Privacy notice

This privacy notice explains how Zeravion, based in Gothenburg, Sweden, handles personal data when you visit zeravion.se, submit a website enquiry or correspond with us about a potential business or research collaboration. Zeravion is the data controller for this processing, meaning it determines why and how your information is used.

The notice is intended to provide information under the EU General Data Protection Regulation (GDPR) and applicable Swedish data-protection law. For privacy questions or requests, contact info@zeravion.se.

This is a company information website, not a patient portal or a service for submitting health measurements. Research participation and health-data processing are addressed separately below.

Most enquiry information comes directly from you. Depending on how you contact us, it includes:

• Identity and business contact details: your name, email address, organisation and professional role.
• Enquiry content: your selected collaboration type, optional area of interest, message and information you provide in subsequent correspondence.
• Submission records: a submission identifier, creation timestamp, the consent flag submitted with the form and an email-notification status.
• Technical request information: information needed to deliver and troubleshoot the website, which may include IP address, browser or device information, requested pages and error or server logs processed by hosting and delivery providers.

If you contact us on behalf of someone else or include their details, provide only information needed for the enquiry and make sure you are entitled to share it. Business correspondence may also contain contact details supplied by your colleagues or organisation.

Please do not submit medical records, urine results, sensitive health information, identifiable study-participant data or other unnecessary sensitive personal data through the form or general enquiry email.

We distinguish the purpose of each use of personal data and the legal basis that applies:

• Website enquiries — consent (Article 6(1)(a) GDPR). The form asks for your consent to store and use your submitted information to respond to your enquiry and handle directly related follow-up. This is not consent to advertising or unrelated marketing.
• Direct business correspondence and relationship management — legitimate interests (Article 6(1)(f)). Where you contact us by email or act as a representative of a potential partner, our interest is to answer relevant business communications and manage the professional relationship, taking account of your rights and reasonable expectations.
• Steps towards a contract — Article 6(1)(b), where applicable. This basis applies only where processing is necessary for a contract with you personally, or steps you request before entering one; it does not automatically apply because you represent a company.
• Website delivery, security and troubleshooting — legitimate interests (Article 6(1)(f)). The relevant interests are maintaining a functioning website, investigating failures and protecting it against misuse.
• Legal compliance — Article 6(1)(c), where applicable. Records may need to be retained or disclosed when a specific legal obligation applies. Information necessary to establish, exercise or defend legal claims may be processed on the basis of legitimate interests.

Withdrawal of consent ends the processing that depends on that consent. It does not affect earlier lawful processing. Any continued retention needs a separate applicable legal basis and purpose; it is not automatically justified by the fact that you submitted an enquiry.

Visiting the website does not require an account. Sending an enquiry is voluntary. The form requires your name, organisation, role, email, collaboration type, message and consent; your area of interest is optional. Without the required information or consent, the form cannot accept your enquiry. You may instead contact us directly at info@zeravion.se.

Keep messages relevant to your request and share no more personal information than necessary. You may withdraw form consent at any time by emailing us. The contact form does not enrol you in a newsletter.

Website enquiries are stored using Lovable Cloud. The website also attempts to send a notification containing the enquiry to our team inbox at info@zeravion.se through Lovable’s managed email service. A stored enquiry may remain available even if email delivery fails.

Information is accessible to Zeravion personnel handling enquiries and to service providers to the extent needed for website hosting, cloud storage, email delivery, mailbox services, technical support and security. Providers may process information on our behalf or, for certain purposes, under their own responsibilities.

Where necessary and lawful, relevant information may also be provided to professional advisers, competent authorities or courts to comply with obligations or handle legal claims. We do not sell your personal data or use enquiry information for advertising profiles.

Using cloud, email, font and media-delivery services can involve processing in countries outside the EU/EEA. This notice does not imply that all information is hosted exclusively in Sweden or the EU/EEA.

Transfers subject to the GDPR must have a valid transfer mechanism, such as a European Commission adequacy decision or appropriate safeguards, including standard contractual clauses where applicable, together with any necessary supplementary measures. The mechanism depends on the provider, destination and processing involved.

You can contact info@zeravion.se to request details of the recipients, locations and safeguards applicable to your information, including how to obtain a copy of relevant safeguards.

