TERMS & CONDITIONS
POLICY POLICY
TERMS & CONDITIONS
1. The service and terms of use
General information
1.1 YouGo Healthplan Sweden AB’s purpose is to promote a healthy lifestyle and thus
health and well-being at individual, group and organizational level. Taking part in YouGo
Healthplan Sweden AB's services is always voluntary.
1.2 YouGo Healthplan Sweden AB offers tools for continuously measuring and
monitoring perceived health. With the support of about 30 questions with answers in
the form of a degree statement about lifestyle, a result emerges where possibilities of
changes in behavior for increased health and well-being both physically and mentally
can be identified. You might receive e-mails with newsletters, health programs,
invitations to training sessions, lectures and the like.
1.3 Measurement and feedback create good conditions for working efficiently with
health development. You get feedback via text and visually in a so-called health wheel.
1.4 Your account is personal. You are responsible for ensuring that no one else logs in
to your account by handling your login information in a responsible and secure manner,
for example by keeping these secret from others. We recommend that you choose a
password with good quality.
2. Users associated with an organization
2.1 YouGo Healthplan Sweden AB's services can be used by organizations as a central
part of the ongoing systematic work environment work and health-promoting
development. Companies and organizations (usually employers) can invite individuals
(usually employees) to use YouGo Healthplan AB's services.
2.1.1 When you use YouGo Healthplan Sweden AB's services in the capacity of
employees in an organization that subscribes to the service, the employer will receive
feedback from YouGo Healthplan Sweden AB on aggregated results at group level
(deidentified data set). The employer can add and remove users in the system and see
results on group level.
2.1.2 The employer's or organisation's work with the group's deidentified contribution
to the system plays a central role in the systematic work environment work and can
form the basis for health promotion and organizational development efforts. Historical
group results are necessary for reliability and the ability to follow trends. The data that
you contribute and have contributed with is important for the manager / HR or
equivalent to be able to work proactively and health-promoting. They form a central
basis for enabling fact-based dialogue and reasoning about possible initiatives.
2.1.3 To protect your privacy as a user associated with an organization, results are not
compiled and presented at group level for groups with less than 7 respondents. YouGo
Healthplan Sweden AB works to protect your privacy. It is not possible to derive any
information to you as an individual via the system’s user interface.
2.2 When you use YouGo Healthplan Sweden AB's services as an employee of an
organization that subscribes to the service, an account is created on
www.yougohealthplan.com when you respond to the survey regarding your health.
Once your account is created this way, it is linked to the organization until either you or
the organization terminates this link.
Security and forced termination
2.3 If you should become aware of a security breach, information leakage or other
vulnerability in the system, you may not use or share this knowledge with anyone other
than us. We ask you instead to inform us about this as soon as possible (see contact
information on the website).
2.4 We reserve the right to terminate your account and readily delete the information
you have entered if we believe that you have violated our Terms of Use or otherwise
abused or damaged YouGo Healthplan Sweden AB or any of its users.
3. Personal data management
For detailed information on how YouGo Healthplan Sweden AB handles and processes
personal data, please refer to YouGo Healthplan Sweden AB's privacy policy
www.yougohealthplan.com/integrity. The privacy policy describes how YouGo
Healthplan Sweden AB processes collected personal data, what the data subject's rights
are and how these rights can be exercised.
4. Personal data assistants
4.1 The following personal data assistants process personal data on behalf of YouGo:
Server: Amazon Web Services Inc.
Development work: 2550 Engineering AB
All our personal data assistants are bound by personal data assistant agreements. The
personal data assistants who process personal data on the behalf of YouGo Healthplan
Sweden AB, are also bound by confidentiality agreements.
5. Deletion of account
5.1 You can request to be deleted from the system yourself by sending an e-mail to
YouGo Healthplan Sweden AB.
5.2 Deletion of account deletes all personal data that has been submitted to YouGo
Healthplan Sweden AB and that is linked to the account.
6. Information security
6.1 We are responsible and make every effort to keep the servers that handle the
service secure from intrusion and information leakage.
6.2 In the event that the EU does not automatically consider states outside the EU to be
trusted from an information security perspective, this ensures that our servers, and
thus your information, never physically leave the EU. Should you, on the other hand, use
the service outside the EU, we would like to inform you that your information will then
leave the EU on your own initiative.
