How we process your personal data

Region Skåne, company registration number 232100-0255, is the data controller for the processing of your personal data. All our processing of personal data is carried out in accordance with applicable data protection legislation.

This means that we protect your personal data using the necessary measures, and that you always have the right to contact us to find out what personal data we have stored about you. 

Data Protection - Privacy Protection Authority (imy.se)

What is personal data?

Personal data is information that can be linked to you in one way or another, whether that link is direct or indirect. This can include your name, email address, telephone number, postal address and date of birth. Photos are also a form of personal data, if you can clearly be distinguished in the photo. 

What does the processing of personal data involve?

Personal data processing is everything that is done with personal data, such as collecting, registering, distributing, processing and screening data.

Why do we process your personal data?

There are various legal grounds for Region Skåne to process your personal data; that it is necessary to perform a task in the public interest, that it is part of Region Skåne’s exercise of authority, or that we have to be able to fulfil a legal obligation.

In some cases, Region Skåne may need your consent to process your personal data. When you give your consent, you must always receive clear and precise information about what you are consenting to. You have the right to withdraw your consent at any time.

We may need to process your personal data for the following purposes:

• To fulfil our assignments in respect of you.
• For archiving purposes that are in the public interest.
• For scientific or historical research purposes.
• For statistical purposes that are in the public interest.
• To provide a good service and be able to offer effective, efficient and simple services.
• To be able to answer any questions you submit.
• To be able to manage orders you place.
• To be able to register your participation in seminars, training courses and similar events.
• To conduct voluntary surveys.
• To send you newsletters and subscription mailings.

Also see:

Processing of personal data in healthcare - in Swedish (1177.se)

How your data is protected and handled in the e-services - in Swedish (1177.se)

Processing of personal data in public transport - in Swedish (skanetrafiken.se)

Processing of personal data - information for job seekers - in Swedish (pdf, new window)

Processing of personal data - information for employees - in Swedish (pdf, new window)

Who is allowed to access your personal data?

Your personal data is used by Region Skåne employees who need to access personal data to be able to do their jobs. We do not disclose personal data to others unless we are required to do so by law, regulation or government decision, or to protect our rights or the rights of third parties.

General document

Region Skåne is subject to the principle of public access to official records. This means that your personal data may be disclosed by Region Skåne if someone requests access to public documents that include the data and the data is not subject to confidentiality under the Public Access to Information and Secrecy Act (2009:400).

Obliged to report

In some cases, we also have an obligation to report. This means that we have to submit information to various authorities, and this may include relevant personal data. This may be the case, for example, if child abuse is suspected or when a lex Maria report (a report submitted by a caregiver regarding events that have or could have caused serious injury to a patient) is submitted to a supervisory authority.

IT providers

Your personal data will be transferred to the IT providers that provide or maintain our IT systems so that it can be processed in technical terms. In these cases, we have specified requirements that the provider has to comply with so as to ensure that they process the data effectively and securely.

Third countries

We will let you know if your personal data is to be processed outside the EU/EEA (third countries). In this case, the data will be processed in accordance with the protection rules set out in data protection legislation.

External stakeholders

Region Skåne is not responsible for external stakeholders’ own processing of personal data. External stakeholders may be private healthcare providers or companies owned by Region Skåne. However, we have the opportunity to define requirements for how these organisations should conduct their activities when they do so on behalf of Region Skåne.

How long do we save your personal data?

We save your personal data for as long as it is needed for the purpose of the processing. When the purpose is no longer relevant, for example if a case has been processed, your personal data will be handled in accordance with the legal rules that apply to archiving.

According to the Archives Act (1990:782) and the decision on archival regulations by the regional council, Region Skåne is obliged to archive and delete general information. There is an established regional framework for which documents in Region Skåne should be preserved and deleted, as well as any deletion deadlines. The regulatory framework is complemented by specific instructions for a number of selected areas.

Region Skåne’s instructions for conservation and deletion - in Swedish (vardgivare.skane.se)

How is your personal data protected?

Region Skåne is always working to process your personal data securely. We implement appropriate technical and organisational measures to protect your personal data and ensure that processing takes place in accordance with applicable law.

Contact details

If you wish to exercise any of your rights, or if you have any general questions on how personal data is processed at Region Skåne, please contact Region Skåne’s data protection officer:

Data Protection Officer, Region Skåne, 291 89 Kristianstad
Phone: +46 (0)44-309 30 00
E-mail: region@skane.se