Handling of personal data

Data subjects, i.e. those whose personal data are processed, can be divided into a number of categories. Below you can read more about the categories of data subjects that we process.

• Visitors to our facilities and offices.
• Our existing customers, potential customers and former customers.
• Stakeholders for energy-related services and products such as solar cells and charging stations. 
• Website visitors and users of digital services.
• Those who interact with us on social media.
• Employees of suppliers, partners, industry colleagues, authorities, property owners and property managers as well as others with whom we have business relationships for various reasons.
• Property owners.
• Candidates for employment, consultancy or internships.
• Anyone who contacts Ellevio for any other reason.

Personal data is any kind of information that can identify a person. This can be information such as name and phone number, but also technical data such as facility numbers and measured values. Here is a list of more detailed information about the categories of data we process for different purposes.

Ellevio collects customer data and links it to plant data when you become a customer with us. As long as you are a customer of ours, we continuously collect information when you use our services, such as information about how much electricity you use and outage statistics. The collection may also occur when you interact with us, such as making a purchase, using our digital services, participating in webinars, events and competitions, or contacting us for various reasons. with your consent, will record telephone calls for training purposes in order to improve our service. If you visit us, you will have to register your visit. Since we have camera surveillance at some of our facilities and offices, image material can also be collected.

Ellevio also collects information from you when you register your interest in employment or internship with us or apply for a position or assignment.  

When you contact us as a representative of a supplier, partner, property owner and authority, or in other cases, your contact details and information that we exchange within the framework of the case will be processed.  

When you interact with us via social media or visit our website, log in to our digital services, we take part of certain information about your use of the services in order to ensure that they work optimally and to follow up on their use.

We also process data about you in connection with you registering an interest in energy-related products and services or indicating that you want to receive newsletters.

We procure and purchase goods and services on a regular basis. In connection with this, your data may be provided to us by others, such as employers or clients, in order for you to be the point of contact for us or deliver the agreed service.

We collect information about you via external information services in order to be able to communicate with you if you are a new resident in a home located within our concession area, if we want/need land for our facilities and you are a property owner or because you are otherwise affected of planned work, such as in the capacity of representative of road communities and the like.

We may also collect information about you

• from credit institutions, property owners and other players in the energy industry to enable relocation and change of electricity supplier.
• Prior to or in connection with a company acquisition or restructuring, disclosure and collection of information takes place between the companies involved in the company acquisition or reorganization, for the continued processing of your data within the framework of the provision of the service that you have agreed on.
• through reference gathering and background checks when you register your interest in employment with us or apply for a position, or in cases where you represent a supplier, authority or partner to us.

When you have taken part in offers through our partners, the supplier will provide information about your purchase within the framework of an agreement between Ellevio Energy Solutions AB and the supplier. This is so that we can follow up on the customer relationship and the effectiveness of the collaboration.

In order to keep address information up to date, it may be updated and supplemented with information from public and private registers, such as the state's personal and address register, SPAR.

We also collect personal data through cookies on our website ellevio.se. Read more about how we handle cookies.

In some cases, we need to share your personal data with other recipients. If we share your personal data, the recipient is generally responsible for handling the data in a secure and correct manner.

Ellevio shares your data with our suppliers in cases where they are to carry out installations and work relating to your facility and follow up on cases and complaints that you have initiated when contacting our customer service. Ellevio may also share your personal data with electricity trading companies. If you choose to connect third-party applications such as your electricity supplier, charging box or similar to your app, Ellevio will share the information that you have then instructed us to share in order for the integration to work.

If you represent a supplier, your contact details may be disclosed to other suppliers and to private individuals in order to enable the implementation of the agreed work. This can include things like booking visits and cancellations and coordinating work between suppliers. If you are a property owner, your contact details and information about your property may be shared with suppliers and contractors.

If you register that you are interested in getting in touch with partners of Ellevio, your data will be passed on to these partners in accordance with your request.

In some cases, Ellevio may share your personal data with other recipients, if it is necessary for the situation. Such a situation may be that we need to comply with legal obligations or to handle and respond to legal claims. Recipients can then be external advisors, authorities, courts, the police and potential buyers or sellers if we were to sell the company or undertake a restructuring of the group. 

Our service providers who provide IT services, customer service, invoicing, credit information and debt collection services are data processors. When we use data processors, we ensure that data processing agreements are drawn up. We may also disclose personal data to printing companies in order to send customer information or newsletters.

In cases where two or more companies within Ellevio are joint data controllers, the companies may share personal data between them. This applies even if one of the companies acts as a personal data processor. This processing is regulated in a data sharing agreement between the companies. Ellevio Sverige AB has the primary responsibility for ensuring that data subjects in this information receive accurate information about the sharing and joint use of personal data that may occur, and that the data is protected in an appropriate manner.