6.3 YouGo Healthplan Sweden AB's subcontractor, with whom they have a personal
data assistant agreement and NDA, can produce the individual's registered data upon
request or request to delete their data.
6.4 YouGo Healthplan Sweden AB's subcontractor who has ensured that only one
employee has access to the server's password, which is a two-step solution where you
as a hacker need to go through two separate IP addresses before YouGo's customer
data becomes available. A warning system is also installed where the employee receives
an indication when someone outside tries to enter.
6.5 Should an infringement still be carried out, the employed person will receive a
warning which is then reported to Datainspektion within 72 hours either by the
personal data assistant or the person responsible for personal data at YouGo
Healthplan Sweden AB.
7. Cookies
7.1 A cookie is a small text file containing information stored on your computer.
7.2 YouGo Healthplan Sweden AB uses its own, temporary, cookies as part of the
system's functionality to keep track of who you are when you log in. These temporary
cookies are removed from the computer or tablet / mobile phone you use after you
leave the session at YouGo Healthplan Sweden AB.
8. Disclaimer
8.1 There is currently no treatment that is guaranteed to help everyone. YouGo
Healthplan Sweden AB takes no responsibility for any medical conditions that may be
the basis for your problems. All participation always takes place of one's own free will
and at one's own risk.
8.2 We recommend that medical complaints are always properly investigated by
qualified healthcare professionals. The fact that you use YouGo Healthplan Sweden AB's
services does not mean that you should discontinue an ongoing medication or
treatment.
8.3 If you are taking prescription medications, you should always consult your doctor
before any downsizing or discontinuation.
Updated 2022-06-17
​
PRIVACY STATEMENT
This is a statement on the processing of your personal data pursuant to the EU’s General Data
Protection Regulation (2016/679) (GDPR).
​
Definitions
For the purposes of this Policy:
Controller means the natural or legal person who alone or together with others determines the
purposes and means of the processing of personal data.
Processor means a natural or legal person who processes personal data on behalf of the controller.
Personal Data means any information relating to an identified or identifiable natural person (‘data
subject’); an identifiable natural person is one who can be identified, directly or indirectly, in
particular by reference to an identifier such as a name, an identification number, location data, an
online identifier or to one or more factors specific to the physical, physiological, genetic, mental,
economic, cultural or social identity of that natural person.
Processing means any operation or set of operations relating to personal data, whether or not by
automated means, such as collection, recording, organization, structuring, storage, adaptation or
alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making
available, alignment or combination, restriction, erasure or destruction.
Third-party means a natural or legal person, other than the data subject, controller, processor, or
persons who under the direction of the controller or processor are authorized to process personal data.
By Active measurement period is meant; The period within which the registered person or the
registered person's employer is a customer of YouGo Healthplan Sweden AB.
Controller
YouGo Healthplan Sweden AB
Business ID: 556666-1921
address: Björklundabacken 10, 436 57 Hovås
tel. 070 770 84 90
email address: info@yougohealthplan.com
Communication regarding privacy matters
Anna Krantz
tel. 070 770 84 90
email address: anna.krantz@yougohealthplan.com
We request that data subjects contact the person listed hereinabove for all questions related to the
processing of personal data and situations related to the exercising of your rights.
Basis and purpose of processing personal data
The legal basis for the processing of personal data is the consent to the processing of personal data
provided by the data subject.
The purpose of the processing of personal data is to enable the registered to use the service in the
intended manner in accordance with the agreement between the person responsible for personal data and the customers. The purpose of the processing of personal data is thus the fulfillment of the
contractual obligations towards customers.
The purposes of the processing of personal data are to enable communication with the individual,
connect the individual to a specific organization and be able to show the individual's development for the individual and the group's development for the employer.
YouGo Healthplan Sweden AB's purpose is to promote a healthy lifestyle and thus health and wellbeing at individual, group and organizational level. Taking part in YouGo Healthplan Sweden AB's services is always voluntary.
YouGo Healthplan Sweden AB offers tools for continuously measuring and monitoring perceived
health. With the support of about 30 questions with answers in the form of a degree statement about lifestyle, a result emerges where current lifestyle is summarized within different areas and
opportunities of improvements can be identified regarding their habits for increased health and wellbeing both physically and mentally. You can receive e-mails with newsletters, health programs,
invitations to training sessions, lectures and similar.
