Introduction

The digital healthcare platform www.doctori.se is operated by MediLyx AB, a private healthcare provider with company registration number 559162-3060 ("we," "our," or "us"). This Privacy Notice explains how we handle personal data of the individuals identified in the sections below.

This Privacy Notice covers:

• The types of personal data we process.
• The reasons for processing the data.
• Where the data is stored.
• With whom the data may be shared.
• The rights data subjects have under the GDPR.
• Additional information about our data processing practices.

Categories of Data Subjects

This Privacy Notice pertains to the personal data of the following individuals (referred to as "Data Subjects" or "you"):

1. Visitors to our digital channels (e.g., platform, social media).
2. Individuals who contact us via email, phone, or social media.
3. Those who have contracted with us for our services.
4. Persons covered by our medical assessments.

Definitions

Terms used in this Privacy Notice include:

• Processing: Any action performed on personal data, whether automated or not, such as storage, deletion, sharing, recording, collection, and use.
• GDPR: The General Data Protection Regulation (EU) 2016/679.
• Customer: Our contracting party who engages our services.
• Personal data: Information that can identify a person, directly or indirectly, such as name, phone number, address, profile picture, and email.
• Data controller: The entity that determines the purposes and means of processing personal data.
• Data processor: The entity that processes personal data on behalf of the data controller.
• Platform: www.doctori.se.
• Third Party: Any person other than the data controller, data subject, or data processor.

Data Controller Responsibility

MediLyx AB acts as the data controller for the personal data processing we conduct or have conducted on our behalf, aligning with the principle of accountability.

Our Data Processing Practices

We handle all personal data carefully and in compliance with applicable laws, including the GDPR. We primarily collect personal data directly from data subjects in various ways, such as through direct contact or use of our services. Personal data may also be provided by third parties, such as customers acting as guardians.

We only process personal data that is adequate, relevant, and necessary for the purposes for which it was collected.

Types of Personal Data Collected

We collect various types of personal data to deliver our services:

• Identifying Information: Such as full name, social security number, contact details.
• Health Data: Includes medical history, current health conditions, treatments, and other relevant medical information.
• Device Data: Information about your device when you visit our platform, such as IP address and browser type.
• Transaction Information: Details of orders and payments.
• Case Data: Information related to customer service interactions.
• Consent Data: Information about consents provided, such as for cookies or marketing materials.
• Payment Information: Handled by a third-party payment provider.
• Usage Data: Information about how you use our platform.
• Marketing Preferences: Your preferences regarding receiving marketing communications.

Legal Bases for Data Processing

We ensure all personal data processing has clear, explicit, and legitimate purposes. Our processing is based on lawful grounds such as:

• Consent: When you have given explicit consent.
• Contract: When necessary to fulfill contractual obligations.
• Legal Obligation: To comply with legal requirements.
• Balancing of Interests: When processing is based on legitimate interests, balanced against your rights and interests.

Specific Processing Activities

• Platform Use: We use cookies on our platform with your consent to enhance functionality and user experience.
• Third-Party Links: We are not responsible for third-party websites or their privacy practices.
• Contacting Us: We collect and process personal data when you contact us via various channels to manage and respond to your inquiries.
• Contractual Relationships: We process personal data to fulfill our contractual obligations and provide our services.
• Handling Complaints: We process personal data to manage and resolve complaints in compliance with legal obligations.
• Bookkeeping: We process personal data in compliance with accounting and tax laws.
• Customer and Supplier Management: We process personal data to manage relationships and improve our services.

Data Subject Rights

Under the GDPR, you have rights regarding your personal data, including the right to access, rectify, erase, restrict processing, data portability, and object to processing.

Withdrawal of Consent

You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Customer Support: If you have any questions or concerns about these Terms or our Services, please contact our customer support team at info@doctori.se.

 

Contact Information

Enterprise: MediLyx AB
Org. nr: 559162-3060
E-mail: info@doctori.se
Postal address: Genvägen 7, 571 36 Nässjö, SWEDEN