Information about how LKAB handles personal data
Luossavaara-Kiirunavaara AB (publ) abbreviated to LKAB (here called "LKAB", "we", "us" or "our") is the personal data controller for you personal data. It is of utmost importance to us that your integrity is protected when you use our services. Here you will find information about what personal data we collect about you, why we collect it and how we use it. If you have any questions, please feel free to contact us via the contact details in the text below.
The personal data collected is processed according to the General Data Protection Regulation, also known as the GDPR. The regulation regulates the handling/processing of personal data for all companies and organisations that process personal data.
Identity and contact details of the personal data controller
LKAB's parent company is personal data controller for all personal data processed within the framework of a job application and the personal data needed on, during and after an employment in the Swedish companies that are part of the group. LKAB determines the purpose for each of these processing instances.. LKAB's websites mainly process personal data when handling questions and in administering access applications and subscriptions.
Contact details can be found under Contact at the top of the menu.
For questions about personal data processing, you can contact the GDPR coordinator via the e-mail address GDPR@lkab.com.
Personal data that is collected
From you as a jobseeker
According to the Discrimination Act, we must save all your application documents for two years after the date of commencement of the position. If you do not explicitly wish the data to be stored any longer, the data will be deleted. If you have applied for several jobs, the time runs from the position most recently applied for.
As an applicant you are responsible for the accuracy of the information provided to us in the application.
From you as an employee
We process the personal data that must be provided to us to enable us to fulfil our obligations as an employer. We need contact details such as name, address and telephone number in order to be able to send information and to be able to reach you if necessary. Bank details are required in order to pay salary. Personal ID numbers are used to correctly pay taxes and correctly identify an individual in other contacts with authorities where personal ID numbers are identification keys.
Other information at individual level during an employment is collected and used to determine what competence a person has acquired, where a person is found within the organisation, which agreement area the person belongs to and who the immediate manager is.
In a number of locations, camera surveillance is performed: within industrial sites and facilities and at strategic barriers and passages to and from them. In some cases, a few people and vehicles in public places can be filmed, i.e. directly outside the industrial area or facility in question.
From you as a contractor
As a contractor, you can find a description of our personal data processing procedures in the Supplier Handbook.
Purpose and period of storage
We process your personal data for the following administrative purposes and human resources matters:
To create a basis of information with a job application.
If the applicant is appointed, personal data is added to our HR system in order for LKAB to be able to manage its obligations as an employer and identify the individual in terms of competence and organisation.
We also process personal data in connection with applications for access to industrial areas/mines/facilities:
A registered, complete and approved authorisation application is a requirement for access to LKAB's facilities. This covers entry cards, keys and underground tags. Applications apply to persons and vehicles. You register the data yourself, and this includes the personal data we need for specified purposes.
The purpose of camera surveillance is to monitor production processes in industrial areas and facilities and to monitor strategic barriers and passages so as to facilitate entry and exit for vehicles and people.
Laws and agreements largely govern the storage of personal data during and after employment. Extended storage times are required for e.g. pension investigations or future occupational injury investigations that also require historical data to be stored for former employees.
Recorded material is not kept longer than is necessary to fulfil the purpose of the surveillance.
Legal grounds for the processing
We process your personal data on the basis of one of the following legal grounds:
Your personal data is processed about you as an employee. This processing is necessary for LKAB to comply with a contract of employment that has been entered into with you and such contractual arrangements as pension agreements, salary revision etc. Your personal data may therefore be processed in administrative HR systems.
Legal obligation is used as the legal grounds for the processing of personal data with regard to tax payment, health insurance etc. Another example is labour legislation such as the Employment Protection Act, the Holidays Act, the Working Hours Act and the Discrimination Act.
The legal grounds for camera surveillance is the balance of interests. LKAB's needs and interests in monitoring are considered to outweigh the interest of protecting personal integrity.
You have applied for authorisation from LKAB and have been granted this. In this case, processing of your personal data refers to the purpose of LKAB's legitimate interest in access protection and confidentiality.
Consent is only used exceptionally, e.g. if LKAB needs to publish photographs of employees on the website.
Recipients of personal data internally and externally
We may disclose your personal data to other companies within the group if this is required for administrative purposes.
We may also disclose your personal data to external recipients:
Swedish authorities if it is a requirement.
IT consultants that we engage from time to time to service and develop our systems.
In cases where LKAB transfers or provides access to your personal data to external recipients who process personal data in the capacity of LKAB's personal data processors, a personal data processor agreement with instructions on the processing has been signed with these parties .
You have a number of rights according to the General Data Protection Regulation.
Right of access to your personal data
You have the right to access your personal data and to information on how this is processed. You have the right to request an electronic copy of all personal data that we process about you in a structured, widely used and machine-readable format.
However, the right is limited in cases where data is covered by confidentiality, where the data only exists in unstructured work material, i.e. in current text that has not been finalised when the request was made, where data consists of memos or similar which have not been processed for more than 1 year and if the data cannot be safely identified.
Right of correction
You have the right to request correction of incorrect personal data that is stored by LKAB. As an employee, you have access to parts of your personal data registered in the HR system and can therefore correct them yourself, address and telephone number for example.
If you have applied for work at LKAB, you are responsible for ensuring that the personal information you have entered in the application was correct at the time it was written. This information is not changed by LKAB.
Right to erasure of personal data/right to be forgotten
The right to be forgotten only applies if:
The data is no longer needed for the purposes for which it was collected.
The processing is based on legitimate interest that the data subject contests and that has been determined to be invalid.
The personal data has been unlawfully processed.
As a former employee, you cannot ask to be forgotten if LKAB must retain the personal data in order to comply with a legal obligation. Should the request for deletion be relevant, a dialogue must occur between LKAB as personal data controller and you requesting deletion of personal data.
Right to restriction of processing
Under certain conditions, you have the right to request that the processing of your personal data is restricted. This is valid during the period when other objections are being assessed. Restriction means that LKAB is not allowed to do anything with your personal data other than to continue storing it.
Right to object to the processing
Under certain conditions, you have the right to object to the processing of your personal data. This means that your personal data may no longer be processed unless LKAB can demonstrate that the legal grounds are applicable to the processing.
Right of data portability (the right to have personal data transferred to another company)
Under certain conditions you have the right to have your personal data provided by LKAB in a structured, electronic format so it can be transferred to another personal data controller.
Right to lodge a complaint
If you believe that LKAB has processed your personal data in an incorrect manner, you have the right to lodge a complaint with the Swedish Data Protection Authority.