Privacy Policy

Last updated: 2025-10-01.

NUHA (the Nordic University Hospital Alliance) is committed to protecting your privacy and ensuring the security of any personal data collected through our [website].

This Privacy Policy outlines how we collect, use, store, and safeguard personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

By accessing or using our Website, you acknowledge that you have read and understood this Privacy Policy.

1. What personal data we collect

The NUHA website is primarily informational. We do not require users to register, create an account, or submit personal data to access the content.

However, personal data may be collected in the following circumstances:

Email communication: If you contact us directly, we may retain your contact information and the content of your communication for follow-up purposes.
Cookies and usage data: We may use cookies and basic web analytics tools to understand usage patterns, improve the website, and ensure performance. These tools may collect anonymized IP addresses, device type, browser type, and browsing behavior on our website. No personally identifiable information is tracked without consent.

We do not knowingly collect or process sensitive personal data (e.g. race, religion, health data, etc.) via this website.

2. Legal basis for processing

We process your personal data only when:

You have given your consent (e.g., by submitting a contact form)
It is necessary for our legitimate interests, such as communicating with stakeholders or maintaining website functionality, or
It is required to comply with legal obligations

You may withdraw your consent at any time by contacting us here.

3. How we use your data

We may use your personal data for the following purposes:

To respond to your inquiries or messages.
To improve our website’s functionality and content.
To maintain security and protect against misuse.
To comply with legal and regulatory requirements.

We do not use your data for marketing purposes unless you have explicitly opted in (e.g. via a newsletter form).

4. Data sharing and third parties

We do not sell or rent your personal data to third parties.

Your data may be shared with trusted service providers or processors solely for the operation and maintenance of this website (e.g., hosting providers, analytics platforms), under strict confidentiality agreements and GDPR-compliant safeguards.

If data is transferred outside the European Economic Area (EEA), we ensure adequate protections are in place, such as Standard Contractual Clauses or other approved mechanisms.

5. Data retention

We retain personal data only as long as necessary for the purposes outlined in this Policy or to comply with legal requirements.

For example:

Contact form submissions may be retained for up to 12 months for record-keeping or follow-up purposes.
Analytics data is retained in accordance with the relevant platform’s default retention policy, unless customized.

7. Your rights

Under applicable data protection laws, you have the following rights:

To access the personal data we hold about you.
To correct inaccuracies.
To request deletion of your data (“right to be forgotten”).
To object to or restrict our processing.
To request a copy of your data in a portable format.
To lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us at [Insert Contact Email], along with a proof of identity if required.

8. Data security

We take appropriate technical and organizational measures to protect your data against unauthorized access, loss, misuse, or disclosure.

This includes:

SSL encryption.
Secure server hosting within the EU.
Access control for internal stakeholders.

9. Cookies and tracking technologies

We may use cookies to enhance your experience, analyze site traffic, and remember your preferences. Some cookies may require your consent.

You can control or disable cookies via your browser settings.

10. Changes to this privacy policy

We may update this Policy from time to time to reflect legal or operational changes. The updated version will be posted on this page with a revised “Last Updated” date.