MediYoga Online
2022
Please see the standard Apple Terms of Use (EULA) here; https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
At MediYoga Online we protect your privacy and always strive to maintain a high level of data protection (e.g. we would never sell your personal data to another company). This privacy policy explains how we collect and use your personal information. It also describes your rights and how you can enforce them. It is important that you take note of and understand our privacy policy and feel safe in our processing of your personal data. If you have any questions, you are always welcome to contact us (hello@mediyoga.se). Using the table of contents below, you can easily navigate to the sections that are of particular interest to you.
The privacy policy has three purposes:
All information we collect is linked to the provision of the MediYoga Online service and its functions.
Below we have formulated a table of contents, so that you can easily navigate and find the questions that interest you:
Personal data is any kind of data and/or information that can be directly or indirectly attributed to a physical person who is alive. For example, images and sound recordings that are processed on a computer can be personal data even if no names are mentioned. Encrypted data and various types of electronic identities (eg IP numbers) are personal data if they can be linked to physical persons. Processing of personal data is everything that happens with the personal data. Every action taken with personal data constitutes a processing, regardless of whether it is performed automatically or not. Examples of common treatments are collection, registration, organization, structuring, storage, processing, transfer and deletion.
MediYoga Online Sweden AB org.nr. 556977-5943 (hereinafter “MediYoga Online”), with postal and visiting address at MediYoga Online Sweden AB Gröna vägen 10, 313 32 OSKARSTRÖM
What is your relationship with MediYoga Online? Below we clearly define what different types of relationship you can have with us.
Your relationship with us and how we define it
Member
When you create an account with MediYoga Online. You can be an active, inactive, paying and / or non-paying member. As a member, you are also automatically defined as a user and visitor.
User
When you have signed up to receive our newsletter, event, made a booking request, filled in a survey and / or otherwise made an active choice to accept our Terms of Use.
Visitor
When you visit MediYoga Online or another URL owned by MediYoga Online but not yet a member or user.
Customer
When you choose to make a purchase of a product or service with MediYoga Online or a subcontractor and at the same time can not be defined as a member or user.
To make it easy, transparent and clear for you to understand what we mean by different words and categories in our policy, we collect them here.
Account information
Account ID, email address, password, name, status, membership form (subscription type), start date, etc.
Address information
Name
Profile information
Name shown
Profile settings
Settings regarding your profile and personal choices.
User-generated data
Favorites, things you actively follow, playlists you create, data you upload, pages you link yourself to, etc.
User content
The User Content (as defined in the Terms of Use) that you contribute to the service, including messages that you send and / or receive via the service
Technical information
URL information, cookie data, your IP address, the types of devices you use to access or connect to the MediYoga Online service, unique device ID, network and device performance, browser type, language, information which enables the management of digital rights, operating systems and the MediYoga Online application version
Interaction information
How you have used the service, login method, where and for how long different pages are visited, videos you have seen, playlists you have seen / created / followed, other audiovisual content, which MediYoga Online members you follow.
Payment information
Transaction date and history, amount, VAT, payment method, subscription period
Mobile subscription information
Phone number
Communication
Content in all your communication with us. Such as surveys, forms, social media, customer service.
Purchase information
All information required for you to be able to buy services or products at MediYoga Online.
Deidentified content
Content anonymised. Ie. cannot be linked to a unique individual.
At MediYoga Online, you can fall into four main categories: Member, user, visitor and / or customer. See definitions under point 3 above. Depending on our relationship, the reason why, what and for how long we collect your information varies. We tell you more about this here:
Purpose: To be able to create your profile as a member
Processes performed: The creation of a login function, ensuring your identity, maintaining correct and up-to-date information and the ability to save and manage your personal information.
Categories of personal data: Account data, profile data, profile settings, user-generated data, technical data, payment information, mobile subscription data.
Legal basis: Agreement. The treatment is necessary to meet the general conditions of service.
Purpose: For you as a Member to be able to use our Service
Processing performed: We use your personal data to be able to provide the service, e.g. features, customized and / or personalized content, recommendations, managing payments and preventing or detecting fraud.
Categories of personal data: Account data, profile data, profile settings, user-generated data, user information, health data, interaction information, technical data, payment information, mobile subscription data and communication.
Legal basis: Agreement, the processing is necessary to meet our Terms of use.
Purpose: For you as a User or Customer to be able to interact with parts of our Service.
