Your right to the protection of your personal data is important to SEK and we are responsible for ensuring that your personal data is processed in accordance with the prevailing applicable legislation. We protect the data and process it in a correct manner. We want you to be aware of how we use your personal data and the rights that you possess.

1. What is personal data?

Personal data is all information that directly or indirectly can be connected to you as a natural person. Examples of personal data are names, personal identity numbers, location data, e-mail addresses, images, audio recordings or IP addresses.

2. The collection and types of personal data

Personal data can be collected in different ways and for different purposes depending on the relationship that you have with SEK. The types of personal data that SEK processes are:

Identifying information

Names and personal identity numbers from a copy of a passport, driving license or similar identification document.

Contact details

Addresses, countries of residency, telephone numbers and e-mail addresses.

Data that is required by law

For example, know your customer (KYC) details in connection with measures to prevent money laundering and the financing of terrorism or in connection with audio recordings from business-related telephone calls.

Technical data when visiting our website

For example, IP addresses.

Recruitment data

For example, education, work history and test results.

3. Processing of personal data

We use your personal data to fulfill legal and contractual obligations, or based on the balance of interests or your consent.

The purpose and the legal grounds for processing your personal data and the storage period can vary depending on whether you are representing an existing or prospective customer, an interested party, a newsletter subscriber or other type of counterparty, a supplier, or if you are applying for employment at SEK.

Customer, or other type of interested party, subscriber or other counterparty relationship

SEK processes identifying information, contact details and data that is required by law. The data is stored in accordance with legislative requirements. Legal grounds encompass agreements, legal obligations and the balancing of interests.

Why do we process your personal data?

We process your personal data in order to:

• contact you
• provide our services
• meet our contractual obligations
• comply with legal requirements
• carry out identity controls
• maintain contact and process contact details

Who has access to your personal data?

Those who can come into contact with your personal data are, for example, SEK’s business functions such as account managers, back office and system and IT operations suppliers.

How long is your personal data stored?

We do not store personal data for longer than is necessary. We follow the prevailing legislation including the Accounting Act, Swedish Companies Act, Securities Market Act, the Act on Measures against Money Laundering and Terrorist Financing concerning accounting and screening. Accounting information such as agreements, important correspondence, decision protocols, permits, corporate mortgage notes, mortgage deeds, stock certificates, payment orders and promissory notes are saved for seven years as a general rule. In certain cases, it is necessary to store data for a longer time, for example as result of rules on periods of limitation, but for no longer than ten years. For accounting information that covers a longer period than one fiscal year, such as agreements or systems documentation, the period of archiving is counted from the close of the fiscal year that the information pertains to. This means that the period of archiving is first counted from the year following the termination of a valid agreement regardless of the length of the agreement. If you are, for example, a subscriber to our newsletter, we will process your information in order to contact you when sending out our newsletter, as long as you wish us to do so. Should you be an interested party and require information about our business, we kindly ask you to submit your contact information to us via our online interest form. The information you provide via our online interest form is processed in order to be able to contact you with a relevant offer suited for your particular company. In the event that we enter into an agreement with your company, your information is stored in accordance with the above-mentioned legal requirements regarding customer relationships, otherwise your information is stored for a maximum of 365 calendar days, before it is deleted.

Supplier relations

SEK handles identifying information, contact details and data that is required by law or in accordance with the guidelines for state-owned companies. The data is stored in accordance with legislative requirements. Legal grounds encompass agreements, legal obligations and the balancing of interests.

Why do we process your personal data?

We process your personal data to:

• meet our contractual obligations
• comply with legal requirements
• carry out identity controls
• maintain contact and process contact details

Who has access to your personal data?

Those who can come into contact with your personal data are, for example, SEK’s purchasing functions, the financial department and system and IT operations suppliers.

How long is your personal data stored?

