MediTuner AB, 556982-8295 ("MediTuner") processes Personal Data in MediTuner's system AsthmaTuner. AsthmaTuner is a patent pending digital self-care and support system that provides asthmatics (the User) with an individually tailored treatment recommendation (hereafter referred to as the "Service") that can also be provided by the User's Caregiver (the "Caregiver").
MediTuner is the data controller for the Personal Data that the User provides directly through the Service's "User Account" when the Service is used as a self-care system.
If the User accepts an invitation from the Caregiver to connect the patient's User account to the Caregiver's account in the Service ("Caregiver account"), the Caregiver becomes the data controller for the Personal Data. As long as there is an active connection between the User Account and the Caregiver Account, the Caregiver is the data controller, i.e. also for Personal Data that the User provides directly through the User Account. When such connection exists, MediTuner is the data processor for Personal Data on behalf of respective Caregiver.
MediTuner undertakes to process the User's Personal Data in accordance with applicable laws and, where applicable, the Caregiver's instructions and to take appropriate technical and organizational measures that have been agreed and are required to protect the data from unauthorized access, destruction and alteration.
The purpose of the Personal Data processing is to provide the Service, i.e. the self-care system (AsthmaTuner) that gives asthmatics an individually tailored treatment recommendation. In addition, Personal Data may be used for marketing purposes, such as sending out newsletters.
If the User has questions regarding MediTuner's Personal Data processing, the User can contact MediTuner. Information on how you / the user contact MediTuner can be found under the heading " Contact details " below.
Personal Data means any kind of information that can be directly or indirectly attributed to a natural person who is alive. The Service may contain Personal Data relating to the User's identification (name and social security number), contact information, health data, reference values (e.g. gender and weight), external and environmental data (e.g. geographical position), connections (e.g. information about the User's relatives) and distribution (such as the User's address). (collectively hereinafter "Personal Data").
Sensitive Personal Data is information that reveals racial or ethnic origin, political views, religious or philosophical beliefs or membership in unions, and personal or health information (hereinafter "Sensitive Personal Data"). Health information may include absence due to illness, illness, treatment and doctor's visits.
Within the Service, MediTuner may process Sensitive Personal Data consisting of information about the User's asthma, other information related to the User's health condition and information about the User's ethnicity.
The User can revoke his/her consent at any time. However, if you / the User withdraw your consent, the Service will no longer be available to you / the User.
For purpose 2 above, only anonymized data is processed. For purpose 3 above, no Sensitive Personal Data is processed.
For purpose 1 above, MediTuner processes the User's Personal Data with the User's consent
For purpose 2 above, MediTuner only processes anonymized information, which means that the information is not to be considered as Personal Data in accordance with applicable data protection legislation. Therefore, MediTuner does not need to provide any legal basis for this purpose.
For purpose 3 above, MediTuner processes the User's Personal Data with the support of their legitimate interest in being able to market the Service, as well as to send newsletters to the User and to provide the User with updates about the Service. In these cases, MediTuner has made a balance of interest assessment. Please note that only limited categories of Personal Data are processed for this purpose and that the User may oppose this processing at any time.
MediTuner will not disclose the User's Personal Data to third parties for commercial use.
In the event that suppliers process Personal Data on MediTuner's behalf, as a so-called data processor, MediTuner will enter into an agreement with the supplier to regulate the processing of Personal Data, in accordance with applicable data protection legislation.
A User's Personal Data may be transferred or transferred to a buyer or potential buyer in the sale, transfer or other transfer of all or part of MediTuner's business or assets to the extent permitted by applicable data protection legislation.
MediTuner will not transfer the User's Personal Data to third countries (i.e. a country outside the EU / EEA).
The User's Personal Data will not be retained for longer than is necessary for the purposes of the processing and MediTuner will delete the Personal Data in a manner that follows the applicable legislation.
The User is entitled to receive a copy of the Personal Data that is being processed (register extract) free of charge. For any additional copies requested, MediTuner may charge a reasonable fee based on administrative costs. The right to a copy should not adversely affect the rights and freedoms of others.
The User is entitled to request that MediTuner correct Personal Data which is incorrect or incomplete. If the User shows that the purpose for which the Personal Data is processed is no longer allowed, necessary or reasonable under the circumstances, the relevant Personal Data will be deleted, unless there are other legal provisions which specify otherwise.
The User has the right to withdraw consent to MediTuner for continued processing of the Personal Data with such legal basis ("the right to be forgotten").
Users also have the right to have the Personal Data which they themselves have submitted to MediTuner transferred to another Personal Data controller (right to data portability), as well as to submit any complaints to the Data Security Authorities.
The User has the right to object to the processing of Personal Data which is supported on a balance of interests as a legal basis. In this case, MediTuner will cease with data processing if MediTuner is unable to demonstrate compelling legitimate grounds for data processing that consider the User's interests, rights and freedoms, or if the processing of Personal Data carries out the establishment, exercise or defence of legal claim.
MediTuner takes all appropriate technical and organizational security measures necessary to protect your Personal Data against unauthorized access, alteration or destruction. However, it always involves a risk of disclosing Personal Data through digital channels as it is not possible to completely protect technology systems from intrusion.
If the User has a complaint regarding MediTuner's processing of its Personal Data, the User has the opportunity to make a report to the Data Security Authorities, which is the supervisory authority. You are also welcomed to contact MediTuner in such cases.
MediTuner AB, org. 556982-8295
Contact person: Eric Alhanko
Jungfrugatan 28, 114 44 Stockholm