Terms of Use

1. Application of the Terms of Use

All parties who have registered a user accounts (i.e. profiles) in the service maintained by BeeHealthy Oy (“the Service”), who give someone access to their own user account or provide information to the Service or otherwise use the Service or information obtained from the Service concerning themselves or another person (“the User”) accepts and agrees to comply with these applicable Terms of Use. The Terms of Use apply to both the online and mobile application of the Service. The online service and the mobile application may differ from each other. Mobile applications of different operating systems may also differ from each other. As the Terms of Use can be updated from time to time as described in section 12, the Users are encouraged to review the Terms of Use on a regular basis.

The service should not be used in case of need for emergency care, in which case the user should call 112 or go to the emergency department.

2. Purpose and content of the Service

BeeHealthy Oy (Finnis Business ID 3142662-9 (“BeeHealthy ”) is the provider of the technical solution of the Service which enables the storage and viewing of information related to health and well-being and the development and transmitting of information about services related to health and well-being. Through the Service Läkarhuset Sibyllegatan Aktiebolag (org.nr. 556437-5706) (“Healthcare Provider”) provides health care and other services to the User.

BeeHealthy is only the provider of the technical solution of the Service and is therefore not considered as a provider of healthcare services. The agreement between the User and BeeHealthy is therefore regarded as a service agreement concerning the provision of a technical solution for the Service. BeeHealthy is not responsible for the nature or quality of medical examinations or other medical services provided through the technical solution provided by it.

Content that is published or provided by BeeHealthy in the online service and/or mobile application is complementing the medical guidance provided by a healthcare professional and is not intended as a substitute for the doctor’s assessment, diagnosis or treatment of any illness or disease.

The User can store, transfer and process data related to their own health and well-being in the Service. The information stored by the User is not available to a health care professional providing services at the Healthcare Provider (“the professional”), unless the User expressly authorises it in the Service. The User granting permission does not mean that the professional reads the data automatically or proactively in connection with the treatment event, therefore, the User must individually agree with the professional at each treatment event that the professional will become familiar with certain data stored by the User in the Service. The professional decides on a case-by-case basis whether to include this information in any part in the separate patient register maintained by the Healthcare Professional.

The data stored in the Service by the User are not patient data in the sense that their processing would be subject to the same obligations as those applicable to the patient data stored by a professional in connection with appointments, procedures and examinations. However, the User may separately agree with the professional that the data will be used in connection with the treatment, in which case the professional can store data from the Service in a separate patient information system in connection with the treatment.

The Service is separate from the patient information system maintained by the Healthcare Provider, which covers patient information about the treatment and examinations provided by the Healthcare Provider and the private practitioners operating at the Healthcare Provider. The Service, however, gives the User the right to view the patient information and visit history stored in the Healthcare Provider’s medical clinic. However, the visibility of the data may be partially limited for therapeutic reasons.

A person registered for the Service may be granted, with the consent of another person or on the basis of a custody relationship, the right to view and process the data of another person registered in the Service, which are stored personally, and partially limited data of the Healthcare Provider’s patient register.

The User is responsible for ensuring that all personal data provided when registering the user account is relevant, correct, and updated throughout the term of the use of the Service. Any potential changes to this information must be updated. The User can store and update their personal and contact information as well as their prohibitions and consents in the Service

The User can send, to a limited extent, a message via the Service to a professional working at the Healthcare Provider who is treating them. However, reading the message sent in this way is not guaranteed, so if the matter is important or urgent or if the reception must otherwise be ensured, the User must always make an appointment through the normal appointment service of the Healthcare Provider or otherwise ensure proper processing of the information contained in the message. The Healthcare Provider has the right to direct and restrict the sending of messages only to a specific person.

The Service provides the services of the digital medical clinic, the Digital Clinic. The use of the Service is based on the customer relationship with the Healthcare Provider or its partners.

The services of the Digital Clinic can be provided by the Healthcare Provider’s professionals, private practitioners or the Healthcare Provider’s partners. Some of the services are subject to a fee. Examination referrals made in connection with Digital Clinic visits, which are charged to the User according to the current price list, are also considered as services subject to a fee. As a rule, the services provided by professionals consist of handling one issue at a time. If the visit concerns several separate issues, the Healthcare Provider reserves the right to charge for each issue individually. If the Users’ issue is not suitable for handling at the Digital Clinic, the User will be referred to the right care and the visit will not be charged. However, the Healthcare Provider reserves the right to charge a fee for the User’s visit if the issue requires more extensive familiarisation from the doctor or the doctor

provides treatment instructions. The Healthcare Provider also reserves the right to charge for non-therapeutic discussions. The professionals provide services in Swedish and English.

