We process personal data relating to communications and marketing on our website and in systems connected to the website. This policy provides more information about how we process personal data.
1. CONTACT DETAILS
Nordic BioTech Group Ltd
Business ID: 2783362-7
Address: Keilaranta 15 B, 02150 Espoo, Finland
2. PURPOSE AND LEGITIMATE GROUNDS FOR PROCESSING PERSONAL DATA
We process personal data to maintain our business relationship. This includes processing of personal data that you give us by providing feedback or by leaving a contact request through the contact form at our website or by otherwise contacting our personnel. In other words, we receive the data directly from you when you contact us through our website or our representatives.
We may process your personal data for answering your inquiries regarding our products and services and for determining the right person to answer the inquiry. In case you have provided us with your contact information and indicated your interest in our products and services, we may process personal data for the purpose of contacting you.
We may also process personal data for the purposes of direct marketing, in the form of newsletters or other marketing material. Users will have to subscribe to the newsletter and have the right to unsubscribe from receiving such materials at any time. The provided data is not used for automated decision making.
When processing your personal data, we rely on the following legitimate grounds for processing:
Legitimate interest – our legitimate interest relates to processing your personal data 1) to offer information and/or services to users of our website; 2) to maintain the customer relationship; and 3) to conduct marketing activities.
Consent – we may ask data subjects for their consent to process their personal data. A data subject may withdraw their consent at any time, by contacting us at: email@example.com.
3. PERSONAL DATA PROCESSED AND DATASOURCES
We may collect and process the following data, which is received directly from users via the contact form:
first and last name,
name of the organization the user represents,
content and subject matter of the message from the user,
any other personal data users may provide themselves.
We may also process technical data such as IP-address, location, and preferred language.
We may collect and use the geographical location of your computer or mobile device. This location data is collected for the purpose of providing you with information regarding services which we believe may be of interest to you based on your geographic location, and to improve our location-based products and services.
Cookies may be placed on your computer or internet-enabled mobile device whenever you visit our website. Cookies allow the website to remember your computer or mobile device.
You may block or delete cookies from your computer or mobile device at any time by controlling and managing them in your browser settings. However, please be aware that if you block or delete cookies, you may not be able to fully experience some of our websites' functionalities.
We use Google Analytics. You can find more information about how Google Analytics is used by us here: http://www.google.com/analytics/learn/privacy.html
Google has developed the Google Analytics Opt-out Browser Add-on which provides website visitors the ability to prevent their data from being used by Google Analytics. For more information about this add-on, please visit: https://tools.google.com/dlpage/gaoptout
The following is a list of the types of cookies that we may use on our website:
Strictly necessary, essential cookies are used to enable users to browse our website and use its features.
Functional cookies are used to remember customer selections, and which are required to operate parts of the website, such as language settings, or email preferences.
Analytics cookies which are used to better understand and optimize your web experience.
5. PROCESSORS AND RECIPIENTS OF PERSONAL DATA
With the exception of the use of Google Analytics, we only share personal data within our organization and as far as necessary to perform our services.
6. TRANSFER OF DATA TO COUNTRIES OUTSIDE EU/EEA
As a rule, data is not transferred outside the EU or the EEA. If data is transferred outside the EU or the EEA, we ensure the necessary level of security for personal data by concluding agreements concerning the confidentiality and processing of personal data in accordance with applicable laws and by using EU standard contractual clauses concerning data protection.
7. STORAGE PERIOD
We do not store personal data longer than is legally permitted and necessary for the purposes described above. The storage period depends on the nature of the information and the purposes of processing and therefore the maximum period may vary depending on the type of information that is stored. If you require more information on our principles of storing your information, please use the contact details above to be in touch with us.
8. DATA SUBJECT RIGHTS
8.1 Right to access and rectification
Data subjects have the right to access the personal data relating to him/her. The data subjects also have the right to correct or complete incorrect, imprecise, incomplete, outdated or unnecessary personal data.
8.2 Right to deletion
Data subjects may ask us to delete their personal data from our systems e.g. if the personal data is no longer necessary for the purposes for which it was collected. We will comply with the request unless we have a legitimate ground not to delete the data. The data will be deleted as soon as reasonably possible from all servers and backup systems.
8.3 Right to withdraw consent
In case the processing of personal data is based on the data subject’s consent, the data subjects have the right to withdraw their consent to such processing at any time.
8.4 Right to restriction of processing data
The data subjects may in certain situations have the right to request that we restrict the processing of their personal data.
8.5 Right to object
The data subjects may object to certain processing of personal data including for example processing of personal data for other purposes than purposes necessary for the performance of our services or for compliance with a legal obligation. The data subject may also object to further processing of personal data after the data subject has given consent to processing. With regards to direct marketing, the data subject can use the unsubscribe possibility offered in connection with any direct marketing messages to prohibit us from using the data subject’s personal data for such purposes. The data subject may also prohibit the use of the data subject’s personal data for direct marketing purposes by contacting us in the manner specified below.
8.6 Right to data portability
The data subject has the right to request that we provide the personal data regarding the data subject in question in a structured and commonly used electronic form. The data subject may also request that the personal data is transferred to another controller if this is technically feasible.
8.7 Exercising your rights
To exercise your above-mentioned rights, you may send a letter or an e-mail to us on the addresses set out above. Your letter or e-mail should contain the following information: name, address, phone number and a copy of a valid ID. We may request that you provide additional information if it is deemed necessary for confirming your identity. Requests that are unreasonably repetitive, excessive or manifestly unfounded may be rejected.
9. LODGING A COMPLAINT
If you as a data subject consider that our processing of personal data does not comply with applicable data protection laws, you may lodge a complaint with the local supervisory authority. The Data Protection Ombudsman is a national supervisory authority which supervises the compliance with data protection legislation in Finland.