Controller
Neuman Juridik is operated by Retro By Mistake AB, company number 559555-5326. The company is the controller. Oskar Neuman is managing director and editorially responsible.
Contact: kansli@neumanjuridik.com.
What this page covers
It covers email to registrator@neumanjuridik.com and kansli@neumanjuridik.com, receipts, the tip form and files uploaded through a time-limited link. How an incoming message is received is described on When a message is received.
Which data
Do not include more personal data than needed. That applies in particular to information about other people, children, health or criminal offences.
- Your name, email address and what you write in the email or the form.
- Attachments sent by ordinary email.
- The case number and the date of the receipt.
- In the tip form: encrypted text. An email address you leave for the receipt is sent unencrypted only so the receipt can be delivered, and is not stored in the tip record.
- Files sent through the secure link, in encrypted form. Original names and file types are stored encrypted as well.
Why the data is processed
- To receive the message, give it a case number and be able to find it again.
- To send a receipt.
- To assess public interest and, when warranted, follow up.
- To publish journalism and guidance.
- To protect the material technically.
Legal basis
Receiving a message, assigning a case number and sending a receipt is based on legitimate interest under Article 6(1)(f) GDPR: keeping incoming messages in order and confirming that they arrived. You can object to that processing.
Publication for journalistic purposes falls under the exemption in Article 85 GDPR and Chapter 1, Section 7 of the Swedish Data Protection Act (2018:218). Several GDPR rules, including some of your rights, then do not apply to that journalistic processing.
Sensitive data and data on offences that you yourself send in is processed in order to receive and assess the tip. Send that through the encrypted channel, not by ordinary email.
Recipients and processors
Email is received through Amazon SES in the EU (Stockholm) and forwarded to our mail server. A temporary copy is deleted after a successful forward. If forwarding fails, the copy may remain for up to 90 days.
The case number for an email is stored without the message text, so the same receipt is not sent again if delivery is retried.
Encrypted tips and files are stored with Amazon Web Services in the EU (Stockholm), in a private bucket, with case metadata in DynamoDB. Keys are handled in AWS KMS. The server does not see the plaintext of an encrypted tip.
We do not sell the data and we do not use it for advertising.
How long the data is kept
Email in the inboxes is kept while the matter is being assessed and for as long as we need to be able to show what arrived. Published material may remain.
Encrypted tips and files are kept until the review is finished. They are then deleted or de-identified when they are no longer needed. The upload link stops working when it expires.
Your rights
You can request access, rectification, erasure, restriction and objection for processing that does not fall under the journalistic exemption. Send the request to kansli@neumanjuridik.com. Quote the case number if you have one.
For publication with a journalistic purpose, the rights may be limited under the Data Protection Act.
You can also complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten, imy.se.