In short, the general principles for protecting personal data within Sweco are:

1. we are transparent on how we comply with the applicable privacy legislation;
2. we limit the collection and processing of personal data;
3. we process (sensitive) personal data only if the processing has a clear legal ground;
4. we register details about individuals limited to achieving the purpose of the processing;
5. we inform individuals which personal data we collect and how these data will be used;
6. we treat personal data as strictly confidential and take appropriate technical and organizational security measures to protect personal data against loss or unlawful processing;
7. we keep personal data only for as long as necessary to fulfil the purposes for which it was collected or local law requires;
8. if our processing of personal data is likely to pose a high risk to individuals’ rights and freedoms, we will perform a data protection impact assessment and, if necessary, take appropriate security measures;
9. our systems and processes support personal data protection. We document that our systems and processes work as intended,
10. where we outsource processing of personal data we impose contractual obligations to protect these data.

To request for access to personal data (register extract), download this template and send your request to:

Sweco Sverige AB
Box 340 44
100 26 Stockholm
Att. Local Privacy Officer

Read more about Sweco’s Data Privacy Notice