NewsContact

Privacy Policy

At AstMed, we take the protection of personal data seriously. This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, communicate with us or use our services.

  1. 1. Data controller

    The data controller responsible for the processing of personal data is:

    AST Medical AB[Company registration number / CVR]Marieholmsgatan 10B, 415 02 Göteborginfo@astmedical.se

  2. 2. Personal data we process

    We may process the following categories of personal data:

    • Name, job title, company or organisation
    • Email address, phone number and other contact details
    • Information provided through contact forms or direct communication
    • Information related to business enquiries, quotations, customer relationships or supplier relationships
    • Technical information such as IP address, browser type, device information, cookie IDs and website usage data
    • Newsletter preferences and consent records, where relevant

    We only process personal data that is relevant and necessary for the purposes described in this Privacy Policy.

  3. 3. Purposes of processing

    We process personal data for the following purposes:

    • To respond to enquiries and communicate with customers, suppliers, partners and public-sector organisations
    • To provide information about our products and services
    • To manage business relationships, quotations, agreements and customer support
    • To operate, secure and improve our website
    • To analyse website traffic and usage, where consent has been given
    • To send newsletters or marketing communications, where consent has been given
    • To comply with legal obligations, including bookkeeping and documentation requirements

  4. 4. Legal basis

    We process personal data on one or more of the following legal bases:

    • Consent, for example for newsletters, non-necessary cookies or certain marketing activities
    • Contract, where processing is necessary to provide services, respond to a request before entering into an agreement, or fulfil an agreement
    • Legal obligation, where processing is necessary to comply with applicable law
    • Legitimate interests, for example to respond to business enquiries, manage professional relationships, improve our website, maintain security and document communication

    Where processing is based on consent, you may withdraw your consent at any time.

  5. 5. Cookies

    We use cookies and similar technologies on our website. Some cookies are necessary for the website to function, while others may be used for preferences, statistics or marketing.

    Non-necessary cookies are only placed with your consent. You can change or withdraw your cookie consent at any time via the cookie settings on the website.

    For more information, please see our Cookie Policy.

  6. 6. Storage and deletion of personal data

    Personal data is stored in the IT systems we use to operate our website, communicate with customers and partners, manage customer relationships, perform analysis, manage consent and carry out marketing activities. This may include our website platform, email system, CRM system, cookie consent platform, analytics tools and newsletter system.

    We only store personal data for as long as it is necessary for the purposes for which the data was collected, or for as long as we are required to do so under applicable law. When personal data is no longer necessary, it is deleted or anonymised.

  7. 7. Recipients and processors

    We may share personal data with trusted service providers who process data on our behalf, including providers of:

    • Website hosting and maintenance
    • IT and security services
    • Analytics and cookie consent management
    • Email, CRM and newsletter systems
    • Accounting, invoicing and administrative systems
    • Legal, accounting or professional advisers, where relevant

    Service providers may only process personal data according to our instructions and applicable data protection law.

    We do not sell personal data.

  8. 8. Transfers outside the EU/EEA

    Some service providers may process personal data outside the EU/EEA. Where this happens, we ensure that appropriate safeguards are in place, such as an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism under GDPR.

  9. 9. Your rights

    You have the right to:

    • Request access to your personal data
    • Request correction of inaccurate personal data
    • Request deletion of personal data
    • Request restriction of processing
    • Object to processing based on legitimate interests
    • Request data portability, where applicable
    • Withdraw consent at any time, where processing is based on consent
    • Lodge a complaint with a data protection authority

    You have the right to lodge a complaint with a data protection authority.

    • In Denmark, complaints may be submitted to Datatilsynet.
    • In Sweden, complaints may be submitted to Integritetsskyddsmyndigheten (IMY).
    • In Norway, complaints may be submitted to Datatilsynet.
    • In Finland, complaints may be submitted to the Office of the Data Protection Ombudsman.

  10. 10. Security

    We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

  11. 11. Changes to this Privacy Policy

    We may update this Privacy Policy from time to time, including when changes are made to our website, services or data processing activities. The latest version will always be available on our website.

    Last updated: [Date]