We respect your personal information
Your integrity is important for us on Medam and we want to be transparent with the information we collect and how we use it. That’s why we think the new general data protection regulation (GDPR), which is applied since May 25th, 2018, makes it clearer for what rights you have as a customer, and what obligations we have as a company.
Below we describe every information we collect, why we collect the information, legal basis for our usage, how you can take control over your information and how to contact us.
All treatment of personal information within Medam takes place in accordance with applicable privacy laws. As of May 25th, 2018, the so-called General Data Protection Regulation (GDPR) applies within the EU / EEA.
Personal information is information that can directly or indirectly be connected to a physical person. Example of personal information can be name, address, phone number, personal identity number and email address.
The treatment of personal data includes all management of personal information, for example collecting, analyzing, changing, registration and storing.
The responsible of personal data is the one who alone or together with others decide the purpose and how to use the personal information. This person, or persons, is responsible for the treatment of the personal information in accordance with applicable law.
Personal Information that is collected and managed by Medam is: (*=if necessary)
- *Phone number
- *Apartment number
- MAC-address CPE
- Contact position ODF
- *E-mail address
- *Billing address
- Type of property
- Technical building information which, for example, is used to decide suitable path of installation.
- Geographical information
- Other data that you by yourself eventually leave to the company within the frame of the service
Medam needs the information above to be able to fulfill the agreement with you to be able to complete the assignment (e.g. connect fiber optics). If you choose not to share some personal information the result can make it impossible for Medam to complete the assignment, alternatively that the assignment will not be completely done.
Purpose of treatment and legal basis
We treat the personal data for the purposes stated below, as well as any additional purposes specified at the time of collection:
- To provide the Service and administer our agreement, including the establishment and administration of your result of the Service;
- In order to deliver everything included in the Service to the specified delivery address;
- In order for you to use the Service, we may disclose your personal information to the Service Provider as well as the Client of the Service in order to fulfill what is included in the Service;
- In order for us to communicate with you through mail, telephone, electronic communication (such as text, email or social media accounts) or otherwise, such as contacting customer service and for sending notifications;
- To ensure the technical functionality of the Service;
- To send information about your result of the Service by mail or email;
- To fulfill legal obligation.
The legal basis for Medam’s processing of your personal data is to fulfill our agreement with you
Medam collects and treats your personal information to be able to fulfill our agreement.
In cases where processing is necessary for purposes relating to Medam’s or third party’s legitimate interests, the processing can be based on a balance of interest. Interests like these include our commercial interest in maintaining a good customer relationship or providing you with information that is relevant to your use of the Service. Thus, “legitimate interests” means our interest in conducting and managing our business to enable us to provide you with the best possible service with a good and safe user experience. Eligible interests may also refer to treatment that is also in your own or third party’s interest. When we process your personal information based on a balance of interests, we ensure that we consider and balance the possible impact of the treatment on you (both positive and negative) as well as your interests and rights under the applicable data protection legislation. In case you have any opinions or objections against our treatment based on a balance of interests, you are entitled to object to such treatment at any time. For more information about your rights, please see the information under the heading “Your rights and choices” below. Medam may also treat personal information with support and approval from you.
Medam may need to treat personal information to fulfill legal obligations, e.g., accounting purposes or as a result of a court or government decision (i.e., the purpose stated in paragraph 11).
It may happen that the same personal data is treated for multiple purposes and/or based on more than one of the legal grounds listed above.
Safety and Transfer of personal information to a third party
We will not share, sell, transfer or in another way disclose personal information beyond the terms of this text, unless we are required to do so by law or as a result of a court order or if we have received your consent to such disclosure or if you have purchased the Service through a third party.
Medam may disclose personal information to a third party, e.g., the police or other authority, in case of investigation of a suspected crime or if we are required to provide such information on the basis of law and authority decision.
Medam may hire suppliers, on Medam’s account, to perform the services. The execution of these services may result in that the external suppliers, both within and outside of EU/ESS, have access to your personal information. These external suppliers will treat the personal information on our behalf in accordance with personal data agreements and our instructions. Personal information advisers that’s granted access to your personal information have no right to use your personal information for purposes other than the purposes stated in this text, but will primarily be used to the extent that is required to provide the Service.
