Personal data - Revelop

Information about how we process your personal data

If, for example, you are a tenant in one of our properties, our supplier, or a contact person for one of our investors, we may process some of your personal data. Information on how and why we process your personal data, who we may share this data with, and your rights as a data subject can be found below.

Under each category, we state who the data controller is for each processing activity. Where several companies are stated as the data controller, the companies are independent controllers and thus responsible for their own separate processing of your personal data. The data controller (as listed below) may share data. The processing purpose and the lawful basis for a transfer of data, from one data controller to another, is the same as described below for each processing activity the transfer relates to.

We will ensure that your personal data is protected with us and that the processing is carried out in accordance with applicable laws and regulations and with our internal policies and procedures. We will never sell your personal data to another party and we always endeavour to process your personal data within the EU/EEA. Currently, we do not transfer any personal data outside the EU/EEA.

Customer/tenant

Customer/tenant – a natural person who is a tenant in one of our properties or someone to whom we provide any other service, or someone with whom we conduct discussions regarding entering into a customer/tenant contract.

Your data is primarily provided by you. In some cases, we may supplement this data by obtaining a credit report, for example.

The data controllers for the processing of your personal data are Revelop Asset Management AB (556658-3786) and Revelop Management AB (556745-6420). You can find their contact information at the bottom of this page.

Why do we process your personal data?

Administration of the customer/tenant relationship

Identity data (including personal identity number)
Contact information
Your communication
Information on financial situation

Contract.We are required to process your personal data in order to fulfil our contract with you.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

The data is stored for as long as is required for us to fulfil our obligations and exercise our rights under the contract.

Administration of fault reports

Identity data
Contact information

Contract.The processing is required for us to fulfil our obligations as a landlord.

The data is stored for as long as required to rectify faults in the properties.

Provision and administration of access systems

Identity data
Contact information
Location information

Contract.The processing is required for us to fulfil our obligations as a landlord.

The data is deleted after the end of the contract or when use of the access system is no longer provided for other reasons.

Fulfilment of legal obligations

Identity data (including personal identity number)
Contact information
Information on financial situation

Legal obligation. Processing is required in order for us to fulfil our legal obligations.
The processing of personal identity numbers is necessary in view of the purpose of such processing.

Your personal data is saved for the period necessary in relation to our legal obligations, such as storing accounting material for seven years.

Communication

Identity data
Contact information

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in communicating with you.

As a rule, your data is stored for as long as we deem necessary in order for us to communicate with each other.

Monitoring of statistics

Identity data (including personal identity number)
Contact information
Information on financial situation

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in monitoring and evaluating the business.
The processing of personal identity numbers is necessary in view of the purpose of such processing.

As a rule, generic reports which do not contain any personal data may be stored indefinitely. Reports that contain contract information may be stored for as long as is required for us to monitor and evaluate the business.

With whom may we share your data?

Administration of the supplier relationship

Identity data (including personal identity number)
Contact information
Information on financial situation

Contract. The transfer is necessary in order to fulfil our contract with you.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Service providers

Electronic storage of information

Identity data (including personal identity number)
Contact information
Your communication
Information on financial situation

Legitimate interest. The transfer is necessary in order for us to fulfil our legitimate interest in storing data electronically.
The processing of personal identity numbers is necessary in view of the purpose of such processing.

IT supplier

Contact person for a supplier

Contact person for a supplier – someone who is a contact person for, or works for, one of our existing suppliers, or a supplier with which we are conducting discussions regarding entering into a contract.

Your data is primarily collected from the company you are a contact person for or from you personally. In some cases, we may supplement this data by obtaining a credit report, for example.

The data controllers for the processing of your personal data are Revelop Asset Management AB (556658-3786) and Revelop Management AB (556745-6420). You can find their contact information at the bottom of this page.

Why do we process your personal data?

Administration of the supplier relationship

Identity data
Contact information
Employment-related data

Legitimate interest. We have a legitimate interest in processing personal data to fulfil our obligations and exercise our rights within the context of the supplier contract.

The processing of personal identity numbers is necessary in view of the purpose of such processing

The data is stored for as long as is required for us to fulfil our obligations and exercise our rights under the contract.

Fulfilment of legal obligations

Identity data
Contact information
Employment-related data

Legal obligation. Processing is required in order for us to fulfil our legal obligations.

Your personal data is saved for the period necessary in relation to our legal obligations, such as storing accounting material for seven years.

