Medsensio AS is the controller according to the GDPR and therefore responsible for the data processing explained herein.
Thank you for your interest in our website and our online services. Data protection is among our highest priorities. Thus, the following policy is designed to inform you about the processing of your personal data and your rights regarding this processing, according to the General Data Protection Regulation (“GDPR”) and other data protection laws.
Medsensio as is a Controller of the personal data you (data subject) provide us. We collect the following types of personal data:
We process your information for purposes based on legitimate business interests, the fulfilment of our contract with you, compliance with our legal obligations, and/or your consent.
We use personal information as part of account creating and login. We use the personal information to authorise and authenticate the use of the system.
We may use third party service providers to process your personal data. These service providers may be located in countries within and outside the European Union (EU) and the European Economic Area (EEA). We ensure that these service providers process personal data in accordance with European data protection legislation to guarantee adequate data protection. Transfers of personal data to other recipients is not performed, except where we are obliged to do so by law. For more information about appropriate safeguards for the international data transfer or a copy of them, please contact our Data Protection Officer.
We keep your information for as long as necessary to fulfil the purposes outlined in this privacy notice unless otherwise required by law. After this period, your personal data will be irreversibly destroyed. Any personal data held by us for marketing and service update notifications will be kept by us until such time that you notify us that you no longer wish to receive this information.
Should you believe that any personal data we hold on you is incorrect or incomplete, you have the ability to request to see this information, rectify it or have it deleted. Please contact our Data Protection Officer at any time with a notification under the contact information mentioned above under Section 1 to make use of your rights. These rights are the following:
The right to receive information about the data processing and a copy of the processed data;
The right to demand the rectification of inaccurate data or the completion of incomplete data;
The right to demand the erasure of personal data;
The right to demand the restriction of the data processing;
The right to receive the personal data concerning the data subject in a structured, commonly used and machine-readable format and to request the transmittance of these data to another controller;
The right to object to the data processing;
The right to withdraw a given consent at any time to stop a data processing that is based on your consent;
The right to file a complaint with the competent supervisory authority.
In the event that you wish to complain about how we have handled your personal data, please contact us at firstname.lastname@example.org or in writing at Sykehusvegen 21, 9019 Tromsø. Our DPO will then look into your complaint and work with you to resolve the matter. If you still feel that your personal data has not been handled appropriately according to the law, you can contact https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html. to file a complaint.