Retention is determined by the purpose and circumstances of the information, rather than one fixed period for every visitor:

• Enquiries and follow-up: the time required to respond, resolve the enquiry and complete relevant follow-up. Whether discussions remain active and whether a collaboration results are relevant criteria.
• Ongoing business correspondence: the period needed to manage the relationship and any applicable contractual, statutory or legal-claims requirements.
• Consent and request records: the period needed to document the handling of your consent or data-protection request, where there is a lawful reason to retain that evidence.
• Technical logs and provider records: the period relevant to service delivery, security or troubleshooting, subject to the applicable provider arrangements and legal requirements.

The same enquiry may exist in cloud storage, email correspondence and service backups. Deleting a message from one location does not necessarily remove every copy immediately. Backup and service-log retention can differ from the active enquiry record.

Ask us for the retention criteria or period applicable to your enquiry, or request deletion, by emailing info@zeravion.se. Where a lawful reason prevents immediate deletion, we will explain it. This notice does not promise an automatic deletion schedule.

Zeravion has not enabled optional analytics cookies, advertising cookies, tracking pixels or remarketing tools in this website. The former cookie-preference banner and its preference cookie have been removed; visiting the website does not create a new Zeravion cookie-preference record.

This does not mean that browsing involves no personal-data processing. Your browser requests fonts from Google Fonts and images from hosted media services. Those providers receive technical request information, including your IP address, needed to deliver the requested content. Hosting and delivery services may also process requests for reliability and security.

Links to other websites take you to services governed by their own privacy notices. Editing and previewing this website in Lovable may involve separate editor sign-in, storage and diagnostic functions; these are not part of submitting an enquiry on the public website.

The enquiry form validates submitted information, stores accepted submissions in cloud storage and sends notifications through a managed email service. Access and information sharing should be limited to what is necessary for the relevant purpose. No internet transmission or storage system can be guaranteed completely secure; avoid sending confidential or sensitive records through a general enquiry channel.

We do not use website enquiries to make solely automated decisions, including profiling, that produce legal or similarly significant effects on you. Descriptions of Zeravion’s AI and research technology elsewhere on the website do not mean that your enquiry is used to train an AI model or to assess your health.

Subject to the conditions and exceptions in the GDPR, you have the following rights:

• Access: obtain confirmation of processing, information about it and a copy of your personal data.
• Rectification: have inaccurate information corrected and incomplete information completed.
• Erasure: request deletion where the legal conditions are met, including when information is no longer needed or consent is withdrawn and no other basis applies.
• Restriction: ask for processing to be limited in the circumstances provided by law.
• Objection: object, for reasons relating to your particular situation, to processing based on legitimate interests. We must stop unless we demonstrate compelling legitimate grounds overriding your interests and rights, or processing is needed for legal claims. You may object to direct marketing at any time.
• Portability: receive data you provided in a structured, commonly used, machine-readable format, and have it transmitted where technically feasible, when processing is automated and based on consent or a contract.
• Withdrawal of consent: withdraw at any time, without affecting the lawfulness of prior processing.

Email info@zeravion.se and describe your request. We may ask for proportionate information to confirm your identity, but please do not send identity documents unless requested through an appropriate channel.

We will respond without undue delay and normally within one month of receiving your request. Where permitted because of complexity or the number of requests, this may be extended by up to two further months; we will inform you within the first month and explain why. Requests are normally free of charge. The GDPR permits a reasonable fee or refusal for manifestly unfounded or excessive requests.

You can raise concerns with us at info@zeravion.se. You also have the right to complain directly to a supervisory authority; contacting us first is not a requirement.

In Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY). You may also lodge a complaint with the authority in the EU/EEA country of your habitual residence, place of work or the alleged infringement.

This website notice does not cover personal data collected in clinical studies, biomarker research, Zeravion Horizon deployments or future health applications. It is not a participant-information sheet or consent form for those activities.

Any such processing needs its own applicable information about the controller and other parties, data categories, purposes, legal bases, any condition for processing health data under Article 9 GDPR, retention, recipients, transfers and participants’ rights. Controller and processor responsibilities depend on the particular study or arrangement.

If you participate in a study or use a relevant product, refer to the notice and contact details provided for that activity. Do not send identifiable participant data or health measurements through the general contact page.

We may revise this notice when website services, processing practices or legal requirements change. The revision date above identifies the current version. Where legally required, material changes will be communicated through an appropriate channel; publishing a new notice does not by itself provide consent for a new purpose.

For clarification about this notice or processing relevant to you, contact info@zeravion.se.