The doctors of the Digital Clinic are always physically located in Sweden.

The Service includes service and reminder messages sent to an email address, mobile phone number and/or mobile application notifications, for example, a reminder of booked appointments, notification of the completion of examination results or professional’s message from the Digital Clinic. The User may prohibit the sending of service or reminder messages, but the User must understand its impact, for example, on the clarity of the Digital Clinic services.

The Service may also contain up-to-date information and offers about the services of the Healthcare Provider or its partners. The User may consent to the sending of the Healthcare Provider newsletter and/or other up-to-date marketing communications about the products and services of the Healthcare Provider or its partners to an email or mobile phone.

The Healthcare Provider may use the Service and the information contained therein for the management of customer relationships concerning other health and social services, well- being and other related services; conducting customer relationships, customer history, feedback, satisfaction data, surveys and studies, quality monitoring and development, monitoring and analysis; targeting communications, marketing and services and other organisation, development and provision of services.

The Service may provide information about third party services or links to such services. 3. Fees

A fee may be charged for the use of the Service as an entity or the separate services included therein in accordance with the current price list. In addition, the User is charged a fee for services that may be provided via the Service by a professional working at the Healthcare Provider. This fee is a time-based fee or another charge in line with the valid price list. If there is a separate agreement on communications, for example, in the occupational health agreement between the User’s employer and the Healthcare Provider and the service is included in the agreement (the User must confirm this beforehand), the terms of the agreement in question shall be applied. If the service is not included in the referred agreement, the User must pay for the service themselves.

The services purchased directly from the Service are charged to the payment instrument indicated by the User, the details of which are provided to the payment service provider used by the Healthcare Provider. The Healthcare Provider is not responsible for matters related to the transmission of payments, but each payment service provider is responsible for them. If the payment service provider is unable to charge the payment instrument the User have indicated, the Healthcare Provider will send the invoice details to the email address the User has provided. If the Healthcare Provider is not able to charge the payment instrument the User has indicated and the Healthcare Provider do not receive the User’s payment on the invoice sent to the email address the User has provided within the payment

period, the Healthcare Provider will initiate the collection procedure in accordance with our usual practices.

If the User utilises third-party services communicated through or conveyed by the Service, the price list and terms of the third party shall be applied.
The User is responsible for the costs resulting from their own data connections, hardware and software.

4. Registration

Registration with the Service requires the person to have a Swedish electronic identification (BankID) accepted by BeeHealthy or the Healthcare Provider and at least sixteen (16) years of age.

The registration and access rights are linked to a specific individual, so the User must always use their own personal information and personal identification data for logging in to the user account.

5. Minors’ registration and use of Service

A minor without BankID cannot register for the service on their own. The child’s legal guardian can register the child’s Service to the family profile and use the Service on their behalf, only, however, provided that the child is below the age of sixteen (16) and on the following conditions, which the guardian is obliged to comply with at the time of registration and every time the Service is used on behalf of the child. In the Service, the guardian can view, add and otherwise process information on the child in the same manner and extent the guardian can their own information.

• the child’s information is confidential and even the guardian is not generally entitled to access the information of a child. The guardian may only perform the registration and use the Service on behalf of a child under their legal guardianship and, even then, only if the guardian is entitled to receive the relevant information regarding the child’s state of health and treatment in accordance with law.

• The guardian must respect the child’s right to privacy in all situations. Before each use of the Service, the guardian must consider whether there is a need to discuss the intended use with the child before using the Service and assess the child’s opinion on the matter whenever this is possible in view of the child’s age and level of development.

• If the child can understand the meaning of the registration or use of the Service, the guardian or representative cannot perform the registration or use the Service in any other way than the one that the child has approved beforehand.
• The guardian is only allowed to perform the registration and use the Service in accordance with the best interest of the child.

• The guardian cannot register or use the Service on behalf of the child, if the registration or use is not in the child’s best interest, as may be the case in a custody dispute or if the guardian is under suspicion of assault of the child.
• The guardian must exercise special consideration before viewing information on the child from the separate patient register, even if the Service only makes limited patient register data available. The guardian cannot view information on the child without the

child’s advance approval, if that approval is needed in view of the matter and the child’s level of development.
• The guardian must consider the use before each occasion of use, taking into account the child’s age and level of development as well as the child’s other conditions and issues.
• In unclear situations, the guardian is not allowed to view the child’s information or use the Service on behalf of the child.
• It is always the guardian’s responsibility to apply consideration beforehand and to take into account what constitutes appropriate action before each occasion of use.
• If the use of the Service is counter to the child’s best interest or otherwise prohibited, BeeHealthy and the Healthcare Provider must be notified of this.
• The guardian may not register the child with the Service or use the Service without the consent of the other guardian.
• The guardian using the Service on behalf of the child is responsible for ensuring that the child’s user account is used correctly in accordance with the legislation and that the other guardian’s right to be heard and other statutory rights are also exercised by consensus between the guardians.

