Data controller
ViSaeb AB (Org.nr 559403-7375) is the data controller (personuppgiftsansvarig) for the personal data we process for booking, intake and coordination. We are not the healthcare provider and we keep no patient medical record. The licensed healthcare provider (vårdgivare) is independently responsible for the patient journal under the Swedish Patient Data Act (patientdatalagen).
What data we process
- Contact details you provide (name, email, phone)
- Your selected programme and booking/coordination details
- Messages you send us about administrative matters
- Limited technical and analytics data (see “Cookies and analytics” below)
When you request an assessment through the website, we collect only your contact details and the option you are interested in. The form does not ask for health, weight or medication information, and no such data is sent to advertising or analytics systems.
Legal basis
We process personal data to perform our agreement with you and to take steps at your request (GDPR Art. 6.1.b), and based on your consent where applicable (Art. 6.1.a). Where health data is processed for care purposes, it is handled under the relevant provisions for health data (Art. 9) by the responsible parties.
Retention
We keep personal data only as long as necessary for the purpose it was collected, and in line with legal requirements. Medical records kept by the healthcare provider are subject to statutory retention under Swedish patient-data law.
Recipients
Data may be shared with the licensed healthcare provider (for care), our payment provider (for payments) and IT/service providers acting as processors under agreement. We do not sell personal data.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and to object, subject to legal limits. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
No personnummer required to make a request
You do not need to provide a Swedish personal identity number (personnummer) to submit a booking or preliminary request. Identity verification, where required for care, is handled by the healthcare provider.
Cookies and analytics
We use limited analytics that load only after you consent, with IP anonymisation enabled. Health answers are never placed in analytics events or URL parameters.
Contact
For privacy questions, contact info@viktbehandling.se.