Transfer to suppliers in third countries

Ellevio mainly processes personal data within the EU/EEA. In cases where Ellevio engages suppliers who provide services or conduct their business in countries outside the EU/EEA, we have taken appropriate protective measures to secure the personal data and ensured that transferred personal data is handled in accordance with applicable data protection legislation. For those beneficiaries who are not covered by the European Commission's adequacy decision, we use the Commission's standard contractual clauses.

At Ellevio, we process information about you as a customer in order to provide the best service and ensure the safe delivery of our services. In some cases, there are provisions in the terms of the agreement, in industry practice and in internal rules and business requirements regarding how long the data is stored. It may also be regulated by law how long certain information must be stored and in these cases we cannot delete the information before the time has expired. When assessing how long your information needs to be retained, we also take into account our business needs and financial aspects, data and security classification, system dependencies, and available information erasure technologies.

Visitor registration
Ellevio's companies are joint data controllers for the processing of personal data that takes place in connection with your visit to our facilities and offices.  

When you visit us, you will be asked to register and specify who you are going to visit. When you leave, you will be deregistered. We do this to ensure that everyone has left the building in the event of an evacuation and to protect our facilities and information assets from unauthorized access. We may also use the information if incidents have occurred during your visit.  

Ellevio AB (Publ) is a provider of essential services and shall, in accordance with the Act (2018:1174) on Information Security for Essential and Digital Services, take appropriate and proportionate technical and organisational measures to reduce risks in its operations. Ellevio AB (Publ) is also obliged to prevent unauthorised access to areas, buildings and other facilities or objects where they may gain access to classified information or where security-sensitive activities are otherwise conducted. and prevent adverse effects on such areas, buildings, facilities or objects.

Categories of personal data: 

• Name
• Personal identity number (in case of plant visits)
• Possible organisation
• Telephone number
• Who you visit
• Check-in and check-out time

Legal basis: It is a legitimate interest for us to know who is on our premises. It is also a legal obligation to protect some of our facilities and offices in accordance with the Security Protection Act (2018:585) and the Act (2018:1174) on Information Security for Essential and Digital Services.

Camera surveillance to prevent, detect, or investigate crime
As we conduct socially important and security-classified activities, Ellevio AB (Publ) carries out camera surveillance at certain of our facilities and offices as part of fulfilling the obligations in the Act (2018:1174) on Information Security for Essential and Digital Services and the Security Protection Act (2018:585). This includes environments around our facilities and at entrances. The camera surveillance is done to prevent crime and so that we can investigate what has happened in the event of an incident or criminal activity.  

In the event of an incident, Ellevio's security department will take part of the camera footage in order to be able to transfer the relevant parts to the police authority for further investigation. Material collected may be submitted to authorities for investigation and to safeguard our interests in legal claims. It may also be disclosed to insurance companies if needed in an insurance case. 

Categories of personal data: 

• Imagery 

Legal basis: Legal obligation in accordance with the Security Protection Act (2018:585) and the Act on Information Security for Essential and Digital Services (2018:1174).

To deliver electricity network services
Ellevio AB (Publ) is the data controller for the processing of your personal data that is required to be able to provide electricity network services, including the delivery of electricity, in a safe, efficient and secure manner. We process personal data belonging to previous, existing and new network customers in order to fulfil the electricity network agreements, handle disturbances and remedy faults. We also process personal data to charge for our services.   

Categories of data: 

• Identity data in the form of name, customer number and social security number 
• Contact information in the form of address, e-mail and telephone number 
• Facility ID 
• Consumption of electricity 
• details of your invoices 
• technical information such as information about your installation including fuse size, electricity supplier, meter number, fault and outage history. 
• Information that is handled in the agreement with Ellevio such as subscription type (e.g. Subscription Simple 80-200 A). 

Legal basis: If you are an electricity network customer with us, the personal data is processed on the basis of the agreement you have entered into with us. If you are employed by a corporate customer, your data is processed on the basis of legitimate interest as it is necessary for us to be able to provide the services agreed with your employer/client.  

To enable follow-up and forecasts of your electricity consumption
Ellevio AB (Publ) is the data controller for the processing of your personal data that is required for you to be able to make forecasts regarding your electricity consumption. On My pages and in the app, you can supplement your customer profile yourself to enable forecasts and comparisons with other households regarding your consumption. If you have chosen to activate a third-party integration in the app, your data will be transferred accordingly to partners outside of Ellevio.

Categories of data: 

• Consumption of electricity 
• Information that you voluntarily provide yourself to enable forecasts such as size of household, type of housing, whether you have an electric car, solar panel and charging post. 
• technical information such as information about your installation including fuse size, electricity supplier, meter number, fault and outage history. 
• Information that is handled in the agreement with Ellevio such as subscription type (e.g. Subscription Simple 80-200 A). 

Legal basis: The processing of the information for forecasts of your consumption is based on legitimate interest as it assumes that by registering the voluntary information about your household, you do so with the wish that we will provide such forecasts.  

