Privacy Policy
1. Corline safeguards your personal integrity
Corline Biomedical AB (publ), corp. reg. no. 556417-0743, Lefflersgatan 5, SE?754 50 Uppsala, Sweden (the ”Company”) respects your privacy and is committed to maintaining a high level of security and integrity regarding your personal data. The Company is also committed to ensuring that processing is carried out in accordance with the general data protection regulation.
This Privacy Policy describes how the Company processes your personal data in your role as a representative for a company that is a customer/supplier or a potential customer/supplier to the Company. Furthermore, this privacy policy describes how the Company processes your personal data when you visit our website www.corline.se, and when you apply for employment with us.
If you have any questions regarding the Company's privacy protection, please don’t hesitate to contact us by sending an email to info@corline.se.
2. Controller
The Company is the controller of your personal data and is therefore responsible for ensuring that your personal data is handled in a correct and secure way in accordance with applicable legislation.
3. Which personal data does the Company process?
Personal data means any information that directly or indirectly relates to a natural, living person. Accordingly, personal data is information about you and your person, e.g. name, contact information, pictures of you and IP-address.
Processing means any operation which is performed on personal data, such as collection, storage, use, adaption or disclosure.
3.1 Customers, suppliers and partners
The Company collects and stores the following information about you that the Company needs to be able to contact you and to fulfil its undertakings toward you as a customer, supplier or partner.
Personal information and contact information, such as name, personal identity number or corporate registration number, address, telephone number and email address.
Information that you provide to the Company by email, when you are active on the Company’s social media or by other channels of communication.
Information from customer surveys and customer evaluations.
Payment- and purchase history.
Customer-, supplier-, and/or collaboration agreements.
Payment information, such as bank information, account number and, where applicable, IBAN, SWIFT etc.
Information regarding complaints and warranty matters.
Where applicable, information regarding phone calls with the Company’s switchboard or customer service.
Where applicable, information regarding dietary preferences, potential allergies and/or disabilities (e.g. in connection with corporate events or meetings).
3.2 Company representatives for e.g. customers, suppliers and partners
The Company collects and stores the following information about you that the Company needs to be able to contact you in your role as a representative for a company or organisation.
Personal information and contact information, such as name, address, telephone number, email address, title, position and employer.
Information that you provide to the Company by email, when you are active on the Company’s social media or by other channels of communication.
Where applicable, information regarding phone calls with the Company’s switchboard or customer service.
Where applicable, information regarding dietary preferences, potential allergies and/or disabilities (e.g. in connection with corporate events or meetings).
Your personal data is usually collected from the company or organisation that you represent, but also, where appropriate, directly from you, through email correspondence or by way of other communication in connection with your attendance at company events or meetings and when you are active on our social media. The Company may also obtain personal data about you from other partners of the Company. The Company also uses external information services to supplement existing data with, e.g., your position and contact information.
Potential customers/suppliers and company representatives for potential customers/suppliers
The Company collects and stores the following information about you in your role as a potential customer to the Company or in your role as a representative for a company that is a potential customer to the Company.
Personal information and contact information, such as name, address, telephone number, email address, title, position and employer.
Visitors of the Company’s website
In connection with visits to the Company’s website, the Company collects the following information about you that the Company needs to be able to improve, streamline, simplify and develop our website.
Personal information and contact information, such as name, address, telephone number, email address, title, position and employer.
Technical data, such as IP address, MAC address, URL, unique device ID, network and device performance, browser, language and identification settings, geographic location, operating system, other information from cookies or similar mechanisms (device information).
Recruitment (job applicants at the Company)
The Company collects and stores the following information about you that the Company needs to be able to recruit the right persons for positions with the Company.
Personal information and contact information, such as name, address, telephone number, email address, title, position and employer.
Information in cover letter and CV.
Where applicable, your picture.
Other information that you provide the Company in connection with recruitment.
Your personal data you can be provided to the Company directly from you or from a staffing agency, recruitment company or hiring company through which you apply for work.
4. The Company’s processing of your personal data
The purposes for which we intend to process your personal data and the legal basis for the respective processing activities are stated in the tables below.