Processing performed: We use your personal data to be able to provide the service, e.g. functions, customized and / or personalized content based on how you use the service, recommendations and to prevent or detect fraud.
Categories of personal data: mobile subscription and account data as well as user-generated data, interaction information, payment information, technical data and communication.
Legal basis: Agreement
Purpose: For you as a Visitor to be able to interact with parts of our Service.
Treatments performed: We use your technical information and interaction information to be able to adapt your experience in the Service and be able to direct relevant communication to you.
Categories of personal data: User content, interaction information and technical data.
Legal basis: Legitimate interest.
Purpose: To enable us to evaluate, develop, adapt and improve our service, whether you are a Member, User, Visitor or Customer
Treatments performed based on your relationship with us and the extent to which you use the Service: We use your information to be able to provide the service, e.g. functions, customized and / or personalized / individualized content based on how you use the service, recommendations and to prevent or detect fraud.
Categories of personal data: Account data, profile data, profile settings, user-generated data, user information, interaction information, technical data, payment information, mobile subscription data and communication.
Legal basis: Legitimate interest.
Purpose: To be able to communicate with you for advertising purposes
Treatments performed:
Categories of personal data: Account data, profile data, profile settings, user-generated data, user information, interaction information, technical data, payment information, mobile subscription data and communication.
Legal basis: Legitimate interest.
Purpose: To communicate with you
Treatments performed:
Categories of personal data: Account data, profile data, profile settings, user-generated data, user information, health data, interaction information, technical data, payment information, mobile subscription data and communication.
Legal basis: Legitimate interest and agreement
Storage period: As long as a customer relationship exists.
Purpose: To be able to fulfill the company’s legal obligations
Treatments performed: Necessary handling to fulfill the company’s legal obligations according to legal requirements, judgments or government decisions (eg the Accounting Act or the rules on product liability and product safety, which may require the production of communication and information to the public about product recalls in the event of a defective or hazardous product ).
Categories of personal information: Account information, profile information, profile settings, user-generated information, user information, health data, interaction information, technical information, payment information, purchase information, mobile subscription information and communication.
Legal basis: Legal obligation. This processing of your personal data is required by law.
Purpose: To enable us to evaluate, develop, adapt and improve our service, products and systems whether you are a Member, User, Visitor or Customer
Treatments performed based on your relationship with us and the extent to which you use the Service:
Categories of personal information: Account information, profile information, profile settings, user-generated information, user information, health data, interaction information, technical information, payment information, purchase information, mobile subscription information and communication.
Legal basis: Legitimate interest.
Purpose: To be able to prevent misuse of a service or to prevent and investigate crimes against the company.
Treatments performed:
Categories of personal information: Account information, address information, profile information, profile settings, user-generated information, user information, health data, interaction information, technical information, payment information, purchase information, mobile subscription information and communication.
Legal basis: Fulfillment of legal obligation (if any) or legitimate interest. If there is no legal obligation, the processing is necessary to satisfy our legitimate interest in preventing the misuse of a service or to prevent and investigate crimes against the company.
Other companies in the MediYoga Online Group
We share your personal information with other MediYoga Online Group companies in order to carry out our daily operations and to enable us to maintain and provide the service and our operations in the sale of products and experiences.
Police and data protection authorities
We share your personal information when we believe in good faith that it is necessary for us to do so in order to fulfill a legal obligation under applicable law, or respond to a valid legal process, such as a search warrant, a court decision or a lawsuit. We also share your personal information when we believe in good faith that it is necessary for our own or third parties’ legitimate interests relating to national security, law enforcement, litigation, criminal investigations, to protect someone’s security, or to prevent death or imminent bodily injury, provided that we believe that such an interest exceeds your interests or fundamental rights and freedoms that require the protection of your personal data.
Buyer of our business
We share your personal information in cases where we sell or negotiate to sell our company to a buyer or to potential buyers. In this situation, MediYoga Online continues to ensure the confidentiality of your personal information and notifies you before your personal information is transferred to the buyer or is subject to another privacy policy.
In addition to the information you provide to us, or which we collect from you based on your purchases and how you use our services, we may also collect personal information from someone else (so-called third party). The information we collect from third parties is the following: 1) Address information from public registers, such as SPAR to be sure that we have the correct address information for you. 2) Credit rating information from credit rating agencies, banks or information companies.
