Your rights
The right to be informed
You have the right to receive information on how we process your personal data. We provide information here and in some cases by letter.
When we use legitimate interest as a legal basis for processing your personal data, you have the right to request information about the assessment we have made.
Right to rectification
You have the right to request that we rectify incorrect personal data about you or complete incomplete data.
Right to erasure
In some cases you have the right to have your personal data erased, also known as the “right to be forgotten”. This applies for example to data that is no longer necessary to process or retain for the purpose for which the information was collected, if the data is incorrect or if you withdraw your consent to processing.
We cannot erase your personal data if they are still necessary for the purpose we collected them, if our interest in continuing to process the data outweighs your interest in having them erased or if we are required by law to retain them.
Right to restriction of processing
You have the right to request that we restrict our processing of your personal data if you believe that the data we hold about you is not correct, that our processing is contrary to law or that we do not need the data for a specific purpose.
You can also request that we do not process your data while we are verifying this, or while we are verifying whether you have the right to object to any processing described below
Right to object
You can object to our processing based on legitimate interest under Article 6(1)(f) of the General Data Protection Regulation.
Right to access your personal data
You have the right to request information about how we process your personal data and receive a copy of these, called a register extract. You can order a register extract by logging in to My Pages. You can also order a register extract by contacting us in another way.
We keep a copy of your register extract for five years because we have a legitimate interest in being able to defend a legal claim.
Right to object to automated decision-making
Our automated processes do not change your legal status and are therefore not covered by the prohibition of automated decisions in Article 22 of the General Data Protection Regulation. We are therefore unable to accommodate any objection to such decisions.
Right to withdraw consent
We do not process personal data on the basis of consent.
Right to access and transmit personal data to another recipient (data portability)
It is not technically possible for TFF to transfer personal data to another controller. We are therefore unable to grant a request for data portability.
Right to lodge a complaint
If you have a complaint about our processing of your personal data, you can contact the Swedish Authority for Privacy Protection (IMY).
If you have comments on how we handle your personal data you can contact our data protection officer via email or by calling +46 8 522 782 00.