1. Introduction and purpose
BumbiPower AB, corp. ID no. 559173-8710 (hereinafter “BumbiPower”), respects your privacy and strives to ensure that you can feel secure about how we process your personal data. We have implemented all reasonable and adequate measures to protect your personal data. This Privacy Policy describes how BumbiPower processes your personal data when you use our services. It also describes the rights you have in relation to us and how you can exercise these rights.
BumbiPower is the controller in relation to the processing of your personal data that we perform. By using our services, you accept that your personal data will be processed in the manner described in this Privacy Policy.
If you use bashi.se to facilitate contacts and appointments with care providers, the care provider is the controller in relation to the personal data processing that takes place during the contact for the purpose of providing you with care.
2. Definitions
Personal data: Any information that can be directly or indirectly related to a living natural person. Examples of personal data include name, personal ID number, email address and images that make identification possible.
Personal data processing: A term used to describe any situation in which personal data is in some way managed or processed by a company, a public authority or an organisation. Examples of personal data processing include collection, use, storage, disclosure and erasure.
3. How we process your personal data
When you register an account on bashi.se
| Categories of personal data |
Personal ID number, name, phone number, address. |
| Processing |
We process the information you provide when you create a user account with us and thereafter use the service. |
| Purpose |
To make it possible for you, as the user, to use the service and, when necessary, book an appointment with a care provider and carry out care-related contacts and interactions. |
| Lawful basis |
Contract (article 6.1 b of GDPR). |
| Storage/culling |
The personal data is stored for one year. |
When you use the service and book an appointment with a care provider via bashi.se
| Categories of personal data |
Personal ID number, name, phone number, address, health data (description of symptoms), information about how you have used the service.
|
| Processing |
Information is collected directly from you based on the information you enter when you use the service and how you use the service. Information is also retrieved from the Swedish State Personal Address Register (SPAR). BumbiPower shares personal data with care providers. |
| Purpose |
To make it possible for you, as the user, to use the service and, when necessary, book an appointment with a care provider. Providing the care provider with access to your personal data enables the care provider to connect your case to you specifically. |
| Lawful basis |
Contract (article 6.1 b of GDPR). |
| Storage/culling |
The personal data is stored for two years. |
My Pages on bashi.se
| Categories of personal data |
Personal ID number, name, phone number, address, health data (description of symptoms and documents sent by care providers).
|
| Processing |
Information is collected from you based on the information you enter when you use the booking service, or is saved after the care provider has sent documents to you during a meeting. BumbiPower stores the data, but you are the only person with access to the information on My Pages. |
| Purpose |
To make it possible for you, as the user, to save information about your care contacts and documents that care providers have sent to you. |
| Lawful basis |
Contract (article 6.1 b of GDPR). |
| Storage/culling |
The personal data is stored for one year. |
When you visit bashi.se (cookies)
| Categories of personal data |
Bashi stores personal data such as personal ID number, first name, last name, address details and mobile phone number. We also store a session cookie (we use cookies to enable the website’s functions to work correctly). Cookies on bashi.se collect information about geolocation, the questionnaire (questions and answers), the language selected by you on the website, and information retrieved from SPAR (first name, last name, address, city/town, postal code). You can read more about our cookies and how we use cookies here.
|
| Processing |
Use of cookies. |
| Purpose |
We collect cookies (small text files with data from the web pages you have visited previously). The purpose is to direct the user to relevant sections of the website, ensure that the website has a consistent appearance in different browsers and on different devices, and make it possible for the website to function correctly. |
| Lawful basis |
Consent (article 6.1 a of GDPR). Consent can be withdrawn. For more information, please see our Cookie Policy here. |
| Storage/culling |
For information on storage/culling, please see our Cookie Policy here. |
4. Your personal data may be shared with other parties
In order for the service to work correctly, other operators sometimes need to have access to your personal data. For example, your personal data is shared with relevant care providers when you book an appointment or hold a video meeting via bashi.se. In such situations, access to your personal data is provided to the care provider’s staff who administer and/or participate in your care, or who otherwise need the data for their work. In addition, your personal data may be shared with our processors, whom we use to manage our IT services (among other things).
When we share your personal data with a third party, we implement the technical and organisational measures required to ensure that your personal data is transmitted and managed in a secure manner.
On bashi.se there are links to business partners. When you leave bashi.se, BumbiPower no longer accepts responsibility for the collection of personal data that takes place on the linked care provider’s site and within the scope of their service. For information about collection of personal data, rights and terms & conditions, BumbiPower refers you to each business partner’s own terms & conditions and policies. BumbiPower does not transfer any personal data to the linked business partners.
5. Processing within the EU/EEA
BumbiPower, and processors engaged by BumbiPower, will only process your personal data within the EU/EEA. All processing, including storage, takes place exclusively on Swedish servers.
6. Your rights
When we process your personal data, you have a number of rights in relation to us. The following is a brief summary of these rights:
Right of access to information: As a starting point, you may request a free-of-charge register excerpt. In simple terms, this is a copy of the personal data we process about you, how the data is used and which other parties the data has been shared with (where applicable).
Right to rectification: As a rule, you have the right to request rectification of any inaccurate or incomplete data.
Right to erasure: In certain circumstances, you have the right to request erasure of your personal data.
Right to restriction of processing: You may have the right to request restriction of the processing of your personal data. For example, if you have requested rectification and want the processing to be restricted during the time it takes for us to check and, where necessary, execute your request.
Right to data portability: If we process your personal data on the basis of a contract or consent, you have the right, in certain circumstances, to receive the personal data you have provided to us. If so desired, and if technically feasible, we may also transmit the data directly to another controller.
If you wish to exercise any of your rights, please feel free to contact us via email at privacy@bashi.se. Please note that none of the rights described above are absolute. In other words, there are certain situations in which we may deny your request. For example, a request for erasure may be denied if we are obligated by law or contract to save the personal data concerned.
7. Complaints
If you feel that we are processing your personal data incorrectly, you have the right to submit a complaint to the Swedish Authority for Privacy Protection (IMY).
8. Contact details
Do you have any questions about how we process your personal data? If so, you are welcome to contact our data protection officer via email at dpo@bashi.se
You can also contact us directly via the following contact details:
BumbiPower AB
Tegnérgatan 6
113 58 Stockholm
privacy@bashi.se
9. Changes to this policy
We may update this policy from time to time. If we make any significant changes, we will provide you with separate information about such changes.
