How we handle your personal data

When you report a fault or use My pages, we need information about you. Here we describe what information that is, what we do with it and what rights you have.

Who is responsible for your data

Myrkotten Fastighetsförvaltning is the data controller. If you have questions about your data, contact us.

What data we store

• Your name, mobile number and email address, if you give one.
• The address and apartment where the fault is.
• Your description of the fault and any photos you upload. Location data in the photos is removed automatically.
• What you tell us about access, for example when you are at home and whether there are pets.
• Your answer on whether the fault is fixed, and your rating if you give one.
• Which text messages and emails we have sent you about the case.

If you have an account on My pages, we also store:

• Your name, email and mobile number, which home you rent and since when.
• If you log in with BankID: an encrypted fingerprint of your personal identity number. It is only used to recognise you when you log in. The number itself is not stored.
• Your lease agreement and your rent invoices, with amount, due date, OCR number and whether the invoice is paid.
• Applications for apartment exchange and subletting, and notices: what you fill in, information about the other party, the subtenant or your spouse or partner, and the documents you upload, for example family certificates, credit reports, rental contracts and pay slips.

Why we store it

We use the data to fix the fault, book a time for a visit and tell you how the case is going. If you are a tenant, we need the data to look after your apartment under the tenancy agreement. If you are not a tenant, for example a neighbour reporting a fault in the stairwell, we rely on our legitimate interest in fixing faults in the building.

We also use the cases to keep track of faults and maintenance in our buildings. This is done without names or contact details.

The information on My pages is needed for us to fulfil the lease agreement with you and to assess your applications under the Swedish Tenancy Act. Information about other people in an application, for example the other party or the subtenant, is processed on the basis of our legitimate interest in being able to assess the application. Please tell them that you are giving us their information.

Who can see your data

• The contractor who takes the job, for example the plumber or electrician. The contractor can only see your name, phone number and access details after accepting the job.
• Our suppliers who process the data on our behalf and only according to our instructions: the web host that runs the portal (Oderland Webbhotell AB, servers in Sweden) and the service that sends text messages (46elks AB, Sweden).
• The AI assistant Claude from the US company Anthropic helps the property management sort and translate reports. It receives the description of the fault but not your name, phone number, email or door code. Anthropic does not keep the text to train its models.

We never sell your data. The description of the fault may be processed by the AI assistant in the USA, protected by the European Commission standard contractual clauses. No other data is passed on to countries outside the EU and EEA.

How long we keep it

Your name, phone number, email address and access details are deleted automatically 24 months after the case is closed. The case itself, meaning the address, the fault and what was done, is kept as maintenance history for the building, but without any link to you. Photos of the fault are kept with the case. If you want them removed, contact us.

Documents and information in an application or notice are deleted six months after the case is closed. Your account on My pages is closed when you move out, and the link to your BankID is removed at the same time. The account itself is deleted three months later. Rent invoices are shown for the last two years.

How we protect your data

Your name, phone number, email address and access details are stored encrypted. Only the people working on the case can see them, and every time someone opens your details, it is logged. The link you get to follow your case is personal and stops working some time after the case is closed. Your lease agreement and the documents in your applications are also stored encrypted, and only you and the property management can open them.

Cookies and storage on your phone

Fault reporting does not use cookies for tracking or statistics, and no analytics services. While you fill in the form, a draft is saved in your browser, so that you do not lose what you have written if something goes wrong. The draft is deleted when your report has been sent. If you choose another language, your choice is saved in a cookie. To protect the form from misuse, we use a scrambled version of your IP address that cannot be traced back to you. The web host keeps technical logs for a short time for operations and security. When you log in to My pages, a cookie is used to keep you logged in. It is removed when you log out, and otherwise when you close the browser, or after two weeks if you chose Remember me. Your language choice is saved with your account.

Your rights

You have the right to

• find out what data we have about you (a copy of your data),
• have incorrect data corrected,
• have your data deleted or restricted,
• object to how we use it,
• get the data you have given us in a format that can be moved elsewhere.

Contact us and we will reply within one month. We may need to check that it is really you, for example by sending the reply to the phone number or email address in the case.

If you think we are handling your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.

If it is an urgent fault, call the emergency line on 08-704 48 80.

Last updated 2026-11-08.

Report a fault