simple services.
- To be able to answer your submitted questions.
- To be able to handle orders you place.
- To be able to register your participation in seminars, trainings, and the like.
- To carry out voluntary surveys.
- To send you newsletters and subscriptions.
Also see (in Swedish):
Who can access your personal data?
Your personal data is used by employees in Region Skåne who need to access personal data to carry out their work. We do not disclose personal data to others unless required to do so due to a law, regulation, or government decision or to protect our rights or the rights of third parties.
Public access to information
Region Skåne is subject to the principle of public access. This means that your personal data may be disclosed by Region Skåne if someone requests to access general information containing the information and the data is not covered by confidentiality under The Public Access to Information and Secrecy Act (2009:400).
Obligation to report
In some cases, we also have a reporting obligation. This means that we must pass information on to different authorities, which may include relevant personal data. This may happen, for example, if there is a suspicion of a child being at risk or in the event of a Lex Maria report to the supervisory authority.
In order to technically process your personal data, it will be transferred to the IT providers that provide or maintain our IT systems. In these cases, we have made demands on the supplier to ensure that they handle the data in a good and safe way.
Should your personal data be processed outside the EU/EEA (third country), we will tell you. In this case, the processing takes place in accordance with the protection rules contained in data protection legislation.
Region Skåne is not responsible for external actors’ own processing of personal data. External actors can be private healthcare providers or companies owned by Region Skåne. However, we have the opportunity to make demands on how these organisations should conduct their business when they do so on behalf of Region Skåne.
How long do we save your personal data?
We save your personal data for as long as it is needed for the purpose of the processing. When the purpose is no longer relevant, for example if a case has been processed, your personal data will be handled in accordance with the legal rules that apply to archiving.
According to the Archives Act (1990:782) and the decision on archival regulations by the regional council, Region Skåne is obliged to archive and delete general information. There is an established regional framework for which documents in Region Skåne should be preserved and deleted, as well as any deletion deadlines. The regulatory framework is complemented by specific instructions for a number of selected areas.
How is your personal data protected?
Region Skåne works continuously to manage your personal data safely. We take the appropriate technical and organisational measures necessary to protect your personal data and ensure that the processing takes place in accordance with applicable law.
If you want to exercise any of your rights or if you have general questions about how personal data is processed in Region Skåne, please contact Region Skåne’s Data Protection Officer:
Data Protection Officer, Region Skåne, 291 89 Kristianstad
Phone: +46 (0)44-309 30 00