Transfer of personal information to a third country
Medam only collaborates with partners which treats personal information within EU/EES. In case Medam chooses to hire suppliers outside of EU/EES, e.g. cloud service providers, Medam will in those cases take special safety precautions, such as signing agreements that includes standardized data transfer clauses that have been adopted by the EU Commission and are available on the EU Commission website or companies that maintain the same level of protection as within the EU / EEA by, for example, joined the so-called Privacy Shield Agreement between the EU and the United States.
Security for the protection of personal information
Medam protects your privacy and ensures a high level of security for your personal information. Radonova has taken appropriate security measures to protect your personal data from unauthorized access, modification, dissemination or destruction. All processing of your personal data is done with respect to your privacy.
Storage and sorting of personal information
The treatment is in accordance with current legislation and means that personal information will not be stored for a longer period than necessary for the purpose of the treatment. We will store your personal information until the service you have chosen to be completed is finished. The service is considered completed ten years after the results of the Service have been approved. This is due to Medam’s ten-year warranty. Some information may be stored longer due to other legal requirements, e.g. the accounting law.
The same personal information can be stored in several different locations for different purposes. This may mean that deleted personal information which no longer is deemed necessary may remain stored in another system on the basis of other legal basis or for other purpose where the personal information is still needed.
Your rights and choices
Regarding the treatment of your personal information, you have a number of rights following the applicable data protection legislation. To exercise your rights, please contact Medam through the contact details listed below.
Rights to access
You are entitled to ask and get a confirmation on how and if Medam treats your personal information. If Medam treats your personal information, you have the right once per year to get information about the treatment and a report of the personal information that is used, free of charge. For additional reports, Medam is entitled to charge a reasonable fee based on Medam’s administrative costs for such copies. If the request is obviously unfounded or unreasonable, Medam may, in accordance with applicable data protection laws, charge a reasonable fee for such request or refuse to respond to such request.
Rights to amendment of wrong person information
You are entitled to receive incorrect personal information about you without unnecessary delay. Depending on the purpose of the treatment, you also have rights to complement incomplete personal information.
Rights of deletion (“The right to be forgotten”)
In some cases, you have the right to get your personal information deleted, e.g.
- If the personal information is no longer necessary for the purposes for which they were collected;
- If the treatment is based on your consent, you have the right to withdraw your consent at any time and then the right to delete the information (provided there is no other legal basis for the treatment);
- If you oppose against the treatment which is based on a balance of interests and there are legitimate reasons for the treatment that weighs heavier (you are always entitled to the deletion of personal data used for direct marketing based on a balance of interest);
- If the personal information has been treated illegally or has to be removed due to legal obligation;
The rights of deletion are not applicable in some cases, e.g., if the information is required for Medam to fulfill a legal obligation or for Medam to determine, claim or defend legal claims.
Right to restriction
In some cases, you may request Medam to limit the treatment of your personal information, e.g., if you consider the personal data to be inaccurate and restricted of use while Medam checks and corrects this, if the treatment is illegal, if you do not want us to delete the information when Medam no longer needs the information but you need them for legal claims or if you oppose Medam’s treatment based on a pending balance of interest of whether Medam or third party legitimate reasons weigh heavier than your legitimate reasons.
Right to object
You are entitled to object to the treatment of your personal information at any time based on a balance of interest, including profiling. Medam may not continue to process such personal information unless Medam can’t provide compelling legitimate reasons for such treatment that weighs heavier than your interests, rights and freedom. However, Medam may continue treatment for the determination, exercise or defense of legal claims. If you oppose direct marketing treatment based on a balance of interests, Medam will no longer process your personal information for such purposes.
Rights to data portability
You are entitled to receive your personal information in a structured, widely used and machine-readable format, provided that the processing is based on a consent or agreement between you and Medam, and provided that the processing is automated.
In some cases, you may have the right to transfer your personal information to another responsible person for such information. When technically possible, such transfer shall be made directly from Medam to the responsible person for such information.
Rights to file a complaint to the Data Inspection Board
If you consider your rights are not respected by us, please contact us. You also have the right to file a complaint to the supervisory Data Inspection Board.
For more information about the treatment of your personal information or if you have any questions, you are more than welcome to contact us on: firstname.lastname@example.org