Personal data in Amnicare and Pulstavlan
Stretch Care is not the controller of the data that is processed within our products. That information is owned by our customers. Please see each respective customer’s privacy policy for more information about how they handle your data.
Stretch Care only processes personal data in our products in accordance with the Data Protection Agreements (DPA) that are signed with each of our customers. If you have any questions concerning the processing of your data in this context, contact the care provider who is responsible for that data.
If you do not know who is the controller of your data, contact us at dpocare@stretch.se for help.
Privacy policy
This privacy policy explaines how Stretch Care AB (also referred to as “we”, or simply “Stretch Care”) processes personal data about suppliers, customers, partners and potential recruits. This policy is not applicable to information handled within our products (see statement above).
Personal data
Stretch Care is the controller for all personal data that you provide us with, as well as for data we may collect from someone else (so called third party).
We may process the following personal data:
-
Name
-
Role and employer
-
Email address
-
Phone number
-
Photo
As part of potential recruitments, as well as for some suppliers, we may also process:
-
CV
-
Personal identity number
Please note that for employees there is a separate privacy policy.
Purpose and legal ground for processing
We process personal data to fulfill contracts entered into between you or your employer and Stretch Care, or to take measures to enter into such contracts with you.
We may also process your personal data in order to advertise Stretch Care, informing about us and the services we provide. Processing of your personal data is in this case done on the basis of consent if that has been provided. We may also, on the basis of legitimate interest, provide you with information we believe may be of interest to you. You can always decline to receive further information by contacting us at dpocare@stretch.se.
We may collect personal data from a third party for recruitment purposes. Processing is in this case based on legitimate interest.
Stretch Care may also process your data should we be required to do so by law or ordered by public authorities.
Transfer of personal data
Stretch Care has a customer management system and the supplier of that system is a processor of personal data on our behalf in those cases where you represent a potential or actual customer. When your personal data is shared with our data processor, it is only for purposes compatible with those for which we process the data.
Stretch Care may also transfer your personal data to other third parties which provide us with marketing or IT services. Such transfer is carried out in order for us to fulfill our part of an agreement with you. In case the data is transferred to a party which is a controller in its own right, that party’s privacy policy applies.
Data we handle is stored and processed on servers within EU/EES, or with suppliers that are contractually bound to the requirements of GDPR (through so called standard contractual clauses). For more information about transfer of data outside of EU/EES, contact dpocare@stretch.com.
Data storage and management
Stretch Care will handle personal data while there is a contract in place, and for the time thereafter which is required to fulfill all contractual and legal obligations.
Stretch Care will retain personal data we are legally obliged to keep, for the duration stipulated by law.
Stretch Care will retain personal data for marketing purposes for a period of 5 years after the last contact unless you notify us that you no longer wish to receive such information or marketing, in which case Stretch Care will immediately delete the personal data processed for this purpose.
Stretch Care will save personal data related to recruitment for up to 2 years after the last contact with you, unless inform us that you no longer with for Stretch Care to save that information. If so, Stretch Care will immediately delete any personal data about you processed for this purpose.
If you have communicated with us outside of a contract, we reserve the right to retain the communication for 15 years unless you ask us to delete your personal data.
Stretch Care may, with your consent, process your personal data in for example social media and on our website. This data is stored as long as we have your consent or until it has been unpublished.
Security
Stretch Care takes appropriate technical and organizational measures to prevent unauthorized or unlawful processing and access, loss, destruction, or damage to your personal data, thereby ensuring an appropriate level of security.
Your rights
You have a right to:
-
without charge receive confirmation of whether we process personal data about you, as well as gain access to that data in accordance with what is stipulated by law
-
demand that we correct incorrect personal data about you
-
demand that we delete your personal data, unless there is legal reason for us to continue processing it
-
demand that we limit the processing of your personal data, unless there is legal reason for us to continue processing it
-
demand a copy of the personal data that we have about you, in a structured, commonly used and machine readable format (portability)
-
withdraw your consent at any time – in which case we must cease future processing the personal data we process based on your consent.
You also have the right to lodge a complaint about our processing with the supervisory authority: http://www.imy.se.
Changes to this policy
Stretch Care reserves the right to amend this privacy policy as required, for example in order to comply with updated laws and regulations. Updated privacy policies will be published on Stretch Care's website.
Contact
If you have any questions about how we process your personal data, contact us at dpocare@stretch.se.