1. General
1.1 This privacy policy (”Privacy Policy”), describes how AMRA Medical AB, registration number 556804-3227, Badhusgatan 5, SE-582 22 Linköping, Sweden (“AMRA”), collects, uses, discloses, stores and otherwise process personal data.
1.2 We respect your right to privacy, and we are committed to complying with applicable data protection rules and to safeguard your rights. We want to make sure that you are aware of what types of information we collect or obtain from you via the website or during your communication or interaction with us, how this information is used and how we work to protect it.
1.3 This Privacy Policy describes, amongst other things, which information we collect about you, how your personal data is processed and for what purposes we collect and use the personal data. This Privacy Policy also describes your rights and how you can contact us about the use of your personal data.
1.4 AMRA is the data controller responsible for processing your personal data in accordance with applicable data protection legislation.
2. What types of data do we process?
2.1 Personal data means all types of information which can, directly or indirectly, be used to identify a living physical person (“Personal Data”).
2.2 AMRA collects and processes Personal Data about you when you visit our website, including: (i) information about how you in particular use our website; and
(ii) technical data, which may include your URL, IP address, unique device ID, network and computer performance, browser type, language and identifying information, general geographical location and operating system.
2.3 AMRA collects and processes Personal Data about you when you sign up for our newsletter, including name, email, what company you work for and your work title.
2.4 AMRA further collects information that is necessary for us to be able to contact you in your role as a representative for a company. AMRA collects and processes information about you if you represent a company that is a customer, supplier, contractor or otherwise partner of ours, as well as a potential customer, supplier, contractor or otherwise partner of ours. The information that we collect and process in such cases include contact information (such as name, address, title, company, email address and telephone number).
2.5 AMRA also collects Personal Data in connection with recruiting staff members. When you contact us to apply for a job opportunity with us, we collect such Personal Data that you provide us with in connection with such application. Personal Data normally included in a job application is contact information (name, address, email address and telephone number), CV (including previous work experience and education), and occasionally picture and personal identity number.
2.6 Furthermore, AMRA collects and processes Personal Data about you when (i) a health care provider engages AMRA as a service provider and uses AMRA’s services in connection with its provision of health care to you, and (ii) you choose to participate in a study which AMRA conducts or otherwise participates in. The following categories of Personal Data are processed: unique identifiers (such as pseudonymized data key), MRI images, sex, age, weight, height, and when applicable nationality, ethnicity, any relevant disease states, pseudonymized data required for the interpretation of results (such as results from analysing blood samples, medical history, and other tests relevant for the purpose of the research). AMRA also collects and processes Personal Data about you when you agree to have your MRI image used by AMRA in marketing.
| Headquarters | AMRA Medical AB, Badhusgatan 5, SE-582 22 Linköping, Sweden | Contact info@amramedical.com Web www.amramedical.com |
| Office Locations | Stockholm, Sweden Oslo, Norway Dallas, USA |
Personal Data that AMRA collects and processes in such cases include name, age, sex, height, weight, BMI and MRI images.
2.7 Information about how we store and use cookies is described in our cookie policy, available at:
https://amramedical.com/cookie-policy-eu/?cmplz_region_redirect=true
| Cookie Policy (AU) | https://amramedical.com/cookie-policy-au/ |
| Cookie Policy (BR) | https://amramedical.com/cookie-policy-br/ |
| Cookie Policy (CA) | https://amramedical.com/cookie-policy-ca/ |
| Cookie Policy (EU) | https://amramedical.com/cookie-policy-eu/ |
| Cookie Policy (UK) | https://amramedical.com/cookie-policy-uk/ |
| Cookie Policy (ZA) | https://amramedical.com/cookie-policy-za/ |
| Opt-out preferences | https://amramedical.com/opt-out-preferences/ |
3. Why do we process your data?
3.1 AMRA collects and process Personal Data relating to you for the following purposes:
Purpose: To ensure the technical functioning of the website.
