Privacy Policy for Website Visitors Vital.se
Summary: Privacy policy for you if you use Vital’s services
General and substantive scope
Your personal privacy is very important to us at Vital. Our aim is for you to feel safe whenever we process your personal data. Our aim with this privacy policy (“Privacy Policy”) is to show how we ensure that the way your personal data is handled complies with the applicable legislation. This Privacy Policy applies to you if you use Vital’s healthcare services (“Services”).
In our role as data controller, we ensure that applicable data protection laws are always complied with, and that we only process your personal data for the purposes set out in this Privacy Policy.
How we process your personal data
We will only process your personal data if it is necessary to fulfil the processing purposes.
The categories of personal data we process are:
- Contact details, such as name, phone number, postal address and email address,
- Demographic details, such as age and gender.
- User data, such as behaviours, purchase history, browsing habits – for instance which pages you visited on the Website and how you visited them for,
- Device data, such as the IP number,
- Location data, such as details of your location when you visit our Website or make a purchase,
- Information associated with social media accounts, such as profile picture, profile name, and other information you choose to provide when interacting with us on social media; and
- Other information, such as details you share in your correspondence with us.
Our use of your personal data
We process your personal data for the following purposes:
- To provide, administer and manage the Vital Website,
- To provide, administer and manage the purchase of Vital’s Services,
- To promote Vital’s Services, for instance via newsletters, social media, publications or events,
- To analyse, improve and develop Vital’s Website and Services,
- In order to fulfil Vital’s legal obligations,
- To enable mergers, divestitures, restructuring, reorganisation, dissolution and other sale or transfer of Vital’s assets; and
- To safeguard Vital’s legal interests in the event of a dispute.
We do not use your personal data for any other purpose incompatible with the above, and only keep it for as long as it is required. For more information about how we process your personal data, please refer to the tables below.
If you want to read about how we process your personal data in the event that you choose to use our Services, please see our Privacy Policy for users of Vital’s Services.
Contact details
If you have any questions about this Privacy Policy, our processing of your personal data, or if you wish to exercise your rights, please do not hesitate to contact us at kundservice@vital.se.
Full privacy policy for website visitors
1. PREAMBLE
1.1 Your personal privacy is very important to Vital Labs AB (corporate registration number 559332-0723, hereinafter “Vital”). Our aim is for you to feel safe whenever we process your personal data. Our aim with this privacy policy (“Privacy Policy”) is to show how we ensure that the way your personal data is handled complies with the applicable legislation. This Privacy Policy applies to you if you visit our Website (“Website”) and if you choose to purchase any of Vital’s healthcare services (“Services”).
2. DATA CONTROLLER AND DATA PROTECTION OFFICER
2.1 Vital is the data controller for processing your personal data and is thus responsible for ensuring that any data processing takes place in accordance with the applicable legislation.
2.2 We have appointed Caroline Olstedt Carlström at Cirio Law Firm as our Data Protection Officer (“Data Protection Officer”). The Data Protection Officer is responsible for duties such as monitoring that our use of personal data complies with the applicable legislation.
2.3 Data protection enquiries contact: kundservice@vital.se
3. OUR USE OF YOUR PERSONAL DATA
We process your personal data for the following purposes:
– To provide, administer and manage the Vital Website,
– To provide, administer and manage the purchase of Vital’s Services,
– To promote Vital’s Services, for instance via newsletters, social media, publications or events,
– To analyse, improve and develop Vital’s Website and Services,
– In order to fulfil Vital’s legal obligations,
– To enable mergers, divestitures, restructuring, reorganisation, dissolution and other sale or transfer of Vital’s assets; and
– To safeguard Vital’s legal interests in the event of a dispute.
3.1 The categories of personal data we process are:
– Contact details, such as name, phone number, postal address and email address,
– Demographic details, such as age and gender.
– User data, such as behaviours and browsing habits, for instance which pages you visited on the Website and how you visited them for,
– Device data, such as the IP number,
– Location data, such as details of your location when you visit our Website or make a purchase,
– Information associated with social media accounts, such as profile picture, profile name, and other information you choose to provide when interacting with us on social media; and
– Other information you choose to share.
3.2 In the tables below, you can read more about how we at Vital process your personal data when you visit our Website or purchase our Services.
