Your GDPR rights
Last updated: 2026-06-18
Under the EU General Data Protection Regulation (GDPR) and the Swedish Data Protection Act (Dataskyddslagen), you have specific rights over the personal data we hold about you.
Right of access
You can request a copy of all personal data we hold about you, free of charge once per year. Email us and we will deliver the data in a structured, commonly used, machine-readable format within 30 days.
Right to rectification
If any of your personal data is incorrect or incomplete, you can ask us to correct or complete it. You can also update most of your data directly in your account settings.
Right to erasure (right to be forgotten)
You can ask us to delete your personal data. Once deleted, your account is removed and we cannot recover it. Where Swedish law requires us to retain some data (e.g. bookkeeping records for 7 years), we will tell you what we must keep and why.
Right to restrict processing
You can ask us to stop processing your data in certain circumstances (e.g. while you contest its accuracy). We will keep the data but not use it until the restriction is lifted.
Right to data portability
You can request your data in a portable format and ask us to transfer it directly to another provider where technically feasible.
Right to object & withdraw consent
You can withdraw your consent for BankID/Insurely data collection at any time. You can object to processing based on legitimate interests. Withdrawing consent does not affect the lawfulness of processing done before the withdrawal.
Right to complain
If you believe we have mishandled your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY): imy.se
Questions? Contact
privacy@polisone.se