The following information provides an overview about our processing of personal data and our customers’ rights under data protection law. What specific data are processed and how they are used largely depends on the specific services that are utilized.
Please also share the information with current and future authorized representatives and those with financial authority, as well as any others obligated under business relationships with us.
The controller is:
plus medica Nordic AB
Tel.: +46 70 588 70 91
You can reach our Data Protection Officer at:
plus medica Nordic AB
Tel.: +46 70 588 70 91
1. Personal data
We process personal data which we receive from our customers in the course of our business relationship. Where necessary, we also process personal data which we have lawfully received from other companies or other third parties (e.g., to carry out orders, satisfy agreements, or based on consent given). In addition, we process personal data which we have lawfully received from publicly available sources (e.g., land registers, commercial registers, business registers, press, media, Internet) and are permitted to process.Relevant personal data may include:
Name, address and other contact information (telephone, e-mail address), date of birth, place of birth, sex, nationality, marital status, legal competence, professional group key, type of partner (dependent/independent), residential status (rent/own, identification information, authentication information, taxpayer ID, SCHUFA score.In addition to the data named above, other personal data may be collected, processed, and stored when concluding agreements and using our products or services. Such data essentially include: …..
2. Anonymized data
For statistical analysis purposes information is collected, stored, and utilized when visiting this website regarding your IP address, time and date of access, the previously visited website (referrer URL), the type and version of browser used, and operating system version. This collected data are anonymized and used exclusively to optimize our website as well as analyzed for statistical purposes. We reserve the right to create pseudonymized usage profiles.
3. Cookies and access data
4. Third-party services and content
It is possible for third-party content to be integrated, for instance videos on YouTube, map information from Google Maps, or graphics from other websites.This always requires that the providers of that content (referred to hereinafter as “third-party providers”) perceive the user’s IP address since without the IP address the content cannot be sent to the particular user’s browser. The IP address is therefore required for presentation of this content. We have no control over whether the third-party providers store your IP address and other information (e.g., for statistical purposes). Please see the data protection information of the various listed third-party providers for this information.Third-party providers may be replaced over the course of time; likewise, third-party providers may be removed or added. The respective published version of the data protection statement applies at all times.
We process the personal data named above in conformance with the provisions of the EU General Data Protection Regulation (GDPR):
1. To satisfy contractual obligations (GDPR Art. 6  [b])
Personal data are processed in order to provide goods and services in connection with implementing our agreements with our customers or to carry out pre-contractual steps in response to inquiries by our customers.The purpose of the data processing depends on the concrete contractual conditions concerning goods and services, and may include needs analysis, consulting, and performing contractually agreed services, among other things. Further details on the purpose of the data processing can also be found in the particular contractual documents and terms and conditions.
2. In the course of weighing different interests (GDPR Art. 6  [f])
If necessary, we also process data beyond actual fulfillment of the agreement in order to preserve our justified interests or those of third parties.For example:
3. Based on consent given (GDPR Art. 6  [a])
Where we have been given consent to process personal data for certain purposes (e.g., sharing data within the corporate group), the lawfulness of such processing is based on the consent. Once given, consent may be revoked at any time. This also applies to revoking statements of consent given to us before the EU General Data Protection Regulation took effect, i.e., before May 24, 2018. Note that the revocation is only effective for the future. It does not affect processing that occurred before the revocation. A status summary of consent statements given to us can be requested at any time.
4. Based on legal requirements (GDPR Art. 6  [c]) or in the public interest (GDPR Art. 6  [e])
We also process personal data where required by law. This includes such requirements as age and identity verification, fraud and money laundering prevention, fulfilling tax controlling and reporting requirements, and evaluating and controlling risks in our own company.
Within our company, offices have access to data that need it in order to satisfy our contractual and legal obligations. Service providers and agents we use may also receive data for these purposes if they conform to our written data protection instructions. These are largely companies in the categories listed below.
We fundamentally treat the data we collect as confidential. We will share information about our customers and their data only if legal regulations require it, the customer has given consent, or commissioned processors we hire guarantee compliance and conformity with the specifications of the EU General Data Protection Regulation.
On these conditions recipients of personal data may, for instance, include:
Data recipients may also include offices for which we have received consent to share data.
Data are transmitted to countries outside the EU or EEA (so-called third countries) only when this is necessary in order to carry out orders we receive, when it is legally required (e.g., tax reporting requirements), when we were given consent, or as part of commissioned data processing. If service providers are used in the third country, they are required to conform to the level of data protection in Europe through agreement of the EU standard contracting clauses in addition to written instructions.
We process and store personal data as long as necessary for fulfillment of our contractual and legal obligations. That may be a period of several years in case of long-term obligations.
If the data are no longer needed for fulfilling contractual or legal obligations, they are regularly deleted unless it is necessary to continue processing them for a limited time for the following purposes:
Each data subject has a right of information under GDPR Art. 15, the right of correction under GDPR Art. 16, the right of deletion under GDPR Art. 17, the right to restrict processing under GDPR Art. 18, the right to object under GDPR Art. 21, and the right of data portability under GDPR Art. 20.
Once given to us, consent to process personal data may be revoked at any time. This also applies to revoking statements of consent given to us before the EU General Data Protection Regulation took effect, i.e., before May 24, 2018. Note that the revocation is only effective for the future. It does not affect processing that occurred before the revocation.
As part of a business relationship, the customer must make the personal data available which we need to begin and implement a business relationship and meet the associated contractual obligations, or which we are legally required to collect. Without such data we must reserve the right to decline to conclude the agreement and carry out an order, or to stop implementing and possibly terminate an existing agreement.
Particularly under legal regulations to combat money laundering, there may be a requirement to identify our customers and business partners before establishing a business relationship, for instance using the personal ID card, and to collect and record the name, date and place of birth, nationality, and home address. To satisfy this type of legal obligation, our customers are required by Section 4 (6) of the Money Laundering Act to make the necessary information and documents available to us and to promptly notify us of any changes occurring in the course of the business relationship.
Pursuant to GDPR Art. 22 we fundamentally do not use a fully automated decision-making process when establishing and implementing the business relationship. If we use such methods in an individual case, we will give separate notice in advance where required by law.
We process data in a partially automated process with the goal of rating certain personal aspects (profiling).
For instance, we use profiling in the following cases:
1. Right of objection for an individual case
You have the right to object, due to reasons resulting from your special situation, to the processing of personal data relating to you that is performed on the basis of GDPR Art. 6 (1) (e) (Data processing in the public interest) and GDPR Art. 6 (1) (f) (Data processing on the basis of weighing different interests); this also applies to profiling based on this provision within the meaning of GDPR Art. 4 (4).If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling reasons requiring protection for the processing that outweigh your interests, rights, and freedoms, or unless the processing serves the purpose of asserting, exercising, or defending legal rights and claims.
2. Right of objection to data processing for advertising purposes
In individual cases we process your personal data in order to conduct direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct advertising.If you object to the processing for direct advertising purposes, we will no longer process your personal data for those purposes.The objection does not require a specific form and should be lodged by telephone if possible at telephone number +46 70 588 70 91, or alternatively may be filed in our offices.