To build and maintain our electricity grids
Ellevio AB (Publ) is the data controller for the processing of network customers' personal data that takes place in order to strengthen, expand and/or maintain the electricity grid. Your data may therefore be passed on to the suppliers we hire in order for them to be able to communicate with you and carry out the work we commission for them, for example when you have contacted us to report a fault and in connection with a land lease agreement.  

Ellevio AB (Publ) is also the data controller for processing personal data belonging to contact persons at suppliers, authorities and partners in order to carry out orders and follow up work efforts in the field to strengthen, expand and/or maintain the electricity grid. 

Categories of personal data: 

• Identity data in the form of customer number, name and facility ID. 
• Contact information in the form of e-mail, address and telephone number in cases where we need to inform you as a private individual or you as a contact person for a business customer and supplier about upcoming work and projects or fix something in connection with your facility 
• Consumption data  
• technical information such as information about your installation including fuse size, electricity supplier, meter number, fault and outage history. 
• Information that is handled in the agreement with Ellevio such as subscription type (e.g. Subscription Simple 80-200 A). 

Legal basis: The personal data is processed on the basis of the agreement we have entered into with you as a customer. There is a legitimate interest in the processing of contact information for representatives of companies, authorities and partners. There is also a legal obligation under the Electricity Act (1997:857) to build and maintain our electricity networks. 

For statistics and forecasts on the need for electricity deliveries and to report to the relevant authorities
Ellevio AB (Publ) is obliged to continuously measure, follow up, evaluate and anticipate future needs regarding its supply of electricity to its customers in order to monitor load and produce consumption statistics in the electricity grid. Ellevio AB (Publ) processes your data in order to produce such reports and statistics.  

Categories of personal data: 

• Identity data in the form of customer number and facility ID. 
• Consumption data  
• technical information such as information about your installation including fuse size, electricity supplier, meter number, fault and outage history. 
• Information that is handled in the agreement with Ellevio such as subscription type (e.g. Subscription Simple 80-200 A). 

Legal basis:  There is a legal obligation under the Electricity Act (1997:587) to report data, and to make forecasts about future needs for electricity supplies and the need for additional electricity supply in society.

Expression of interest and follow-up
Ellevio Energy Solutions AB is the data controller for the processing of your data in connection with the collection of your expression of interest for energy-related services and products, such as solar cells and charging boxes, via the website and forwarded to the suppliers who provide the services you have requested. The same applies when you as a business customer buy products and services directly from Ellevio Energy Solutions AB. 

Ellevio Energy Solutions AB is also the data controller for such information about your purchase that is provided by the supplier within the framework of an agreement between Ellevio Energy Solutions AB and the supplier in order for Ellevio Energy Solutions AB to be able to follow up on the effectiveness of the collaboration.  

Categories of personal data: 

• Identity information, name, email, telephone number 
• Communication 
• Contact information, address 
• Other information relevant to the product or service you are interested in 
• Feedback about your order from the supplier, which in addition to the above also includes the order number and information about your purchase.  

Legal basis: The processing is based on our legitimate interest when you have requested that we send the data to partners based on your expression of interest. If you are a corporate customer, Ellevio Energy Solutions AB will process your personal data in order to satisfy its legitimate interest in fulfilling the agreement with the company that you represent. 

Marketing
Upon consent for marketing, Ellevio Energy Solutions AB is the data controller and processes personal data in order to be able to provide you with relevant information, news and offers relating to our and our partners' energy solutions. 

Ellevio Energy Solutions AB collects data from Ellevio AB (publ) and uses the following personal data to communicate with you and send you relevant information, news and offers: 

• Name
• E-mail address
• Telephone number
• Customer number
• If you have specified the villa, terraced house, apartment or holiday home, size and year of construction
• If you have specified the main form of heating and any additional heat source
• If you specified solar cells or battery storage
• If you specified how many people live in your household
• If you have indicated the use of household products, such as a washing machine, tumble dryer or dishwasher 
• If you have provided other information, such as a sauna, home spa, pool or heated towel rail
• If you have specified the number and type of vehicle, such as an electric car or hybrid, as well as any charging box or electric bike

Legal basis: The processing of personal data is based on your consent. You can withdraw your consent at any time. 

Marketing and communication targeting businesses
Ellevio Energy Solutions AB processes personal data in order to market, communicate with and contact business customers regarding energy solutions.

Categories of personal data:

• Name
• Title
• Organisational affiliation
• E-mail address
• Telephone number

Legal basis: It is Ellevio's legitimate interest to communicate with corporate customers regarding the company's energy solutions.

Ellevio AB (Publ) processes personal data in order to maintain a professional relationship with our customers through customer service via phone, e-mail or chat. Customer service processes your personal data when you contact us with questions, complain about a product or service, in order to be able to register the complaint or handle a claim. Customer service processes the data in order to be able to answer you, help you with certain matters or forward your case for rectification to someone else. Depending on what your case is about, different personal data will need to be processed. Ellevio AB (Publ) is the data controller for the processing of your data that takes place in order to rectify complained errors, for example to be able to send a service car to fix faults in your facility and then to be able to follow up on the handling. Your data may also be processed in order to register complaints and to communicate with insurance companies regarding claims.

