Privacy policy for users

Privacy policy for you who use our products

NordicInfu Care AB with organization number 556649-1790 (“Nordic Infucare”, “we”, “our” or “us”), is responsible for the processing of your personal data1 in the manner described below. We care about and value your privacy, which is why in this privacy policy we want to inform you about how we process your personal data as a user of our products and what rights you have in relation to our processing. 

Nordic Infucare is part of the Air Liquide Group. If you have any questions regarding our processing of your personal data, or if you wish to exercise any of your rights, please use the form in this link https://www.airliquide.com/group/contact-us-gdpr. The Data Protection Officer's postal address is Laurence Thomazeau, Data Protection Officer, 75 quai d'Orsay - 75007 Paris, France.

¹ Personal data is any kind of information and data that relates to you, e.g. your name, telephone number and information about your health.

Purpose and legal basis for the processing of your personal data

We process your personal data for the following purposes:

To handle questions relating to the products we distribute

When you contact us with questions regarding the products we distribute we will process your personal data only if your case requires feedback from us. In that case we will process your name and telephone number or email address, depending on the type of feedback required. When you call us, we process your data based on your consent (legal basis). The data is processed until your case is closed.

To administer your order

When you place an order with Nordic Infucare, we process your name, your email address and information about the product you ordered for the purpose of administering your order. If you state that you are under 18 years of age, we will also process this information as well as information about your guardian’s name. 

In order to administer your payment, we process the payment information you provide to us. If you choose to shop by invoice, we also process your social security number in order to identify you when you owe us a debt. 

The processing is necessary for us to be able to fulfill our purchase agreement with you (legal basis). The processing of your social security number is justified with regard to the importance of a secure identification of you as the person responsible for payment for the purchase. In some cases, we process your social security number to make a credit report. 

The data is processed until the payment is completed. 

To deliver a product to you

When we are going to send you a product that you ordered, we process your name, postal address and telephone number for the purpose of delivering the product. The processing is necessary to fulfill the agreement we have with you to deliver a product to you (legal basis). The data is actively processed for this purpose until your product is delivered. The data is further processed to maintain traceability requirements as described below. 

To save your delivery details to maintain traceability requirements

We save your delivery details and information about which product you received for ten (10) years after the last product was put on the market, in the event of a security situation where users may need to be contacted. We save your data to fulfill the legal obligations we have (legal basis).

To handle complaints and share pseudonymized information about a complaint or specific event with the manufacturer of the product

When you report any information on a product that is considered  to be a complaint or a specific event, we process your data by informing the manufacturer of the product about the complaint or the specific event. The processing is necessary for us to fulfill our obligations according to the Medical Devices Regulation (legal basis). We then process, in addition to your name and contact details that you provide to us, information about what happened, age group, gender and serial number of the product in question. This can also be information that reveals sensitive information about you, e.g. about your health, which we then process only if you have consented to it. The data is processed for ten (10) years from the time the last product was put on the market. 

The data is shared in pseudonymized form with the manufacturer of the product, which means that we do not share your name or other information that can be used to identify you. When we share your data with manufacturers of our products, we process your data to fulfill our obligations under the Medical Devices Regulation (legal basis). 

To fulfill obligations we have according to mandatory Book-keeping act

We process your name and information about the product you ordered to fulfill our obligations under the Book-keeping Act (legal basis). We process the information only for as long as is necessary to fulfill the requirements according to the current Book-keeping Act, which in Sweden means that the documents in which the information is found are saved up to and including the seventh year after the end of the calendar year in which the accounting year ended. 

In order for us to be able to administer your purchase or deliver a product to you, it is required that you provide us at Nordic Infucare with certain information. If you do not provide us with this information, we will not be able to supply you with products or comply with the legal requirements we have on us. 

The personal data that we process about you is information that you yourself have chosen to provide to us, or supplementary information that we have received from your clinic, which sometimes is obtained in writing. 

Who has access to your personal data?

Your personal data is primarily processed by us at Nordic Infucare. In some cases, however, we share your data with third parties:

  • We share your data with our IT supplier who processes data on our behalf in order to ensure good and secure IT operations. 
  • If you call us at other times than our regular support is open, your personal data will be processed by our subcontractors who at odd times handle our support on our behalf. 
  • If you are to have a replacement product sent to you, we will share your details with our warehousing and distribution partner who will process your personal data on our behalf to distribute the product. 
  • If you choose to shop by invoice, we share your data with our invoice service provider. 
  • If we do a credit report, we share your data with a credit reporting company. 
  • If you have a complaint or provide information about a specific event connected to a product, we share information about what happened incl. any reaction or health data, gender and age/age group as well as information about the affected product with the manufacturer of the product. No names or other information that can directly identify you is shared. 
  • When we have obligations by law to share your personal data with health authorities in the Nordics, we do so.

Do we transfer your personal data outside the EU/EEA?

Nordic Infucare does not normally transfer your personal data outside the EU/EEA. In cases where you have reported a complaint or an incident with a product, we may, however, transfer your personal data in the so-called pseudonymized form, which means that no name or other information that can directly identify you is shared with the manufacturer. Nordic Infucare has an obligation by law to report complaints or incidents with a product to the manufacturer of the product, and your data may therefore be shared outside the EU/EEA in cases where the manufacturer operates outside the EU/EEA. 

When we transfer your data outside the EU/EEA, this is only done if we have support for the transfer according to current data protection legislation. This means that the transfer can be based on the EU Commission’s decision, standard contract clauses or Privacy Shield.

If you have any questions about how we share your personal data or would like a copy of the appropriate safeguards we have put in place, please contact us.

What rights do you have to influence how we process your personal data?

You have certain rights regarding the processing of your personal data, see below. To exercise your rights, you are welcome to contact us (see contact details above). 

Right to withdraw your consent

You can revoke your consent you have given to the processing of your personal data at any time, with effect from the revocation. 

Right of access

You have the right to receive confirmation as to whether personal data concerning you is processed by us as well as access to information about how the personal data is processed, e.g. the purpose of the processing and which categories of personal data the processing applies to. You also have the right to receive a copy of the personal data processed by us. 

A request for access is made by contacting us (see contact details above).

Right to rectification

You have the right to have any incorrect personal data concerning you corrected and to ask us to complete incomplete personal data. 

Right to erasure (the right to be forgotten) and restriction of processing

Under certain conditions, you have the right to request the deletion of your personal data. Such prerequisites exist if, for example, the personal data is no longer necessary for the purpose for which it was collected or processed or if you withdraw your consent on which the processing is based and there is no other legal basis for the processing. 

You also have the right to request that we limit our processing of your personal data. Such prerequisites exist if you e.g. dispute the correctness of the data or if the processing is illegal and you object to the deletion of the personal data and instead request a limitation of the use of the data. 

Right to lodge a complaint with a supervisory authority

You always have the right to submit a complaint to a competent supervisory authority. 

Such a complaint should preferably be submitted to the authority in the member state within the EU/EEA where you have your usual residence, where you work or where a violation of applicable data protection laws and regulations is alleged to have occurred. The competent supervisory authority in Sweden is the Swedish Authority for Privacy Protection. This right is without prejudice to any other administrative review process or remedy. 

This privacy policy was established by NordicInfu Care AB on May 15, 2020.