At Executive Health, we respect your privacy and are committed to protecting your personal data.This Privacy Policy explains how we collect, use, and safeguard your information in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
1. Who We Are
Executive Health Sweden AB
Head office: Stockholm, Sweden
Email: info@executive-health.com
Executive Health provides preventive healthcare services through its clinics in Sweden and Spain.
2. Personal Data We Process
We process personal data in clearly separated categories, depending on the context in which it is collected.
a) Medical and Health Data
Medical information is collected exclusively in a clinical context during consultations, examinations, or health screenings. This data is processed in accordance with applicable healthcare legislation, including the Swedish Patient Data Act (Patientdatalagen).
Medical and health data:
- Is never collected through cookies or tracking technologies
- Is never used for analytics, advertising, profiling, or remarketing
- Is processed solely for medical care, patient safety, and regulatory compliance
b) Contact and Administrative Data
We may collect contact and administrative information such as:
- Name, email address, and phone number
- Booking and communication details
- Billing and invoicing information
This data is used to manage appointments, communication, and contractual obligations.
c) Website, Consent, and Technical Data
When you visit our website, we may process technical data such as:
- IP address
- Device and browser information
- Cookie and consent preferences
- Website interaction and usage data
This data is used solely for:
- Website functionality and security
- Consent management
- Analytics and performance improvement
Website and consent data is processed separately from medical data and is never combined with health information.
3. Legal Basis and Purpose of Processing
We process personal data only when there is a lawful basis to do so, including:
- Performance of a contract (medical services and bookings)
- Legal obligations under healthcare and accounting laws
- Explicit consent (for cookies, analytics, and marketing-related technologies)
- Legitimate interests related to website security and service improvement
Analytics and advertising-related data is processed only with user consent and in accordance with applicable data protection laws.
Medical and health-related data is never used for marketing, advertising, profiling, or remarketing purposes.
4. Cookies, Analytics, and Consent
Our website uses cookies and similar technologies in accordance with our Cookie & Consent Policy.
We use a consent management platform to ensure that:
- Non-essential cookies are not set without consent
- Analytics and advertising technologies adapt based on user consent choices
- Consent signals are securely communicated to analytics and measurement services
You may modify or withdraw your consent at any time via the cookie settings on our website.
5. Data Storage and Security
All personal and medical data is stored securely and accessed only by authorised personnel.
We apply appropriate technical and organisational measures, including:
- Encryption and secure servers
- Access controls and authentication mechanisms
- Restricted access to medical records
Medical records are handled in accordance with Swedish healthcare legislation and applicable EU data protection standards.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by law.
- Medical records are retained in accordance with healthcare regulations
- Administrative and contact data is retained based on contractual and legal requirements
- Website and consent data is retained for a limited period consistent with analytics and compliance needs
7. Sharing of Data and Data Processors
We never sell personal data.
Personal data may be shared with trusted partners only when necessary to deliver our services, such as:
- Medical laboratories
- Payment service providers
- IT and infrastructure providers
Where applicable, analytics and measurement services (such as Google Analytics) act as data processors under contractual data protection safeguards, including Google’s Data Processing Amendment (DPA) or equivalent agreements.
All partners are bound by strict confidentiality and data protection obligations.
8. Your Rights
Under the GDPR, you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion where legally permitted
- Object to or restrict certain processing
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with the Swedish Data Protection Authority (IMY)
9. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in legislation, technology, or our services.
The latest version will always be available on our website.
10. Contact Us
If you have any questions about this Privacy Policy or how we process personal data, please contact:
info@executivehealth.se
