GDPR

Heart of Mervin cares about your privacy and takes the protection of your data very seriously. We comply with applicable data protection laws and regulations, including the EU’s General Data Protection Regulation (GDPR).
Heart of Mervin is responsible for customers’ and suppliers’ personal data and for compliance with data protection laws.
 
The basic principles of the GDPR
The General Data Protection Regulation contains a wide range of rules and requirements for how personal data may be handled in an organisation. All these rules, recitals, and other legal texts of the regulation are based on a few fundamental principles that we strictly adhere to. 
* Do not collect more personal data than necessary and only for a specific, predetermined purpose.
* Inform what data you are saving, and do not save it for longer than necessary.
* Protect the personal data you handle.
 
What personal data do we collect and why?
Heart of Mervin only collects personal data that is necessary to be able to offer our services or to fulfil our obligations to you as a customer. They can be divided into two categories: first, data related to the use of our online services, and second, data in the form of journal notations associated with appointments. This may include your name, contact information, and other information that you freely share with us.
By booking a service, paying for a product or service by invoice, or subscribing to mail, you agree that the following information is registered for Heart of Mervin. 

1. Name
2. E-mail address
3. Registered address
4.  Mobile number or phone number
5.  Personal identity number

Data saving and the website’s booking system
The booking system requires specific information to ensure bookings that provide a satisfactory service. All five data points above are included here. The data is stored for as long as you are a customer or supplier to us. If the collaboration or contact concludes, your data will be retained for one year.  

Data saving and the company’s accounting software system
The accounting software uses the first four information points. The data for this purpose is stored for as long as required by the Accounting Act and the Customs Act laws.

Data saving and journal notations
Except for freely given information in connection with treatment, this record only contains your initials and date of birth from the points above. Journal notations from treatment are stored in a locked filing cabinet and are only available to the therapist. The data is stored for as long as you are a customer or supplier to us. If the collaboration or contact concludes, your data will be retained for one year.  
 
Data saving in connection with Email and Subscriptions
When we ask for your personal information for other reasons, such as subscribing to one of our email broadcasts or other email marketing, we will ask for your consent and provide you with the opportunity to withdraw your consent. You can always withdraw your consent at any time by replying “unsubscribe” to any information email. When consent is given for email and/or subscriptions, the first four points above are stored. The data is stored for as long as you are a customer or supplier to us. If the collaboration or contact concludes, your data will be retained for one year.  
 
How do we use your data?
Your data is only used for the purposes for which it was collected, such as processing your requests, providing services or communicating with you. We do not share your data with third parties unless it is necessary to perform our services or if we are legally required to do so.
 
How do we store your data?
We store your data securely and maintain appropriate safeguards to prevent unauthorised access, loss or misuse of your data.
To provide you with services and send you an info mail with news and offers, we require your consent.



Your rights
Under the GDPR, you have the right to request access to, correction of, or deletion of your data that we process. You also have the right to object to specific uses of your data and to restrict their use.
 
Furthermore, GDPR gives you the following rights:
* The right to know how your information will be held and used.
* The right to see your therapist’s records, all your personal information, so you know what is held about you and can verify it.
* The right to tell your therapist to make changes to your personal information if it is incorrect or incomplete.
* The right for you to request that your therapist erase any information they hold about you.
* The right to request limits on how your therapist uses your personal information.
* The right to request a copy of your personal information under certain circumstances.
* The right to be able to tell your therapist you don’t want them to use certain parts of your information, or only to use it for specific purposes.
* The right to complain if you feel your details are not correct, if they are not being used in a way that you have permitted, or if they are being stored where they don’t have to be.
 
The therapists´ rights
To use any services given by Heart of Mervin, please note the following: 
* If you do not consent to me recording or using your information for treatment, I cannot treat you and may refuse service.
* Some regulations affect how long treatment records must be kept for a set time, as described in ‘How long I retain your information for,’ so requests to erase details may need to wait until that period ends.
* Records can be transferred between computers and ID systems, ensuring that personal details remain safeguarded against unauthorised access.
* I may refuse service in suspicion of a customer giving false data or data connected to illegal activity.
 
Contact us
If you have any questions about how we handle your data or if you would like to exercise your rights under the GDPR, please feel free to reach out to us via the contact page.