The MediYoga Online service is an interactive service that offers many ways to find, take part of and share content. We encourage you to take advantage of these interactive features with others on the Service.
You decide what information you want to make public, and what you want to keep private. Public information is available to MediYoga Online members or other logged in users, while private information is only available to You and MediYoga Online. Below is what information is standard, ie the information that is public versus private.
Public information:
Private information:
When you send an email to our employees, customer support, or Customer Care manager, this information is saved by us in the e-mail client and CRM system.
In cases where it is necessary for us to be able to offer our services, we share your personal information with companies that are so-called personal data assistants for us. A personal data assistant is a company that processes the information on our behalf and according to our instructions. We have personal data assistants who help us with:
When your personal data is shared with personal data assistants, it is only for purposes that are compatible with the purposes for which we have collected the information (e.g. to be able to fulfill our obligations under the purchase agreement or our Terms of use). We check all personal data assistants to ensure that they can provide adequate guarantees regarding the security and confidentiality of personal data. We have cooperation agreements with all personal data assistants through which they guarantee the security of the personal data processed and undertake to comply with our security requirements as well as restrictions and requirements regarding international transfer of personal data.
We also share your personal data with certain companies that are independently responsible for personal data. The fact that the company is independently responsible for personal data means that we are not in control of how the information provided to the company is to be processed. Independent personal data controllers with whom we share your personal data are:
When your personal data is shared with a company that is independently responsible for personal data, that company’s privacy policy and personal data management apply.
In addition to what is mentioned above, we may also share your information with third parties for these limited purposes:
We always strive for your personal data to be processed within the EU / EEA and all our own IT systems are located within the EU / EEA. In the case of systemic support and maintenance, however, we may have to transfer the information to a country outside the EU / EEA, e.g. if we share your personal data with a personal data assistant who, either himself or through a subcontractor, is established or stores information in a country outside the EU / EEA. In these cases, the assistant may only access the information that is relevant to the purpose (eg log files). Regardless of the country in which your personal data is processed, we take all reasonable legal, technical and organizational measures to ensure that the level of protection is the same as within the EU / EEA. In cases where personal data is processed outside the EU / EEA, the level of protection is guaranteed either through a decision by the EU Commission that the country in question ensures an adequate level of protection or through the use of so-called appropriate protective measures. Examples of appropriate protection measures are an approved code of conduct in the recipient country, standard contract clauses, binding internal company rules or the Privacy Shield. If you would like a copy of the protective measures that have been taken or information on where these have been made available, you are welcome to contact us.
We retain your personal information only for as long as is necessary to provide you with the MediYoga Online service and for legitimate and important purposes, such as maintenance of the service, computerized decisions about new functions and solutions, fulfillment of our legal obligations and resolution of disputes.
At your request, we delete or anonymize your personal information so that it no longer identifies you, unless we are legally entitled or obliged to maintain certain personal information, including in the following situations:
We are always open and transparent with how we process your personal data and if you want to get a deeper insight into which personal data we process about you, you can request access to the data (the information is provided in the form of a register extract with purpose, categories of personal data, categories of recipients, storage periods, information on where the information was collected and the existence of automated decision-making). Keep in mind that if we receive a request for access, we may ask for additional information to ensure efficient handling of your request and that the information is provided to the right person.
You can request that your personal information be corrected if the information is incorrect. Within the framework of the stated purpose, you also have the right to supplement any incomplete personal data. Keep in mind that you as a member of MediYoga Online can change certain tasks directly via My settings.
You can request deletion of personally identifiable information we process about you if:
Please note that we may have the right to deny your request if there are legal obligations that prevent us from immediately deleting certain personal data. These obligations come from accounting and tax legislation, banking and money laundering legislation, but also from consumer law legislation. It may also be that the processing is necessary for us to be able to establish, assert or defend legal claims. Should we be prevented from meeting a request for deletion, we will instead block the personal data from being used for purposes other than the purpose that prevents the requested deletion.
You have the right to request that our processing of your personal data be restricted. If you dispute that the personal data we process is correct, you can request a limited processing for the time we need to check whether the personal data is correct. If we no longer need the personal data for the stated purposes, but you do need them to be able to establish, assert or defend legal claims, you can request limited processing of the data from us. This means that you can request that we not delete your information.
