Cookie and Privacy Policy

This policy explains how our website tandcity.se collects and processes your data, what choices and options you have, and how you can exercise your rights. This policy is intended for visitors to our website.

How do you process my personal data?

The following section explains what types of data we may process about you and for what purposes. We also explain how the data is collected and how long it is stored.

Appointment Booking and Contact
As a patient with us, you have the option to book an appointment via our website, email, or phone. To provide you with this service, we collect your name, email, and phone number. The processing of your data is necessary to fulfill the agreement with you and to comply with legal obligations incumbent upon us as a healthcare provider. Contact information is stored in our patient record system in accordance with the provisions of the Patient Data Act. Read more about how we process your patient data here.

Collection of Website Statistics
When you visit our website, we collect logs containing network identifiers and timestamps using Google Analytics. We collect this data so that we can see how many users visit our website. Our legal basis for processing is our legitimate interest in knowing how our website is used. The data collected via these logs is stored for 26 months in Google Analytics.

Collection of Web Logs
When you visit our website, we collect standard logs containing network identifiers and timestamps in order to provide you with our website securely. Our legal basis for processing is our legitimate interest in maintaining the security of our website. These logs are deleted after 24 hours.
Marketing via Email and Phone
As a patient with us, you will have the opportunity to consent to us communicating via email, phone, and SMS for informational purposes. We only use these channels for marketing if we have received your consent. Our legal basis for processing is your consent. You can opt out of this marketing at any time by sending us a message.

How do you process my patient data?

This policy only applies to the data we process about you in connection with your visit to our website. Read more about how we process your patient data here.
What about cookies and similar technologies?
A cookie is a small text file stored on your computer or device (e.g., smartphone or tablet) that contains information enabling the website to recognize you as a user.
We use cookies to provide our website, to collect web statistics, and to keep track of your choices when you book an appointment.
Your browser or device allows you to change the settings for the use and scope of cookies. For example, you can choose to block all cookies, accept only certain cookies, or delete cookies when you close your browser. Please note that some parts of our website may not function if you block or delete cookies. For more information about cookies and how to change your browser settings, please visit www.aboutcookies.org or www.allaboutcookies.org.
Google Analytics offers you the option to object to all collection of web statistics by clicking this.

Who do you share my data with?

We will not share, sell, transfer, or otherwise disclose your data beyond what is stated in this policy, unless we are obliged to do so to fulfill a legal obligation or if we have received your consent for such disclosure.
This does not exclude that we may use data processors who process data on our behalf in accordance with written data processing agreements and our instructions. Data processors who gain access to your data (e.g., when we use a third party to store data on a server) are not given any right to use your data for purposes other than those specified in this policy.

Where do we process your data?

We always strive to process your data within the EU/EEA. However, in certain situations, your data may be transferred to and processed in a country outside the EU/EEA. In such cases, we will take all reasonable legal, technical, and organizational measures to ensure that your data is handled securely and with an adequate level of protection comparable to and at the same level as the protection offered within the EU/EEA.

What rights do I have?

Right of access
You have the right to request a copy of the data we process about you. The copy is free to request.

Right to rectification
You have the right to correct inaccurate or incomplete data about yourself.

Right to erasure
You have the right to request the erasure of your data in cases where the data is no longer necessary for the purpose for which it was collected. However, there may be legal obligations that prevent us from immediately erasing parts of your data.

Right to data portability
You have the right to request that your data be transferred from us to yourself or to another provider. However, there may be legal obligations that prevent us from transferring parts of your data.

Right to object
You have the right to object to the processing of your personal data that we carry out based on a legitimate interest assessment. You must then specify which processing you object to. If your personal data is processed for direct marketing, you always have the right to object to the processing at any time.

Right to restriction
You have the right to request a temporary restriction of the processing of your personal data. This means that we temporarily move the personal data to another processing system or make the data inaccessible to a user.

Right to withdraw consent
You have the right to withdraw your consent for direct marketing at any time by contacting us using the details below.

Right to lodge a complaint
You have the right to lodge a complaint with us or with the competent supervisory authority at any time.

How do you exercise your rights?

If you wish to exercise any of your rights, please send us a message. If you wish to lodge a complaint with a supervisory authority, please contact the Swedish Data Protection Authority (Datainspektionen) at www.datainspektionen.se.

Changes to this policy

If we make changes to this policy, we will notify you by publishing the updated version on the tandcity.se website. If the changes are significant, we will also notify you appropriately and, if required, ask for your consent.

Who is the data controller?

Dentist Alexander Johansson, corporate identity number 559073-2557, is the data controller for the processing of your data according to this policy.

How to contact us?

tandcity.se has a data protection officer, Alexander Johansson, who is responsible for data protection issues. If you have any questions about this policy, the processing of your data, or how you can exercise your rights, please contact Alexander at 040-23 66 00 or [email protected]. The Privacy Policy was last updated on 2018-05-28.