Ellevio Energy Solutions AB is the data controller in cases where you contact us regarding your expression of interest or your purchase of energy-related goods and services.

Categories of personal data:

• Identity data, name and e-mail, including social security number
• Communication we have had with you in the form of emails, notes from calls and any recorded calls
• Contact information in the form of e-mail, address and telephone number
• Purchase information, if any,
• Installation and electricity consumption data
• Order and delivery details
• Image and audio material when conversations are recorded for educational purposes and when we process material processed due to an injury.

Legal basis: Customer service processes personal data as part of helping you sign an electricity network agreement or fulfil the agreement signed with you. For matters that are not related to the agreement, there is a legitimate interest for us to handle your case, complaint or your damage case and answer your questions.

The processing of personal identity numbers is processed when it is necessary with regard to the purpose of the processing.

Any special categories of personal data, e.g. health data, that have emerged in the communication with you, we process if it is necessary to handle and respond to legal claims, or in insurance matters, e.g. to assess the right to compensation in the event of damage.

Ellevio AB (Publ) is the data controller for the processing of personal data in order to send out mailings to you as an online customer. General mailings of information are carried out so that you as a grid customer are aware of Ellevio AB (Publ)'s ongoing projects, energy transition and how you can streamline your consumption as well as other information related to your electricity network agreement. In order for the mailings to be relevant to you, they are adapted to where you live, contract type and amount of consumption, as well as the information you have entered about your household in the app or on the website. The information will be sent by e-mail if you have reported such an address to us, otherwise by letter. We may also send you specific mailings if you are particularly affected by work or changes.

Categories of personal data:

• Identity
• Contact information in the form of address and/or e-mail address if you have provided one
• Information about your housing situation and consumption
• User-generated data, such as information on households registered by the user in the app or via the website, including the type of dwelling, the size of the dwelling, the number of residents, the possession of an electric car, the possession of solar panels, the possession of a charging post.

Legal basis: Specific mailings to you as a customer are made on the basis of your agreement on electricity network services. General, customized mailings are carried out based on our legitimate interest in keeping our customers informed about our business.

If you have signed up for newsletters
Ellevio AB (Publ) provides newsletters and press releases to those who have expressed interest in such mailings.

Ellevio Energy Solutions AB provides newsletters with information and offers on energy-related services and products. The mailings are sent to those who have registered an interest in these.

Categories of personal data:

• Identity data in the form of names
• Contact information in the form of e-mail

Legal basis: Legitimate interest. The processing is intended to satisfy Ellevio's interest in communicating with you and providing tips and recommendations based on the expression of interest you have made yourself.

Evaluate and follow up on the customer relationship
Ellevio AB (Publ) and Ellevio Energy Solutions AB are each data controllers for the processing of personal data that takes place to conduct customer surveys as part of evaluating our customer service.

Categories of personal data: 

• Identity data in the form of names 
• Contact information in the form of e-mail 
• Customer satisfaction information

Legal basis: Legitimate interest. The processing is necessary to satisfy Ellevio's legitimate interest in following up and evaluating its activities

Ellevio organizes webinars, events, competitions and activities that you can choose to participate in. The company responsible for an event is also the data controller for the processing of the data needed, e.g. to register your participation, send out invitations and, in some cases, publish your data in various digital channels. The data may also be processed in order to plan for, carry out and follow up on the activity.

Categories of personal data:

• Image and audio material
• Identity
• Communication
• Contact

Legal basis: The processing is necessary to satisfy Ellevio's legitimate interest in conducting events, competitions and activities.

Ellevio processes personal data in connection with the recruitment of employees, consultants and interns to our business. It is the recruiting company that is responsible for the processing of personal data.  

Personal data is processed in order to: 

• Determine your relevance to the position in question based on your CV and any Linkedin profile 
• Managing contact with candidates. 
• Obtain references and conduct tests and process the results of these. 
• Where applicable, carry out background checks in accordance with the requirements of the Security Protection Act.  
• Keep statistics for audience optimization. 
• Present candidates' profiles for other positions in order to create more job opportunities.  
• Handle any disputes or matters relating to alleged discrimination. 

We collect personal data about you when you make an application through the career site or otherwise add personal data about yourself personally or by using a third party, such as LinkedIn.  

When you register an interest in a position, internship or consultancy assignment with us, or make an unsolicited application, the following information is collected: 

• Name 
• Year of birth
• Contact 
• Photography 
• Your LinkedIn profile 
• CV, cover letter, grades, diplomas, certificates, certificates, e-mail conversations or other material sent to us in connection with the recruitment process.

Legal basis: Legitimate interest for Ellevio to process your application.

If you are a final candidate and participate in interviews and tests
If you are one of the final candidates in the hiring process, we will continue to process information about you. We may then also supplement the documentation in different ways depending on the service in question. We also process information about you that is provided by your referees in connection with reference checks. 

