Horizon 2020

1. This Privacy Policy describes how Scandinavian Biopharma Holding AB, registration number 556787-2469, (”Scandinavian Biopharma”, ”we”, ”our” and ”us”) process personal data about you who visit our website or otherwise interact with us.
2. In this Privacy Policy, we explain what kind of personal data we may process and for what purposes. Furthermore, we explain what choices and rights you have. We kindly ask you to read this Privacy Policy carefully and make yourself familiar with its content.
3. This Privacy Policy is available in Swedish and English. In case of inconsistencies between the two language versions, the Swedish version will prevail.
4. Please contact us if you have any questions or concerns, or if you want to exercise any of your rights in relation to our processing of your personal data. You will find our contact information at the bottom of this Privacy Policy.

Personal data includes any information that can identify you, either directly or indirectly. We may collect personal data concerning you from various sources, such as the company you represent (e.g. your contact information) but also collected directly from you. You do not have to provide your personal data to us, but otherwise you will not be able to, for example, order products and services on our website.

1. Business representatives
   • Name
   • Contact information (such as name, email address, phone number)
   • Information about your employer or place of work
   • Your title
2. Job-seekers

   If you apply for a position with us, either as an employee or consultant, we will process the personal data included in your application. For example, such data typically includes:

   • Identification- and contact information such as name, personal identification number, address, phone number, email address
   • Your CV, such as information about previous employment, education and other professional experiences and merits, such as task assignments, grades, certificates and statements

1. Business representatives

   We process your personal data and information about the company that you represent for the following purposes:

   • To maintain contact with the company you represent
   • To manage contracts regarding for example the distribution of pharmaceuticals
   • To communicate instructions on how to use our medical products, or other information about the products’ qualities, etc.
   • To administrate research and development projects
   • To provide our products online via the website and to deliver and receive payments for orders
   • To promote and market our products and company, such as offers, newsletters and invitations to events

   The legal basis for processing of your personal data as set out above is a legitimate interest, meaning that the processing is necessary for our legitimate interest to initiate, maintain and follow up on our business relations with the company which you represent as well as to provide the company with information and relevant offers on our products and services.

1. Job seekers

   If you apply for a position with us, either as an employee or consultant, we process your personal data in order to assess and evaluate whether you are suitable for the position. The legal basis for processing of your personal data in this regard is a legitimate interest, meaning that the processing is necessary for our legitimate interest to collect and review your application and based on this assess and evaluate whether you are suitable for the position in question.If you want more information on our legitimate interest in relation to a specific processing, please contact us.

1. Business representatives and others visiting our website

   We store your personal data for as long as you represent the company, alternatively for as long as we have an on-going business relationship with the company which you represent. We will delete your personal data as soon as we receive information from you that you no longer represent the company, alternatively when we no longer have an on-going business relationship with the company which you represent.
   
   If you contact us via our website or by phone, your personal data will be collected and kept for as long as necessary to answer your question, handle your matter or similar, however maximum for a period of one year.

2. Job-seekers

   We store your personal data for as long as the recruitment process is on-going and two years thereafter in order to meet the requirements in the Swedish Discrimination Act (2008:567).

Scandinavian Biopharma may share your personal data to the categories of recipients listed below.

• Partners and suppliers who provide us with their services, for example assistance with invoicing, orders or financial administration, marketing agencies or other marketing platforms, recruitment companies or suppliers of IT and cloud services;
• Authorities in Sweden or other countries that exercise supervision over our business and in regard to which we have an obligation under law or contract to provide requested information or transparency;
• Authority, court of law or other third party when required by applicable law or regulation as well as to assert, establish or defend legal claims, or to protect your or any other person’s fundamental interests;
• Potential buyer (and its representatives and advisers) in connection with a proposed purchase, merger or acquisition; and
• Other parties that you have given your consent to such sharing, or when required as a result of exercising any of your rights below.

As a main rule, Scandinavian Biopharma only process your personal data within the EU/EEA. There may be situations where we will transfer your personal data to a country outside of the EU/EES (i.e. a third country). For example, we use Google Analytics on our website. If you consent to the use of Google Analytics on the website, your personal data which is collected through Google Analytics will be transferred to the United States. In order to ensure that your personal data will be sufficiently protected, we have entered into standard contract clauses with Google, link to agreement. Furthermore, we have taken additional protective measures to de-identify and pseudonymize your personal data. For more information on Google Analytics and how your personal data is processed in connection with their services, visit our Cookie Policy.

1. You have the right to obtain confirmation as to whether personal data about you are being processed by us, and, if that is the case, access to such personal data and information about how we are processing it. This is called extract from the register.
2. You have the right to have inaccurate personal data about you rectified without undue delay. In some cases, you also have the right to add information to any incomplete personal data. You can also request that we limit our processing of your personal data while the accuracy of such data is being investigated by us. There are also other situations where you have the right to request that we limit our processing of your personal data.
3. Under certain circumstances, you have the right to have your personal data deleted, for example if the data is no longer needed for the purpose for which it was collected or if the personal data has been unlawfully processed.
4. You have the right to object to our processing of your personal data based on our legitimate interest, for example if you consider that our weighing of interests is inaccurate.
5. To the extent we are processing your personal data based on your consent, you have the right to withdraw your consent at any time. Such withdrawal does not affect the legality of the processing of data before the consent was withdrawn. You can withdraw your consent by using the contact information below. Visit our Cookie Policy for more information on how you change your cookie preferences and settings.
6. You have the right to receive personal data about you in a structured, generally used and machine-readable format if the processing of your personal data is being based on your consent and have been provided by you. You are also entitled to transfer such personal data to another controller (data portability).
7. If you have any concerns regarding our processing of your personal data, please contact us by using the contact information below. You also have the right to file a complaint to the supervisory authority in the Member State where you reside, work or where you consider that the personal data have been processed in violation of data protection laws. In Sweden, the supervisory authority is the Swedish Supervisory Authority for Privacy Protection (www.imy.se).

We may change or update this Privacy Policy. In such case, we will publish information on the changes or updates on our website. If we make changes that are not strictly editorial, we will inform you about this appropriately.

If you have any questions on our processing of your personal data, or if you want to exercise any of your rights, please contact us by using any of the contact information below.

Email address: info@scandinavianbiopharma.se

Or send a letter to

Scandinavian Biopharma Holding AB
Industrivägen 1
171 48 Solna