Communication

Identity data
Contact information

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in communicating with you.

As a rule, your data is stored for as long as we deem necessary in order for us to communicate with each other.

Monitoring of statistics

Identity data
Contact information
Employment-related data

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in monitoring and evaluating the business.

As a rule, generic reports which do not contain any personal data may be stored indefinitely. Reports that contain contract information may be stored for as long as is required for us to monitor and evaluate the business.

Organising events

Identity data
Contact information
Allergy information

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in providing events for our partners.
Consent. Allergy information is processed only based on consent. This processing is necessary for us to ensure your safety.

Your identity data and contact information are stored for the duration of the business relationship. Information collected on the basis of consent is deleted once this consent expires.

With whom may we share your data?

Administration of the supplier relationship

Identity data
Contact information
Employment-related data

Legitimate interest. We have a legitimate interest in transferring personal data to fulfil our obligations and exercise our rights within the context of the supplier contract.

Service providers

Electronic storage of information

Identity data
Contact information
Your communication
Allergy information
Employment-related data

Legitimate interest. The transfer is necessary in order for us to fulfil our legitimate interest in storing data electronically.
Consent. Allergy information is processed only based on consent. This processing is necessary for us to ensure your safety

IT supplier

Investor

Investor – a natural person who has invested in any of our real estate companies, or with whom we are conducting discussions regarding entering into a contract for future investments.

Your data is primarily provided by you. In some cases, we may supplement this data by obtaining a credit report, for example.

The data controllers for the processing of your personal data are Revelop Asset Management AB (556658-3786) and Revelop Management AB (556745-6420). You can find their contact information at the bottom of this page.

Table

Administration of the contractual relationship

Identity data (including personal identity number)
Contact information
Your communication
Information on financial situation

Contract. We are required to process your personal data in order to fulfil our contract with you.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

The data is stored for as long as is required for us to fulfil our obligations and exercise our rights under the contract.

Communication

Identity data
Contact information

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in communicating with you.

As a rule, your data is stored for as long as we deem necessary in order for us to communicate with each other.

Communication

Identity data
Contact information

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in communicating with you.

As a rule, your data is stored for as long as we deem necessary in order for us to communicate with each other.

Fulfilment of legal obligations

Identity data (including personal identity number)
Contact information
Information on financial situation

Legal obligation. Processing is required in order for us to fulfil our legal obligations.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Your personal data is saved for the period necessary according to our legal obligations.

Monitoring of statistics

Identity data (including personal identity number)
Information on financial situation

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in monitoring and evaluating the business.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

As a rule, generic reports which do not contain any personal data may be stored indefinitely. Reports that contain contract information may be stored for as long as is required for us to monitor and evaluate the business.

With whom may we share your data?

Fulfilment of legal obligations

Identity data (including personal identity number)
Contact information
Information on financial circumstances

Legal obligation.

The transfer is required in order for us to fulfil our legal obligations.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Service providers

Electronic storage of information

Identity data (including personal identity number)
Contact information
Your communication
Information on financial situation

Legitimate interest. The transfer is necessary in order for us to fulfil our legitimate interest in storing data electronically.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Consent. Allergy information is processed only based on consent. This processing is necessary for us to ensure your safety.

IT supplier

Contact person for an investor

Contact person for an investor – someone who is, works for, or is a contact person for one of our existing investors, or an investor with which we are conducting discussions regarding entering into a contract.

Your data is primarily collected from the company you are a contact person for or from you personally. In some cases, we may supplement this data by obtaining a credit report, for example.

The data controllers for the processing of your personal data are Revelop Asset Management AB (556658-3786) and Revelop Management AB (556745-6420). You can find their contact information at the bottom of this page.

Why do we process your personal data?

Administration of the contractual relationship

Identity data
Contact information
Your communication

Legitimate interest. We have a legitimate interest in processing personal data to fulfil our obligations and exercise our rights within the context of the investment contract.

The data is stored for as long as is required for us to fulfil our obligations and exercise our rights under the contract.

Communication

Identity data
Contact information

Legitimate interest.Processing is necessary in order for us to fulfil our legitimate interest in communicating with you.

As a rule, your data is stored for as long as we deem necessary in order for us to communicate with each other.

Fulfilment of legal obligations

Identity data (including personal identity number)
Contact information
Employment-related data

Legal obligation. Processing is required in order for us to fulfil our legal obligations.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Your personal data is saved for the period necessary according to our legal obligations.

