Last updated: Feb 2026

1. Scope and Applicability

This Privacy Policy applies exclusively to individuals undergoing medical examinations at BizMed Sverige AB (“BizMed”) in connection with visa, residency or immigration applications to:
 

• The Department of Home Affairs (Commonwealth of Australia)

• Immigration New Zealand
   

BizMed Sverige AB
Malmskillnadsgatan 37
111 56 Stockholm
Sweden

BizMed is a registered healthcare provider under Swedish law and operates in accordance with:
 

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)

• The Swedish Patient Data Act (2008:355)

• The Patient Safety Act (2010:659)

• Applicable panel physician guidelines issued by the relevant immigration authorities
   

This Policy does not apply to other BizMed healthcare services.
 
2. Categories of Personal Data Processed

In connection with visa medical examinations, BizMed processes the following categories of personal data:

2.1 Identification and Administrative Data

• Full name

• Date of birth

• Passport details

• Contact information

• Immigration reference numbers (e.g., HAP ID or equivalent)

• Appointment and administrative records
   

2.2 Special Categories of Personal Data (Health Data)
 

• Medical history and declarations

• Clinical examination findings

• Physician assessments

• Laboratory test results

• Radiology reports

• Diagnostic imaging (including X-rays and DICOM files)

• Vaccination records

• Any supplementary medical documentation required by the immigration authority

Health data constitutes special categories of personal data under Article 9 GDPR and is subject to enhanced protection.
 
3. Purpose of Processing

Personal data is processed strictly for the following purposes:

• Conducting mandatory visa medical examinations

• Documenting medical findings in accordance with panel physician requirements

• Submitting medical information to the relevant immigration authority

• Complying with Swedish healthcare legislation

• Maintaining legally required medical records

BizMed does not use visa-related medical data for marketing or unrelated secondary purposes.
 
4. Legal Basis for Processing

Processing is based on:
 

• Article 6(1)(b) GDPR – performance of a contract

• Article 6(1)(c) GDPR – compliance with legal obligations

• Article 9(2)(h) GDPR – provision of healthcare

• Article 9(2)(a) GDPR – explicit consent for international transfer of health data
   

Explicit written consent is obtained prior to submission of medical information outside the EU/EEA.
 
5. Disclosure and Data Recipients

Personal data may be disclosed to:
 

• The Department of Home Affairs (Australia)

• Immigration New Zealand

• Official digital platforms designated by those authorities (e.g., eMedical)

• Accredited laboratories and radiology providers engaged in the examination process
   

BizMed does not disclose visa medical data to employers, insurers, family members, or other third parties unless required by law.
 
6. International Transfers

Medical data may be transferred outside the European Union / European Economic Area (EU/EEA), including to Australia and New Zealand.

Such transfers are carried out in accordance with Chapter V GDPR and are based on:
 

• Adequacy decisions where applicable;

• Appropriate safeguards; or

• Explicit consent of the data subject.
   

Once transmitted to the relevant immigration authority, BizMed has no control over subsequent processing and cannot influence retention periods or further disclosures by that authority.
 
7. Data Retention

Medical records are retained in accordance with the Swedish Patient Data Act for a minimum of ten (10) years from the date of the last journal entry.

Retention periods applied by immigration authorities are governed by their respective national laws and policies.
 
8. Role of BizMed as Panel Medical Provider

BizMed acts solely as an approved panel medical provider and conducts examinations in accordance with:
 

• Swedish healthcare legislation; and

• Technical and procedural requirements issued by the relevant immigration authority.
   

BizMed does not determine medical admissibility or visa outcomes and is not responsible for decisions made by immigration authorities.
 
9. Data Subject Rights

Under GDPR, you have the right to:
 

• Access your personal data

• Request rectification

• Request restriction of processing

• Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)
   

Certain limitations may apply where processing is required by healthcare or immigration legislation.
 
10. Processing of Data Relating to Minors

Where the individual undergoing examination is under 18 years of age, personal data is processed on the basis of:
 

• Parental responsibility or legal guardianship; and

• Explicit consent provided by a parent or legal guardian where required.
   

BizMed may request documentation confirming guardianship.

The parent or guardian signing the consent form confirms that they are legally authorised to provide consent on behalf of the minor.
 
11. Security Measures

BizMed implements appropriate technical and organisational measures to protect personal data, including:
 

• Secure electronic medical record systems

• Role-based access controls

• Encrypted data transmission

• Secure integration with official immigration medical platforms
   

Access to visa medical records is restricted to authorised healthcare personnel.
 
12. Contact Information

For questions regarding this Privacy Policy or the processing of personal data, please contact:

Data Protection Officer
BizMed Sverige AB
support@bizmed.se
 
© 2025 BizMed Sverige AB