Privacy notice

This privacy policy will explain how the municipality process personal data. It also contains information about your rights as a data subject. We have appointed a Data Protection Officer whose main task is to monitor compliance with the General Data Protection Regulation (GDPR).

Personal data is any data that can identify you

‘Personal data’ means any information that can identify you in some way. For example, personal data can be a name, a social security number, contact information, telephone number or an IP address. Pictures and videos is a form of personal data, if it is possible to identify you in the picture/video.

What is processing of personal data?

‘Processing’ means any operation or set of operations which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Who is the controller?

Committees govern the City of Lund. The committee is the controller of your personal data and is ultimately responsible for ensuring that the processing of personal data is legal, secure and correct.

If you have any questions regarding the processing or want access to your personal data, you can contact the personal data controller or data protection officer.

List of committees within the City of Lund

What data do we collect?

The municipality processes personal data in many different circumstances, such as providing social services, handle building permits and so on. In order to handle your errands, the municipality must be able to identify you. We also process personal data within various types of agreements, such as employment, land lease and so on. We also process personal data for statistic and archive purposes.

The municipality has access to a basic register of the municipality's residents. In the basic register, which is the population register of the Swedish Tax Agency (Skatteverket) and the property register of the Land Surveying Authority (Lantmäteriet), we have access to accurate and updated information about the residents of the municipality.

Generally, the municipality processes personal data from individuals who contact the departments. The information generally comes from the data subject. The information can also come from public registers, such as the one mentioned above.

The categories of recipients that the municipality may share personal data with are the following:

  • Internally within the municipality (for example administrators, IT personnel and management).
  • Other authorities such as Statistics Sweden (SCB), Försäkringskassan, the police, the tax authorities or other authorities if we are obliged to do so by law.
  • Suppliers, organizers and performers who perform municipal services.

The use of cookies

We use cookies and similar tracking techniques. The city of Lund use cookies on the website. Cookies are small text files stored on your computer. The files are either temporarily stored for a predetermined time or deleted when you close your browser.

Read more about how we use cookies at

Lawfulness of processing

The City of Lund process personal data in accordance with the data protection legislation. The processing is lawful if it is necessary for the municipality to process the personal data in order to be able to carry out a task in the public interest or as part of the exercise of official authority. Processing may also be necessary due to a legal obligation or to the execution of an agreement. Occasionally, you have given your consent to the processing of your personal data.

How long will we keep your personal data?

We will keep your personal data until the purpose of the processing has been fulfilled. We keep your personal data in accordance with the legal rules that apply to the municipality.

The processing of personal data within the City of Lund usually become official documents. Swedish laws and regulations determine the municipality’s policies on how whether the official documents are archived or sorted out.

If you have questions about this, you should first contact the department that processes your personal data. You can also contact the data protection officer.

Protection of your personal data

All personal data must be processed in a manner that ensures appropriate security of the personal data. The GDPR states high demands on the security regarding processing of personal data. If special categories of personal data is being processed the requirements are extra high. Examples of special categories of personal data includes information concerning health, information that reveals ethnic origin, religious beliefs, trade union membership and so on. Examples on high security requirements could be special logins to operating systems that process personal data or that the data is encrypted.

Where do we store your personal data?

We always strive to store your data within the EU/EEA. We always follow the EU/EU Commission's recommendations on adequate levels of protection and we always sign a Personal Data Processor Agreement with our processor. If we process your personal data outside the EU/EEA, we will let you know.

These are your data protection rights

The City of Lund would like to make sure you are fully aware of all of your data protection rights. You are entitled to the following:

Right of access

You have the right to request for copies of your personal data.

If you want to request a copy of your or your minor children’s personal data, you can use our e-service.

To use the e-service you need a digital ID (also known as BankID). If you do not have a digital ID, you are welcome to request access to your personal data in writing by visiting the municipality at Medborgarcenter. You must be able to verify your identity; therefore, we cannot accept requests via mail or email.

Request for access to personal data

Right to rectification

If you believe that the personal data that concerns you is incorrect or incomplete, you may request that the data to be corrected or supplemented.

Right to object

In some cases, you may have the right to object to the processing of your personal data. If the municipality cannot show that there are compelling, justified reasons for continuing to process the data, the municipality must stop the processing.

Right to restriction of processing

In some cases, you may be entitled to request restriction of processing your personal data. By requesting this you will, at least for a certain period, stop the municipality from using the data other than to, for example, defend legal claims. You can also prevent the authority from deleting the information, for example if you need the information to claim damages.

Right to erasure (‘right to be forgotten’)

In some cases, you may be entitled to have your personal data deleted. Please note that when the municipality needs your personal data to fulfil its legal obligations, the municipality is not entitled to erase the data.

Right to data portability

If the municipality process your personal data to fulfil an agreement, you may be able to obtain personal data relating to you using it elsewhere, for example transferring the data to another personal data controller, also known as ‘data portability’.

The principle of public access to information

Even though we have a high level of protection when we process your personal data, the data are part of the municipality’s official documents. Based on the Swedish principle of public access to information, the City of Lund may have to disclose these documents to individuals or companies. Prior to disclosure, we always carry out a confidentiality test in accordance with the Swedish legislation. The rules of official documents may impose certain restrictions on your data protection rights.

If you want to be anonymous

If you would like to leave a comment or contact us anonymously, you should not provide any personal information, since it will be registered and become an official document.

If you use social media

If you use social media to get in touch with the city of Lund¬, the information you reveal is transferred to third parties (the company or organization that runs the social media, such as Facebook or Twitter). The information may also be made available outside the EU/EEA.

You should never send personal information to us via social media, such as social security numbers or contact information to yourself or anyone else. If confidential information appears in the city of Lund’s social media, we will remove it. This means that the municipality never answers on questions regarding social services or childcare etcetera via social media.

Contact details


Committees govern the City of Lund. The committee is the controller of your personal data and is ultimately responsible for ensuring that the processing of personal data is legal, secure and correct.

List of departments within the City of Lund

Data Protection Officer

Name: Maria Skogh
Phone: 046-359 50 00

If you have a complaint

If you have a complaint about how the city of Lund process your personal data, you should contact the department that processes the data. If you are not satisfied with the action taken, please contact the Data Protection Officer.

If you are still not satisfied with how the city of Lund processes your personal data, you have the right to send a complaint to the supervisory authority: The Swedish Data Protection Authority.

To the website of The Swedish Data Protection Authority


City Office

Postal address: Box 41, 221 00 Lund
Visitors address: Stortorget 7, Lund
Telephone (switchboard): 046-35 50 00