Processing of personal data
Gutfeeling Labs AB processes your personal data in accordance with applicable data protection legislation. Below is a description of how this processing is carried out.
How your personal data is processed
Personal data refers to your first and last name, postal address, mobile number, and email address. The primary reason for storing this data is to be able to send test kits to you and to notify you, for example, when your test result is ready or to verify the sender in connection with Swish payments.
If you would like us to delete your personal data, please notify us by email at info@gutfeelinglabs.se.
Once your personal data is deleted, your test results can no longer be linked to you and will therefore become anonymized.
Data Protection Reform (the new EU General Data Protection Regulation – GDPR)
Gutfeeling Labs AB complies with the EU General Data Protection Regulation (GDPR), which came into force in May 2018, in the following ways:
- Your personal data is stored for 6 years after your last contact with us.
- You have the right to lodge a complaint with the supervisory authority (in Sweden: Datainspektionen, now Integritetsskyddsmyndigheten) if you believe your personal data has been handled incorrectly.
- We respect your rights, including the right to:
- Access your personal data
- Have inaccurate data corrected
- Have your data deleted by contacting us at info@gutfeeling.se
- Have your test results anonymized
- Object to your data being used for direct marketing
- Object to automated decision-making and profiling
The processing of your personal data is based on your informed consent.
How we obtain your consent:
- By voluntarily agreeing, after having received information at the time of your order, to the collection, processing, and storage of your personal data
- By ensuring it is clear and unambiguous that you consent to the processing of your data
- By making sure that the requirements for valid consent under GDPR are fully met
What we do in the event of a data breach:
If we are subject to a data breach or otherwise lose control over the personal data we process, we document all such incidents.
If the incident is likely to pose a risk to individuals' rights and freedoms, we notify the supervisory authority (Datainspektionen) within 72 working hours.
Your privacy is our highest priority. To safeguard your personal integrity, your sample is linked to an anonymous and unique sample number throughout the entire process. After analysis, we use your email address to contact you. Only employees of Gutfeeling Labs have access to this data. Our data server is hosted in a secure facility (Ideon-IT in Lund) with built-in data and fire protection systems.