PURPOSE
- To provide, administer and manage the Vital Website
- To provide, administer and manage the purchase of Vital’s Services
- To promote Vital’s Services, for instance via newsletters, social media, publications or events
- To analyse, improve and develop Vital’s Website and Services
- In order to fulfil Vital’s legal obligations
- To enable mergers, divestitures, restructuring, reorganisation, dissolution and other sale or transfer of Vital’s assets
- To safeguard Vital’s legal interests in the event of a dispute
To provide, administer and manage the Vital Website
What we do: We process information about you so that we can offer you a pleasant and smooth experience when you visit our Website. We primarily do this by obtaining data from cookies. For more information about how we process cookies, please see Vital’s Cookie Policy.
In order for us to be able to provide you with a good service when you visit our Website, we may also process information about you if you, e.g., choose to contact us.
Categories of personal data: Contact details such as name, phone number and email address. Other information you choose to share. User data such as behaviours and browsing habits, e.g. which pages you visited on the Website and how long you visited them for. Device details such as the IP number.
Legal basis: We process your personal data based on Vital’s legitimate interest in providing, administering and managing our Website, which we believe overrides the interest in protecting your personal data.
Retention period: Your personal data will be stored for as long as it is necessary for us to be able to provide, administer and manage the Vital Website. In the event that you contact us with e.g. an enquiry about our Services, we process your data during the time your enquiry is being handled and for up to two (2) months thereafter.
However, we may need to retain your data for a longer period of time if this is required based on a legal obligation or in the event of a dispute. See more about these purposes below.
For details of how long we save the personal data we process when using cookies, you can see Vital’s cookie policy for more information.
To provide, administer and manage the purchase of Vital’s Services
What we do: We process information about you in order to provide, administer and manage the purchase of our Services.
To achieve the aim of this purpose, we need to process certain contact details about you in order to e.g. confirm who made the purchase and to then ensure that the purchase is delivered to the right person.
Categories of personal data: Contact details such as name, telephone number, postal address and email address.
Legal basis: We process your personal data on the grounds that the processing is necessary to fulfil our contract with you.
Retention period: Your personal data will only be stored for the time required to achieve the purpose of the processing. We process your contact details for up to twelve (12) months after we deliver your test results. However, please note that your data may be stored for a longer period of time based on Vital’s legal obligations or in the event of a dispute. For more information about processing within the scope of these other purposes, please see below.
To promote our Services via e.g. newsletters, social media, publications and events
What we do: We process your personal data to market our Services. The ways we do this include sending newsletters or other information, and social media.
In the event that we process your data for direct marketing purposes, you can easily opt out of data processing at any time, either by using the “opt out” function in our mailings, or by contacting us. You will find our contact details at the end of this Privacy Policy.
Categories of personal data: Contact details such as name, phone number and email address. Demographic details, such as age and gender.
User data such as behaviours and browsing habits, e.g. which pages you visited on the Website and how you visited them for. Device data, such as the IP number. Other information you choose to share.
Information associated with social media accounts, such as profile picture, profile name, and other information you choose to provide when interacting with us on social media.
Legal basis: We process your personal data based on Vital’s legitimate interest in marketing our Services, which we believe overrides your interest in protecting your personal data.
Retention period: Data processed as part of our marketing is stored for a period of two (2) years from the date on which we collected your data or from the date on which you last had contact with us, whichever occurs later.
You can at any time object to our personal data processing for direct marketing purposes. For more information on your rights, please see section 9 below.
If you have signed up to receive newsletters, you can also at any time choose to opt out, i.e. cancel your subscription with us, after which you will no longer receive any mailings.
For details of how long we save the personal data we process when using cookies, you can see Vital’s cookie policy for more information.
To analyse, improve and develop Vital’s Website and Services
What we do: We process your personal data when carrying out testing to improve, develop, maintain and manage our Website and Services. If you choose to leave a review about your experience and impression of being a customer with us, we also process information about you. This information is used to develop and improve our Service.
For that purpose, we also use third-party tools to collect aggregate data about visitors to our Website. For more information about how we use cookies, please refer to our Cookie Policy.
Categories of personal data:
User data such as behaviours and browsing habits, e.g. which pages you visited on the Website and how long you visited them for.
Location data, such as details of your location when you visit our Website or make a purchase. Device details such as the IP number. Other information you choose to share (e.g. in connection with leaving a review as a customer).
