A tenant-owner association handles a number of personal data and the purpose of this policy is to clarify how the board of Brf Sjukhuset 3 processes your personal information so that you feel secure that the association protects your privacy.

The policy also lets you know what personal information the board has, how the board processes them and why the board has them and under what conditions you can utilize your rights.

As a tenant-owner association, the board has an obligation to comply with the regulations that, among other things, exist in the tenant-owner law, with regard to, for example, the keeping of membership and apartment listings. The Board also needs your personal information in order to fulfill our obligations to you as a member of the tenant-owner association.

The starting point in all processing of personal data is not to process more personal data than is necessary for the purpose and not, except when absolutely necessary, to use privacy sensitive data.

You have the right to get information about what information the Housing Rights Association has about you and provided that there is no legal basis for the association to save the data, you are also entitled to have the data deleted.

What personal data does the Board process? The housing association only processes personal data when there is a legal basis, ie. when the association needs the personal information to fulfill obligations in law or contract, or if there is an explicit consent from you as a member.

Here are examples of personal data the association processes:

• Name
• Email
• Phone number
• Social security number
• Apartmentnumber
• Transfer agreements
• lading
• Information on possible alternatively leases
• Information that you yourself register and voluntarily state

Your membership in BRF Sjukhuset 3 forms the basis of the personal data the association processes. In order to be able to approve your application for membership in the association, a transfer document is required. details of your name, social security number and apartment number appear. In most cases, the information comes from the broker who assisted in the transfer.

According to the Housing Law Act, the association is obliged to keep a list of its members with information on, among other things, which apartment the member uses as well as information on current mortgages. The pledging documents are received from the bank where you as a member have taken out a loan, however there is no information on the size or amount of the loan.

If your apartment does not yet have an apartment storage, the association has a queue with information on the name and apartment number, the information comes from the declaration of interest you have submitted to the association yourself.

You as a member have the right to be able to get in touch with the association's board, as well as the board need to be able to reach you with information. Therefore, the association collects information on e-mail addresses and telephone numbers.

You can withdraw your consent at any time for the association to process your personal data, which means that the association must then delete the personal data or obtain a new consent from you. However, deletion of personal data presupposes that the association does not need to process these in order to fulfill obligations under law or contract.

Also keep in mind that withdrawal of consent may mean that the association can no longer fulfill the obligations of the board towards you.

As a member of the BRF Sjukhuset 3 you always have the right to get an extract from the apartment list and can easily see what information the association has registered. You may also consult this policy and you will also receive information on how you can contact us if you have questions or need to submit a request or request relating to your personal data and / or rights.

The association has elaborated procedures and working methods for your personal data to be handled safely. BRF Sjukhuset 3 uses Conzignus Hem and Fastigheter Förvaltning AB ("Conzignus") for the association's management. The guidelines for how Conzignus is allowed to handle personal data on behalf of the association are regulated in a special agreement and the starting point is that only personnel who need the personal data to perform their tasks should have access to them. In the association, only the board of directors has access to your personal information Conzignu's security system is developed to protect to a great extent against intrusion, destruction and other changes that may pose a risk to your privacy.

The Association's starting point is not to disclose your personal information to third parties unless you have consented to it or if it is not necessary to fulfill the association's obligations under law or agreement. In cases where the Board discloses personal data to third parties, this is done in accordance with guidelines established in agreements, which ensure that personal data is processed in a satisfactory manner.

BRF Sjukhuset 3 is responsible for personal data, which means that the association is responsible for how your personal data is processed and that your rights are used.

Danderyd, 2018-05-25
The Board of Directors of BRF Sjukhuset 3