1. INFORMATION ABOUT PROCESSING OF YOUR PERSONAL DATA
1.1
The purpose of this document is to provide information about how Enzymatica AB (“we”) process your personal data in connection with:
- Your visit to the Enzymatica website
- Management of enquiries via the Enzymatica website
- Handling of complaints via the Enzymatica website
- Distribution of press releases, news and financial information such as interim reports, annual reports, etc.(referred to below as investor relations)
- Management of clinical studies and market surveys
- Management of customer and supplier contacts
We respect your privacy and are committed to protecting the personal data about you that we process. All personal data is processed in compliance with the European Union General Data Protection Regulation (GDPR). Below is a description of how we collect, process and share your personal data.
2. WEBSITE VISITORS
WHAT PERSONAL DATA WILL BE PROCESSED?
When you visit our website we process your Internet Protocol address, browser language, geographical location data, date and time, and information about webpages accessed by you. We collect personal data directly from you.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Your personal data is processed for the purpose of making the website available to you and to develop and enhance the usability of the website. Furthermore, we may also use your personal data for marketing purposes, such as re-marketing on other websites.
WHAT IS THE LEGAL BASIS FOR PROCESSING OF YOUR PERSONAL DATA?
Processing of your personal data is based on our legitimate interest to ensure that you are given access to a website that provides you with easy access to the interface, functions and information you seek. Furthermore, processing for marketing purposes is based on our legitimate interest in marketing our products. When balancing interests, we have determined that we have a legitimate interest to make the website available to you in a user-friendly and well-functioning manner and to provide you with interest-based advertising. We ensure that the particular processing this entails is necessary to achieve such purposes, and that our interests outweigh your right not to have your personal data processed for these purposes. The processing activities are limited and not deemed to affect personal integrity to a large extent. You are always entitled to object to this assessment. You can read further about your rights below.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
We have taken appropriate technical and organizational security measures to protect your personal data against loss and unauthorized access, etc. The number of people who have access to your personal data is limited. Only people at Enzymatica AB who need to process your personal data in accordance with the purposes referred to above have access to the personal data.
HOW LONG DO WE SAVE YOUR PERSONAL DATA?
Your personal data is stored for differing amounts of time depending on the nature of your interaction with our website; for enquiries or complaints the time that data is stored for is specified in the sections below.
However, some of your personal data is collected via the use of cookies and may be stored for a longer period of time as each cookie has a specific storage period. These individual storage periods relating to specific cookies are available in our Cookie Policy.
Enzymatica uses cookies and similar technologies that collect and store information when you visit the website. This is to enable Enzymatica to identify your internet browser and collect data on your use of our website, which pages you visit, the duration of your visits and identify these when you return so that we improve your experience when visiting our website. You can control and manage your cookies preferences by adjusting your browser settings or using the Enzymatica cookie preference tool on the Enzymatica Website – for more information, please refer to the Enzymatica Cookie Policy at www.enzymatica.com.
3. PERSONAL DATA RELATING TO ENQUIRIES
WHAT PERSONAL DATA WILL BE PROCESSED?
Contact details submitted via the enquiry, such as your name, address, email and telephone number as well as personal data related to the inquiry included in our correspondence with you. We collect personal data directly from you.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Your personal data is processed in order to be able to answer enquiries and questions about products/services, etc.
WHAT IS THE LEGAL BASIS FOR PROCESSING OF YOUR PERSONAL DATA?
Processing of your personal data is based on our legitimate interest to be able to handle enquiries. When balancing interests, we have determined that we have a legitimate interest to administrate, follow up on and respond to enquiries initiated by you in order to ensure the quality of your interactions with us and take action, if needed. We ensure that the particular processing this entails is necessary to achieve that purpose, and that our interest outweighs your right not to have your data processed for this purpose. You are always entitled to object to this assessment. You can read further about your rights below.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
We have taken appropriate technical and organizational security measures to protect your personal data against loss and unauthorized access, etc. The number of people who have access to your personal data is limited. Only people at Enzymatica AB who need to process your personal data in accordance with the purposes referred to above have access to the personal data.
HOW LONG DO WE SAVE YOUR PERSONAL DATA?
