Bodens Municipality collects personal data when you, for example, submit an application, contact us in a specific matter, or provide feedback.
We also process personal data when you appear in a case that concerns you.

In some cases, we collect data from other authorities or from public registers, where this is permitted by law.

Which processing applies in your specific case is normally explained in the relevant service, form, or e-service.

We process personal data in order to carry out the municipality’s responsibilities, provide services to residents, and comply with legal requirements.

This includes processing personal data in order to:

• exercise official authority, for example by handling cases, making decisions, and issuing permits.
• provide services and welfare services, such as preschool and school, social support, elderly care, and services under the Act concerning Support and Service for Persons with Certain Functional Impairments (LSS).
• plan, follow up, and develop operations, for example through statistics, quality management, patient safety, and work environment management.
• manage contacts with residents and service users, for example through e-services, bookings, and handling feedback and complaints.
• support communication and democratic processes, such as consultations, referrals, and citizen dialogue.
• fulfil legal obligations, such as archiving, case registration, information security, financial accounting, and public procurement.
• promote safety and security, for example through access control, logging, entry control, and camera surveillance.
• manage staff and supplier administration, such as recruitment, payroll, contracts, and training.

Each municipal committee in Bodens Municipality is the data controller for the processing of personal data within its area of responsibility.

This means that the committee that decides why and how personal data is processed is also responsible for ensuring that the processing complies with the General Data Protection Regulation (GDPR) and supplementary Swedish legislation.

Examples of such legislation include the Swedish Data Protection Act and sector-specific laws, such as the Education Act, the Social Services Act, the Planning and Building Act, and the Patient Data Act.

Personal data may be shared with other parties when this is necessary for the municipality to carry out its duties or when required by law.

This means that:

• personal data may be disclosed to other authorities or external parties.
• personal data may be processed by suppliers acting on behalf of the municipality (data processors); in such cases, specific data processing agreements are in place.
• personal data is normally not transferred outside the EU/EEA.

If personal data is transferred outside the EU/EEA, this will only take place to countries that the EU has determined provide an adequate level of data protection.

We retain personal data only for as long as it is necessary for the purpose of the processing or as long as required by law.

Certain documents must be retained permanently in accordance with the Archives Act. Data that does not need to be retained is deleted in accordance with the municipality’s information management plans.

The retention period for your specific case is normally stated in the relevant forms or e-services.