Legal basis: The processing is necessary for the purpose of the legitimate interests of AMRA, which is for AMRA to be able to provide the website.
Purpose: To analyse your use of the website in order for us to develop and improve the website.
Legal basis: The processing is necessary for the purpose of the legitimate interests of AMRA, which is for AMRA to be able to develop and improve the website.
Purpose: to provide our services.
Legal basis: AMRA may process your Personal Data for the purpose of complying with our undertakings under a specific agreement.
Purpose: to send newsletters that you have requested and to respond to communications you have sent us.
Legal basis: The legitimate interest of AMRA is the legal basis for AMRA’s processing of your Personal Data in connection with AMRA sending out its newsletters. The legitimate interests of AMRA in such cases are for AMRA to be able to market itself and its services.
Purpose: To contact you as a representative for a customer, supplier, contractor or otherwise partner of ours.
Legal basis: The legitimate interest of AMRA is the legal basis for when AMRA is processing your personal data when you are a representative for a customer, supplier, contractor or otherwise partner of ours. The legitimate interests of AMRA in such cases are AMRA’s need to contact you as a representative to administrate the relationship AMRA has with the company that you represent.
Purpose: To market ourselves and our services and invite you to events we believe might be of interest to you or the company that you represent (provided however, that you will always have the right to opt-out of any marketing messages from us).
Legal basis: The legitimate interest of AMRA constitutes the legal basis for processing in situations where you provide us with your contact information by handing us a business card or otherwise have expressed an interest in our or services. The legitimate interests of AMRA in such cases are for AMRA to be able to market its services.
Purpose: To develop and improve our services.
Legal basis: The legitimate interest of AMRA is the legal basis for when AMRA is processing your personal data for development purposes. The legitimate interests of AMRA in such cases are for AMRA to be able to develop and improve its services.
Purpose: To process job applications.
Legal basis: The legitimate interest of AMRA is the legal basis for AMRA’s processing of your Personal Data in connection with your job application, in which cases the legitimate interests of AMRA are to be able to secure that its employees has sufficient education and experience.
Purpose: To conduct clinical studies (only with your prior consent).
Legal basis: AMRA’s processing of your Personal Data is based on your consent where you have chosen to participate in a clinical study, whereby a MRI image of you is taken. You can at any time withdraw your consent to such processing by contacting us. For contact details see Section 9 below.
Purpose: To produce marketing material in relation to MRI images (only with your prior consent).
Legal basis: AMRA’s processing of your Personal Data is based on your consent where you have chosen to participate in AMRA’s production of marketing material, whereby a MRI image of you is taken. You can at any time withdraw your consent to such processing by contacting us. For contact details see Section 9 below.
Purpose: To fulfil requirements by law.
Legal basis: AMRA may process your Personal Data for the purpose of complying with safety standards and other statutory requirements, based on the legal ground that this is necessary for compliance with a legal obligation to which AMRA is subject.
4. For how long do we store your data?
4.1 Your Personal Data is stored only for as long as there is a need to keep the data in order to fulfil the purposes for which the data was collected in accordance with this Privacy Policy.
4.2 The Personal Data will be deleted if the purpose of the processing of Personal Data has been achieved, or if you withdraw your consent (if applicable) to the processing of Personal Data by contacting us (for contact information, please see Section 9 below). Personal Data received in connection with a job application for an applicant that is not hired will be stored for no longer than two years after the date of the application.
5. How may the data be shared?
5.1 AMRA will not sell, trade or share your Personal Data to third parties unless provided in this Privacy Policy. However, AMRA may share Personal Data with our trusted subcontractors and co-operation partners in order to provide you with our services. They may need access to your Personal Data in their assignment for us, but they will not be allowed to use the Personal Data for any other purpose.
5.2 Unless otherwise set forth below or in any specific information regarding our processing of your Personal Data, AMRA will not transfer your Personal Data to any country outside the EU/EEA.