For some services, it is relevant to undergo tests. Your contact information will then be processed in order to be able to send out the test to you. The results of the tests will be analyzed and a dialogue will be held with you about your answers.

As we are a socially important business, we always carry out background checks on all final candidates. The background check includes legal public documents, financial information and company involvement. These may then contain sensitive personal data. You will be informed and give your consent for us to carry out such a check. If you do not give your consent, you will no longer be eligible for the service. If the position in question is placed in a security class, we carry out, in accordance with the Security Protection Act (2018:585,), a security clearance with a register check before employment. If you apply for a position with us that may be placed in military service, you will receive information about it in connection with your employment.

Legal basis: We process this data based on our legitimate interest in ensuring that you are suitable for the position you applied for. For security-class services, it is a legal obligation for us to carry out security clearance. 

At the end of the recruitment process
Once the recruitment procedure has been completed, the new employee will be informed of the continued processing of personal data through Ellevio's internal privacy notice.

Personal data of candidates who have not been selected for the position will be stored for two years in the event of a claim against Ellevio based on discrimination legislation. Ellevio can also keep your application information in order to match you with future jobs. Your consent is required for this.

Legal basis: Legitimate interest for Ellevio to safeguard its interests in the event of legal claims or your consent to be matched with future services. 

If you send an unsolicited application
If your profile is of interest to Ellevio, your application will be saved for 24 months so that we can match it with relevant jobs and be able to contact you.

Categories of personal data: 

• Contact information in the form of name, address, e-mail address and telephone number 
• Any Linkedin profile 
• Other information that you attach to your application, such as CV and qualifications. 

Legal basis: Taking into account the purpose for which you submitted the spontaneous application, we assess that it is a legitimate interest for us to process the data in accordance with the purpose.

If we seek you out
Ellevio may search for you via LinkedIn or contact you at the encouragement of another party to investigate your interest in a position or assignment at Ellevio. If you decline further contact, Ellevio will not continue to process your data.

Categories of personal data:

• Contact information in the form of name and e-mail 
• Linkedin profile 
• Information from our contact with you

Legal basis: We process your data based on our legitimate interest in matching you with the right assignment. Since you are on LinkedIn, which is primarily a network for making business contacts and presenting yourself in your professional role, we assume that you also accept this type of outreach contact. When we receive tips about you from our contacts, we assume that you have an interest in establishing a contact.  

If you are a consultant through a staffing agency
Ellevio hires staffing agencies for certain assignments. For certain positions, the staffing agencies can provide documentation for presenting candidates. The documentation is intended to help us match the right consultant to the assignment. The processing of personal data held by the temporary employment agency is independently responsible for the processing of personal data.   

Categories of personal data: 

• Name, address, telephone number and e-mail 
• Other information that the staffing agency provides about you as a candidate for an assignment, such as your CV and your qualifications. 

Legal basis: We process your data based on our legitimate interest in matching you with the right assignment. Since you are hired by a staffing agency, we assess that it is also in your interest that such matching is carried out.

When we handle statistics on recruitment, it is always done with de-identified data.

Ellevio's companies are joint controllers for the processing of personal data that takes place in connection with your visit to Ellevio's websites.

We use cookies on our websites. Cookies are small text files that are stored in your browser on your device, such as a computer, mobile or tablet, when navigating. We use cookies to facilitate your digital visit to us, provide functionality and to analyse traffic to our website. By doing so, we can improve the user experience on our website for you as a visitor and ensure that the pages function as they should.

Cookies that refer to statistics on user behavior require your consent. Ellevio avoids cookies for marketing purposes as much as possible.

You can refuse the use of non-essential cookies at any time by changing the settings on your device.

More information about which cookies are used on our website can be found here. There you can also change your consent settings. 

Legal basis: It is a legitimate interest for Ellevio to process data that is necessary for the functioning of the website. For cookies where you have given your consent in accordance with the cookie policy, consent is the legal basis for processing the data.  

Investigative and security reasons
Ellevio processes data to manage and protect our systems and services. To protect ourselves from spam attacks and unauthorized use of our services with the help of software robots (automated programs), we use Google's service Recaptcha. The service analyzes the behavior of the visitor. The analysis begins automatically and takes place in the background as soon as the visitor starts using our website.

When you visit our websites, we also use data to ensure that the services work as they should, that you get an optimal user experience without interruptions. When incidents occur, we can use logs to investigate what happened.

Categories of personal data:

• Cookies in accordance with the cookie policy
• IP address
• User Behavior
• Web log containing generated pseudonymized visitor ID, which server you retrieved information from, which page you visited, whether it worked properly, how long it took, which page you came from, browser identifier

Legal basis: It is a legitimate interest for Ellevio to process the data in order to ensure that the services work and to be able to investigate incidents. 