Retention period: Please see our Cookie Policy for information on how long we process personal data when using cookies.
Legal basis: Please see our Cookie Policy for information on the legal basis for our processing of personal data.
In order to fulfil Vital’s legal obligations
What we do: Vital may need to process your personal data in order to comply with our legal obligations, such as requirements arising from the Accounting Act in connection with handling your purchase of our Services.
Categories of personal data: All the categories of personal data specified in section 3.2.
Legal basis: We process your personal data to comply with our legal obligations under the applicable legislation.
Retention period: Your personal data will only be stored for the time required by the applicable legislation, e.g. seven (7) years under the Accounting Act.
To enable mergers, divestitures, restructuring, reorganisation, dissolution and other sale or transfer of Vital’s assets
What we do: We need to process your personal data in the event of a merger, divestiture, restructuring, reorganisation, dissolution or other sale of Vital’s assets.
Categories of personal data: All the categories of personal data specified in section 3.2.
Legal basis: We process your personal data based on Vital’s legitimate interest in enabling the merger, divestiture, restructuring, reorganisation, dissolution and other sale or transfer of Vital’s assets, which we believe overrides the interest in protecting your personal data.
Retention period: We process your personal data for as long as it is necessary to fulfil the purpose of such processing.
Personal data transferred to a buyer or other successor in the event of a divestiture or other sale or transfer of Vital’s assets will not continue to be processed by Vital after such transfer, unless required according to the applicable legislation.
To safeguard our legal interests in the event of a dispute
What we do: We may need to process your personal data in order to safeguard our legal interests in the event of a dispute, such as to establish, exercise or defend legal claims.
Categories of personal data:
All the categories of personal data specified in section 3.2.
Legal basis: We process your personal data based on Vital’s legitimate interest, as we believe that our interest in protecting our interests in the event of a dispute overrides your interest in protecting personal data.
Retention period: Your personal data will be stored for as long as it is necessary for us to be able to safeguard our legal interests in the event of a dispute.
4. HOW WE COLLECT YOUR PERSONAL DATA
The personal data we process about you is primarily the information you provide when you choose to visit our Website, contact us or otherwise communicate with us, or when you make a purchase.
Vital also uses cookies and similar technologies to collect information to improve and provide our Website and Services, such as to analyse user statistics. For more information on how we collect data using cookies, please refer to our Cookie Policy.
5. STORAGE OF PERSONAL DATA
We will only retain your personal data for as long as necessary to achieve the purposes for which it was collected in accordance with this Privacy Policy. Once we no longer need your personal data, we delete the data from our systems, databases and backups. For more information on how long we keep your data for the different purposes, please refer to the tables in section 3.2.
6. WHO DO WE SHARE YOUR PERSONAL DATA WITH?
Vital may share your personal data with third parties such as IT suppliers, payment processors and other companies we cooperate with in order to provide our Website and complete purchases.
When we collect data from third-party cookies, we will share your personal data with providers including Google Inc. Your data may also be shared with social media platforms, should we choose to market ourselves using such platforms, or if you choose to interact with us there.
In some cases, we may also be required to share your personal data with authorities or other third parties in connection with audits, court proceedings or for other similar reasons.
Finally, we may need to share your data, as set out above, in the event of a merger, divestiture, restructuring, reorganisation, dissolution or other sale or transfer of Vital’s assets, as well as to safeguard our legal interests in the event of a dispute.
We will not sell your personal data to any third parties.
7. AUTOMATED DECISION-MAKING
7.1 We do not use processing for automated decision-making purposes.
8. WHERE YOUR DATA IS PROCESSED?
8.1 Vital may transfer your personal data to a country outside the EU/EEA. If personal data is transferred to any such country, we will ensure that your personal data is protected and that the transfer complies with the applicable legislation.
8.2 When we carry out a transfer to a country that has not received a European Commission data protection adequacy decision, we will use some other appropriate transfer mechanism as the legal basis for the transfer, such as standard contractual clauses (SCCs) issued by the European Commission. In order for you to effectively exercise your rights under the SCCs, you are entitled to, among other things, receive a copy of the SCCs and to be informed of the identity of the recipients.
9. YOUR RIGHTS
9.1 Our responsibility for your rights
As the data controller, we are responsible for ensuring that your personal data is used in compliance with the law and that your rights are upheld. You may contact us at any time if you wish to exercise your rights. You will find our contact details at the bottom of this Privacy Policy.
