Privacy Policy
Please note: The policy is available in Swedish and English. In case of any inconsistencies between the two versions, the Swedish policy takes legal precedence over the English translation.
This policy informs you about how Medicon Village Fastighets AB and, where applicable, Medicon Village Innovation AB (“we“, “Medicon Village“) process personal data.
Background
We process your personal data in accordance with the General Data Protection Regulation (GDPR), and applicable national legislation. Unless otherwise expressly stated in this policy, we are the data controller for the processing we carry out.
Joint Data Controllership
Medicon Village Fastighets AB and Medicon Village Innovation AB have joint responsibility for certain personal data covered by this policy. This is because the two companies, owned by the same foundation, share certain systems and/or solutions for administrative reasons. This includes CRM systems, email, image bank, public website, and intranet. Each of the companies may process personal data in these systems for the purposes and with the legal grounds specified in this policy. This policy provides comprehensive information about both companies’ processing of your personal data.
Medicon Village Fastighets AB processes the personal data in these systems to manage and administer contracts, access, security, services, and to meet legal requirements from authorities in its role as a property owner.
Medicon Village Innovation AB processes personal data in these systems to create a meeting platform at Medicon Village through marketing, events, and communication.
You have the right to exercise your rights against each of the companies. However, to simplify administration, Medicon Village has established a common contact point for both companies, see below in this policy.
You are always welcome to contact us if you have questions about this policy or how we process your personal data.
Collection of Personal Data
Information you provide to us
We collect personal data that you provide to us when you are in contact with us, or use our services.
Information from other sources
We may also collect personal data about you that has been collected from someone other than yourself, for example, when your employer provides information about you for access to our properties, through collaborating organizations, or via public sources.
When we collect personal data about you from a third party, it pertains to the following categories of personal data:
- Identification information
- Contact information
- Job role
Purposes of processing your data
We process your personal data to provide services to you or your employer. This includes administration of our relationship, including ongoing information about the services. We may also process your personal data for marketing purposes, as well as for statistical purposes. We may also process your data due to legal obligation, such as our accounting obligation.
Legal basis
- Performance of contracts we have with you, or with your employer.
- Legitimate interests (Article 6 f)
- Legal obligation, such as accounting obligation.
Categories of personal data and purpose
We only handle personal data that we need and for the purposes listed below. We do not handle any special categories of personal data (Article 9).
| Purpose of processing | Categories of personal data (examples) | Legal basis |
| Handling requests and communication | Identity information, contact information | 2 |
| Management and administration of contracts | Identity information, contact information | 1 |
| Delivering our services according to contracts | Identity information (including personal identification number), contact information, zone access rights, RSID | 1 |
| Managing payments and accounting | Identity information, contact information, RSID | 1, 3 |
| Handling temporary visits | Identity information, vehicle registration number, contact information | 1, 2 |
| Marketing of our services and events | Identity information, contact information, image | 2 |
| Images from events for the purpose of documenting company history, as well as for use in editorial purposes and for marketing similar events | Identity information where applicable, image | 2 |
| Follow-up, evaluation, and statistics | Identity information, IP address, contact information | 2 |
| Camera surveillance of the area for security reasons | Video, identity information, authorization information | 2 |
Who we may share your personal data with
Data Processors
We have entered into agreements with all processors handling personal data on our behalf, to ensure that they also comply with the General Data Protection Regulation (GDPR) and process your personal data in accordance with our instructions.
Independent Data Controllers
We may also share your personal data with entities that are independently responsible for personal data, such as authorities like the Swedish Tax Agency when fulfilling our accounting obligations, or other companies we collaborate with to organize events you participate in.
When your personal data is shared with another independent data controller, that organization is responsible for the processing of your personal data and is obligated to inform you about the processing.
Where are your data processed?
Your personal data is only processed within the EU/EEA.
Security and Retention
Your personal data is only processed for as long as necessary for the purposes for which it was collected – for example, as long as necessary for us to fulfill the obligations we have under an agreement with you or your employer. We may retain the data longer if required by law or to protect our legal interests, such as during legal proceedings. Your personal data is deleted or anonymized when it is no longer relevant for the purposes for which it was collected.
Cookies
On our websites, we use cookies to provide a more user-friendly experience. Cookies and other third-party tracking technologies may also be used for analysis, advertising, and/or improving traffic and the visitor experience on the respective website. More information about cookies can be found on the respective website.
Village Inn
As a member with us, you gain access to Village Inn, a system that allows you to create your own content. You can also choose to have the content displayed on our external website (www.mediconvillage.se). To provide this opportunity, we need to process more personal data.
Your responsibility
When you create content on Village Inn, it is your responsibility to ensure that you do not violate any laws or regulations. When relevant, you should ensure that you have consent for the data you publish.
Our responsibility
When you use Village Inn, we process your personal data for account administration (username, password, etc.) and your IP address. You are responsible for the content you publish on Village Inn.
Your rights
As a registered individual, you have a number of rights under applicable legislation. Here, we list these rights.
Right to access
If you want to know what personal data we process about you, you can request access to the data. When making such a request, we may ask some questions to ensure efficient handling of your request. We will also take measures to ensure that the data is requested and provided to the correct person.
Right to rectification
If you discover that something is incorrect, you have the right to request correction of your personal data. You can also supplement any incomplete personal data. In some cases, you can make corrections yourself, which we will inform you about.
Right to erasure
You can request that we erase the personal data we process about you, among other things, if:
- The data is no longer necessary for the purposes for which it is processed.
- You object to a balancing of interests we have made based on our legitimate interest, where your reason for objection outweighs our legitimate interest.
- The personal data is processed unlawfully.
- The personal data has been collected about a child (under 13 years old) for whom you have parental responsibility.
- If the data was obtained with your consent and you want to withdraw your consent.
However, we may have the right to deny your request if there are legal obligations preventing us from immediately erasing certain personal data. It may also be that processing is necessary for us to establish, assert, or defend legal claims.
Right to restriction
You have the right to request that our processing of your personal data be restricted. For example, if you request correction because you believe the personal data we process is incorrect, you can request limited processing while we need to verify whether the personal data is correct.
Right to object to certain types of processing
You always have the right to object to any processing of personal data based on a balancing of interests. You also always have the right to avoid direct marketing.
Right to data portability
As a registered individual, you have the right to data portability (transfer of personal data) if our right to process your personal data is based on either your consent or the performance of a contract with you. A prerequisite for data portability is that the transfer is technically possible and can be automated.
Right to lodge a complaint
If you believe that we are processing your personal data incorrectly, you have the right to lodge a complaint. You can either contact us directly or lodge a complaint directly with the relevant supervisory authority, which in Sweden is the Swedish Authority for Privacy Protection.
Managing your rights
Applications for register extracts or if you want to invoke any of your other rights should be made in writing and personally signed by the individual the extract concerns. We will respond to your requests without undue delay and no later than within 30 days. Email to our email address below. The email should, as far as possible, be sent from the email address you are registered with us.
Contact
You can always contact us if you have any questions about our processing of personal data or if you want to exercise any of your rights.
Medicon Village Fastighets AB
223 81 Lund
info@mediconvillage.se
Changes
We reserve the right to make changes to our privacy policy. You will always find the latest version on the website. Updates that are crucial for our processing of personal data (such as changes to stated purposes) will be communicated to you.