We do not store personal data for longer than what is necessary. We follow the prevailing legislation concerning accounting and screening. For example, an invoice or a receipt must be processed in accordance with the Accounting Act, which means that it is stored for seven years following the calendar year in which the fiscal year closed. In certain cases, it can be necessary to store data for a longer time, for example as result of rules on periods of limitation or tax regulations, but for no longer than ten years.

Relations upon applying for employment

SEK handles identifying information, contact details and other pertinent information such as the candidate’s curriculum vitae. This information is stored for a maximum of two years. Legal grounds encompass the balancing of interests as well as consent.

Why do we process your personal data?

We process your personal data to:

• carry out the process of recruitment for the current position including any tests and background checks
• be able to contact you for other vacant positions in the future, if you give consent to this

Who has access to your personal data?

Those who can come into contact with your personal data are, for example, SEK’s HR department, the managers conducting the recruitment, system and IT operations suppliers, and any suppliers of tests and background checks.

How long is your personal data stored?

We do not store personal data for longer than is necessary. We store your personal data for two years after a recruitment process has been completed. If you have given consent to be contacted for vacant positions, we save your personal data for as long as the consent is valid, but for no longer than two years.

4. Transmission of personal data

SEK never sells your personal data to third parties. However, we may share your personal data to the following recipients:

Data Processor

Such recipients who process personal data on behalf of SEK must always enter into a data processing agreement with us so that SEK is able to ensure that your data is processed correctly and in a secure manner. Examples of such suppliers are companies who handle IT services and recruitment processes on behalf of SEK.

Other recipients

When your personal data is shared with a recipient who is independently responsible for the information (data controller), the data controller’s data protection policy and information about the handling of personal data applies. Examples of such recipients are agencies with whom we are obliged to disclose personal data to in accordance with law, other regulations or decisions by government agencies.

5. Security

We value the importance of security and have taken the technical security measures that have been deemed necessary to protect your personal data from improper access, change and destruction.

6. About cookies

Cookies are used on SEK’s website. Here you can find out why they are used and how you can remove them.

A cookie is a segment of data stored on your computer containing information. Cookies are used to optimize websites and improve user experiences for visitors.

There are two types of cookies:

• A permanent cookie stores a file that remains on the visitor’s computer. The file is used to, for example, facilitate your use of the website based on your own wishes and interests.
• A session cookie is temporarily stored in the computer memory of a visitor during the time that they are accessing the website, and disappears as soon as the browser is closed.

If you do not accept the use of cookies, you may deactivate cookies via Cookie settings.

7. Your rights

In accordance with the data protection legislation, you are granted certain rights. If you wish to exercise any of your rights or believe that our processing of your personal data is not in accordance with the data protection legislation, you can contact us via the contact details presented in the following section.

Access to your personal data

You have the right to receive confirmation if we have processed your personal data and an extract of which data has been processed.

Request correction

You have the right to have incorrect data corrected.

Request to have data deleted

You have the right to request to have your data removed in certain circumstances.

Object to processing

You have the right to object to the processing of your personal data or request that the processing is limited.

You also have the right to complain to the Swedish Authority for Privacy Protection (IMY) which is the supervisory authority as well as to bring an action for damages in a general court of law.

Contact details for IMY

Telephone: +46 8 657 61 00
E-mail address: imy@imy.se

If you wish to find out more about data protection legislation and your rights, you can read more here.

8. Privacy policies of other websites

Our website contains links to other websites. Our guidelines apply only to our website, so if you click on a link to another website, you should read their privacy guidelines or policy.

9. Changes to our guidelines

We keep our guidelines under regular review and places any updates on this website. Last update: September 2020.

10. Contact

If you have questions concerning SEK’s treatment of your personal data, contact the Data Protection Officer on e-mail address dataprotectionofficer@sek.se or via telephone: +46 8 613 83 00.

If you wish to find out which of your personal data that we process, please send a written, signed request in which you state your wishes and registered address, as well as including a certified copy of your ID to:

AB Svensk Exportkredit
Data Protection Officer
P.O. Box 194
SE-101 23 Stockholm, Sweden