Customers, suppliers and partners (including company representatives)
| Purpose | Legal basis |
|---|---|
| To be able to keep in touch with a representative of the customer, supplier or partner (e.g. in connection with the delivery of goods or services). | The processing is necessary for the Company’s legitimate interest to keep in touch with you in order to fulfil its obligations under the agreement with its customer, supplier or partner, i.e. the company that you represent (legitimate interest). |
| To fulfil legal requirements, e.g. security requirements and accounting requirements. | The processing is necessary for compliance with the Company’s legal obligations. |
| To enable marketing and communication about the Company's brand and the Company's products (e.g. mailing of newsletters and other marketing materials, invitations to the Company's events, meetings and other gatherings etc.). | The processing is necessary for the Company’s legitimate interest to market its brand, its products and other similar products to you as a customer or to the company that you represent (legitimate interest). |
| To carry out surveys regarding the Company’s products and customers buying experience. | The processing is necessary for the Company’s legitimate interest to evaluate, develop and improve its brand, its products and its marketing (legitimate interest). |
| To ensure payment and analyse purchase history in order to offer customers the right products and marketing. | The processing is necessary for the performance of the agreement with the customer. The processing is necessary for the Company’s legitimate interest to offer its customers relevant marketing with regard to the customers previous purchases (legitimate interest). |
| To receive payments from customers in connection with purchases of the Company’s products, services and service. | The processing is necessary for the performance of the agreement with the customer. |
| To be able to respond to and compensate customers in connection with complaints and warranty matters. | The processing is necessary for the performance of the agreement with the customer. |
Potential future customers, suppliers or partners
| Purpose | Legal basis |
|---|---|
| To enable marketing and communication about the Company's brand and the Company's products (e.g. mailing of newsletters and other marketing materials, invitations to the Company's events, meetings and other gatherings etc.). | The processing is necessary for the Company’s legitimate interest to market its brand, its products and other similar products to you or to the company that you represent (legitimate interest). |
Visitors of the Company’s website
| Purpose | Legal basis |
|---|---|
| To ensure the operation of the Company's website and application. To be able to develop the Company's website and to better adapt the website based on how it is used. | The processing is necessary for the Company’s legitimate interest to improve, streamline, simplify and develop its website and to attract more customers/partners and to increase the number of recurring customers/partners (legitimate interest). |
| To enable marketing and communication about the Company's brand and the Company's products (e.g. mailing of newsletters and other marketing materials, invitations to the Company's events, meetings and other gatherings etc.). | The processing is necessary for the Company’s legitimate interest to market its brand, its products and other similar products to you as a customer or to the company that you represent (legitimate interest). |
Recruitment (job applicants at the Company)
| Purpose | Legal basis |
|---|---|
| To, in connection with recruitment, be able to decide who is best suited for a position with the Company and to ensure that the relevant person has the necessary skills. | The processing is necessary for the Company’s legitimate interest to recruit the right employees and ensure that skilled people work for the Company (legitimate interest). |
5. How long does the Company store your personal data?
Your personal data is stored as long as there is a need to preserve them in order to fulfil the purposes for which the data was collected in accordance with this Privacy Policy. Thereafter, your personal data will be deleted.
Some personal data will, for the purpose of complying with applicable accounting legislation, be stored for seven years, counting from the end of the calendar year during which the financial year, to which the information pertained, was terminated.
Contact information regarding company representatives is stored during such time the Company considers that the information is necessary to maintain the relationship with the company/organisation. Deletion shall take place when the Company becomes aware that the information is no longer adequate or relevant for the purpose, or at the request of the contact person.
For more information about how long the Company stores specific personal data, please contact the Company. Contact information is provided under section "Contact" below.
6. With whom does the Company share your personal data?
The company does not disclose personal data to third parties, except when necessary to fulfil a legal obligation or to fulfil the Company's obligations to you, customers and partners. Your personal data will not be sold to third parties for marketing purposes. Situations when your personal data may be disclosed to third parties are listed in the table below.
| Third party | Reason for third-party disclosure |
|---|---|
| Suppliers of cloud solutions | Personal data may be transferred to suppliers of cloud solutions since the Company stores certain information in cloud solutions. |
| Suppliers and partners | The Company may disclose your personal data to suppliers and/or partners, if the suppliers and/or partners need your personal data to fulfil their undertakings toward the Company. |
| Authorities | Personal data may be disclosed to authorities when necessary for compliance with the Company’s legal obligations. |
| Sale | If the Company intends to transfer all or part of its business, personal data may be disclosed to a potential buyer. |
7. Transfer of personal data to third countries
The Company may transfer your personal data to countries outside the EU/EEA. If personal data is transferred to a country outside the EU/EEA, the Company will take measures to ensure that the personal data continues to be protected and will also take the necessary measures to ensure a legal transfer of the personal data to countries outside the EU/EEA.
