Gesynta Pharma AB's Privacy Policy
Last updated 2024-06-25
1 INTRODUCTION
The EU General Data Protection Regulation (EU) 2016/279 (”GDPR”) was enforced on 25 May 2018. One of the purposes of GDPR is to protect individuals´ fundamental rights and freedom, particularly the right of protection of their personal data.
Gesynta Pharma AB (hereafter referred to as “Gesynta”) is committed to protecting the privacy, integrity and security of your personal data. Protecting your personal data is of utmost importance for us.
This privacy policy describes how we collect and process personal data. We describe what type of personal data is collected, on what lawful grounds and who we may share your personal data with.
2 PERSONAL DATA WE COLLECT, PURPOSES AND LAWFUL GROUNDS
Representatives of companies/organisations/authorities
Gesynta processes personal data to be able to contact you as a representative of a company, an organisation, or an authority. You may represent one of our current or potential suppliers, customers, partners or an authority. Your personal data is often collected from you or from the company/organisation/authority which you represent.
Personal data collected: Contact information such as name, e-mail address, work phone number and position in the company/organisation/authority.
Purpose: The processing is necessary to enable communication with companies, organisations and authorities regarding administration and performance of a contract, execution of services, delivery of goods, technical issues etc.
Lawful grounds: Gesynta has a legitimate interest in managing its business relations and communicate with any company (weighing of interests).
Investigators of clinical trials and staff at clinical research organizations
To ensure that clinical studies have a functional organisation, Gesynta is obligated to process personal data on subjects.
Personal data collected: Curriculum vitae (CV).
Purpose: Necessary for describing the organisation and ensure adequate competence in a clinical trial, which is a legal requirement.
Lawful grounds: Legal obligation for conducting clinical trials and legitimate interest to ensure a functional organisation (weighing of interest).
People seeking employment at Gesynta
Personal data collected: Contact information such as name, address, phone number, e-mail address, CV and other information that may arise in the context of recruitment.
Purpose: To enable Gesynta to fulfil recruitment needs.
Lawful grounds: Gesynta has a legitimate interest of being able to continuously recruit talented employees (weighing of interest).
People who contact us spontaneously
If you contact us spontaneously, we must process your personal data to be able to communicate with you.
Personal data collected: Contact information such as name, title, e-mail address and phone number.
Purpose: To enable and facilitate communication with potential customers, clients, consultants, partners, and suppliers.
Lawful ground: Gesynta has a legitimate interest of enabling and facilitating communication with potential, customers, clients, consultants, partners, suppliers etc.
People visiting our website
Personal data collected: IP-address, geographical location, browser type, referral source, length of visit, number of page views and other information on how you use our website.
Purpose: We use cookies on our website for optimal functionality.
Lawful grounds: The personal data processed in this context is mainly system information. This processing is based on your consent.
3 FROM WHERE DO WE COLLECT YOUR PERSONAL DATA?
Gesynta processes personal data that you provide us with. We may also collect personal data from public records.
4 WHO DO WE SHARE YOUR PERSONAL DATA WITH?
Gesynta may disclose or transfer your personal data to parties which process personal data on our behalf in order to perform services, e.g. providers of IT-services and accounting services. Gesynta has agreements with all parties with whom we share your personal data, and these agreements stipulate how your data may be processed and protected. We may also share your personal data with authorities due to legal obligations.
We use Google Analytics to collect information about how you use our website and how the website performs during your visit. The data is anonymized before being used for analytics and web performance processing.
5 TRANSFER OF DATA TO A THIRD COUNTRY
Gesynta collaborates with parties that processes personal data within the EU/EEA. If Gesynta transfers your personal data to a country outside the EU/EEA, such transfer will be covered by a framework recognized by GDPR and relevant authorities to ensure an adequate level of protection of your personal data. i.e. by using the EU-commission´s standard contractual clauses.
6 HOW LONG TIME DO WE KEEP YOUR PERSONAL DATA?
Your personal data will be kept no longer than necessary for the purpose of which it was collected, or as required by law.
7 HOW DO WE PROTECT YOUR INFORMATION?
Gesynta has implemented technical and administrative measures to protect your personal data from unauthorized access, use, distribution or alteration and unlawful destruction.
8 YOUR RIGHTS
Regardless of what personal data we have stored, you should always be in control of your own personal data. According to the GDPR you are entitled to exercise the following rights:
Your right of access – You have the right to ask for a record of your personal data processed by us.
Your right to rectification – You have the right to ask us to rectify information about you that you consider as inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal data in certain circumstances.
Your right to limitation of processing – You have the right to ask us to restrict the processing of your data in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the information you have given to us from one organization to another. The right only applies if we are processing information based on your consent.
Your right to object – You have in certain cases the right to object to your personal data being processed.
9 IF YOU ARE DISSATISFIED WITH OUR PROCESSING OF YOUR PERSONAL DATA
You may at any time file a complaint about our processing of your personal data to the Swedish Data Protection Authority (Integritetsskyddsmyndigheten).
10 CHANGES IN THIS PRIVACY POLICY
We may from time to time carry out changes and updates to this policy. You should therefore visit our website regularly to receive the most up-to-date version of this policy.
11 HOW TO CONTACT US
If you have any questions regarding our processing of personal data or if you want to exercise your rights in relation to the procession of your personal data, please contact us.
Processor: Gesynta Pharma AB
Corporate id: 559103-6628
Address: Wallingatan 24 2tr, SE-111 24 Stockholm, Sweden
E-mail address: dpo@gesynta.se
