Privacy policy
Last updated: June 2026
1. Data controller
Nūvai AB, company reg. no. 559583-6171, is the controller for the processing of your personal data. You can reach us at info@nuvai.se.
2. What data we process
We process data that you provide to us yourself when you contact us, book, screen and receive treatment. This may include your name, personal identity number, contact details, health data, medications, treatment history and information about your wellbeing over time.
We also process technical data when you visit our website, such as IP address, device information and cookies in accordance with our cookie policy.
3. Purposes and legal basis
We process your data in order to provide you with care, fulfil our agreement with you, meet legal obligations under the Patient Data Act and the Accounting Act, and to develop and improve our services.
The processing of health data takes place on the basis of current GDPR, that is, for health and medical care purposes.
4. Recipients of data
We only share data with third parties when it is necessary to provide care or comply with the law. This may, for example, be medical record system providers, laboratories, payment intermediaries or authorities. All providers are bound by data processing agreements.
5. Retention period
Medical records are kept for at least 10 years in accordance with the Patient Data Act. Other data is kept for as long as is necessary for the purpose for which it was collected, or for as long as applicable law requires.
6. Your rights
You have the right to request access to, rectification or erasure of your data. You also have the right to object to processing, request restriction and the right to data portability to the extent the law allows.
You always have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you consider that our processing breaches the General Data Protection Regulation.
7. Security
We work continuously with technical and organisational security measures to protect your data against unauthorised access, loss or alteration. All medical record data is stored within the EU/EEA.
8. Contact
If you have questions about how we process your personal data, contact us at info@nuvai.se.