How we handle your personal data

Gränna Privattandläkare AB (GAPAB) is the data controller for the processing of your personal data. If you have questions about how we handle your data, you are welcome to contact us:

When you use our website or contact us, we may collect the following data:

• Name and contact details (email and phone number) that you provide when booking or contacting us.
• Information about your requested treatment and the message you send us.
• The date and time of an appointment you book.
• Technical information your browser sends automatically, for example so the website works correctly.

We use your data to book and confirm your appointment, answer your questions, contact you about your visit, and to meet our obligations as a care provider. We never use your data to sell products or share it with third parties for marketing purposes.

Processing takes place in order to enter into and perform an agreement with you (your booking), to fulfil our legal obligations as a care provider, and based on our legitimate interest in answering enquiries. Swedish patient data law (patientdatalagen) also applies to care.

We keep your data only as long as needed for the purpose — for example to handle your booking or answer your question. Patient records are retained in accordance with Swedish patient data law. Contact enquiries are deleted once the matter is closed.

We never sell your data. To run the website and the clinic we use carefully selected providers (data processors) that process the data only on our instructions:

• Hosting and database providers that store bookings and messages securely.
• An email service used to send confirmations and replies to you.
• Resurs Bank, if you choose instalment payments — your application is then handled directly by the bank under their own privacy policy.

We use cookies so the website works and to improve your experience. You choose whether to accept cookies when you visit the site, and you can change your choice at any time via the "Cookie settings" link at the bottom of the page.

Information about your dental care and treatment is kept in the clinic's records in accordance with Swedish patient data law. That processing is separate from this website and governed by healthcare legislation.

Under the GDPR you have the right to:

• Access the data we hold about you.
• Have inaccurate data corrected.
• Have your data erased when it is no longer needed.
• Object to or restrict our processing.
• Receive your data in a machine-readable format (data portability).
• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

To exercise any of your rights, contact us at tidbok@gapab.se. You also always have the right to contact the Swedish Authority for Privacy Protection (IMY) if you are unhappy with how we process your data.