Choose Language

New regulations regarding protection in the processing of personal data 

On May 25th 2018, new rules for processing personal data will come into effect - the EU General Data Protection Regulation (GDPR) (2016/679). The regulation will have the force of law within all EU member states and, inter alia, aims to strengthen the citizens' fundamental rights by giving the persons whose personal data are processed, that is, those who are registered, control of the use of their personal data. For example, a registered person may be someone who has or intends to enter into a contract with Solid Insurance, such as a customer, for example. The General Data Protection Regulation and a supplementary Swedish act, the Data Protection Act, supersede the Swedish Personal Data Act, usually shortened PuL.

The General Data Protection Regulation gives the individual a greater right to decide on our personal data and includes rules on processing of personal data. It also contains rules regarding, for example, the right to information and access to personal data, rules on correction of inaccurate personal data and the ability to limit processing of personal data in some cases.

Much in the General Data Protection Regulation is similar to the rules contained in the Personal Data Act. An important part of the improved protection for individuals is that higher demands are placed on the Data Controllers, that is, all companies and organizations that process personal data in terms of information to registered persons. Solid Insurance has appointed a Data Protection Officer dedicated to monitor issues regarding data protection and that the company follow the restrictions put up by the EU General Data Protection Regulation.

Collecting personal data

The personal information that Solid Insurance collects about you is handled in a responsible manner with regard to your integrity. Solid Insurance deals with the personal information provided in connection with the conclusion of an agreement or otherwise registered in connection with the administration of a contract. Solid Insurance can also, for example, record phone calls and save email communications.

The purpose of protection in processing of personal data

Solid Insurance processes personal data for the purposes stated below in this section.

Preparation and administration of contracts (fulfillment of the agreement)

The main purpose of Solid Insurance processing of personal data is to collect, check and record personal data before entering into a contract with you and also to document, administer and perform contracts concluded. Providing personal information is a prerequisite for Solid Insurance to enter into a contract with you.

Fulfilment of obligations according to law, other regulations or official decisions

In connection with the paragraph above (Preparation and administration of contracts), data is also processed to enable Solid Insurance to fulfil its obligations according to law, other regulations or official decisions. Examples of such processing include processing personal data to fulfil requirements in accordance with for an example the accounting legislation.

Market and client analyses

Personal data is also processed within the framework of market and customer analyses that constitute supporting information for marketing and business development aimed at improving the company’s products and services towards the costumers.

Personal data can also be treated as a basis for marketing. When processing is for marketing purposes, profiling may also occur to target custom offers to you as a customer. Profiling refers to the automatic processing of personal data

used to assess certain personal characteristics of a physical person, in particular for the purpose of analyzing or forecasting, for example, its economic situation, personal preferences, interests and place of residence.

Times under which personal data is stored

Solid Insurance only saves personal information for as long as it is needed. Personal data necessary to fulfill our obligations will be saved for the time we need to fulfill our agreement with you. The information may also be stored in accordance with current legislation regarding accounting.

Processing of personal data by parties other than Solid Insurance

Personal data may be processed for the purposes stated above by companies in the same group of companies as Solid Insurance and by companies with which Solid Insurance cooperates to perform its services. The legal basis for such processing is Solid Insurance’s performance of a contract or the protection of the company’s legitimate interests.

Transfer to third countries

In certain cases Solid Insurance will transfer personal data to countries outside the EU/EEA (‘third countries’) and also to international organizations. In such cases, Solid Insurance will take appropriate safeguards to ensure that your personal data is processed securely and with an adequate level of protection comparable with and at the same level offered within the EU/EEA.

Customer Rights

Below we describe the most important rights that the General Data Protection Regulation provides to you who are a Solid Insurance customer or for any reason are registered with us.

Registry extract 

As a customer of Solid Insurance, you, as in the past, have the right to obtain information about which personal data the company is processing about you (extract of personal data). A novelty is that a request for such information can be made in writing by ordinary mail but also in another ways, for example electronically. A prerequisite for receiving an extraction of personal data is, as before, that the company can identify you safely so that unauthorized persons are not given the opportunity to access your data.

Data portability

Another news is that you can also request an electronic copy of the information that shows which personal data you have provided Solid Insurance and which the company processes electronically. You are able to request that the data will be transferred to another personally responsible person, when technically possible. Such a request for data portability is done in the same way as a request for registry extracts and, as in this case, it is necessary that Solid Insurance can identify you safely so that unauthorized persons are not given the opportunity to access personal data.

Right to rectification

You are entitled to get incorrect personal information about yourself corrected and also to supplement personal information if these are incomplete.

Right to be deleted ("the right to be forgotten")

The General Data Protection Regulation contains a right for you to, under certain conditions, delete your personal information when they are no longer necessary for the purpose they have collected. However, in some cases another legislation prevents the company from accidentally deleting data immediately. Solid Insurance is required to save some

of your personal information for a certain period of time in order to comply with legislation, for example, accounting or for statute of limitation.

Blocking direct marketing

You can contact Solid Insurance to request a block of direct marketing (‘block of direct advertising’).

If you have any questions, feel free to contact us at

You can also read about the Data Protection Ordinance on the Swedish Data Inspection website.

Sverige: Personuppgiftsbehandling

Norge: Behandling av personopplysninger

Danmark: Behandling af personoplysninger

Finland: Henkilötietojen käsittely – Personuppgiftsbehandling