Gayane Nutrition treats all your personal information confidentially and with a duty of confidentiality.
In this Policy, the term "personal data" refers to information that can be attributed to an identified or identifiable natural person, e.g. name, address, social security number, date of birth, debit card number, e-mail address and telephone number (hereinafter referred to as "Personal Information").
In this Policy we describe how we process your Personal Information. For example, the term "processing" means that we record, store, send and otherwise use your Personal Information in the manner described in this Policy (hereinafter referred to as "Processing").
Purpose of the Processing of Personal Data
Personal Data Processed by Gayane Nutrition only for the purposes stated below and for specific purposes. The overall purpose of Treatment is to be able to offer Gayane Nutrition's clients dietary and personal training services. This means that Personal Data is mainly processed in the following cases:
(i) to create personalized services;
(ii) in communication with customers;
(iii) to ensure and develop service to customers;
(iv) to handle booking requests;
(v) to handle various customer activities;
(vi) to be able to market our or our partners' business;
(vii) for statistical purposes and
(viii) to further develop our business operations.
Categories of Personal Data we Process and legal basis
Gayane Nutrition Processes Personal Data regarding our customers, prospective customers and partners.
The Personal Information that we may process are:
(ii) date of birth;
(iv) phone number;
(v) email address;
(vi) customer number;
(vii) information on health and illness conditions, including any blood test results and the like; and
(viii) information on special diets.
The personal information may be provided to us directly from you when you interact with us, by visiting our website or from third parties.
The processing of the Personal Data is necessary in order for us to fulfill our agreement with you as a customer of Gayane Nutrition and to be able to interact with you as a customer. Furthermore, we have a legitimate interest in marketing ourselves and organizing customer events, as well as being able to process Personal Data for our partners and suppliers and otherwise conduct and develop our business operations.
Gayane Nutrition is an approved private healthcare provider who is required to keep patient records in accordance with the Patient Safety Act (2010: 659) and the Patient Data Act (2008: 355). The processing of your Personal Data is thus also necessary to fulfill a legal obligation.
Some of the Personal Information that Gayane Nutrition collects is processed in order to fulfill other legal obligations as required by law, judgments or government decisions, and to safeguard Gayane Nutrition's legal interests in disputes. Processing of Personal Data concerning you may also be required for, for example, accounting reasons according to the Accounting Act (1999: 1078).
If you choose not to provide Gayane Nutrition with the Personal Information requested, Gayane Nutrition cannot fulfill its obligations to you or others. Gayane Nutrition will then notify you of the consequences.
How long are your Personal Information stored?
The personal data is stored only as long as there is a need to save them in order to fulfill the purposes for which the personal data were collected under this Policy. As a general rule, Personal Data concerning you is not stored for more than 12 months after the end of the customer relationship.
In order to enable Gayane Nutrition to fulfill the legal obligations arising from the law or to be able to safeguard our legal interests (if a legal process is in progress), we may save the Personal Data for a longer period of time. However, personal data is never stored for longer than is necessary or statutory for each purpose.
Personal data covered by the requirement for record keeping according to the Patient Data Act (2008: 355) are stored under the same law for at least 10 years.
How do we protect your Personal Information?
To protect your personal privacy, to detect, prevent and limit the risk of hacker attacks, etc., Gayane Nutrition takes a range of technical and organizational information security measures. Gayane Nutrition also takes steps to protect your Personal Information from unauthorized access, abuse, disclosure, alteration and destruction.
You have the right to receive information about the Processing of Personal Data we carry out. Below is a summary of the rights that you can assert by contacting us. You will find contact information for us at the end of this Policy.
Right of access
You have the right to request, free of charge, information about the Processing we carry out regarding your Personal Information. You also have the right to receive a copy of the information we process about you. This request must be submitted in writing to us with clarification of what information you wish to receive. We will respond to your request as soon as possible.
Right to correction
Gayane Nutrition is the primary responsibility for ensuring that the Personal Data we process is the responsibility of the Personal Data Officer. If you notify us that the Personal Information you have provided is no longer correct, we will correct, block or delete such Personal Information as soon as possible.
Right to delete
You have the right to request that Gayane Nutrition delete your Personal Information without undue delay. Personal data shall be deleted in the following cases:
(i) if the Personal Information is no longer necessary for the purpose for which it was collected;
(ii) if you revoke your consent and the Treatment is based solely on consent as a legal basis;
(iii) if Processing is done for direct marketing and you oppose your Personal Data being processed for this purpose;
(iv) if you oppose the Processing of Personal Data that occurs after a balance of interest and your interest outweighs ours;
(v) if your Personal Information has not been processed in accordance with the Data Protection Rules; or
(vi) if deletion is required to fulfill a legal obligation.
There may be obligations that prevent us from immediately deleting all of your Personal Information. These obligations are governed by applicable legislation, for example in accounting. If certain Personal Data cannot be deleted due to applicable legislation, we will ensure that the Personal Data can only be used for the purpose of complying with such legal obligations and not for any other purpose.
Right of restriction
You have the right to request that Gayane Nutrition temporarily restrict the processing of your Personal Information. Such a restriction may be requested in the following cases:
(i) that you believe that the Personal Information we hold about you is inaccurate and that in connection with the requested correction;
(ii) when the Processing performed by your Personal Data is not in accordance with the rules in the Data Protection Rules but you do not yet want your Personal Data to be deleted but instead restricted; and
(iii) when we no longer need your Personal Information for the purposes of our Processing but then you need them to be able to establish, enforce or defend a legal claim.
Right to data portability
You have the right, in the event that we process your Personal Data through a obtained consent from you or to fulfill a contractual obligation with you, to require that we provide all Personal Information that we have about you and which is processed in an automated way, in a structured and machine-readable format. If technically possible, you further have the right to request that we transfer your Personal Data to another personal data controller.
Right to object
You have the right to object to our Processing of your Personal Data on the Processing with the support of Gayane Nutrition's legitimate business interest. In these cases, Gayane Nutrition will ask you to specify which Treatment you object to. If you object to any Processing, we will only proceed with the Processing of your Personal Data if there are legitimate reasons for the Processing that outweighs your interests.
Right to lodge a complaint
You have the right to submit any complaints regarding the processing of your Personal Data to the national regulatory authority, the Data Inspectorate. Read more about how you can do this at www.datainspektionen.se.
Sharing of Personal Data
To fulfill our obligations to you and to provide certain services, Gayane Nutrition shares your Personal Information with certain selected third parties. This may, for example, be partners or suppliers of IT services. In such sharing or transfer, Gayane Nutrition takes technical and organizational measures to ensure that the Personal Data is handled in a secure manner and in accordance with this Policy.
Amendment of the Policy
Gayane Nutrition reserves the right to update or change this Policy at any time and you should regularly visit our website for the latest version.
Last updated: 2020-03-10.
How to contact us
If you have any questions regarding this Policy or our Processing of your Personal Information, please contact us by email: firstname.lastname@example.org. Our mailing address is Sehlstedtsgatan 7, 115 28 Stockholm.
(1) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free flow of such data.