Data Protection

What is personal data?When you have contact with Vattenfall, personal data, in most cases, is requested and received. The definition of "personal data" refers to all types of direct and indirect information that can be linked to a physical person. Vattenfall is responsible for personal data obtained through The following text describes the terms and conditions that Vattenfall and Vattenfall subsidiaries deem appropriate for handling personal data amongst other things. Further guiding principles can apply in specific cases. The terms and conditions do not encroach on your rights according to law or another legally binding agreement.

Vattenfall's general regulations on personal dataThe general regulations for the handling of personal data is decided by Vattenfall group's management system and is valid for the Vattenfall group as a whole.

The general regulations mean that the Vattenfall Group always handles personal data with respect in terms of personal integrity and that the Vattenfall group strives to handle personal data with the person's expressed permission. Sensitive personal data, such as a person number or social security number, is only used if there is an urgent or important reason to do so. The Vattenfall group divulges personal data to someone or an outside organisation only if it is abundantly clear that legal obligations are obtained.

In addition, the Vattenfall group has its own regulations that correspond with common group rules. The Vattenfall group's national websites can also be regulated to correspond only to a particular country.

The collection of personal can naturally be visited without any personal data or similar information being collected. We only collect information that can be used for the purpose of statistics where the user remains anonymous. An example of such information could be the length of time a user has spent on a website, the time at which the website was accessed, and which pages were visited.

On the other hand, Vattenfall uses so-called cookies when is visited (see below). The user can even leave their own personal data to Vattenfall via the website. In addition, Vattenfall can have access to personal data when someone, for example, gives their information to Vattenfall via letter, e-mail, telephone or through public records obtained by Vattenfall.

When the information is collectedWhen personal data is obtained by the Vattenfall group, the person leaving it receives information on what Vattenfall concern is responsible for the handling of the personal data; for what purpose the personal data has been collected for; and the person leaving personal data will receive other information about safeguarding their rights. If the information is unclear then the person has the right to request a complete overview of the information sent in to the Vattenfall group.
The purpose of collecting personal dataVattenfall only collects personal data for specific purposes. The common goal is usually to execute a service (or similar) that the person as requested. Vattenfall does not handle the personal data a purpose that is incompatible with the original purpose. More detailed information on what purpose the personal data is used for is communicated when the personal data is sent (e.g. through a e-mail or a contract's terms and conditions).
ConsentThe Vattenfall group strives to handle all personal data with the person's consent, which can be revoked later. Vattenfall will in that case not process personal data further or update previously submitted information about the person, unless consent has been given.
MarketingIn cases where personal data can be used for direct marketing (DM), a connection with the personal data collected is stated. Those who oppose the use of personal data for DM is entitled to give written notice thereof to Vattenfall and thereby avoid receiving DM.
In all DM, Vattenfall matches personal data against a register of blocked DM (by mail, e-mail, phone, etc.). Marketing via e-mail is only executed when the person concerned has consented in advance. There is a link in e-mail messages where one can opt out of receiving marketing via email.
The delivery of personal dataPersonal data may be disclosed to another company within the Vattenfall Group or to a partner, for example, to perform the tasks the person has requested. When such disclosure takes place, Vattenfall issue a directive on how the receiving party shall process the personal data and privacy.
 Where disclosure takes place, Vattenfall take into consideration special regulations and laws that govern the distinction between electricity trading companies and electricity network companies (so-called 'unbundling'). This means data can not always be left to another Vattenfall company, even if the person concerned wishes. 
Personal data is normally not disclosed to companies in countries outside the EU or EEA. If this is the case, a special study is made first to make sure legal conditions are met.
SecurityVattenfall takes technical and organisational measures to protect the personal data processed, so that data is not lost, distorted, manipulated or becomes available to unauthorised persons. These measures aim to achieve a level of security that is high enough taking into consideration existing technical possibilities.
PurgingVattenfall does not store personal data longer than necessary. When personal data is no longer needed, they are deleted. This applies, for example, when a question has been answered or where a contractual relationship has ceased and the dealings between parties are settled. However, the information may need to be saved in some special cases, for example, for statistics or accounting purposes.
The right of access to information and rectificationEveryone has the right to request to find out to what extent data about oneself is processed by Vattenfall once a year free of charge. If such personal data exists at Vattenfall, the person concerned may request information on the personal data processed, from where they have been collected, for what purpose, how the data has been processed and to whom the data has been disclosed. Requests for information concerning the processing of personal data must be made in writing by letter and must be signed by the requester to find out their information. Vattenfall sends the answer to the address registered. Everyone has the right to request rectification, blocking or deletion of personal data that are incorrect or processed in contravention of applicable law. Vattenfall is obliged to take such measures.
CookiesVattenfall uses so-called "cookies" so that functions and provides services in the right manner. Click here to read more about how we use cookies
LinksThe information on this page applies to Vattenfall and the website, unless otherwise stated. For further information on personal data processing, etc. in other Vattenfall companies, refer to the respective company and their website
In the cases where a website contains links to other sites within or outside the Vattenfall Group, the personal data is not applicable to such websites. In general Vattenfall is not responsible for the content of such websites.
Changes of the personal data regulationsIf there are changes in the Vattenfall Group's provisions for the handling of personal information, they will be announced on this page. The regulations may, for example, be changed if the law is changed. However, if the personal data processing has been regulated in agreement with the customer, it is not incompatible with law or other legally binding provision until the contractual provisions have been changed.
Contact - personal data representativeEach unit within the Vattenfall group has a personal data representative (or equivalent).
Questions regarding Vattenfall and the Vattenfall Group's processing of personal data may be addressed to any of our personal data representatives, or via the general contact form.At the moment Vattenfall is adjusting the terms and conditions for the handling of personal data in accordance with the new Data Protection Act, GDPR that comes into effect on the 25th of May. If you want to read more on the Data Protection Act go to:

We use cookies in order to improve your experience. By continuing the use of this website, you accept such use of cookies. Click here to read about how you can handle cookies.