Your personal data is stored while the enquiry is handled and once the enquiry is closed this is deleted.
4. PERSONAL DATA RELATING TO COMPLAINTS
WHAT PERSONAL DATA WILL BE PROCESSED?
Contact details submitted via the complaint such as your name, address, email and telephone number.
Health data (only if this is relevant to your complaint).
We collect personal data directly from you or from a reseller/distributor if you have contacted them. We can also obtain your personal data from a competent authority in cases where your complaint was initially reported to the authority and they have initiated a review process of this complaint.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Your personal data is processed for the purpose of investigating, administering and following up on any incidents and complaints, and carrying out relevant measures and reporting to competent authorities. Also, for the purpose of ensuring the return of products to Enzymatica about which you have complained when this is requested by our Quality Department for further investigation.
WHAT IS THE LEGAL BASIS FOR PROCESSING OF YOUR PERSONAL DATA?
Processing of personal data is based on our legal obligation to administer, investigate and report incidents and complaints according to Medical Device Regulation (EU) 2017/745 as a medical device manufacturer.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
We have taken appropriate technical and organizational security measures to protect your personal data against loss and unauthorized access, etc. The number of people who have access to your personal data is limited. Only people at Enzymatica AB who need to process your personal data in accordance with the purposes referred to above have access to the personal data.
We do not share your personal data with others except in cases where authorities may require it in connection with the investigation of complaints.
HOW LONG DO WE SAVE YOUR PERSONAL DATA?
Personal data for the return of products are saved until the investigation of the complaint (or incident) is completed. Personal data for complaints are saved until one year after the expiration date of the relevant product. If no expiration date is known, the personal data shall be kept for 4 years after logging the complaint.
5. HANDLING OF PERSONAL DATA IN INVESTOR RELATIONS
WHAT PERSONAL DATA WILL BE PROCESSED?
Contact details such as your name, address, email and telephone number.
We collect personal data from a variety of sources, including news distributors such as Nasdaq and MyNewsDesk, but sometimes also directly from you.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
To provide you with information about Enzymatica AB, such as press releases, news and financial reports, by mail and email. To meet the information requirements imposed on us as a listed company on Nasdaq First North. Processing of your personal data is necessary for us to be able to communicate with you in your capacity as shareholder, analyst, journalist or any other party with an interest in the company. If you do not provide your personal data to us we will not be able to send any information to you.
WHAT IS THE LEGAL BASIS FOR PROCESSING OF YOUR PERSONAL DATA?
Processing of your personal data is necessary for us to be able to act in accordance with applicable law to send information to you in your capacity as shareholder, analyst, journalist 2(7) 2 or any other party with an interest in the company.
Processing of your personal data is based on Enzymatica AB’s legitimate interest. Processing of your personal data for communication of new as well as operational and financial developments is based on our legitimate interest to communicate in a clear and transparent manner as a listed company.
After carrying out a balancing of interests, we hold the opinion that our legitimate interest overrides your interest in not having your personal data processed for this purpose. We base our assessment on the fact that the types of personal data that are generally processed are often available in public records and the processing carried out is not particularly extensive. You always have the right to object to this assessment. You can read more about your rights below.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
We have taken appropriate technical and organizational security measures to protect your personal data against loss and unauthorized access, etc. The number of people who have access to your personal data is limited. Only people at Enzymatica AB who need to process your personal data in accordance with the purposes referred to above have access to the personal data. In order to access personal data, a password is required to log in to the Nasdaq and MyNewsDesk computer systems.
We may also share your personal data with suppliers and partners who carry out services on our behalf, such as news distributors like Nasdaq and MyNewsDesk. In many cases the data about you come from them; in other cases we have collected data about you (for example, shareholders who are interested in receiving information about the company’s performance) and entered these data in the Nasdaq and MyNewsDesk distribution lists
HOW LONG DO WE SAVE YOUR PERSONAL DATA?
Your personal data will be saved as long as is necessary based on the purpose for which they were collected and as long as is permitted or required by local law. This means that your personal data will be saved until further notice, and as long as you do not specify that they are to be deleted.
6. HANDLING OF PERSONAL DATA IN CLINICAL STUDIES AND MARKET SURVEYS
WHAT PERSONAL DATA WILL BE PROCESSED?