YouGo Healthplan Sweden AB's services can be used by organizations as a central part of the
ongoing systematic work environment development and the work of organizational health-promotion.
Companies and organizations (usually employers) can invite individuals (usually employees) to use
YouGo Healthplan AB's services.
Regular data sources
The personal data to be processed is regularly received from the data subject themselves.
Personal data being processed
The personal data controller only collects the personal data from the data subject that are relevant and necessary for the purposes described in this privacy policy. The following information is processed if registered:
Email address
Sex
Approximate age
Health information regarding lifestyle; movement / exercise, perceived feeling in the body, diet, sleep,
mental health, relationships, tobacco and alcohol.
Organizational belonging
Period of employment
Disclosure of personal data
Personal data will not be disclosed to third parties unless the law imposes an obligation to do so. Data may, therefore, be disclosed in exceptional cases, such as to the authorities when so required by law.
Personal data assistants
For technical reasons, personal data can be transferred to our personal data assistants:
Amazon Web Services Inc.
2550 Engineering AB
All our personal data assistants are bound by personal data assistant agreements. Upon request, we
will personally provide you with current information about all our partners who process personal data and further clarify the protection measures.
Transfers of personal data to third countries
Personal data will not be transferred outside of the EU and the European Economic Area.
Protection of personal data
The controller processes personal data in a manner that aims to ensure the appropriate security of the personal data, including their protection against unauthorized processing and accidental loss,
destruction, or damage.
The controller uses appropriate technical and organizational safeguards in order to achieve this goal;
these include the use of firewalls, encryption techniques and safe equipment rooms, appropriate
access control, careful management of data system user IDs, and providing instructions to the
personnel participating in the processing of personal data.
Retention period for personal data
The person responsible for personal data processes personal data during the customer's active
measurement period and a period of 12 months after the end of the active measurement period. After this period, the data controller deletes or anonymises the data within 12 months in accordance with his deletion processes.
All personal information is stored as long as your employer subscribes to YouGo Healthplan Sweden
AB's service. Limiting the storage time would limit the effectiveness of the tools, ie enable
individuals, groups and organizations to continuously and systematically monitor and promote health.
Your employer's access to the tool enables continuously and systematically work to promote good
health.
If you cease to be connected to the current organization, your Employer is responsible for removing
you from YouGo Healthplan Sweden AB's services to ensure anonymisation of your account.
Rights of the data subject
Right to request access to personal data
The data subject has the right to receive confirmation regarding whether personal data concerning
them is being processed and, if it is, the right to receive a copy of their personal data.
Right to rectification
The data subject has the right to request that inaccurate and erroneous personal data concerning them be rectified. The data subject also has the right to supplement incomplete personal data by submitting the required additional information.
Right to erasure
The data subject has the right to request the erasure of personal data concerning them if
a. the personal data is no longer required for the purposes for which they were collected;
b. the data subject withdraws their consent which the processing of personal data was based on, and
no other legal basis exists for the processing; or
c. the personal data has been unlawfully processed.
Right to restriction of processing
The data subject has the right to restrict the processing of personal data concerning them if
a. the data subject contests the accuracy of their personal data;
b. the processing is unlawful and the data subject opposes the erasure of the personal data and
requests the restriction of its use instead; or
c. the controller no longer needs the personal data for the purposes of the processing, but it is required
by the data subject for the establishment, exercise or defence of legal claims.
Right to withdraw consent
The data subject has the right to withdraw the consent they have provided for the processing, without affecting the lawfulness of processing based on consent before its withdrawal.
Right to data portability
The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit this data to another controller.
Right to lodge a complaint with a supervisory authority
The office of the Authority for Privacy Protection is the national supervisory authority for personal
data matters. You have the right to bring your case to the supervisory authority if you consider that the processing of personal data concerning you is in violation of applicable law.
Amending the privacy policies
The controller is continuously developing its activities and may therefore be required to amend and
update its privacy policies when necessary. The amendments may also be based on changes in the
legislation concerning data protection.
If the amendments include new purposes for the processing of personal data or otherwise introduce
substantial changes, the controller will provide advance notification of them and, if necessary, request consent.
​