Processing of personal data at OKG
Due to your employment, your participation in OKG's activities or your stay with us at OKG, we need to process personal data about you.
Who is responsible for the processing of your personal data?
OKG Aktiebolag is responsible (data controller) for the processing of the personal data we collect from/about you.
What personal data do we collect and why?
The personal data collected includes, for example, your social security number, name, KID, signature, contact details, information about an approved medical examination and a photograph.
The purpose of processing your personal data is to be able to conduct OKG's operations in a legal and appropriate manner, including through the management of access, identity control, registration of working hours, dosimetry and access control to IT systems.
Your biometric signature and photograph will be used in connection with access.
Due to camera surveillance, you may be included in video recordings.
If you participate in meetings, perform work on OKG's documents or carry out work requiring a work order, personal data about you may appear in running text and in connection with quality assurance of OKG's documents.
Where applicable, you may have your personal data processed in connection with access to rooms, lockers, tools, computers, work clothes, etc.
What is our legal basis for processing your personal data?
The legal basis for our processing is our joint agreement. In several cases, we process the personal data to be able to fulfill the legal obligations we have and in some cases the basis is a balance of interests.
Who may receive/process your personal data?
Your personal data is primarily processed by OKG and group companies within Uniper. Where applicable, OKG transfers personal data about you, together with information about the medical examination carried out for radiological work and the dose you received from us, to a central dose register (CDIS) managed by Ringhals AB.
How long do we process your personal data?
Generally, authorizations and similar data are deleted one month after we have terminated our contractual relationship. Depending on the nature of the processing and our legal obligations, history and logs are kept for traceability purposes for at least 12 months, and in some cases for the lifetime of the plant.
Your rights
You have the right to request information about and rectification or erasure of your personal data. You can also request the restriction of our processing of your personal data. You also have the right to object to our processing of your personal data.
If you want to know what personal data we hold about you, please visit our reception and request an extract from the register. The request is made via a form and is supported by valid photo identification.
If you are dissatisfied with our processing of your personal data, you have the right to lodge a complaint with the Data Protection Authority (IMY), imy@imy.se.
Do you have questions about the processing of your personal data?
You can contact our Data Protection Officer via Unipers switchboard on 0771-765 765 or via dataskyddsombud.sverige@swe.uniper.energy.