Integritetspolicy

General and substantive scope

For Loovi, respect for your personal privacy is a top priority. Our ambition is for you to feel safe when we handle your personal data. The purpose of this privacy policy ("Privacy Policy") is to clarify how we ensure that your personal data is processed in accordance with applicable legislation. This Privacy Policy applies to you who use Loovi AB’s health‑related services ("Services"), including Loovi Health (colloquially referred to as Loovi).

As a data controller, we ensure that the applicable data protection laws are complied with at all times and that we only process your personal data for the purposes set out in this Privacy Policy.

We only process your personal data if it is necessary to achieve the purposes of the processing.

..The categories of personal data that we process include

  • Contact information, such as name, phone number, address and email address
  • Personal number
  • Health‑related data, such as test results, general health data you have chosen to provide, and medical notes on your results
  • Other information that you choose to share when you use our Service or otherwise communicate with us

..We only process your personal data for the following purposes

  • To provide and enable record keeping and other necessary documentation
  • To provide, administer and manage our Services
  • To analyze and further develop our Services
  • To fulfill the legal obligations of Loovi
  • In the event of mergers, divestments, restructurings, reorganizations, liquidations and other sales or transfers of Loovi’s assets
  • To pursue our legal interests in the event of a dispute
  • We do not use your personal data for any other incompatible purpose and only keep it for as long as necessary.

    For more information on how we handle your personal data, please see Loovi’s full privacy policy.

    If you want to read more about how we process your personal data when you visit our website, make purchases, as well as in marketing and similar activities, please refer to our Website Visitor Privacy Policy.

1.Responsibility for personal data and basis for processing

1.1. This privacy policy applies when Loovi AB (“Loovi”, “we”, “us”, “our”), corporate identity number 559459‑0041, processes personal data relating to individuals who use Loovi Health (“you”, “your”) services. Loovi’s processing of personal data complies with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1.2. Processing of personal data when using Loovi services is based on an agreement with you, the data subject. Processing also takes place in order to comply with legal obligations under law and authority decisions and, for specific treatments, with your consent.

2.Objectives of the processing

2.1. Loovi processes your personal data when it is necessary to fulfill the agreement with you. Loovi must process personal data in order to be able to offer the services and products that Loovi offers, and you cannot therefore be a customer of Loovi without us processing your personal data.

2.2. Your personal data is used, among other things, for invoicing, information and delivery of products, performance of services and contact with you as a customer. Personal data is also used to make your medical records available to you.

2.3. Loovi processes your personal data in the ways required to comply with obligations imposed on Loovi by government decisions and law, such as the Public Access and Secrecy Act (2009:400), the Health Care Act (2017:30) and the Patient Data Act (2008:355).

2.4. If you have chosen to consent to receive newsletters from Loovi, we will also process your personal data to send you information about our business.

2.5. If you have given your consent to participate in a research study that Loovi itself, or together with other organizations, is conducting, we will also process your personal data in order to conduct the research study in question.

3.Personal data processed

3.1. Personal data is any information that can be linked to a living individual. Loovi AB, which sells the product Loovi Health (referred to as Loovi in the vernacular), collects and processes different types of personal data in the course of its business, depending on the type of service you use. Some information about you will also be generated through the tests and samples you may order, such as the test results produced by laboratories and clinics assisting us.

3.2. The following personal data will be collected by Loovi AB from you when you use Loovi Health services:

  • Identity information: first name, last name, social security number and gender
  • Contact information: invoice and delivery address, e‑mail address, telephone number
  • Payment information: information to make payments to Loovi AB, or issue an invoice
  • Health information: test results, doctors’ comments and medical record data
  • Service/test information: which product (test or analysis) you have ordered
  • IT data: device details (e.g. IP address) for communicating with our systems

3.4. If you contact customer service, we may process additional personal data required to handle your case, such as case descriptions or bank details for refunds. Any other personal data you include in the description will not be stored.

3.5. Our website chat saves what you write to develop the function and handle cases. If you identify yourself or state your case, that text becomes personal data.

4.Recipients of personal data

4.1. Loovi Health works with other healthcare providers, developers and suppliers to deliver the service. We share data only when necessary to (i) fulfill our agreement with you or (ii) comply with law or regulation:

  • Clinics, health centers and labs for sample collection and analysis
  • Hired doctors to analyze and comment on results
  • Authorities, when required by law or at your request
  • Notification services, which only access your contact data
  • Developers and consultants, who may need basic info for troubleshooting
  • Your employer (with your consent) for billing and aggregated reporting

4.3. Sensitive health data is only accessible to authorized staff and disclosed only as permitted by law.

4.4. We process as much data as possible within the EU/EEA, and any transfers outside the EU/EEA are covered by contracts ensuring equivalent protection.

4.5. No health data processed by Loovi AB or its suppliers is transferred outside the EU/EEA.

5.Research projects

5.1. Loovi AB may collaborate with universities on clinical studies in preventive medicine.

5.2. We may invite you to participate if you qualify for a study.

5.3. Participation is voluntary and based on informed consent.

6.Storage of personal data

6.1. Data is stored only as long as necessary to achieve the described purposes.

6.2. Patient records are retained for ten years from the last entry.

6.3. Accounting data (invoices, etc.) is stored for seven years as required by law.

6.4. Account‑linked data remains until you close your account; thereafter it is deleted when no longer needed.

7.Deletion of personal data

7.1. Data is deleted or de‑identified when no longer needed.

7.2. Before using data for statistics or development, it is anonymized and aggregated.

7.3. Deletions are irreversible and cannot be undone.

8.Data protection

8.1. We take appropriate technical and organizational measures to safeguard your data and have internal guidelines to prevent and detect leaks.

8.2. In case of a personal data breach, we may contact you in accordance with GDPR Article 34.

9.Cookies

9.1. Our website uses cookies—small text files stored on your device—to track visits.

  • Permanent cookies remain for a fixed period
  • Session cookies disappear when you close your browser
  • We use cookies for site functionality, statistics and advertising
  • Third‑party cookies support advertising on other sites
  • No identifying info (e.g., email or name) is stored in cookies
  • You can disable cookies via your browser settings or opt to be prompted
  • For more on cookies, see the Swedish Post and Telecom Authority’s site

10.Your rights

10.1. We have a Data Protection Officer who you can contact to exercise your rights.

10.2. You can withdraw consent at any time without affecting prior processing.

10.3. You have the right to restrict processing and to object to processing.

10.4. You can request an extract of your personal data in electronic or paper form.