Privacy Policy

Your privacy is very important for us and we recognize the need to provide you with adequate protection and management for all of the personal data you share with us. In order to do that, we have established this privacy policy, which describes the way in which we collect and use your personal data. This privacy policy applies only to the data we have collected from the website, nowhere else. As a consequence, it does not necessarily reflect our practices regarding the data collected from offline resources or from other websites managed and owned by Diaverum subsidiaries.

Personal data

The majority of the Diaverum website services, characteristics and functions does not require any form of subscription and will allow visits to any webpage without said visitor having to reveal their identity. However, in order to offer certain services, characteristics and functions, we might ask you to give us some precise personal data about you. The aforementioned data may include, as an indication, your name, the name of your company (as appropriate), your email address, your postal address and your telephone number. For some services, we might ask you to give us some limited medical data. Certain personal data might be compulsory, which means that if you decide not to send them, you may not be able to access some sections of the website, or receive answers to your requests.

Data controller

Diaverum Sweden AB
Tax identification number. 556209-2790,
Box 4167
227 22 Lund
Sweden
Telephone number: 046-2873000

Diaverum Sweden AB is the data controller and, for this reason, responsible for your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679.

Consent

Each section of the website that requires personal data will contain a link to the privacy policy. By accepting this privacy policy and agreeing to send your personal data for some sections, you recognize and accept that Diaverum collects and uses your personal data in accordance with this privacy policy.

Use of personal data

Before collecting personal data, we will identify the collection's purpose. Furthermore, we will only collect and use your personal data to achieve the indicated objectives, informing you of these when we ask for this information. For example, we can collect and use your personal data to provide you with or to bill you for products or services that you request. We may also use your personal data to commercialize products and services which could be of your interest or to contact you for other purposes.

Personal data collected through the website will be used for the following purposes:

- to facilitate access to the requested information regarding our services, when it is asked for;

- to manage job applications in our selection processes;

- to process reservations made through the website;

- to send information regarding our new products and services, when it is specifically agreed to;

- to respond to and manage comments and suggestions.

Personal data will only be used for purposes requested and granted by the person concerned, without any possibility of using them for other purposes.

Data retention

Personal data will be retained as long as necessary to achieve the purposes previously described, or until agreement is withdrawn, where appropriate.

Similarly, personal data will be retained as long as the responsibilities of your data processing arise, if required by the applicable law.

Legitimization

Personal data will be treated on the basis of the consent given, or for the achievement of a contractual relationship that the person concerned is part of, where appropriate.

Furthermore, we will be able to treat personal data on the basis of a legitimate interest from the data controller, in compliance with article. 6.1 f) of the GDPR.

Recipients of the data

We will not sell, share or otherwise make your personal data available to third parties, except for being in conformity with this privacy policy.

We can transfer your personal data to Diaverum subsidiaries and third parties with which Diaverum has a contractual relationship, in order to subsequently process your personal data in accordance with the purposes for which your data was collected, like delivery and evaluation services, or technical assistance. This will only happen if a subsidiary or third party agrees with Diaverum to only use personal data to achieve the agreed purpose(s), and according to the terms for which the data was initially collected.

We can reveal your personal data if required by the existing laws, court orders or government regulations or when this revelation is otherwise necessary in support of any legal or criminal investigation.

Furthermore, in case of a reorganization, merger or sale, we can transfer your personal data to the corresponding third party, whenever the aforementioned party accepts to treat the personal data in accordance with this privacy policy.

We can secure the services of external parties to help us in the process of collecting and treating the data previously described in this paragraph, retaining these parties under the previously mentioned obligations.

Exercise of rights

You have the right to request access, rectification, erasure, opposition, limitation and portability rights. All of this, by letter, accompanied by a copy of official documentation that identifies you, intended for Diaverum. To do that, we kindly ask you to contact us at spain@diaverum.com. In case of dissatisfaction with the treatment, you also have the right to file a complaint to the competent supervisory authority (in Spain, it is the Spanish Data Protection Agency).

Your requests will be managed quickly and with the necessary diligence. Petitions to erase personal data will be subject to the corresponding and existing legal and regulatory requirements.

Security and confidentiality

To ensure security and confidentiality of your personal data, we use data networks protected by, for example, firewall standard and password protection systems. We have taken appropriate technical and organisational measures to protect your personal data from potential loss, inappropriate use or unauthorized access, disclosure, alteration and destruction.

Transfer of personal data abroad

Because Diaverum is a multinational company, we own databases in different countries, and we can transfer your personal data to any one of Diaverum´s databases located outside of your residence country. This includes the possibility of transferring your personal data to a database in a country located outside the European Economic Area (now entitled "EEA"). Some of these countries may not have data protection laws which are similar to the EEA's. If this is the case, we will take all necessary measures to ensure that your personal data is correctly protected.

