How we handle your personal data

Who is responsible

Dr. Tian Akupunktur, Sjöporten 4, 417 64 Göteborg, Sweden, is the data controller for the personal data described here. If you have questions about how we handle your data, email info[at]drtian.se.

Information we receive when you contact us

When you email, call or send us a message, we receive the information you choose to give us. This is usually your name, email address, phone number and what you write. We use it only to reply to you and follow up on your enquiry.

The contact form

We use the information from the form to reply to your message. If you tick the newsletter box, we also use your name and email address to send you our newsletter.

We store what you fill in: your name, email address, mobile number if you give it, what your enquiry is about, how you found us, your message and whether you want the newsletter. We also store the language of the page, the page you sent the form from and when you gave your consent. We do not store your IP address.

Your message is saved in a database run by Cloudflare (Cloudflare D1), which we have set up to store data in Europe. A copy is sent by email to the clinic through the email service Resend.

To stop spam, the form uses Cloudflare Turnstile. It only loads when you click into the form or scroll to it. Turnstile reads technical information about your browser and your IP address to check that a person is filling in the form. This information is not used for advertising.

Booking and payment

Appointments are booked on Bokadirekt. Bokadirekt is responsible for the information you give them and for payments made through them. They handle it under their own privacy policy, which you can find at bokadirekt.se.

Cookies and statistics

This website does not use cookies for statistics or marketing, and we use no tools that track you. That is why there is no cookie banner.

If you follow a link to Bokadirekt, Google Maps or another website, that website’s own rules apply.

The spam protection in the contact form only loads when you use the form. It is described in the section “The contact form”.

Technical logs

The company that hosts this website keeps technical logs for a short time, such as your IP address, browser type, timestamp and the pages viewed. The logs are needed to keep the website working and secure. We do not use them to find out who you are.

Who receives your data

We never sell your data or pass it on to others, except to suppliers who help us run the website and receive email.

Cloudflare (hosting, the database and spam protection) and Resend (email from the form) process data on our behalf as data processors. Both are US companies. Any transfer to the United States is covered by the EU–US Data Privacy Framework or the EU standard contractual clauses.

Our email is handled in Gmail, which is run by Google. Google may process data outside the EU/EEA, protecting it in line with EU rules for such transfers.

Legal basis

We process your data under the General Data Protection Regulation (GDPR):

• Email and phone: our legitimate interest in being able to answer your question (Article 6(1)(f)).
• Contact form: your consent (Article 6(1)(a)). You can withdraw your consent at any time by emailing us.
• Newsletter: your consent (Article 6(1)(a)), which you give by ticking the box in the form.
• Spam protection: our legitimate interest in stopping automated spam (Article 6(1)(f)).
• Technical logs: our legitimate interest in running the website securely (Article 6(1)(f)).

How long we keep your data

We keep messages for as long as we need them to answer and follow up your question, and delete them no later than 12 months after our last contact. Technical logs are deleted automatically after a short time.

Messages sent through the contact form are deleted automatically 12 months after you sent them. If you signed up for the newsletter, we keep your name, email address and consent until you unsubscribe.

Unsubscribing and deleting your data

You can unsubscribe from the newsletter at any time, using the link in each issue or by emailing info[at]drtian.se.

If you want us to delete what you sent through the form before the 12 months are up, email info[at]drtian.se from the same address. We will delete the data and confirm within one month.

Your rights

You have the right to:

• find out what data we hold about you and get a copy of it
• have incorrect data corrected
• have your data deleted
• object to our processing of your data
• withdraw any consent you have given

Email info[at]drtian.se and we will reply within one month.

Complaints

If you think we are handling your data incorrectly, we would like you to contact us first. You also have the right to complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.

Changes to this policy

We will update this policy if anything changes, for example if we start using a new tool on the website. The date at the top shows when it was last changed.