We are required to respond to your request to exercise your rights within one month of you getting in touch. If your request is complicated or large numbers of requests have been received, we have the right to extend the time by two more months. If we are not able to take the action you requested within one month, we will inform you of the reason for the delay and of your right to complain to the supervisory authority and to seek legal remedy.
All information and correspondence, and all the actions that we carry out, are free of charge to you. However, if what you request in relation to your rights is manifestly unfounded or unreasonable, we are entitled to charge an administrative fee for providing you with the information or carrying out the requested action, or refuse to comply with your request.
9.2 Your right of access, correction, deletion and restriction
9.2.1 You have the right to request:
(i) Access to your personal data. This means that you have the right to request a record of our use of your personal data. You are also entitled to receive a copy of the personal data we are using, free of charge. For any additional copies, we are entitled to charge a reasonable administration fee. If you submit a request online, e.g. by email, we will provide you with the information in a common digital format.
(ii) Correction of your personal data. We will, at your request or on our own initiative, correct, anonymise, delete or update data that we discover to be incorrect, incomplete or misleading. You also have the right to add additional information if something relevant is missing.
(iii) Deletion of your personal data. You have the right to request us to delete your personal data if there is no longer any acceptable reason for us to use it. For that reason, data is to be deleted if:
- The personal data is no longer necessary for the purpose for which we collected it;
- We are using your data on the basis of your consent and you withdraw it;
- You object to our use of your data that occurs after the various interests have been weighed up and we do not have legitimate interests that override your interests and rights;
- We have used the personal data in an unauthorised manner; or
- We have a legal obligation to delete the personal data.
However, there may be legal requirements or other compelling reasons that prevent us from immediately deleting your personal data. We will then stop using your personal data for purposes other than complying with the law or if it is necessary for any other compelling reason.
(iv) Restriction of use. This means that we temporarily restrict the use of your data. You have the right to request restriction when:
- You believe that your data is incorrect and you have requested correction, while we investigate the correctness of the data;
- The use is unlawful and you do not want the data to be deleted;
- We as the data controller no longer need the personal data for our usage purposes, but you need it in order to establish, exercise or defend a legal claim; or
- You have objected to data processing, pending verification of whether our legitimate interests override yours.
We will take all reasonable steps to notify all recipients of personal data pursuant to section 6 above if we have corrected, deleted or restricted access to your personal data after you have requested that we do so. At your request, we will inform you of who we have disclosed personal data to.
9.3 Your right to object to use of your data
You have the right to object to us using your personal data on the basis of a balance of interests (see section 3 above). If you object to such use, we will only continue the use if we have important reasons to continue the use that override your interests.
9.4 Your right to data portability
You have the right to data portability. This means a right to receive your personal data in a structured, commonly used, machine-readable format and to have that data transferred to another data controller. You only have the right to data portability when the use of your personal data is automated and when we are basing our use of your data on your consent or on an agreement between you and us.
9.5 Your right to complain to a supervisory authority
9.5.1 You have the right to lodge any complaints with the supervisory authority (Integrity Protection Authority, www.imy.se) if you are not satisfied with our processing of your personal data.
10. WE PROTECT YOUR PERSONAL DATA
10.1 Vital cares about you always feeling safe when you provide us with your personal details. which is why we taken technical and structural security measures, including restricting access and undergoing regular internal audits, to best protect your personal data from, e.g., unauthorised access, alteration or loss of information. In the event of any security incident that may significantly affect you, we will contact you.
11. COOKIES
11.1 Vital uses cookies and similar technologies (“Cookies”) on our Website in order, among other things, to improve your experience with us and to simplify and adapt our Website to your needs and demand. Our Cookie Policy explains in more detail how we use cookies and what options you have regarding how we use cookies.
12. CHANGES TO THIS PRIVACY POLICY
12.1 Vital has the right to change this Privacy Policy at any time. The latest version of the Policy will always be available on our Website. Whenever we make changes that are not of a purely linguistic or editorial nature, you will be informed of the changes within reasonable time before they take effect.
13. HOW TO CONTACT US
If you have any questions about this Privacy Policy, our processing of your personal data, or if you would like to exercise your rights, please contact us at kundservice@vital.se.
This Privacy Policy was last updated on 21 March 2022.