We are committed to protecting and respecting your privacy. We want you to feel secure when we process your personal data.
This privacy policy describes how ADDI Medical AB processes personal data when you visit our website, contact us, use our contact forms or sign up for information and mailings from us.
The policy applies to ADDI Medical's processing of personal data in connection with the website and our own contacts with you.
When Hope is used by a healthcare provider, research principal or other customer, that organisation may be the data controller for the processing that takes place within the relevant healthcare, research or operational process. That processing is regulated separately and is not covered by this website policy.
ADDI Medical AB, reg. no. 559066-1608 (”ADDI Medical”, ”we”, ”our”, ”us”), is the controller for the processing of personal data described in this policy.
You are welcome to contact us if you have any questions about how we process your personal data:
ADDI Medical AB
Company reg. no.: 559066-1608
Svärdvägen 25A
182 33 Danderyd
Email: info@addimedical.se
If you have questions specifically regarding privacy or the processing of personal data, you can contact us at:
Information that you provide to us
We process personal data that you choose to provide when, for example:
Information collected when you use the website
When you use the website, certain technical information may be processed to ensure that the website functions securely and correctly.
We also use Google Analytics to gather information about how the website is used. The current website privacy information states that cookies and Google Analytics are used for statistics and analysis of website usage.
More information is available in our cookie policy.
Depending on how you use the website and contact us, we may process the following categories of personal data.
Contact details
For example:
Messages and communication
We process the information you provide when you contact us, as well as relevant information about the communication, such as the time, method of contact and the subject matter.
Email and the website's general contact form are not intended for sensitive personal data or patient information. Therefore, do not send information about health or other sensitive personal data via these contact channels.
Technical information
When using the website, technical data may be processed, such as:
Information about how the website is used
Through Google Analytics, information can be processed regarding, for example:
To communicate with you
When you contact us, we process the information necessary to receive, administer and respond to your enquiry.
The legal basis is normally our legitimate interest in being able to communicate with people who contact ADDI Medical and to handle incoming enquiries.
If the contact takes place before or within the framework of a contract, the processing may instead be necessary in order to take steps prior to entering into a contract or to perform a contract.
For newsletters and other direct marketing
Where consent is required, we use your consent to send newsletters, information about our services, product information or invitations to events.
You can withdraw your consent or unsubscribe from our marketing communications at any time.
You always have the right to object to the processing of personal data for direct marketing purposes.
To provide a secure and functioning website
We may process technical data and log information to:
The legal basis is our legitimate interest in providing and protecting a secure and functional website.
For web analytics and statistics
We use Google Analytics to understand how the website is used and to improve its content, functionality and user experience.
When the processing of personal data through statistical cookies is based on consent, the consent may be withdrawn. Cookies can also be blocked or deleted via your browser settings.
To protect our rights and legitimate interests
We may process personal data when it is necessary for the establishment, exercise or defence of legal claims or to protect the rights and legitimate business interests of ADDI Medical.
The legal basis is normally legitimate interest or, where applicable, a legal obligation.
To comply with legal obligations
We process personal data when this is necessary to comply with a legal obligation incumbent upon ADDI Medical, for example obligations under law or a binding decision by a court or competent authority.
We do not store personal data for longer than is necessary for the purpose for which the data is processed.
How long data needs to be kept therefore depends on the type of data it is, why we are processing it, and what legal requirements apply.
Contact details and messages
Information provided when you contact us is stored for as long as it is necessary to handle and follow up your enquiry.
If the communication leads to a customer, supplier, partnership or other contractual relationship, relevant information may be retained for longer in accordance with our obligations and needs linked to the contractual relationship.
Direct marketing
Contact details used for mailings are processed for as long as you wish to receive the mailings or until you withdraw your consent or object to the marketing.
We can then retain limited information needed to ensure that you do not receive mailshots that you have objected to.
Technical information
Technical logs are only kept for as long as they are needed for operations, troubleshooting, information security and the management of any incidents.
