Last updated: October 2, 2026
Here we describe how Jägersrohälsan handles personal information when scheduling appointments at bmm.jagersrohalsan.se. This information applies to appointments, confirmations, and reminders. Patient records and other healthcare documentation are handled separately.
Who is responsible for the data?
Jägersrohälsan AB is the data controller. You can reach us at info@jagersrohalsan.se, by phone at 040-400 800, or at Derbyvägen 6E, 212 35 Malmö. Our data protection officer is Jessica Nilsson: jessica@jagersrohalsan.se.
What information is used, and why?
When you make a reservation, you provide your name, cell phone number, and email address, and select a time. The system also saves a reservation reference number, the time of the reservation, and information about the status of the reservation and any notifications sent. This information is needed to reserve the time slot, manage the visit, handle changes, and send confirmations and reminders.
The form does not ask for a social security number, diagnoses, or free-text medical information. However, making an appointment with a healthcare provider may still reveal health information. Therefore, you should not include any additional health information in the name or contact fields, or send it via regular email.
Your name and contact information are required for online booking. Please contact us by phone if you would like assistance with booking or need another way to obtain booking information. Booking information is not used for marketing purposes. The booking system does not make any automated medical decisions and does not engage in profiling.
Legal Basis
The processing of data for the purpose of planning and administering health care is based on a task carried out in the public interest pursuant to Article 6(1)(e) of the General Data Protection Regulation, in accordance with health care legislation. When health data is processed, it is done for the purposes of health care in accordance with Article 9(2)(h) and subject to applicable confidentiality requirements. Checking the box on the form confirms that you have read the information; it does not constitute consent to marketing.
Confirmation, Reminder, and Recipient
An email confirmation includes the name, time, location, and appointment reference number. A neutral text message reminder is typically sent about 24 hours before the appointment. The messages do not specify which treatment or vaccination the appointment is for. Use contact information that you have access to yourself; for example, regular emails and text messages can be displayed on a locked screen.
Authorized staff and the technical service providers necessary for operations and mailings may process the data. Booking information is stored in the website’s database. Emails are sent via Jägersrohälsan’s existing email server from bokning@bmm.jagersrohalsan.se. Replies to that address are forwarded to info@jagersrohalsan.se. Text messages are transmitted via Twilio and the relevant mobile carriers. The service providers receive the contact and message information necessary for each respective communication.
Twilio’s services may involve processing outside the EU/EEA, including in the United States. Twilio’s Privacy Policy describes the safeguards for such transfers, including the EU’s Standard Contractual Clauses where applicable. Please contact our Data Protection Officer for information about recipients and the safeguards that apply to your data.
How long is the data retained?
In the active booking database, names, cell phone numbers, email addresses, booking references, and SMS identifiers are automatically deleted 30 days after the end of the visit. In the event of an administrative cancellation, this information is removed from the booking record. Time and technical status information may remain without these identifiers.
To prevent repeated booking attempts, temporary, hashed checksums are used for IP addresses and email addresses, valid for one hour. Hashed values are not necessarily anonymous.
Deleting entries from the booking database does not automatically delete copies stored in backups, email or SMS services, or in your own inbox. Separate retention periods apply in those cases based on recovery, delivery verification, security, and any legal requirements. Contact the data protection officer for information about these retention periods or to request deletion. Patient records are subject to different retention rules.
Your Rights
You may request access to your personal information and have any errors corrected. You may also request that your information be deleted or its processing restricted, and you may object to the processing. These rights may be limited when the information is needed for medical care or must be retained by law. We may need to verify your identity before we disclose or modify your information.
Please contact us or the Data Protection Officer if you have any questions or wish to exercise your rights. You may also file a complaint with the Swedish Data Protection Authority (IMY).
Cookies and Changes
This information pertains to the appointment scheduling process. The website's use of cookies is described in our cookie policy. If there are any changes to how the booking system operates, we will update the information here.