Logging of user behavior to develop the user experience
Ellevio processes personal data to improve your experience of our service and ensure high quality. By analyzing how you and other customers use the service, Ellevio gains insights into which features work well and which can be improved. This helps us to continuously develop and quality assure our services. 

Categories of personal data: 

To conduct the analysis, Ellevio uses Matomo Analytics, which collects personal data including user behavior when you interact with our service. This tool records: 

• IP address (masked, last three digits missing)
• Geographic location (county level)
• Customer number
• User ID
• User Behavior
  • How often you use our service and when
  • Which features you use the most and least
  • How you navigate between different parts of our service and how long you stay on each page

Legal basis: The processing of personal data is based on your consent to improve our digital services, which means that you have the right to withdraw your consent at any time.

Viewing data in digital services
Ellevio AB (publ) is the data controller when you choose to use Ellevio's digital services, where your personal data is processed in order to be able to present customer data such as information about contracts, consumption, interruptions and invoices as well as preferences regarding notifications. 

Categories of personal data:

• User-generated data (see point 2: Household profile analysis for forecasts and insights)
• Location information
• Push notification preferences
• Bank account number
• Billing address
• Electricity trading companies
• Payout amount
• Compensation
• User ID
• Customer number
• Name
• Home address
• E-mail address
• Telephone number
• Choice of communication channel
• Subscription type
• Subscription fee
• Facility's EAN code (GS1)
• Plant Address
• Metering data on electricity use and production
• Meter board ID

Legal basis: The processing is necessary to satisfy our legitimate interest in providing you with access to your data in our digital services.

Household Profile Analysis for Forecasts and Insights
Ellevio AB (publ) processes personal data that the customer fills in to provide better forecasts and insights into consumption and possible production. 

Categories of personal data:  

• Information related to the property
  • If you have specified the villa, terraced house, apartment or holiday home, size and year of construction
  • If you have specified the main form of heating and any additional heat source
  • If you specified solar cells or battery storage
• Information related to the household
  • If you specified how many people live in your household
  • If you have indicated the use of household products such as a washing machine, tumble dryer or dishwasher
  • If you have provided other information such as sauna, home spa, pool or heated towel rail
• Information related to vehicles
  • If you have specified the number and type of vehicle (electric car, hybrid), as well as any charging box or electric bike. 

Legal basis: The processing is necessary to satisfy our legitimate interest in providing you with basic insights and forecasts about your consumption and possible production, in our digital services.  

User access management
Ellevio AB (publ) processes personal data to manage user access to the App and My Pages, including family sharing. This includes creating, updating, and deleting user accounts, as well as managing permissions and security measures.

Family Sharing, at the customer's request, allows persons other than the contractor to access the app and the customer's information.  

Categories of personal data: 

• E-mail address
• User ID
• Login statistics (Login timestamp)

Legal basis: The processing is necessary to satisfy Ellevio's legitimate interest in managing user access and clearing inactive accounts. 

Segmented communication based on household profile
Ellevio AB (publ) processes the following personal data to send information that is adapted to your situation, for example based on whether you have solar cells, an electric car or other specific energy solutions in your household. 

Categories of personal data

• Name
• E-mail address
• Telephone number
• Information related to the property
  • If you have specified the villa, terraced house, apartment or holiday home, size and year of construction
  • If you have specified the main form of heating and any additional heat source
  • If you specified solar cells or battery storage
• Information related to the household
  • If you specified how many people live in your household
  • If you specified the use of household products, such as a washing machine, tumble dryer or dishwasher
  • If you have provided other information such as sauna, home spa, pool or heated towel rail
• Information related to vehicles
  • If you have specified the number and type of vehicle, such as an electric car or hybrid, as well as any charging box or electric bike

Legal basis: The processing of personal data is based on your consent for the purpose of sending relevant and customized information, which means that you have the right to withdraw your consent at any time. 

Logging of user behavior to develop the user experience
Ellevio AB (publ) and Ellevio Energy Solutions AB are joint data controllers for the processing of personal data that is done to improve your experience of our service and ensure high quality. By analyzing how you and other customers use the service, Ellevio gains insights into which features work well and which can be improved. This helps us to continuously develop and quality assure our services. 

Categories of personal data: 

To conduct the analysis, Ellevio uses Matomo Analytics, which collects personal data including user behavior when you interact with our service. This tool records:

• IP address (masked, last three digits missing)
• Geographic location (county level)
• Customer number
• User ID
• User Behavior
  • How often you use our service and when
  • Which features you use the most and least
  • How you navigate between different parts of our service and how long you stay on each page

Legal basis: The processing of personal data is based on your consent to improve our digital services, which means that you have the right to withdraw your consent at any time. 

Logging and monitoring for operations and security
Ellevio AB (publ) processes data to manage and protect our systems and services.

When you use our digital services such as My Pages and Ellevio's app, we use the data to ensure that the services work as they should, that you get an optimal user experience without disruption and to ensure that no one else tries to interfere delivery of digital services. When incidents occur, we can use logs to investigate what happened. 

