Privacy Policy
Last updated: 15 June 2026
SUHA (the Swedish University Hospital Alliance) is committed to protecting your privacy and safeguarding any personal data processed through our website.
This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR). By accessing or using this website, you confirm that you have read and understood this Privacy Policy.
Personal data we collect
The SUHA website is primarily informational, and users are not required to register, create an account, or actively provide personal data to access its content.
However, personal data may be processed in certain situations. If you contact us directly, for example by email, we may process your contact details and the content of your message in order to respond and follow up. In addition, we use cookies and basic analytics tools to understand how the website is used, improve performance, and enhance user experience. This may include information such as anonymised IP addresses, browser type, device information, and pages visited. Personally identifiable data is not collected without your consent. We do not intentionally collect or process sensitive personal data (such as information relating to health, religion, or ethnicity) through this website.
Legal basis for processing
We only process personal data where there is a valid legal basis. This may include your consent, for example when submitting a contact request; our legitimate interests, such as maintaining and improving website functionality or responding to inquiries; or compliance with legal obligations.
You may withdraw your consent at any time by contacting us using the contact details form here.
How we use personal data
Personal data may be used to respond to questions or requests, to maintain and improve website functionality and content, to ensure website security and prevent misuse, and to comply with legal and regulatory obligations. We do not use personal data for marketing purposes. If a newsletter or similar service is introduced in the future, we will request your explicit consent before sending any communications.
Sharing of data and third parties
We do not sell, trade, or otherwise share your personal data for commercial purposes. Personal data may, however, be processed by trusted third-party service providers, such as hosting and analytics providers, solely to support the operation of the website. These providers are subject to confidentiality obligations and GDPR-compliant data processing agreements. If personal data is transferred outside the European Economic Area (EEA), appropriate safeguards will be implemented, such as Standard Contractual Clauses or other approved transfer mechanisms.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or to meet legal requirements. For example, contact-related data may be stored for up to 12 months for follow-up and record-keeping purposes, while analytics data is retained in accordance with the relevant provider’s retention settings, unless otherwise configured.
Your rights
Under applicable data protection laws, you have the right to access the personal data we hold about you, request correction of inaccurate or incomplete data, request deletion of your personal data (the “right to be forgotten”), object to or restrict certain processing activities, request a copy of your data in a portable format, and lodge a complaint with a supervisory authority. To exercise your rights, please contact us at [Insert Contact Email]. We may need to verify your identity before processing your request.
Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These measures include encryption (such as SSL), secure hosting within the EU, and access controls with restricted permissions.
Cookies and tracking technologies
Cookies are used to support website functionality, analyse traffic, and enhance user experience. Where required, cookies will only be activated with your consent. You can manage or disable cookies at any time through your browser settings.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any updates will be published on this page together with a revised “Last updated” date.