The Company uses services of IT suppliers, whereby your personal data may be transferred to the United States. Personal data that the Company collects about you through your use of the Company's website may be transferred to Google in the United States, through Google Analytics. The Company has ensured that your rights are guaranteed in connection with transfers to the United States through the relevant IT supplier’s adherence to the EU-US Privacy Shield Framework. For further information, please visit www.privacyshield.gov.
8. Social media
Regarding personal data that occurs and is processed on social media, such as Facebook, Instagram, Twitter, Youtube and LinkedIn, we refer users to the policy provided by the respective service providers for information on how each service provider processes personal data. In the Company’s view, the purpose of the processing is that representatives of existing and potential customers and partners to the Company shall be able to interact and maintain contact with the Company via social media, in order to contribute to good relationships with customers and partners and to make the Company's customer service and product widely accessible through several different channels. The processing is necessary for the purposes of the Company’s legitimate interest to market its brand and its products to existing and potential customers and to partners (legitimate interest).
9. Your rights
As the data controller, the Company is responsible for ensuring that your personal data is processed in accordance with applicable legislation.
The Company will, at your request or on its own initiative, rectify, erase or complete any information found to be inaccurate, incomplete or misleading.
You have the right to request access to and rectification or erasure of your personal data (e.g., if such erasure is required by applicable law), request restriction of the processing of your personal data and object to the processing, as permitted by applicable personal data legislation (e.g. if you contest the accuracy of the personal data or if the processing is unlawful but you oppose the erasure of the personal data and request restriction of its use instead). The Company will notify each recipient to whom the personal data has been disclosed in accordance with section 6 above regarding any rectifications or erasures of personal data as well as of restriction of processing of data according to this section 9.
Under certain conditions, you have the right to data portability, i.e., a right to receive your personal data in a structured, commonly used and machine?readable format and the right to transmit those data to another controller.
If you do not want the Company to process your personal data for direct marketing purposes, you have the right to object to such processing at any time. When the Company has received your objection, the Company will cease the processing of your personal data for such marketing purposes.
You have the right, through a written and signed application, to obtain free of charge a register extract from the Company regarding which personal data are stored about you, the purposes of the processing and to which recipients the data has been or shall be transferred. You also have the right to obtain information about the envisaged period for which the personal data will be stored or the criteria used to determine this period. You also have the right to receive information about your other rights as specified in this paragraph 9.
We look forward to hearing from you if you have any complaints regarding the Company’s processing of your personal data, in order to correct our processing if necessary. You also have the right to file complaints regarding the Company's processing of your personal data with the Swedish Data Protection Authority.
10. Security of your personal data
You should always be able to feel safe when you provide us with your personal data. Therefore, the Company has implemented the security measures necessary to protect your personal data against unauthorised access, alteration and destruction. The Company will not disclose your personal data, other than as expressly provided by this Privacy Policy.
11. Cookies
The company uses cookies-like techniques in order to provide certain functions on the Company’s website www.corline.se and to improve the website and to deliver a better and more personal service. The information is stored in the form of a file comprising encrypted login data.
12. Changes
The Company reserves the right to change this Privacy Policy at any time. In the event of changes to this Privacy Policy, the Company will publish the amended Privacy Policy on www.corline.se with information on when the changes will come into effect and will also notify customers and partners in an appropriate manner.
13. Contact information
Do not hesitate to contact the Company if you have any questions about this Privacy Policy, the processing of your personal data or if you wish to exercise your rights under this Privacy Policy or applicable legislation.
The Company’s contact information
Corline Biomedical AB (publ)
Corporate registration number: 556417-0743
Postal address: Lefflersgatan 5, SE?754 50 Uppsala, Sweden
Telephone number: +46 (0)18 71 30 90
Email address: info@corline.se