Privacy Policy GDPR — Targinta AB
Why a privacy policy?
Targinta cares about your privacy. Therefore, we always strive to protect your personal data in the best possible way, comply with applicable laws and regulations on data protection at all times. Through this privacy policy, we would like to inform you about how your personal data is processed by Targinta. This policy helps you understand, among other things, what kind of information Targinta collects and how it is used.
Who is responsible for your personal data
Targinta AB, org.nr. 559157-6698, with address Medicon Village, 223 81 Lund is responsible for the processing of your personal data. Targinta is the data controller for the processing of your personal data and is therefore responsible for ensuring that your data is handled correctly and securely in accordance with applicable legislation.
Personal data in Targinta's research
For those who have personal data registered with Targinta for research purposes.
When processing personal data, it is necessary that the data subject has given his consent to the processing or that the processing is necessary for the performance of a task of general interest.
The general rule prohibits the processing of sensitive personal data, such as those that reveal racial or ethnic origin, political views, religious beliefs, and information relating to health or sexual life. But there are exceptions in the law.
An exception is if the data subject has given his or her explicit consent. Another exception is for research purposes if the treatment has been approved under the Act on Ethical Examination of Research Concerning Human Beings (Ethical Examination Act). In addition, sensitive personal data may be processed for statistical purposes, without the consent of the data subject, if the processing is necessary for the performance of a task of general interest and if the public interest in the research in question clearly outweighs the risk of undue infringement of the data subject's personal privacy. If the processing has been approved by an ethics review board, these conditions are deemed to be fulfilled. It is not allowed to collect sensitive personal data in its own database for research or statistical purposes that are not determined at the time of collection.
Ethics review
All research involving the processing of sensitive personal data or data on violations of the law must be ethically tested. The ethics review is carried out by an ethics review board with representatives from both the general public and the research and it covers the research project itself and the processing of personal data according to the Personal Data Act. The basis for the review is set out in the Ethical Review Act, where the research ethics review shall be a sufficient guarantee that sensitive personal data is processed for research only in exceptional cases where a certain breach of personal privacy is actually justified.
The Ethical Review Board does not have to apply the standard of balancing that normally exists, that is, that the public interest must clearly outweigh the risk of infringement of individuals' privacy that the processing may entail. However, the way in which the balancing standard is normally applied can guide the assessment of the Boards.
Personal data for direct marketing
For those who have personal data registered with Targinta for marketing purposes.
Your personal data may be used for direct marketing, newsletters, customer surveys and statistical purposes and may be used for mailing by mail or e-mail to you until you withdraw your consent. The sender of the mailing is Targinta AB.
Personal data for recruitment
For those who have provided personal data for registration with Targinta for recruitment purposes.
Targinta will process your personal data during the recruitment process and for future career opportunities. Targinta will contact you if a matching service has become available. When you submit your CV to us, you consent to the fact that your CV will be archived with Targinta for a maximum period of one year, after which it will be deleted. You can contact us at any time and request that we delete your personal data.
Personal data we process about you
Personal data you have provided to us
We collect and store information about you that you provide to us.
Personal data we have collected from you
For tissue donation and research purposes, Targinta collects different personal data from you, depending on the study and scope. Everything is done in accordance with your consent.
How we use your personal data
Targinta uses personal data for the following categories:
- Newsletters and other marketing
- Shareholder Information
- Recruitment Needs
- Research purposes
- Employees
- Investors
- Partners
- Clients
Depending on the conditions under which your personal data has been registered with Targinta, you may fall under one or more categories.
Legal basis for our processing
The processing of personal data by Targinta AB takes place on the following legal basis
- In order for Targinta to fulfil its contract with you
- Legal obligation - processing personal data in order to comply with requirements such as the Medicines Act, the Human Tissues and Cells Act, the Accounting Act, the Swedish Companies Act, the Value Added Tax Act and the Consumer Purchase Act, the legal basis for processing is a legal obligation. See also the section “Personal data in Targinta's research” above.
- Balance of interests - if the processing of personal data is necessary for the performance of a public interest task and if the public interest in the research in question clearly outweighs the risk of undue intrusion into the personal privacy of the data subject.
Who can access your personal data?
Your personal data will not be transferred or sold to third parties. However, your personal data may be disclosed to third parties (data processors) if this is required to provide services to you.
We disclose your personal data to the following;
- Providers of IT systems in development and support. These companies provide services, technical solutions and platforms for Targinta's research programs.
- Partners in charge of marketing.
- We send only the necessary data
- Any authorities as required by law.
How we protect your personal information
Targinta AB takes the technical and organizational security measures required by law to ensure that your personal data is not manipulated, lost or destroyed or accessed by unauthorized persons. Our security procedures are constantly changing as technology evolves.
Where is your data stored?
Targinta AB stores all personal data collected from you within the EU and EEA. We do not disclose personal data to third parties, except in situations where this is a requirement arising from a legal obligation or in order to fulfill our obligations to you. For more information, see the section “Who can access your personal data”.
How long do we store your data?
When you provide your personal data to Targinta AB, you consent to Targinta to register and process the specified data for the aforementioned purposes.
We will never process your personal data for a longer period than permitted by applicable law, regulation, practice or government decision. For example, data can be stored for longer if required by the Ethical Review Act, the Medicines Act, the Human Tissue and Cell Handling Act, the Consumer Purchase Act or the Accounting Act. The personal data is stored and processed in Targinta's IT system. You can contact us at any time and request that we delete your personal data which will then be done immediately if it does not violate the applicable law at the time. If the applicable law does not allow the deletion of your personal data, but instead it is possible to anonymize your personal data, this is done.
In other situations, your personal data will not be stored longer than necessary for the specific purpose.
Your rights
You have the right to request access to your personal data and obtain information about, among other things, what personal data is stored with us, the purposes for which such personal data is processed, the recipients or categories of recipients to whom the personal data is or is to be disclosed, the envisaged period or the criteria for determining the period during which the personal data will be stored. You can contact us at the address below and request to have the information sent by post or email. For your safety, this information will only be sent to your registered address or specified e-mail in our customer database.
If you believe that the personal data processed by Targinta AB is incorrect or has been processed in violation of applicable legislation, you also have the right to request that these personal data be corrected, blocked or deleted. You can do this by contacting us. Targinta AB is in some cases obliged by law to process your personal data even though you have requested that it be deleted.
If you wish to have the personal data you provided transferred for the purpose of using it elsewhere (data portability), please contact us at the address below.
If you believe that your personal data has been processed in violation of current legislation, you always have the right to lodge a complaint with the Swedish Data Inspectorate.
Links to other pages
On Targinta.se there may be links to external websites over which Targinta has no controlling influence. These are not covered by this policy.
Contact details
If you have questions about how we handle your personal data or if you would like to port your data, please contact gdpr@targinta.se. Regarding the processing of personal data, you can also speak to the Data Inspectorate, which is the supervisory authority for this processing.
Address:
Targinta AB
Medicon Village
223 81 Lund
gdpr@targinta.se
Tel: +46 707-25 00 27
These terms and conditions have been established by Targinta AB and apply from 2021-02-23.
Targinta AB — ver 2.0 09/09/2022