- Personal data responsibility
Magnetlabbet AB, org. No. 559358-8345, with address Gustaf Dalensgatan 30, Gothenburg 417 05 Sweden, ("Magnetlabbet", "we", "our", or "us") is a company established in Sweden, and as such, we comply with applicable data protection legislation in Sweden . By using Magnetlabbet's services, you accept this data protection policy and our processing of your personal data. In our privacy policy, we explain what types of personal data we may process and for what purpose. We also explain our processing of personal data and which choices you have in relation to it.
- Personal data processed
Personal data refers to data that can be attributed to you. We process the personal data about you that you register via your user account such as name, social security number, phone number, address and email address in connection with opening your user account with us and then the data that you register when you use the service. In addition, we may automatically collect and process the following information;
(i) technical information including IP address, login information, type and version of operating system and device, time settings, selected language, cookies, etc.; and
(ii) information about the Services you used with us, time spent on matters, button presses, etc.
(iii) Health data and information about your health regarding examination results and information about, for example, your MRI examinations and ultrasound examinations as well as doctor's comments on the results and medical record data.
(iiii) In the case of support matters and Magnetlabbet cannot control which information you provide. Magnetlab does not save personal data that there is no reason to process in the case of support matters.
3.1 Purpose of the processing
• To be able to manage the purchase of Magnetlabbet's services.
• To be able to create referrals.
• To be able to handle customer service matters.
• To be able to make your medical records available to you.
• To be able to evaluate, develop and improve our services, products and systems for all customers.
• To be able to offer customers marketing.
• To be able to develop mathematical models (prediction models) that enable automatic interpretation of test results and calculation of future risk of ailments.
• To be able to prevent abuse of a service or to prevent prevent and investigate crimes against the company.
• To be able to fulfill Magnetlabbet's legal obligations.
• To be able to ensure the quality of our services.
3.2 Treatment carried out
• Storage of the information you provide to us
• Delivery of our services to the customer
• Identification and control of the age of the customer
• Handling of payment
• Address control
• Telephone number
• Test results and health data as well as the doctor's comment on the results
• Technical information including IP address, login information, type and version of operating system and device, time settings, selected language, cookies, etc.
3.3 Most of the personal data that we process is based on the fact that we must be able to fulfill an agreement with the customer. We may also process personal data on the basis that we have a legitimate interest in processing them. It may also be the case that we process personal data on the basis that you have consented to it.
4. Recipient of Personal Data
We will share your personal data with healthcare actors with whom we collaborate in order to be able to offer our services and fulfill our commitments to our customers. Those we cooperate with are our personal data assistants.
The following are categories of recipients with whom we share personal data:
(in) Clinics, health centers and laboratories - The magnet lab collaborates with these actors for sampling, investigations, analysis of ordered samples and the execution of investigations.
(ii) Agencies - Magnetlab may have to disclose personal data to authorities if we are obliged to do so by law.
Sensitive personal data about you is processed in accordance with the law. Only authorized personnel will have access to these according to law. Sensitive personal data will not be transferred or disclosed to any recipient other than when permitted or required to do so by law.
When we share data with our personal data assistants, we will ensure that the personal data is handled in accordance with the purposes stated in this policy. We always check personal data processors to ensure that they can provide sufficient guarantees regarding the security of personal data. We have personal data processing agreements with all personal data processors through which they guarantee the security of the personal data they process on our behalf.
We also share personal data with companies that are independent personal data controllers. This means that we do not control how the personal data is provided to the company and how it is processed.
When a company independently processes personal data, that company's personal data policy is applicable to the processing.
5. Preservation of Personal Data
Personal data is saved during the time the customer and Magnetlabbet have an ongoing contractual relationship and for a period thereafter. You can choose to close your account and Magnetlabbet will then delete your data when they do not need to be kept for other purposes, as described above. We retain personal data for accounting purposes for seven years in accordance with the requirements of the Accounting Act. Examination results and related information are recorded in accordance with the Patient Data Act (2008:355). Health data and related information covered by the Patient Data Act (2008:355) are stored for at least 10 years from the time the most recent information was entered into the record.
6. Thinning of Personal Data
Thinning of personal data takes place when the purpose of the processing ceases and Magnetlabbet no longer finds it necessary to preserve the personal data. Thinning means that the data can no longer be used to identify a person. Magnetlab always depersonalizes and aggregates personal data when it is used as a basis for statistics and product development. When Magnetlabbet performs a thinning of personal data, this cannot be revoked and when the thinning is performed, no person can any longer be associated with the information that remains.
7. IT security
As the personal data controller, Magnetlabbet takes appropriate technical and organizational measures to protect the personal data that is processed
8. Where is your personal data stored?
The personal data is handled and stored only within the EU/EEA and no sensitive personal data, such as e.g. data related to your health is stored outside the EU/EEA in connection with the use of the services.
9. Your rights
You have the right to withdraw your consent regarding the processing of personal data based on your consent. You have the right to request that Magnetlabbet delete your personal data. Upon your request, we will delete all health data that we are not legally obligated to store.
You have the right to receive information about whether we process your personal data, for what purpose it is processed, whether such personal data is transferred, if applicable, who received your personal data.
You have the right to have incorrect information about yourself corrected. In certain circumstances, including when it has been established that we are processing personal data without a legal basis or the processing is no longer necessary to fulfill the purpose, you have the right to have the data deleted. If the accuracy of the personal data or the legal basis for processing is in question, you can request that the processing of the data be restricted. You have the right to object to processing that takes place on the basis of Magnetlabbet's legitimate interests. In the event of such an objection, Magnetlabbet is obliged to demonstrate a legal basis for continued processing of the personal data. You can indicate at any time that your data should not be used for marketing purposes.
You have the right to receive your personal data, to the extent provided by you, in an electronic format that is generally used. You have the right to transfer such data to another personal data controller. You always have the right to file a complaint with the supervisory authority, Datainspektionen.
We are committed to conducting our business in accordance with the principles set out above to ensure that the confidentiality of your personal data is protected and maintained.
Contact Us
Contact details for questions about Magnetlabbet personal data management: Magnetlabbet Ab, org. No. 559358-8345, Gustaf Dalensgatan 30, Gothenburg 417 05 Sweden