Categories of personal data:  

• IP address
• Cookies and trackers according to our cookie policy
• Web log data, including which server was retrieved from, which page was visited, functionality, response time, referring source, and browser identifiers
• User ID
• Name and social security number (linked to authentication services such as BankID)
• E-mail address 

Legal basis: It is a legitimate interest for Ellevio to process the data in order to ensure that the services work and to be able to investigate incidents.

Processing of personal data for educational purposes
Ellevio processes personal data for training purposes to ensure that Ellevio's staff and customer service can perform their tasks adequately. 

Categories of personal data:  

• See categories under "Display of data in digital services" 

Legal basis: It is a legitimate interest for Ellevio to process the data for training purposes. 

Transfer of personal data from Ellevio AB (publ) to Ellevio Energy Solutions AB
Ellevio AB has a legitimate interest in transferring personal data from Ellevio AB (publ) to Ellevio Energy Solutions AB. The purpose is to enable customized communication and marketing for customers who have given consent to do so. 

Categories of personal data:  

• Name
• E-mail address
• Telephone number
• Information related to the property
  • If you have specified the villa, terraced house, apartment or holiday home, size and year of construction
  • If you have specified the main form of heating and any additional heat source
  • If you specified solar cells or battery storage
• Information related to the household
  • If you specified how many people live in your household
  • If you have indicated the use of household products such as a washing machine, tumble dryer or dishwasher
  • If you have provided other information such as sauna, home spa, pool or heated towel rail 
• Information related to vehicles
  • If you have specified the number and type of vehicle, such as electric car or hybrid, as well as any charging box or electric bike 

Legal basis: It is a legitimate interest for Ellevio AB (publ) to transfer the personal data to enable Ellevio Energy Solutions AB to send customized information and marketing. It is also Ellevio Energy Solutions AB's legitimate interest to receive the personal data for the same reason.

In connection with your interaction with us via social media, Ellevio's companies are joint data controllers together with the social media for the processing of your data that takes place in connection with you choosing to communicate with us via posts or reactions. Ellevio does not process this data for any purpose other than the interaction itself. The processing of your data that Facebook, Instagram and LinkedIn take based on your interaction with us is not carried out on our behalf. They are independent data controllers for the further processing of your data that they carry out and more information about this accordingly in their separate information notices regarding the processing of personal data.

Legal basis: It is a legitimate interest for Ellevio to communicate via social media.

In connection with purchasing and procurement, during the subsequent contract period and for follow-up
Ellevio AB (Publ) is the data controller for the processing of personal data belonging to contact persons at suppliers and partners in order to carry out orders and follow up work efforts in the field to strengthen, expand and/or maintain the electricity grid and to fix faults in installations and to enable communication and cooperation in accordance with the agreements and understandings that exist between the parties.

Ellevio Sverige AB is the data controller for the processing of personal data belonging to contact persons and suppliers to Ellevio Sverige AB. The data is processed to enable communication and cooperation in accordance with the agreements and agreements that exist between the parties. 

Ellevio Energy Solutions AB is the data controller for the processing of contact information for its business partners and corporate customers of Ellevio Energy Solutions AB. The data is processed to enable communication and cooperation in accordance with the agreements and agreements that exist between the parties.

Categories of personal data: 

• Contact information in the form of name, e-mail, address and telephone number of the workplace
• Information related to the representative's skill
• Information linked to sanction lists

Legal basis: When procurement is carried out by law, there is a legal obligation to process personal data. This also includes checking sanction lists. 

For the processing of contact information for representatives of suppliers, property owners and partners, there is a legitimate interest in enabling communication and cooperation in accordance with the agreements and agreements that exist between the parties.

In connection with communication with property owners and landlords
Ellevio AB (Publ) is the data controller for the processing of personal data belonging to property owners, landlords and their employees for the purpose of enabling communication for confirmation of meter numbers and the like.

Categories of personal data: 

• Contact information in the form of name, e-mail and telephone number

Legal basis: It is a legitimate interest for Ellevio to be able to contact property owners and landlords.  

Dialogue with and reporting to authorities
In connection with Ellevio having a dialogue with authorities for various reasons, contact information for administrators and other relevant actors at the authority may be stored at Ellevio. The data controller for the processing of the data is the company that is the subject of the authority's current case or activity.  

Categories of personal data 

• Work name, email and phone number 

Legal basis: Ellevio has a legal obligation to communicate with authorities when requested and to report certain information to them. 

In connection with expansion, land leases and rights of way
Ellevio AB (Publ) is responsible for the processing of personal data that takes place in connection with land lease agreements and rights of way. 

We process personal data regarding former and current property owners who are affected by upcoming expansion or have signed land lease agreements. The purpose is to be able to contact the property owners for consultation, provide information and make any enquiry and negotiate land tenure agreements.  

