1. Scope of the privacy policy
1.1 Below is a description of how Chiesi Pharma AB, company registration number 556827-5746, with the address Klara Norra Kyrkogata 34, 111 22, Stockholm, (“Chiesi”, “us” or “we”) processes personal data in relation to an individual who has signed up for training or a webinar for which we are responsible, registered as a subscriber to our newsletter, or use our website for another reason.
1.2 Privacy protection is a priority for us. We therefore consider it important to protect your personal data and to ensure that our processing of it is done in a correct and lawful manner.
1.3 This privacy policy explains the types of personal data we may process and the purposes for which we process it. We also describe our processing of personal data and the choices and rights you have in relation to this. Please read our privacy policy carefully and become acquainted with its contents.
1.4 Please note that this privacy policy concerns the processing of personal data for which Chiesi is the data controller. This means that we are responsible for the handling and processing of your personal data. This also means that you should contact us with any questions or comments, or if you wish to exercise any of the rights you have in relation to our processing of your personal data (see section 6 below).
2. Handling of personal data
Personal data is data that can be attributed to you. We process the personal data you have provided to us. However, you are not obliged to provide us with any personal data. For example, if you decide not to do so, this may result in us not being able to contact you with invitations to training coursess and webinars or with desired marketing material.
However, if you decide to provide us with your personal data, we may process it in accordance with the table below.
|
Category of data subject |
Type of personal data |
Purpose of processing |
Legal basis |
|
Invitation to webinar or training. Webinar or training participant. |
Name, email address, title, workplace. |
To follow up on your participation in the webinar or training and promote our services. |
Our legitimate interest in administering mailings to you in accordance with your stated wishes. Our legitimate interest in administering the execution of a webinar or training with you as a participant in accordance with your stated wishes. |
|
Subscribers to our newsletter. |
Name, email address, title, workplace. |
To market our services and products. |
Your consent. |
|
Job applicants. |
Name, email address, telephone number, address, CV, personal letter, as well as any other documents verifying your qualifications. |
In order to carry out recruitment procedures. |
Our legitimate interest in effective and accurate recruitment. |
|
Orderer of information and demonstration material.
|
Name, email address, telephone number, your workplace including any department, and postal address of your workplace. |
To deliver the material you order. |
Our legitimate interest in marketing and communicating our products in accordance with your stated wishes. |
|
Conduct satisfaction surveys and market surveys, and solicit reviews from you via email, or through other communication channels. |
Name, email address, title, workplace. |
To follow up the perceived quality after participation in the webinar, seminar, training, product meeting, alternatively the perceived quality with Chiesi in its entirety, etc. |
Our legitimate interest in administering satisfaction surveys to you. |
|
Contact seekers via contact forms. |
Name and email address. |
To contact you and follow up on your case. |
Our legitimate interest in following up on your contact request. |
3. Storage of personal data
3.1 We store your personal data for as long as necessary to fulfil the purpose of the processing.
3.2 As a subscriber, your data will be stored until you choose to withdraw your consent. You have the right to withdraw your consent at any time. If you no longer wish to receive our emails, you can withdraw your consent by unsubscribing from them. To unsubscribe, please follow the unsubscribe instructions in the email you received.
3.3 Information about you as a job applicant may be stored for the duration of the recruitment process, after which the information will be erased. If you have consented to us processing the data for future recruitments, the data may instead be retained for two years after consent has been given (or until consent for such is withdrawn), after which it will be erased. Nevertheless, we may retain the data for as long as an job applicant is able to take legal action in connection with the recruitment procedure. If you ask us to erase your personal data, this will be done without undue delay as soon as is practicable.
3.4 To the extent that your personal data is no longer necessary to fulfil the purpose of the processing or the processing is no longer permitted for some other reason, the data is erased.
4. Recipient
We may disclose your personal data to our data processors, e.g. companies that work with IT and cloud services. In such cases, personal data processing agreements will be concluded to ensure that your personal data is processed in accordance with this privacy policy.
5. Transfers
In the event that your data is transferred by us or any of our processors to a country outside the EU/EEA, we ensure that appropriate security measures are taken when transferring data to such organisations.
6. Your rights
6.1 You have the right to receive confirmation of whether we are processing personal data relating to you, and if so, to access this personal data, as well as information about the personal data and our processing of it.
6.2 You have the right to have inaccurate personal data concerning you corrected by us without undue delay. You also have the right to supplement incomplete personal data in certain cases, taking into account the purpose of the processing.
6.3 In certain circumstances, you have the right to have your personal data erased by us, e.g. if the personal data is no longer necessary to fulfil the purposes for which it was collected or if the personal data was processed in an illegal manner.
6.4 In certain cases, you have the right to require us to restrict the processing of your personal data. For example, if you dispute the accuracy of the personal data, you may require us to restrict the processing of it for the time it takes for us to check the accuracy of the data.
6.5 You have the right to object to the processing of your personal data based on our legitimate interest. If this is the case, we must demonstrate compelling legitimate reasons that outweigh your interests, rights and freedoms in order to continue processing.
6.6 You have the right to obtain the personal data that you have provided to us and that moves in an electronic format that is generally used. You have the right to transfer such data to another controller (data portability).
6.7 You have the right to withdraw your consent at any time. Your withdrawal will not affect the lawfulness of the processing that took place with the support of the consent before it was withdrawn.
6.8 If you have any comments about our processing of your personal data, you are welcome to contact us. You also have the right to lodge a complaint about the processing of your personal data with the Swedish Data Protection Authority.
7. Additions and amendments
We may make amendments or additions to this privacy policy. If we do so, we will notify you in an appropriate manner, for example by email. If this is the case, we kindly ask you to carefully read the updated privacy policy.
8. Contact Us
In order to update, correct or erase data we hold about you or to exercise the rights to which you are entitled as described above, you are welcome to contact us at infonordic@chiesi.com.
__________________________
This privacy policy is effective as of October 20, 2020.