The guardian is always responsible for not using the data when there is no right to do so. The guardian is obliged to notify BeeHealthy and the Healthcare Provider of changes in the custody relationship if this results in a change in the access right to the child’s data in the Service.

6. Connecting a data subject to a family profile and giving access to another person

The person to be connected to the family profile is sent an invitation to join the Service, which the recipient must accept or reject while logged in to the Service with their own BankID. If the invited person accepts to be connected to the family profile, both the inviter and invited person will be connected to each other’s family profiles. However, this connection does not yet open the view to another person’s health information or enable possible processing of it, which requires separate consent from both persons in the profile management.

It is requested that both the consent to be connected to another person’s family profile and the consent to view and process the data are primarily provided in the Service in the Profile management section, but they can also be given and withdrawn by signing a separate document. An adult legally incompetent person cannot consent to a family profile connection.

A data subject may give another person the right to view and process their data which can be viewed in a limited way from a separate patient register and which is stored by the data subject or by another User with their consent.

7. Services provided by third parties

The Service may provide information about third party services, actual third-party services or links to such services. The User may use these third-party services via the Service’s links or otherwise through the Service, but BeeHealthy or the Healthcare Provider are not, even

then, a party to the agreement or otherwise responsible for the information provided or transmitted by the User and third party or for its delivery. In any case, BeeHealthy or the Healthcare Provider are not responsible for any information, services, actions or omissions provided by the User or a third party.

8. User rights and responsibilities

The User may use and undertakes to use the Service only to support the health and well- being of the data subject and solely in the interests of the data subject and in accordance with other good practices, the consents required by the legislation and the Terms of Use of the Servivce and the orders and instructions of BeeHealthy or the Healthcare Provider valid at that time. The Service may not be used for commercial purposes.

It is very important to always remember that the data stored by the User will not, as such, become available or even known to the professional, but will always have to be separately agreed with the attending professional, in which case the User must ensure that the attending professional has also processed the data that the User wanted to be processed. The User is responsible for the information provided and understands that the information provided by the User does not replace the information obtained by the professional through personal appointments, measurements or examinations.

The User is responsible for the accuracy and arrival of the data stored and processed by the User and for ensuring that only data related to the health and well-being of the data subject are stored in the Service for the purposes of the Service. The User must take all reasonable steps to ensure that the material does not contain malware or is otherwise harmful.

It is always the responsibility of the User to consider whether to conduct a personal appointment, treatment or examination with a professional. The decision and responsibility for the use and non-use of such personal service, as well as more generally the Service, lies solely with the User.

When the User connects a legally incompetent minor to the family profile, the User accepts the Terms of Use on behalf of the legally incompetent minor and is responsible for being the legal representative of the legally incompetent minor and that the User has the right to view and process the data in accordance with applicable law to the extent and for as long as the User views or processes the data of the legally incompetent minor. The User is responsible for the necessary communication with the legally incompetent minor and the other guardian.

The User is always responsible for providing correct and sufficient contact information and other necessary information about themselves and that the User has the right to view and process the data of another person.

If the User detects or suspects that there is incorrect information in their own information or that of others or the use is in contravention of these Terms of Use, the User must immediately inform the Healthcare Provider or BeeHealthy.

Each User undertakes to keep all non-public information concerning another person and other information obtained through the Service confidential, and not to use, display or disclose it, except under the regulations for the interests, consents and service purposes of the other person concerned.

Each User shall be liable for claims against the Healthcare Provider, BeeHealthy, their employees or the Healthcare Provider’s private practitioners and for any damage caused by the User’s actions or omissions.

9. BeeHealthy’s and Healthcare Provider’s rights, responsibilities and limitations of liability

The Service enables the management of the User’s own health information and communication to the extent allowed at the given time.

In addition to the remote appointment services provided by health care professionals, the Service may, for example, provide general and personal instructions, which do not, however, replace the personal appointments, treatment or examinations of the health care professional.

BeeHealthy or the Healthcare Provider are not responsible for the completeness, accuracy or uninterrupted nature of the Service or for the consequences of using or not using the Service.

BeeHealthy or the Healthcare Provider are not responsible for the functionality of the data connection and telecommunications services between the User and BeeHealthy or the Healthcare Professional. BeeHealthy or the Healthcare Provider have the right to not approve the registration and to restrict, suspend or remove content from the Service at its discretion, for example, due to load or other technical reasons or due to maintenance, suspected misuse or connection problems.

