Personal data at PRI for employers

Here you can read about how we process personal data within the PRI group. Everyone who works within the group must process personal data pursuant to applicable legislation. Each company (PRI Pensionsgaranti, PRI Pensionstjänst and PRI Stiftelsetjänst) is responsible for processing taking place legally and correctly. Presently, the processing of personal data is governed by the Personal Data Act (PDA). On 25 May 2018, a new regulatory framework began to apply, the General Data Protection Regulation (GDPR).

PRI Pensionsgaranti

PRI Pensionsgaranti is a mutual non-life insurance company owned by you, our clients. We provide credit insurance for companies’ pension promises using the book reserve method, primarily within the ITP area. This enables companies to make provisions in the balance sheet or to a pension foundation. The pension capital is then used as a long-term form of financing, at the same time as the employees’ retirement pensions are secured. PRI Pensionsgaranti guarantees the pension in the event a company should become insolvent.

In the credit insurance business, PRI Pensionsgaranti has a controller for the personal data which we process.

In addition to providing credit insurance, PRI Pensionsgaranti also calculates client companies’ pension liability in ITP 2 and registers accrued pension entitlements on an individual level. In addition, PRI Pensionsgaranti acts as an agent for the disbursement of ITP 2 pensions through Alecta. The personal data is used in order for us to fulfil our obligations under the ITP agreement in which you, as an employer, have chosen a book reserve method pension scheme. In these cases, personal data is collected from you as employer via Collectum and Alecta. In this case, PRI Pensionsgaranti is also a controller for the personal data we process.

This means that we do not need to enter into a processor agreement with you as employer.

We disclose certain information

Pursuant to law, we are obligated to disclose certain information to, for example, the Swedish Tax Agency. PRI Pensionsgaranti engages certain subcontractors who are processors for the processing they carry out. The subcontractors must also comply with the requirements of the General Data Protection Regulation.

PRI Pensionstjänst

PRI Pensionstjänst manages the administration of occupational pension plans using the book reserve method for you as an employer. We calculate pension liability pursuant to Swedish and international standards and make pension payments.

The processing of personal data takes place as instructed by you as a client and the majority of personal data is collected from you. Thus, PRI Pensionstjänst is considered to be a processor for the personal data we process. However, in cases where we collect data from SPAR, we are a controller for this data. The foregoing applies to data regarding personal ID numbers, names and addresses.

We disclose certain data

Pursuant to law, we are obligated to disclose certain data to, for example, the Swedish Tax Agency. PRI Pensionstjänst engages certain subcontractors who are processors for the processing they carry out. The subcontractors must also comply with the requirements of the General Data Protection Regulation.

PRI Stiftelsetjänst

PRI Stiftelsetjänst forms and administers pension foundations and profit-sharing foundations. In addition, PRI Stiftelsetjänst executes orders for trading in securities as instructed by clients. In the formation and administration of foundations, personal data is processed primarily in connection with formulation of pension commitments, deduction calculations, pension planning, profit-share calculations, preparation of profit-share certificates, disbursements and supporting documentation for tax returns.

The processing of personal data takes place as instructed by you as a client and the majority of personal data is collected from you. Thus, PRI Stiftelsetjänst is considered to be a processor for the personal data we process. However, in cases where we collect data from SPAR, we are a controller for this data. The foregoing applies to data regarding personal ID numbers, names and addresses.

We disclose certain data

Pursuant to law, we are obligated to disclose certain data to, for example, the Swedish Tax Agency. PRI Stiftelsetjänst engages certain subcontractors who are subcontracted processors for the processing they carry out. The subcontractors must also comply with the requirements of the General Data Protection Regulation.

You can read more about the General Data Protection Regulation on the Swedish Data Protection Agency’s webpage.