On the basis of general principles for transfers, transfers of personal data to a third party or an international organization will only be carried out if all conditions set out by the GDPR are met, in order to ensure that this level of personal data protection is not undermined. On the basis of general principles for transfers, Diaverum will only carry out transfers when an adequate decision on the part of the Commission duly published into the Official Journal of the European Union is taken, when an agreement with the standard protection data clauses adopted by the Commission or the competent supervisory authority is concluded or, as appropriate, when the appropriate guarantees for any other instrument regulated in article 46 of the GDPR are provided.

Processing of data in the app

By accepting the terms and conditions, you expressly consent to let Diaverum manage, process or transmit the information or the data resulting from the use of the app.

Personal data will be treated by Diaverum Sweden AB, located in Box 4167, SE-227 22 Lund, Sweden and, as appropriate, the Diaverum affiliate with which the treatment was contracted. Treatment carried out through the app will serve only to provide the requested services, the legal basis of this treatment being the performance of a contract in which the person concerned is a party.

Personal data will be kept as long as necessary in order to achieve the purpose described and can bear responsibilities for their treatment, in accordance with the applicable law.

Diaverum will implement all reasonable technical and organisational measures which are required to ensure the security of personal data and prevent its alteration, loss, treatment or unauthorized access, given the state of the technology and the special nature of the medical data.

Furthermore, one recognizes and expressly accepts that Diaverum provides confidential medical reports regarding one´s health care, and accepts, similarly, to take responsibility of the maintenance of the confidentiality of this data. Furthermore, one accepts that Diaverum does not breach any of its obligations about privacy, if you allow the reproduction, publication or reception of data by third parties.

One also consents to Diaverum storing your personal data for purposes of quality, health or documentation research, both in local servers and servers of Diaverum in Sweden.

Diaverum complies with all the requirements about privacy and data protection. In this regard, you can consult Diaverum privacy policy on its website.

You can exercise the access, rectification, erasure, opposition, limitation and portability rights. All of this, by letter, accompanied by a copy of official documentation that identifies you, intended for Diaverum. To do that, we kindly ask you to contact us at spain@diaverum.com. In case of dissatisfaction with the treatment, you also have the right to file a complaint to the competent supervisory authority (in Spain, it is the Spanish Data Protection Agency).

Employment

If you send us your curriculum, bear in mind that, in virtue of the Regulation (EU) 2016/679 of the European Parliament and the Council from April 27th, 2016, your personal data will be used to contact you when we start a new selection process, but without using this data for any other purpose. Personal data may be communicated to a Diaverum affiliate, to whom the job offer you have shown interest in may belong. 

We will contact you when we start any selection process in which your profile may be suitable. Meanwhile, we will retain your personal data for a two-year period in order to retain your participation. For this reason, and in compliance with the principle of data quality, we would like you, in case of any modification of your personal data, to inform us of these changes when appropriate.

You can exercise the rights of access, rectification, erasure, opposition; you can restrict the processing of your personal data, or directly oppose the processing, or exercise your data portability right, by sending a letter, accompanied by a copy of an official document that identifies you, intended for Diaverum, at spain@diaverum.com. Furthermore, you can file a complaint to the Spanish Data Protection Agency.

Minors protection policy

Any individual who provides personal data by means of this website and accepts its processing declares formally to be older than 13 years of age.

The access and use of the web portal remains prohibited to the minors under the age of 13.

Diaverum reminds the adult responsible for any minor, that, if said minor provides their personal data to request any product, it will remain the responsibility of the adult.

We must also inform you that there exists software to narrow down navigation through filters and to block certain content.

Social networks

By following our profile on social networks, you expressly consent to the processing of your personal data, in accordance with the privacy policy of the corresponding social network. You also expressly consent to Diaverum having access to the processing of your data contained in your profile and any information from your newsfeed about a Diaverum product.

In accordance with the Regulation (EU) 2016/679 of the European Parliament, we inform you that the personal data of Diaverum followers on social networks will be put into a file owned by Diaverum, in order to keep you informed through social networks about news related to Diaverum activities.

Your request to connect necessarily involves your consent to the indicated treatments.

The publication of comments and content on social networks will become public, which is why users must take particular caution when they decide to share personal data. Diaverum is not responsible for the data added by the users on the page. However, people whose personal data is published or included in comments can request their deletion to Diaverum.

At any moment, you can exercise these rights of access, rectification, erasure, opposition; you can restrict the processing of your personal data, or directly oppose the processing, or exercise your data portability right. All, by letter, accompanied by a copy of official documentation that identifies you, intended for Diaverum. In case of dissatisfaction with the treatment, you also have the right to file a complaint to the Spanish Data Protection Agency.

Notification of changes

Diaverum has the right to modify this privacy policy on a regular basis. The last amended date is indicated at the end of this policy. If we make any changes to it or to how the data is used, we will publish these changes on this page. We would like you to read our privacy policy regularly . If, at any moment, we decide to use your personal data in a way that is different to the original plan following its collection,

Questions or comments

For any questions or comments regarding our privacy policy, please contact us at spain@diaverum.com.

Last updated: July 2nd, 2018