How we handle your personal data

01. What data we collect

We only collect the data we need to answer you and to give you care.

• Contact details you provide yourself when you fill in our form, call or email: name, email, phone, chosen treatment and your message.
• Patient data for you who become a patient: health declaration, medical background, treatment data and photo documentation. These are kept in your patient record.
• Technical data when you visit the website, for example via cookies and analytics tools (see the section on cookies).

02. Why we process the data and our legal basis

• To answer your enquiry and book a consultation. Legal basis: our legitimate interest in responding to you, or your consent.
• To provide care and keep records. Legal basis: legal obligation under the Patient Data Act. Health data is processed under Article 9 of the GDPR (health and medical care).
• To run and improve the website. Legal basis: your consent to non-essential cookies.

03. How long we keep your data

• Patient records are kept for as long as the Patient Data Act requires, at least 10 years after the last entry.
• Enquiries and contact details that do not lead to treatment are kept only for as long as we need them to handle your enquiry, after which they are deleted.

04. Who we share data with

We never sell your data. We only share it when needed to give you care, or when the law requires it.

• Data processors who help us with, for example, the record system, email and IT operations. They may only process the data according to our instructions and under a data processing agreement.
• Medical Finance if you choose financing, and Folksam in an insurance matter.
• Authorities when we are required by law, for example IVO in the event of a report under Lex Maria.

Your data is stored within the EU/EEA.

05. Cookies and analytics

The website uses cookies to function and so we can see how it is used. The analytics run on tools like Google Analytics, which give us visitor statistics. Non-essential cookies are only set if you consent, and you can change your choice in the browser at any time.

06. Your rights

Under the GDPR you have the right to:

• access and receive an extract of the data we hold about you,
• have incorrect data corrected,
• have data erased or the processing restricted, to the extent the law allows,
• object to processing based on legitimate interest,
• receive and move data you have provided yourself (data portability),
• withdraw a consent you have given, without affecting processing that has already taken place.

Contact us and we will help you. If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

07. How we protect the data

Your data is stored encrypted and only authorised personnel have access. All care is documented according to our quality system, and we have full patient and liability insurance through Folksam.

08. Changes to this policy

We may update the policy when our practice or the law changes. The latest version is always available here on the website.