Personal data at VTI

If your personal data features in our systems, it is important to us that you feel comfortable with our processing. We are continuously working to ensure a secure processing of all personal data.

Responsibility

As part of our activities, VTI will sometimes have access to personal data, for example when conducting studies involving research subjects. In these contexts, VTI is acting either as a controller or as a processor of personal data, and we are responsible for ensuring that your personal data are processed in accordance with applicable legislation.

The legal grounds for processing of personal data

Processing of personal data must be supported by applicable privacy regulations. In order for VTI's data processing to be legal, it must be necessary in order to comply with an agreement with you or to fulfil legal obligations or; it must be necessary in order to protect interests that are of fundamental importance for the data subject or another natural person or; it must be necessary in order to carry out an assignment in the public interest or for the exercise of public authority. Personal data may also be processed after you have given consent, for example as a research subject or subscriber to a newsletter.

All processing must be listed in a register. This allows VTI to systematically verify that the processing is carried out on legal grounds. VTI will only collect and process personal data that are relevant to the stated purposes.

Your rights

As a private individual, you have the right to request the following:

  • information about what personal data VTI has regarding you in its systems,
  • information on VTI's processing of your personal data,
  • information on whether personal data has been transferred to a third country,
  • correction and erasure of your personal data,
  • other objections against processing of your personal data,
  • limitation of VTI's processing of your personal data, and
  • transfer of personal data (data portability).

If you submit a request according to the above, VTI will investigate and then notify you whether it is possible to comply with your wishes.

Requests are sent by e-mail to vti@vti.se or by post to:

VTI, Statens väg- och transportforskningsinstitut
581 95 Linköping

VTI's contact page

Consent for processing of personal data

If you have given VTI consent to process your personal data, you also have the right to withdraw this consent. Withdrawing your consent does not affect the legality of processing that occurred before the consent was revoked.

How do I withdraw my consent?

To withdraw your consent, you should primarily contact the project manager of the study you participated in. If you do not have the project manager's contact information, you can instead send your withdrawal to vti@vti.se. Indicate the study you participated in and your name.

VTI's processing of personal data

Visiting our website vti.se – How we track website activity

During the period November 19, 2020, to March 2, 2021, Google Analytics was used on the website vti.se. On February 19 it came to our attention that the users IP addresses were not anonymised. We took immediate action to correct this. On March 2 we decided to remove all connections with Google Analytics.

Since May 2021, we are using the web analytics tool Vizzit. Vizzit stores all data in Sweden and does not sell or share information with third parties. Vizzit's method of collecting data makes visitors completely anonymous. The data cannot be tracked back to individuals, either individually or in combination with other data. IP addresses are used in the process but are not stored in any database. A Vizzit cookie consist of a randomized series of characters, therefore it cannot be linked to an individual.

GDPR-compliant tools for web analytics and maintenance (vizzit.se) External link.

Ordering reports, information material, newsletters and subscriptions

As a government agency, VTI is to provide service and information about our activities, and our mission also includes contributing to the continuous improvement of knowledge within the transport sector. This work requires the use of various information channels.

Personal data (name, address and e-mail) provided for a subscription or when ordering information material will only be saved for as long as you subscribe or for as long as it takes to send your order. You can cancel your subscription of the newsletter at any time using the link in the latest newsletter, and you can cancel your subscription to VTI aktuellt using a form on the website vti.se. If you want to update your address, e-mail vtiaktuellt@vti.se.

Signing up for courses, seminars and conferences

Information provided by you or by a third person in conjunction with VTI's conferences will be used and saved in order to administrate and hold the conference. Such information is also used to provide you with information about the current and upcoming conferences. Recipients of this information are VTI and VTI's conference organisers.

The above is also applicable to other events and courses offered by VTI.

Library

The library processes personal data that is necessary for the administration of loans and reservations of material in the library's borrower register. The personal data processed is name, address, e-mail address and telephone number. If the borrower has been inactive for the past 12 months, personal data, stored in the library's borrower register, will be deleted at year-end.

Customer surveys

In order to be able to conduct customer surveys, VTI uses personal data (name and contact details) belonging to our principals and customers. VTI considers there to be a public interest in following up on completed assignments. The recipients of the personal data are VTI and, where applicable, service providers engaged for the collection and processing of data from the customer survey.

Pictures and film

Among other things, pictures and film are used to inform about VTI's activities. VTI uses a variety of digital information channels, such as websites, newsletters and social media. When a person appears in a picture or film, VTI, as the data controller, will process certain personal data relating to the person. The personal data that VTI processes in connection with pictures and film are name, image and voice. Pictures and films are posted to VTI's media bank and tagged with the name of the person or people involved.

VTI processes the data on the grounds of public interest. VTI may allow the media or other external partners to use VTI’s pictures and films for news reporting or communication purposes.

Information containing personal data that shall be retained pursuant to the Archives Act (1990:782) or other irrevocable provisions is deleted to the extent that the applicable law allows. Otherwise, personal data will be deleted when it is out of date.

Commercial use of pictures

In its capacity as a public authority, VTI provides information about its activities. Much of the information that VTI produces is therefore to be regarded as social information without commercial elements. However, linked to research and development, VTI offers goods, services and other benefits in a more commercial context. If a person's name, image or other information that may lead to identification of the person is used in commercial contexts, it is a requirement that VTI has previously obtained the consent of the person in question, pursuant to the Act (1978:800) on names and images in advertising.

Social media

In order to be able to disseminate information about our activities and reach new target groups, VTI processes personal data about employees and other persons in areas that are relevant for VTI. The personal data processed is name, image and voice. VTI processes the data on the grounds of public interest. The data is published on our social media channels and deleted when out of date.

Storage and deletion of personal data

Personal data is regularly deleted and anonymised. The personal data collected by VTI is processed for various purposes and therefore saved for varying periods of time, depending on their use and on legal obligations. However, personal data will not be saved for longer than what is necessary to fulfil the purpose for which it is being processed.

Personal data contained in information that must be saved in accordance with the Archives Act (1990:782) or other legislation will be deleted to the extent set out in such legislation. Other information where your personal data may appear is deleted in accordance with VTI's screening procedures.

Disclosure of personal data

VTI may come to disclose your personal data to a third party, provided that we are obligated to do so by law or by agreement with any of our partners, consultants or clients. If your data is transferred to a third country, appropriate protective measures are taken and documented in the project to which the personal data is attributable.

Complaints to the Swedish Authority for Privacy Protection

You have the right to contact the supervisory authority, which is the Swedish Authority for Privacy Protection, if you wish to make a complaint concerning VTI's processing of personal data.

Swedish Authority for Privacy Protection:s website External link.

Data Protection Officer

You are also entitled to contact VTI's Data Protection Officer. Send an e-mail to: dataskyddsombud@vti.se

Principle of public access to official records

VTI is a government agency. Messages sent to us automatically become official documents and as such, they can be disclosed in accordance with the principle of public access to official records.


Last updated: