The personal data that SKB collects

When you contact SKB and provide your personal data, we will process it in accordance with applicable laws and our data protection policy. Below we describe the different situations when your personal data are processed by us. Each processing is unique and we only use your personal data for this purpose or these purposes.

Contact information

When you contact us, you need to state your contact details so that we can reply to you; normally, you state your email address or your phone number. Providing your name is optional, the important thing is that we get a contact point to reach you. This information will be deleted immediately after contact with you. This also means that we do not have traceability if you ask us more questions.

Orders

In the case of orders on the page Publications, we will store the data you provide. Your data are used for distribution of any future errata sheets to the publication that you have ordered. The data are only used for this purpose. By making an order, you agree to storage for this purpose.

Visits to us

When visiting us, you need to identify yourself on arrival, as we are required by law to know which persons are in the spaces where we have our activities. The data we register about you are your name, national registration number and place of residence. Your identity is verified by the presentation of valid identification. Without registration and identity checking, you cannot proceed beyond our public spaces.

Prior to your visit, you can register in advance in order to shorten the waiting time at the reception desk while visitor badges are being printed. Such pre-registration has only the purpose of saving time by our processing your personal information in advance, instead of entering everything while you are waiting. A pre-registration is voluntary on your part, and by submitting your personal data you agree that we process your personal data in the time before your visit.

During the visit it is an external supplier that staffs our receptions and processes your personal data. We have signed a separate data processing agreement whereby they guarantee that your personal data are processed only in accordance with our instructions and with current regulations in the Data Protection Regulation GDPR and, where applicable, the Data Protection Act (2018:218).

The day after your visit, your national registration number will be deleted, and after six months your name and place of residence will be deleted

Visits to our nuclear facilities

For visits to our nuclear facilities, we have to conduct a security check with a register check of you in accordance with the provisions of the Security Protection Act (1996:627). The basis for personal data processing with a register check lies with the Swedish Radiation Safety Authority’s regulations and general advice on physical protection of nuclear facilities, SSMFS 2008:12. Without an approved security check, we are prevented from allowing you entry to our facilities.

A security check with a register control is done by you stating your name, national registration number, address, and contact details, which we send on to the relevant authority that performs the check. From the authority, we will receive either an approval or a refusal as to whether you have the right to access the facility.

After your visit to our facility, your personal data are deleted one year after the visit.

Measurement of radiation (dosimeter)

During visits to our facility and in areas where radiation may occur, we apply the Radiation Safety Authority’s regulations on personal radiation protection during operations with ionising radiation in nuclear installations 2008:26. In practice, this means that you have to wear a so-called dosimeter, which is a small device that measures the presence of radiation in the space and is connected to you as a carrier of the dosimeter who is in that space.

To have the dosimeter read, we will send your personal data to our supplier of these services, who will process your personal data including information about possible radiation. These data are considered to be sensitive personal data regarding your health. We have signed a separate data processing agreement with our supplier that ensures that they in a safe and encrypted way only use your personal data according to the requirements of the Swedish Radiation Safety Authority’s regulations. The purpose is to make you aware of events that may affect your health.

The data from individual measurements linked to you as an individual are saved during the year of measurement and then for another calendar year, according to the Swedish Radiation Safety Authority’s regulations. Then your data are deleted.

Press releases

SKB send out press releases through a supplier called Mynewsdesk, where personal data (name and e-mail address) of our recipients are stored. The personal data will only be handled for sending out SKB’s press releases and will not be used for any other purpose.

The purpose of the mailing is for you to be able to read our press releases directly. Our mandate to take care of all radioactive waste means that our press releases contain important civic information that, when weighing interest, gives us a legal basis for processing your e-mail address and, if applicable, your name when we send out press releases.

We save your personal information as long as our operations are in progress and we actively send out press releases. Then your personal information will be automatically deleted. You can unsubscribe at any time from further postings and at the same time have your personal data deleted, by clicking the link “unsubscribe” contained in the press release.

Social Media

SKB is present in social media, where we publish texts and images from various events that we find newsworthy for our operations. Prior to publishing your name and/or an image representing you, we will ask for your consent to the publication. Depending on the situation, such a question may be asked verbally, for instance at an event where the possibility for written consent is limited. You may revoke your consent at any time, and we will then take reasonable steps to remove the disclosure of your personal data. Please note that we can never guarantee that any personal data about you will be deleted in places that we do not manage, for instance, at third parties that have reused our information.

Job application

When you apply for work with us, we have to process your personal data that you submit to us during the application process. An employment here is also subject to an approved safety check and an approved drug test, and for this we need your national registration number and your address. During the employment process, you will receive complete information about which personal data we handle for a future employment.

Cookies

When you use our site, we store so-called cookies on your computer. The information stored is about your use of our site, which pages of our domain you have visited, and how you have accessed our site, for instance from another site. The purpose is to improve your user experience as a visitor so that we can customise the communication to you. Information stored may be technical information about your device, browser version, IP address, and the like. Cookies do not contain data such as name, national registration number, or e-mail address.

If you do not want cookies stored in connection with your visit to our site, you can change your web browser’s settings so that it does not allow cookies.

How to contact us

The controller is Svensk Kärnbränslehantering AB, and you can contact us at personuppgifter@skb.se or +46-8-459 84 00. You are welcome to contact us if you want to know more about how we process your personal data, want a correction, want to be deleted or want to know which personal data we have saved about you.

If you are not satisfied with our processing of your personal data, please contact the Swedish Data Protection Authority.