How we handle your personal data

Data controller

ZiZoHub, Gothenburg, Sweden, is the data controller for the processing of your personal data on minmedborgarresa.se.

What data we process

Account and contact details, such as name and email address.
Login codes sent to your email. The code is stored only in hashed form and temporarily, and is removed as soon as it has been used or has expired.
Study activity and results, such as your completed practice exams. Practice statistics for chapters, True or false and Sweden check are saved locally in your browser and are not sent to us.
Your chosen language for explanations is saved locally in your browser, not in your account.
Technical logs, such as IP address and device information, for security and troubleshooting.

External technical service providers

We use external technical service providers to run the website, such as web hosting and an email service to send login codes and replies to the contact form.

Some features use external technical service providers. When you choose to have a practice question explained in another language, the text of the question is sent to the provider to generate the explanation in the language you chose. We do not send your name, email address or other account information in that request. The same question and language reuses a previously generated explanation instead of sending a new request every time.

We choose service providers that process personal data within the EU/EEA. Personal data is not transferred to countries outside the EU/EEA.

Why we process your personal data

We process your personal data in order to:

create and administer your account
give you access to the website's features
save and show your study results and progress
recommend the next step in your study journey
administer groups and competitions you choose to take part in
maintain the security of the service
troubleshoot technical issues
respond to messages you send us

Retention period

We keep your personal data for as long as you have an active account and for as long as the data is needed for the purposes described in this privacy policy.

When you close your account, we delete or anonymise your account and study data within 30 days, unless we must keep certain data longer to meet a legal obligation or to establish, exercise or defend legal claims.

Technical security logs are kept for 90 days and are then deleted or anonymised.

Messages sent via the contact form are kept for a maximum of 12 months, or until the matter is resolved.

Cookies

The website only uses cookies that are required for the service to function, for example for login.

Your rights

Among other things, you have the right to:

access the personal data we process about you
request correction of inaccurate or incomplete data
in certain cases request that your data be deleted
in certain cases request that processing be restricted
in certain cases object to the processing

You also have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe your personal data is being processed incorrectly.

Last updated: 18 July 2026