Privacy Policy – Waiting List for Migrenehjelpen

1. Data Controller

Migränhjälpen Norden AB is the data controller for the collection and storage of information gathered via this interest form.

Company Name

Migränhjälpen Norden AB (org. no. 559214-1104)

Address

Byggnad E1, plan 00, Karolinska vägen 8, 171 64 Solna, Sweden

Email for privacy inquiries

support@migranhjalpen.se

Data Protection Officer (DPO)

We use an external DPO service provided by QBase AB. You can contact our DPO at dpo@migranhjalpen.se.

2. Important Information: No Medical Treatment or Advice

This website and form constitute only an interest survey (waiting list) in connection with a planned launch in Norway. We do not provide any health and medical services, diagnostics, or medical advice via this site.

3. What Personal Data Do We Collect?

We only collect information that is necessary to map interest and contact you in the event of a launch:

• Contact Information: Email address (and name, if provided).
• Technical Data: Registration timestamp, IP address, and technical data related to filling out the form.

Please do not provide sensitive health information in this form.

4. Purpose and Legal Basis

Purpose: The information is processed exclusively to maintain a waiting list, gauge interest in the service in Norway, and inform you via email when the service becomes available or if we have important updates regarding the project.

Legal Basis: The processing is based on your consent (GDPR Art. 6(1)(a)). You can withdraw your consent at any time.

5. Data Processors and Sharing of Information

We never sell your email address to third parties. To collect and store your email address, we use trusted suppliers (data processors), such as form services (e.g., Typeform) and email providers.

These suppliers process data on our behalf in accordance with strict data processing agreements (DPAs). If data is processed or stored outside the EU/EEA, we ensure that this takes place with a valid transfer mechanism (for example, the EU Standard Contractual Clauses, SCCs).

Analytics: We use Plausible Analytics (Plausible Insights OÜ, Estonia) to count visits to this site. Plausible sets no cookies, does not follow you across sites, and does not store your IP address — it is used momentarily, on Plausible’s servers in the EU, to produce an anonymous daily visit count. Requesting the script does mean Plausible receives your IP address, which is why we mention it here rather than treating it as invisible.

Legal basis for analytics: our legitimate interest (GDPR Art. 6(1)(f)) in knowing whether there is enough interest in Norway to launch. This is separate from the consent basis in section 4, which covers your email address. You can opt out of analytics at any time, in this browser, without affecting anything else:

Apart from Plausible and Typeform we set no cookies and use no other tracking. Fonts and images are served from our own servers, and the Typeform embed is not loaded at all until you choose to open the form — reading this site sends nothing to Typeform.

6. How Long Do We Store Your Email Address?

We will store your email address for a period of 24 months in this form. If you become a user of our medical services in the future, your data will be processed under our comprehensive patient privacy notice provided during registration.

7. Your Rights

You have the following rights regarding your personal data:

• Right to erasure: You can request at any time that we delete your email address from the waiting list.
• Right of access and rectification: You have the right to know what we have stored about you and request correction if anything is incorrect.
• Right to withdraw consent: You can unsubscribe at any time by contacting us.

To exercise your rights, send an email to support@migranhjalpen.se with the subject line “Waiting list deletion Norway”.

You also have the right to file a complaint with the Norwegian Data Protection Authority (Datatilsynet, www.datatilsynet.no) if you believe our processing violates the regulations.