If you have objected to a balance of interests of legitimate interest that we have made as a legal basis for a purpose, you can request limited processing for the time we need to check whether our legitimate interests outweigh your interests in having the data deleted.
If the processing has been restricted according to any of the situations above, we may only, in addition to the actual storage, process the data to establish, assert or defend legal claims, to protect someone else’s rights or if you have given your consent.
You always have the right to avoid direct marketing and to object to any processing of personal data based on a balance of interests.
You have the right to request a copy of your account information, address information and profile information in electronic format and the right to transfer this customer information for use to another party’s services.
You have the right not to be subject to any decisions based solely on automated decision-making, including profiling, where the decision would have a legal or similar effect on you.
In cases where we use a balance of interests as a legal basis for a purpose, you have the opportunity to object to the processing. In order to continue to process your personal data after such an objection, we need to be able to show a compelling justified reason for the processing in question that outweighs your interests, rights or freedoms. Otherwise, we may only process the data to establish, exercise or defend legal claims.
You have the opportunity to object to your personal data being processed for direct marketing. The objection also includes the analyzes of personal data (so-called profiling) that are performed for direct marketing purposes. Direct marketing refers to all types of outreach marketing measures (eg via mail, e-mail and SMS). Marketing measures where you as a customer have actively chosen to use one of our services or otherwise sought us out to find out more about our services do not count as direct marketing (eg video recommendations, product recommendations or other functions and offers on My pages).
If you object to direct marketing, we will discontinue the processing of your personal data for that purpose as well as discontinue all types of direct marketing measures.
Remember that you always have the opportunity to influence which channels we will use for mailings and personal offers. For example. you can choose to only receive offers from us via e-mail, but not sms. In that case, you should not object to the processing of personal data as such, but instead limit our communication channels (by changing the settings on My pages or contact customer service).
If our right to process your personal data is based either on your consent or fulfillment of an agreement with you, you have the right to request that the data concerning you and which you have provided to us be transferred to another personal data controller (so-called data portability). A prerequisite for data portability is that the transfer is technically possible and can be automated.
A cookie is a small text file that is stored on your computer, mobile phone or other device when you visit a website. The cookie helps website providers recognize your device the next time you visit their website. There are other similar techniques such as pixel tags (transparent graphic images placed on a web page or in an e-mail message, which indicate that a page or e-mail has been displayed), so-called web bugs (similar to pixel tags) and web storage, which are used in software on computers or mobile devices.
There are also technologies such as mobile device identifiers and SDK integrations that help companies recognize your device when you return to an app or otherwise use a service.
We use the following types of cookies for the purposes described below:
The cookies we use normally improve the services we offer. Some of our services need cookies to work properly, while others improve the services for you. We use cookies for overall analytical information regarding your use of our services and to save functional settings such as language and other information. We also use cookies to be able to direct relevant marketing to you.
MediYoga Online stores your personal information in a way that is compatible with security standards in the industry. MediYoga Online has implemented appropriate technical, organizational and administrative systems, policies and procedures to promote the security, integrity and confidentiality of your Content and to reduce the risk of unauthorized access to or use of your Content. Access to the spaces where personal data is stored is limited and it is required that employees are identified for access.
Datainspektionen is the authority responsible for monitoring the application of the legislation, and anyone who believes that a company is handling personal data incorrectly can submit a complaint to the Datainspektionen.
You can review and change much of the information we store about you through your account and your profile pages. If you have any questions about the use of your personal information in the Service, this Privacy Policy, or information we have about you, please contact us at hello@mediyoga.se. You can also contact our personal data representative by sending a letter to MediYoga Online Sweden AB, Att: Pär Krutzén, MediYoga Online Sweden AB Gröna Vägen 10, 313 32 Oskarström. We will respond to your request within a reasonable time after confirming your identity in accordance with local law. We recommend that you include current contact information, attach documents proving your identity and provide a clear and unambiguous description of the information you request access to.
Sometimes, at our own discretion, we may make changes to the Agreements. When we make significant changes to the Agreements, we will send you a clear notice based on what is appropriate in view of the circumstances, e.g. by displaying a clear message in the Service or by sending you an email. In some cases, we will notify you in advance, and your continued use of the Service after the changes have been made will constitute your acceptance of the changes. Therefore, please make sure that you read all such messages carefully. If you do not wish to continue using the Service in accordance with the new version of the Agreements, you may terminate your membership by emailing us at hello@mediyoga.se