Web analytics and cookies
The storage period for cookies and data processed for web analytics depends on the current cookie and analytics configuration.
You can view and manage cookies that have been stored on your device through your browser settings.
When data is no longer needed, it is deleted or anonymised, unless it needs to be retained by law or for the establishment, exercise or defence of legal claims.
We do not sell your personal data.
Personal data may be shared with the following categories of recipients when necessary.
Our people
Authorised personnel at ADDI Medical may have access to personal data when necessary for their work duties.
Access is restricted to individuals who need the information.
Service providers
We use external suppliers for, for example:
When a supplier processes personal data on our behalf, the supplier normally acts as a data processor and may only process the data in accordance with our instructions and the applicable data processing agreement.
Professional advisers
Personal data may, where necessary, be shared with, for example, legal, financial or other professional advisers when this is necessary to protect our rights or fulfil our obligations.
Authorities and courts
We may disclose personal data to authorities, courts or other competent bodies when we are required to do so by law or binding decision.
We strive to ensure that personal data is processed within the EU/EEA whenever possible.
However, some of our service providers may, either themselves or through their sub-contractors, process personal data in countries outside the EU/EEA.
When personal data is transferred to a country outside the EU/EEA, we ensure that the transfer complies with applicable data protection legislation.
This can happen, for example, through:
Where required, we also implement supplementary protective measures.
Google Analytics may involve the processing of data by Google and its subcontractors outside the EU/EEA. Such processing is covered by applicable mechanisms for international transfers.
You can contact us on privacy@addimedical.se if you want to know more about which safeguards are used for a specific transfer.
Under data protection legislation you have a number of rights. Which rights apply in a given case depend, among other things, on what processing is taking place and what legal basis we are using.
Right to information and access
You have the right to receive information about how we process your personal data and to request access to the personal data that we process about you.
Right to rectification
You have the right to request the rectification of inaccurate personal data and the completion of incomplete data when it is relevant to the processing.
Right to erasure
Under certain conditions, you have the right to request the erasure of your personal data.
The right to erasure is not absolute. In certain situations, we may be obliged or have the right to continue processing the data, for example to comply with a legal obligation or to establish, exercise or defend legal claims.
Right to restriction
Under certain circumstances, you have the right to request that the processing of your personal data be restricted.
Right to object
You have the right to object to processing based on our legitimate interests.
If you object, we will assess whether we have compelling legitimate grounds to continue the processing.
You always have the right to object to the processing of your personal data for direct marketing.
Right to data portability
When the processing is based on your consent or on a contract and is carried out by automated means, you may, under certain conditions, have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, and to transmit those data to another controller.
Right to withdraw consent
When the processing is based on your consent, you may withdraw your consent at any time.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Cookies can also be blocked or deleted via your browser settings.
How to exercise your rights
Contact:
or
We may need to verify your identity before disclosing personal data or carrying out certain actions.
We take appropriate technical and organisational security measures to protect personal data against, for example:
The measures are adapted to the nature, scope, context and risks of the processing.
If a personal data breach occurs, we handle it in accordance with applicable data protection legislation.
If a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, we shall inform the data subjects without undue delay when required to do so under data protection legislation.
If you believe that we are processing your personal data in an incorrect manner, you are welcome to contact us.
You also have the right to lodge a complaint with a competent data protection authority.
In Sweden, the regulatory authority is Swedish Authority for Privacy Protection.
You may also have the right to lodge a complaint with the data protection authority in the EU/EEA country where you live or work or where you consider a violation has taken place.
Our website may contain links to websites operated by other organisations.
ADDI Medical is not responsible for how these organisations process personal data.
We recommend that you read the privacy information on the website you are visiting.
We may update this personal data policy when our processing of personal data changes or when it is necessary as a result of, for example, changes in operations, technology, or applicable rules.
The current version is always available on the website.
In the event of significant changes, we will provide notification in an appropriate manner where required or deemed relevant.
This privacy policy was last updated 2026-08-12.