Categories of personal data: 

• Contact details in the form of name, e-mail, address, telephone number
• Social security number
• Signature
• Property designation
• Bank and account details for payment in connection with agreements

Legal basis: In the case of land lease agreements, the legal basis for processing the personal data is the performance of the agreement. In the case of rights of way, the data is processed on the basis of the legal obligation that exists in accordance with the Electricity Act (1997:587) to provide a connection within our concession area. We then process the data required to fulfil this obligation. In addition, it is a legitimate interest for Ellevio to process contact information in order to conduct a dialogue with property owners who are affected by expansion.

Ellevio may process personal data in order to be able to respond to legal claims from customers, suppliers and partners. This includes the processing of personal data to register claims and to communicate with insurance companies regarding claims.

Categories of personal data that may be covered depending on the legal claim or claim:

• Images from camera surveillance 
• User-generated data in web and app 
• Identity 
• Contact details including address, telephone number, e-mail 
• Facility ID and electricity consumption, fault report information and troubleshooting 
• Location information 
• Other information about the matter that has emerged in our contacts with you

Legal basis:  The Ellevio company that is subject to any legal claims and claims has a legitimate interest in defending its interests.

Ellevio processes personal data in order to comply with our legal obligations under law, regulation, authority decisions or collective agreements.

Legal basis: Legal obligation under such rules that require the collection or disclosure of certain information. This may apply to requirements for security clearance and background checks in accordance with the Security Protection Act (2018:585) and the Act on Information Security for Essential and Digital Services (2018:1174), the handling of rights requests in accordance with the General Data Protection Regulation, disclosure of information to the Swedish Tax Agency, The Swedish Social Insurance Agency and trade unions in accordance with the obligations incumbent on employers under legislation and collective agreements, disclosure of information in the event of a request in court or from another competent authority such as the police, and the retention of certain information in accordance with accounting legislation.

Ellevio processes personal data in connection with takeovers or sales of businesses or in connection with group changes for the purpose of evaluating the business and administratively preparing the best possible form for the takeover or change.

In the event of restructuring, such as splitting into several different businesses, or if a third party wishes to acquire a company or customer database, we will disclose your personal data to the acquiring company. In such cases, that company will continue to use your personal data for the same purposes as we have stated in this information on the processing of personal data unless you receive other information in connection with the transfer.

Legal basis: It is a legitimate interest for Ellevio to be able to carry out mergers and acquisitions and sales of operations and restructuring.

The information about your rights applies regardless of which relationship you have with which, or which, companies within Ellevio. 

Right to receive information about what personal data we process 
You have the right to receive information free of charge about which of your personal data we process, a so-called register extract. A request for a register extract must be made in writing and must be signed by you. You are welcome to specify the categories of personal data you wish to have access to. We only disclose personal data that we know with certainty belongs to you. Please send your request to the address below. Mark the envelope "Registry extract".

Ellevio Sverige AB 
Personal data 
Box 242 07 
115 53 Stockholm

The register extract will be sent to your registered address. You can also choose to come to our reception and, after identification, pick up the register extract after requesting it in writing.

Right to rectification
We are responsible for ensuring that the personal data we process about you is correct and up-to-date. If we have incorrect personal data, you have the right to request that it be corrected. You have the right to supplement with personal data that you believe is missing but that you think is relevant with regard to the purpose or matter.

Right to erasure
If you no longer want us to process your personal data, you have the right to have your data deleted. However, when the personal data is needed to, for example, fulfil our legal obligations, meet the requirements of the Electricity Act or the Accounting Act, you have no right to have this data deleted during the time that the processing is necessary to fulfil these obligations.

Right to restriction of processing
In some cases, you have the option of requiring us to limit our processing, i.e. That your personal data is not used for anything other than storage or to defend our legal claims. Restriction may be relevant, for example, in cases where you dispute that the data is correct or that the processing is lawful.

Right to object
When Ellevio processes personal data on the basis of a balancing of interests or out of a public interest, you have the right to object to the processing. In such cases, you need to specify which treatment you object to. In this case, we will reconsider the processing of your data. If Ellevio cannot demonstrate that there are legitimate grounds to continue processing the data, we will cease the processing.

Right to withdraw consent
If we process your personal data after your consent, you have the right to withdraw your consent at any time. We are then not allowed to continue processing the data. In most cases, however, the processing of your data takes place on the basis of another basis, such as the agreement between us or on the basis of a legitimate interest.

Right to data portability
You have the right to have the personal data that you have provided to Ellevio transferred to yourself or another data controller if the legal basis is consent or if the processing has been necessary for the performance of a contract.

Rights in Automated Decision-Making and Profiling
You have the right not to be subject to decisions based solely on automated processing (including profiling) that may have legal effects concerning you or significantly affect you. You also have the right to object to direct marketing. 

Exercise your rights - you can find the request to exercise your rights here!

If you believe that we are processing your personal data in violation of applicable data protection regulations, you should report this to us as soon as possible. You also have the opportunity to contact the Swedish Authority for Privacy Protection.