Contact details such as your name, address, email and telephone number may be processed. Health data is only processed in those cases where you provide your consent to do so in a separate consent form relevant to the specific project.
In clinical studies the consent form specifies the source from which the personal data are collected. Such sources may include the principle investigator, your medical chart, or directly from you.
In market surveys we collect personal data directly from you.
Your personal data will be anonymized or pseudonymized as far as is possible.
When data are anonymized the person can no longer be identified. In the case of pseudonymization, personal data are processed in such a way that they can no longer be attributed to a specific person without using additional information, such as a code key. The code key must be stored separately and be subject to technical and organizational measures that ensure that personal data are not attributed to an identifiable physical person
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Your personal data are processed in the context of a clinical study or a market research survey with the aim of studying and evaluating Enzymatica’s products. The personal data are processed to document research and comply with good clinical practice and local law.
WHAT IS THE LEGAL BASIS FOR PROCESSING OF YOUR PERSONAL DATA?
The processing of your personal data is based on consent to participate in a clinical study or market survey.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
Enzymatica has taken appropriate technical and organizational security measures to protect your personal data against loss and unauthorized access. The number of people who have access to your personal data is limited. Only people at Enzymatica AB who need to process your personal data in accordance with the purposes referred to above have access to the personal data.
We may also share your personal data with suppliers and partners who carry out services on our behalf, such as contract research organizations. In specific cases, authorities may have access to the personal data for the purpose of compliance with local law.
HOW LONG DO WE SAVE YOUR PERSONAL DATA?
Your personal data will be saved as long as is necessary based on the purpose for which they were collected and as long as is permitted or required by local law, and as long as you do not state that they should be deleted.
7. HANDLING OF PERSONAL DATA WITH CUSTOMER AND SUPPLIER CONTACT DETAILS
WHAT PERSONAL DATA WILL BE PROCESSED?
Contact details such as your name, address, email and telephone number.
We collect personal data directly from you or from your employer.
FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
Processing of your personal data is necessary in order for us to fulfill our contractual obligations.
WHAT IS THE LEGAL BASIS FOR PROCESSING OF YOUR PERSONAL DATA?
Processing of your personal data is necessary in order for us to fulfill our contractual obligations.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
We have taken appropriate technical and organizational security measures to protect your personal data against loss and unauthorized access, etc. The number of people who have access to your personal data is limited. Only people at Enzymatica AB who need to process your personal data in accordance with the purposes referred to above have access to the personal data.
We may also share your personal data with suppliers and partners who carry out services on our behalf. This is only done when required to meet contractual obligations.
HOW LONG DO WE SAVE YOUR PERSONAL DATA?
Your personal data are stored during the customer and supplier relationship for this purpose, as well as for the time thereafter that is necessary.
8.
9. WHAT ARE YOUR RIGHTS?
9.1 Enzymatica AB, corporate identity number 556719-9244, with the mailing address Ideon Science Park, 223 70 Lund, Sweden and email address info@enzymatica.se is the data controller for processing your personal data. This means that we are responsible for processing your personal data correctly and in accordance with applicable law.
9.2 You have the right to know what personal data we are processing about you and you may also request a copy of the personal data that is processed. You have the right to request that incorrect or incomplete personal data be corrected, and in some cases you may request that we delete your personal data. If you have provided special consent for a certain type of personal data processing, you are always entitled to withdraw your consent. You can do so through the contact details provided above. You also have the right to object to certain processing of your personal data and request that processing of your personal data be restricted. Please note that as a result of restriction or deletion of your personal data we may be unable to fulfill our obligations under our agreement. You also have the right to 9(9) 9 obtain your personal data in a structured, generally used and machine-readable format and transfer them to another data controller.
9.3 If you have any questions about how we process your personal data, you are welcome to contact us by email at info@enzymatica.se, by mail at the above address, or by phone at +46 (0)46-286 31 00.
9.4 If you have any objections or complaints about how we process your personal data, you have the right to contact or file complaints with the relevant Data Protection Authority .
10. Changes
If any changes are made regarding the processing of your personal data, we will inform you by publishing an updated version of this document on the Enzymatica website.