Processing of personal data

Processing of personal data The Swedish eHealth Agency, Sankt Eriksgatan 117, 113 43 Stockholm, telephone: +46 (0) 10-458 62 00, is the data controller with respect to the processing of personal data in Hälsa för mig. The Swedish eHealth Agency processes personal data as follows.

Registration of account
If You choose to register an account for the service Hälsa för mig (”Account”), the Swedish eHealth Agency will register and maintain Your personal identity number in order to administer Your Account and provide the service Hälsa för mig in accordance with the Hälsa för mig Terms of Use. The Swedish eHealth Agency may also use Your personal identity number for statistical purposes such as, e.g. date of birth and gender for analysing the use of the service (but not on an individual level) as well as to communicate with You if necessary, e.g. in case of major changes of the service or in connection with an incident. In such case information will be sent to Your national registration address. Please note that when You provide Your personal identity number to the Swedish eHealth Agency in connection with the registration of an Account, this information will constitute an official record that may be disclosed by the Swedish eHealth Agency in accordance with the principle of public access to official records.

Personal Data stored on the Account
You decide in Your sole discretion what personal data that You would like to store on Your Account. You may, however, only store personal data related to Your own, or if you are a parent or a legal guardian a minor’s, health, daily life and healthcare and as permitted under Section 5.1 of the Terms of Use. The Swedish eHealth Agency will only maintain and technically process the personal data that You choose to store on Your Account  on Your behalf. The Swedish eHealth Agency does not have the right to access the personal data that You have stored on Your account. The Swedish eHealth Agency will implement technical and organizational measures to protect Your personal data from unauthorised access. Personal data stored on Your Account does not constitute an official record and is not subject to the principle of public access to official records.  

Disclosure of Personal Data
You can choose to share Your personal data with other persons who have registered their own Hälsa för mig accounts. You can also choose to use various services and features via Hälsa för mig by connecting applications provided by third parties (”Applications”) to Your Account.    The Swedish eHealth Agency will use a technical feature in Hälsa för mig to ask for Your explicit consent before any of Your personal data is shared or disclosed to others. 

Please note: If You, or the person to whom You have granted such rights by use of the sharing feature, connect an Application to Your information and You have given Your explicit consent to the disclosure and use of Your personal data by such Application, the recipient of Your personal data will be the data controller with respect to the subsequent processing of Your personal data in the Application. Please read the terms and privacy policy for the Application carefully before You decide to connect it to Your Account. 

Subcontractors
The Swedish eHealth Agency may engage subcontractor’s for the processing of Your personal data in connection with the operations and administration of Hälsa för mig and Your Account. Such subcontractor is a data processor and may only process personal data on behalf of the Swedish eHealth Agency. The Swedish eHealth Agency will ensure that such subcontractor is bound by a written data processing agreement. 

Information, Rectification and Deletion
According to section 26 of the Swedish Personal Data Act (1998:204), You have the right, by a written and signed request, to obtain information about the personal data processed by the data controller, free of charge once per annum.  You also have the right to at any time request rectification, blocking or erasure of personal data that has not been processed in accordance with law.  Please note that the Swedish eHealth Agency does not have the right to access the personal data that You have stored on Your Account. You can, however, at any time check what personal data that you have stored by signing in to Your Account. You are responsible to correct any incorrect personal data and to delete personal data that is not necessary or relevant for Your use of Hälsa för mig.  You may at any time request that the Swedish eHealth Agency shall terminate Your account and delete all Your personal data. The Swedish eHealth Agency may also terminate Your Account and delete all Your personal data if You breach the Terms of Use or if the Terms of Use for other reasons are terminated, or upon Your death.

I hereby give my explicit consent to the processing of my personal data by the Swedish eHealth Agency as described above.