Notice: This document is an unofficial translation of the Swedish Authority for
Privacy Protection’s decision. Only the Swedish version is authentic. 1(2)
CONTROLLER
Spares Nordic AB
Swedish ref.:
IMY-2024-13575 Final decision under the General Data
Nat.ref no: Protection Regulation – Spares
TSV/8789/2024
IMI case register:
Nordic AB
602032
Date of the decision:
2025-03-06 Decision of the Swedish Authority for Privacy Protection
The Swedish Authority for Privacy Protection (IMY) notes that Spares Nordic AB
(556998-9444) has now complied with the applicant´s request for access. In the light of
the above, IMY finds no reason to take any further action in this case.
The case is closed.
Presentation of the supervisory case
The Swedish Authority for Privacy Protection (IMY) has initiated supervision against
Spares Nordic AB due to a complaint. The complainant has been submitted to IMY, as
the lead supervisory authority under Article 56 GDPR, by the supervisory authority of
the country (Finland) in which the complainant lodged its complain in accordance with
the Regulation´s provisions on cooperation in cross-border processing.
Since it is a cross-border complaint, IMY has made use of the mechanisms got
cooperation and consistency of the GDPR.
The complainant essentially states the following: The complainant requested access
from Spares Nordic AB by email in accordance of article 15 GDPR on the 26th of July
2024.
Spares Nordic AB essentially states the following. Spares Nordic AB is the data
controller in the matter. The company received the complainants request with
questions on the 8th of June 2024. The company replied to the complainant on the 10th
of June 2024 and referred to the page for personal data on the companys website.
With this, the complainant received answers to all of his questions. However, the
Postal address: company notes that the customer has not been given access to his personal data. This
Box 8114 was because the case handler who received the request was unsure how the case
104 20 Stockholm should be handled because the complainant was registered as a company (OY) and
Sweden
not as a private person. The companys IT department contacted the complainant to
Website: confirm his identity and sent all his personal data to him on the 4th of December 2024.
www.imy.se
E-mail: IMY has sent Spares Nordic AB statement to the supervisory authority of the country in
[email protected]
which the complainant lodged its complaint to give the complainant opportunity to
Telephone: comment on Spares Nordic AB statement. The complainant has not responded.
+46 (8) 657 61 00
Page 1 of 2
Swedish Authority Our ref.: IMY-2024-13575 2(2)
for Privacy Protection Date: 2025-03-06
Reasons for the decision
The complainant has requested access. The right of access follows from Article 15 of
the GDPR. The provision means that a data subject has the right to contact the
controller and obtain confirmation as to whether or not personal data concerning him
or her are being processed and, if so, have access to the personal data and certain
information.
Spares Nordic AB has informed IMY that the company has now complied with the
complainant’s request for access. IMY finds no reason to question that this has
happened. IMY notes that Spares Nordic AB has therefore now complied with the
complainant’s right to access. Against this background, IMY does not find any further
action to be taken in this case.
The case should therefore be closed.
Appendix to decision
Complainants personal data
Page 2 of 2