5.3 AMRA is part of an international group of companies, some of which are based outside of the EU/EEA. Personal Data may be transferred to AMRA Inc., a group company of AMRA based in USA, and AMRA Medical Limited, a group company of AMRA based in the UK. AMRA has secured the safety of transferred Personal Data by having entered into the EU-commission’s Standard Contractual Clauses for the transfer of personal data to companies established in third countries with such non-EU/EEA companies.
5.4 Personal Data that AMRA collects may be transferred to IT service providers based outside of EU/EEA as a part of such IT service provider’s provision of services to AMRA. Personal Data may also be transferred to USA or other countries outside EU/EEA through AMRA’s use of e.g. cloud services, and other IT services. AMRA has ensured that your rights are guaranteed before making such transfer to countries outside EU/EEA by e.g. entering into the EU-commission’s Standard Contractual Clauses with such external service providers. More information on these clauses is available at https://ec.europa.eu/info/law/law-topic/data-protection/international
dimension-data-protection/standard-contractual-clauses-scc_en. Where applicable, transfers of Personal Data to USA are based on the Data Privacy Framework (DPF). More information on DPF is available at https://www.dataprivacyframework.gov/.
5.5 Personal Data may be disclosed by AMRA to comply with legal requirements or other requirements from official authorities, in order to safeguard AMRA’s legal interests or to detect, prevent, or draw attention to frauds or other safety or technical problems.
6. Protection of your personal data
6.1 You should always feel secure when you provide your Personal Data to us. We have employed a wide range of security measures to help protect your Personal Data against unauthorized access, modification and deletion.
6.2 AMRA protect your Personal Data using commercially adequate safeguards to prevent loss, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include data encryption, firewalls, automatic timeouts and pseudonymization where applicable.
6.3 To the extent that the Health Insurance Portability and Accountability Act and the associated regulations, 45 C.F.R. parts 160-165, and the Health Information Technology for Economic and Clinical Health Act and the associated regulations, as they may be amended, are applicable to your Personal Data, AMRA will process your Personal Data also in accordance with the provisions of those laws.
7. Your rights
Access
7.1 You are always entitled to access and view your Personal Data.
Rectification
7.2 You are always entitled to access and view your Personal Data, to object and to request that we correct or update your Personal Data.
Objection
7.3 You are always entitled to object to such processing of your Personal Data which is based on legitimate interests.
Erasure
7.4 Under certain circumstances (expressed in applicable data protection legislation), you have the right to request that AMRA deletes your Personal Data.
Restriction of processing
7.5 Under certain circumstances (expressed in applicable data protection legislation), you may request that AMRA restricts the use of your Personal Data.
Data portability
7.6 If you have provided us with Personal Data, you also have the right to receive your Personal Data, in a structured and commonly used, machine-readable format, for transfer to another controller.
Requests and complaints
7.7 If you wish to exercise any of the abovementioned rights or if you have any questions regarding Personal Data held by us or this online Privacy Policy, please do not hesitate to contact us (for contact information, please see Section 9 below).
7.8 Should you be dissatisfied with our processing of your Personal Data, please let us know, and we will do our best to meet your complaints. Your integrity is very important to us, and we always strive to protect and secure your Personal Data in the best possible way. Should we nevertheless, in your opinion, fail in this ambition, please note that you are also entitled to lodge a complaint with the Swedish Data Protection Authority (Sw. Integritetsskyddsmyndigheten), or another competent supervisory authority within the EU/EEA.
9. Changes to this privacy policy
AMRA may, at any time, make amendments to this Privacy Policy. AMRA will publish the amended version on our website. If the amendments are substantial, AMRA will send the amended Privacy Policy to your email, and if AMRA does not have your email, AMRA will send it to you by other means (if possible).
10. How to contact us
You can contact us at: AMRA Medical AB, Badhusgatan 5, SE-582 22 Linköping, Sweden, or at our email: dpo@amramedical.com