Your rights as a user of Ngenic’s services

You have the right to receive information from us about how your personal data is being processed and the purposes of this, in those cases where we are the personal data controllers.

The information below is a summary of how we provide for your rights relating to your personal data in accordance with the General Data Protection Regulation (GDPR).

  • Right to be informed
  • Right to rectification
  • Right to be forgotten
  • Right to restriction (starting on 2018-05-25)
  • Right to data portability (starting on 2018-05-25)
  • Right to object
  • Automated decision making
  • Complaints
  • Claim damages

 

Right to be informed

You have the right to request a copy of the personal data from our systems, free of charge. In your request, specify the information that you wish to receive. Contact support@ngenic.se to make such a request.

 

Right to rectification

If you discover that any personal data we store about you is incorrect or missing, you have the right to request that we amend or supplement the information. When this adjustment has been made, we will notify any partners and subcontractors that are also affected by the change.

 

Right to be forgotten

As a customer, you have the right to have your personal data deleted if…

  • … information is no longer required for the purposes for which they were originally collected.
  • … you withdraw your consent relating to information for which there is no other legal basis.
  • … the data is processed for direct marketing purposes and you object to this processing.
  • … you object to a balancing test as a legal basis and there is no other legal basis that weighs more heavily.
  • … personal data has been processed in contravention of the GDPR.
  • … deletion is required to fulfil a legal obligation.

Excepted from the above are personal data that are required by law, e.g. invoicing information that must be retained for a period specified by the Swedish Bookkeeping Act.

When data has been deleted, we also notify any partners or subcontractors that are affected by the adjustment.

 

Right to restriction (starting on 2018-05-25)

In certain cases, you have the right to demand that the processing of your personal data be restricted. Restriction means that the personal data is marked so that it may only be used for certain, restricted uses in the future.

  • When you believe that your personal data with Ngenic is incorrect and have requested an amendment or supplement, you may request restricted processing until the amendment has been investigated.
  • If the processing of your personal data is in breach of the law, but you object to the information being deleted, you may instead request restricted processing.
  • When Ngenic no longer processes personal data for the purposes of processing, but you need them in order to establish a legal claim, make a claim or defend a claim.
  • When you have withdrawn your consent to processing until it has been verified whether Ngenic’s legitimate interest weighs more heavily than your legitimate interests.

When the restriction ends, you shall be informed about this.

 

Right to data portability (starting on 2018-05-25)

In certain cases, you have the right to receive and use your personal data elsewhere.

This applies to…

  • … data that you have provided Ngenic.
  • … collected measurement values and sensor data.

This does not apply when we process your data…

  • … following a balancing test.
  • … as obligated by the law.

Ngenic is obligated to facilitate the transfer of your data.

 

Right to object

You have the right to object to Ngenic’s processing of your personal data if it is processed…

  • … to carry out an act in the public interest.
  • … as part of measures taken by public authorities.
  • … following a balancing test.

If Ngenic objects to your objection, we must be able to present reasons that weigh more heavily than your interests do.

When the objection relates to processing for marketing, you always have the right to object to processing at any time.

 

Complaints

If you believe that we have processed information about you in contravention of applicable legislation, you should report this to our data protection officer immediately. You may also submit your complaint to the Swedish Authority for Privacy Protection.

 

Claim damages

If you have suffered damage as a consequence of your personal data having been processed in contravention of the GDPR, you may be entitled to compensatory damages. In this event, you may send a claim for damages to our data protection officer or raise the claim in court.

 

This page was updated on 2022-01-13.