Organising events

Identity data
Contact information
Allergy information

Legitimate interest. Processing is necessary in order for us to fulfil our legitimate interest in providing events for our partners.
Consent. Allergy information is processed only based on consent. This processing is necessary for us to ensure your safety.

Your identity data and contact information are stored for the duration of the business relationship.

Information collected on the basis of consent is deleted once this consent expires.

With whom may we share your data?

Fulfilment of legal obligations

Identity data (including personal identity number)
Contact information
Employment-related data

Legal obligation.The transfer is required in order for us to fulfil our legal obligations.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Service providers

Electronic storage of information

Identity data (including personal identity number)
Contact information
Your communication
Allergy information
Employment-related data

Legitimate interest. The transfer is necessary in order for us to fulfil our legitimate interest in storing data electronically.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Consent. Allergy information is processed only based on consent. This processing is necessary for us to ensure your safety.

IT supplier

Job applicant

Job applicant – someone who has actively applied to work for us, or with whom we have conducted other forms of discussion relating to entering into a contract of employment.

Your data comes primarily from you through your creating an account in our recruitment system where you enter your personal data. Here, job applicants can update or delete their profile. Once an account is deleted in the recruitment system, we can view only the applications sent to us. These are saved in accordance with the retention period stated below, which is approved by you giving your consent at the time of your application. In addition to the above, information may be provided from recruitment agencies that we enlist. In some cases, we may supplement this data by obtaining information from your specified referees.

The data controller for the processing of your personal data is the recruiting company, i.e. either Revelop Asset Management AB (556658-3786) or Revelop Management AB (556745-6420) is data controller. You can find their contact information at the bottom of this page.

Why do we process your personal data?

Recruitment

Identity data (including personal identity number)
Contact information
Your communication
Imagery
Demographic data
Employment-related data

Contract. Processing is necessary in order for us to enter into a contract with you.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

We always store your data during the recruitment process and delete it after 24 months, unless the process continues.

Future recruitment needs

Identity data (including personal identity number)
Contact information
Your communication
Imagery
Demographic dataEmployment-related data

Consent. With your consent, we may process your data for our future recruitment needs.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Spontaneous applications are generally stored for six months following the consent of the applicant. The data is then deleted automatically unless your consent is renewed

Fulfilment of legal obligations

Identity data (including personal identity number)
Contact information
Your communication
Imagery
Demographic data
Employment-related data

Legal obligation. Processing is required in order for us to fulfil our legal obligations.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Your personal data is saved for the period necessary according to our legal obligations.

With whom may we share your data?

Recruitment

Identity data (including personal identity number)
Contact information
Your communication
Demographic data
Employment-related data

Legitimate interest. The transfer is necessary in order for us to fulfil our legitimate interest in using external assistance for recruitment.

Recruitment agencies

System providers

Recruitment agencies

System providers

Identity data (including personal identity number)
Contact information
Your communication
Imagery
Demographic data
Employment-related data

Consent. With your consent, we may process your data for our future recruitment requirements and share such data with system providers and recruitment agencies.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Recruitment agencies

System providers

Electronic storage of information

Identity data (including personal identity number)
Contact information
Your communication
Imagery
Demographic data
Employment-related data

Legitimate interest. The transfer is necessary in order for us to fulfil our legitimate interest in storing data electronically.

The processing of personal identity numbers is necessary in view of the purpose of such processing.

Employment-related data

IT supplier

Categories of personal data

Below is a description of the different categories of personal data that we may collect and store about you.

Identity data

Data that identifies you as a person

Name, personal identity number, IP address

Imagery

Photographs and motion pictures

Photographs, video productions

Contact information

Information used to contact you

Address, phone number, e-mail address

Communication

Your communication, or communication in which you are mentioned

E-mails, letters, fault reports

Location information

Information about where you have been

Access system logs

Demographic data

Information

Gender, date of birth, study information

Health information

Information related to your health

Allergy information

Employment-related data

Information related to your role

Title, areas of responsibility

Information on financial situation

Information related to your finances

Debts ratio, bank information (including plusgiro and bankgiro), agreement number

Your rights

As a data subject you have certain rights in relation to our processing of your personal data. In addition to your right to information, you also have the right to request an extract of your personal data and the right to have your data corrected. Sometimes we have to process some of your personal data in order for us to fulfil your rights.

You can find detailed information on your rights on the website of the Swedish Data Protection Authority (www.datainspektionen.se).