BeeHealthy or the Healthcare Provider produce and deliver the Service as it is available. BeeHealthy or the Healthcare Provider are not responsible for the costs of the User or a third party or for any direct or indirect damages to the User or a third party as a result of using or not using the Service or otherwise. In all situations, BeeHealthy’s or the Healthcare Provider’s liability is no more than what is laid down in the mandatory legislation in Sweden.

BeeHealthy or the Healthcare Provider shall not be liable for delays or other breaches of obligations caused by reasons beyond their control, such as strikes and other industrial actions, fire, illness, interruption of electricity supply, data connections or the functionality of information systems, action under public law measure or any other reason that BeeHealthy or the Healthcare Provider cannot reasonably be expected to eliminate.

All rights to the Service belong to BeeHealthy. The User may not copy, save, reproduce, modify or transfer the Service. However, the User has the right to store individual information about themselves and the persons connected to the User’s profile for the purposes and in accordance with these Terms of Use.

10. Use of personal data

The Service may store and otherwise process sensitive personal data. This information is confidential and may only be processed and used in accordance with these Terms of Use, laws and consents.

When using the Service, the User accepts the valid Privacy Statement for the Service, which can be read at www.sibyllekliniken.se.

The patient register maintained by the Healthcare Provider is a separate register from the Healthcare Provider’s customer register included in the Service which covers patient information about the treatment and examinations provided by the Healthcare Provider and independent private practitioners providing services at the Healthcare Provider as data controllers. The information stored by the User in the Service about the User’s health status, treatments or examinations performed elsewhere does not, as such, become part of the patient data, but is decided by the attending professional, if so agreed between the attending professional and the User in connection with the treatment given at the Healthcare Provider.

11. Data security

The Service operates on the Internet and can be accessed via a secure data connection, for example, via a computer, mobile phone, tablet or other device’s browser. BeeHealthy also has the right to provide the service through another technical application.

The User understands and accepts that network and mobile services may involve risks. The User is responsible for the appropriate information security of their own devices, operating environment, identifiers and operations.

The Service is logged into using BankID. BeeHealthy seeks to organise the Service and information security with appropriate technical solutions.

BeeHealthy can make backups as long as the Service is valid for the User in question, but BeeHealthy does not guarantee copies of all data entries made by the User and is not otherwise responsible for backups in all situations. For the above reasons, each User is responsible for any backups that they deem necessary in all situations, both when using the Service and especially at the end of the Service.

When the use of the Service is discontinued, BeeHealthy deletes all data stored by the User concerning the Service and the User’s profile, but the data concerning other services (such as feedback and data used to allocate services) remain in a customer register and the patient data in the separate patient register will remain there.

The User undertakes to keep the login credentials confidential and immediately notify BeeHealthy’s Customer Service Centre at sv@beehealthy.support if the credentials fall into the wrong hands or the User detects problems with the Service.

Cookies are used in the Healthcare Provider’s online services in accordance with the terms of use of the websites. Such terms can be found at www.sibyllekliniken.se.

12. Modification of Terms, issuing of regulations and instructions and termination of agreement

The User has the right to terminate the use of the Service at any time. The User must notify the termination by means indicated in the Service.

BeeHealthy and the Healthcare Provider have the right, at their sole discretion, to change the content, prices and terms of the Service, to issue regulations on the use of the Service and, at their sole discretion, to restrict, suspend and also terminate the Service.

BeeHealthy and the Healthcare Provider seeks to notify significant changes in connection with the Service. If the User continues to use the Service, this means accepting the changes. If the User does not accept the changes, regulations or instructions, the User must immediately stop using the Service and declare that they will terminate the agreement as mentioned above.

Prior to the possible termination of the Service, the Service and/or the email address provided by the User in the Service shall be notified.

After the termination of the agreement and the Service, the User has no right to use the Service. After the termination, BeeHealthy has a reasonable time to close the Service for the User as well as to delete the data stored in the Service to the extent that there is no legal obligation to store the data.

13. Other terms

The Healthcare Provider is entitled to charge a fee for unused time if cancellation has not been made no later than 24 hours before.

These Terms of Use and the Service are governed by Swedish law. Negotiations shall be the primary means of resolving any disputes. If the negotiations do not result in a satisfactory result, the disputes will be settled in the district court of Stockholm.

BeeHealthy and the Healthcare Provider reserve the right to employ sub-suppliers to fulfil their rights and obligations hereunder.

14. Additional information and contact information

All inquiries, comments, suggestions and other feedback concerning the Service must be made in accordance with the instructions provided on the website for the Service www.sibyllekliniken.se.