The right to information
As a data subject, you have the right to certain information regarding our processing of your personal data.

The right to have your data rectified
You have the right to ask us, who process your personal data, to rectify any incorrect data.

The right to restrict processing and the right to deletion
In some circumstances, you can ask us to restrict the processing of your personal data or request to have your data deleted.
If we process your data based on consent, you can revoke your consent at any time. We retain the right to process any information we collected before you revoked your consent.

The right to object to our legitimate interest in processing your personal data
In some cases, we deem our need to process your personal data as being so strong that we have what is known as a legitimate interest. You have a right as a data subject to object to our assessment. If there are legitimate reasons that outweigh your privacy interests, we may and will continue processing despite your being of a different opinion. If not, we will cease processing your data.

The right to data portability
According to the General Data Protection Regulation, in some circumstances you as a data subject have the right to data portability. This means you have the right to receive the personal data we process about you in a structured, machine-readable format. You can find out more about data portability on the Swedish Data Protection Authority’s website.

Automated decision-making and profiling
As a data subject, you have certain rights in relation to automated decision-making and profiling. We do not engage in automated decision-making and do not process your data for profiling purposes.

If you want to get in touch with us
If you have any questions regarding our processing of your personal data or if you want to exercise any of your rights, please get in touch with us. You can find our contact information at the bottom of this page.

Complaints
If you feel we are processing your personal data in violation of the General Data Protection Regulation, you can file a complaint with the Swedish Data Protection Authority.

Contact details

Revelop Asset Management AB
Corporate identity number: 556658-3786
Visiting and postal address: Lästmakargatan 20, SE-111 44, Stockholm, Sweden
Phone: +46 8 678 65 00
E-mail: info@revelop.se
Registered office: Stockholm, Sweden

Revelop Management AB
Corporate identity number: 556745-6420
Visiting and postal address: Lästmakargatan 20, SE-111 44, Stockholm, Sweden
Phone: +46 8 678 65 00
E-mail: info@revelop.se
Registered office: Stockholm, Sweden

About our use of cookies

This information is intended for visitors to and users of www.revelop.se.
We may place cookies on the device you use to visit our website (www.revelop.se). A cookie is a text file stored on your computer or the device you use when visiting a website. Generally, cookies are used to recognise your device when you visit our website again.
We use the Google Analytics software Universal Analytics to collect information on how you use our website. We do this in order to evaluate and develop the website to ensure that it meets our visitors’ needs. We apply IP masking (parts of your IP address are anonymised) so we are unable to identify or track you as a natural person.
Information generated through your use of the website (including anonymised parts of your IP address) may be passed on to and stored by Google on their servers. Google will not associate IP addresses with other data held by Google.
We will temporarily process your IP-address before we anonymise the information (the processing and anonymisation is instantaneous). The processing is necessary in order for us to fulfil our legitimate interest in monitoring website traffic and to enable us to develop the user experience. All the information is anonymised and no further processing nor storage of personal data will occur.

We use cookies for the following purposes:

Monitoring and statistics

_ga (Google Analytics)

Persistent analytics cookies (third party) used to distinguish website users, collect visitor statistics, and improve the user experience.

2 year

Your IP-address is processed and anonymised instantaneously. No information that can identify you as a natural person is stored.

Monitoring and statistics

_gid (Google Analytics)

Persistent analytics cookies (third party) used to distinguish website users, collect visitor statistics, and improve the user experience.

24 hours

Your IP-address is processed and anonymised instantaneously. No information that can identify you as a natural person is stored.

Monitoring and statistics

_gat (Google Analytics)

Persistent analytics cookies (third party) used to distinguish website users, collect visitor statistics, and improve the user experience.

1 minute

Your IP-address is processed and anonymised instantaneously. No information that can identify you as a natural person is stored.

Monitoring and statistics

_gat_UA-67750977-1 (Google Analytics)

Persistent analytics cookies (third party) used to distinguish website users, collect visitor statistics, and improve the user experience.

1 minute

Your IP-address is processed and anonymised instantaneously. No information that can identify you as a natural person is stored.

You can usually change your cookie settings in your browser. For example, you can block cookies in your browser, specify that only certain cookies should be accepted, or specify that cookies should be deleted when you close your browser. Please note that if you choose to block cookies, our website may no longer work properly or you may no longer be able to use all of the website’s features.
PTS (the Swedish Post and Telecom Authority) is the supervisory authority in this area. Find out more on the PTS website.