How we process your personal data
At Abliva, we use your personal data for the following purposes:
• To provide and manage our website,
• To communicate and interact with our business contacts,
• To inform about our business operations, e.g. via newsletters,
• To receive and process your job application,
• To comply with legal obligations and
• To establish and defend legal claims.
In the tables below, we inform you more in detail about our processing of your personal data including the legal basis for the processing.
To provide and manage our website
| Categories of personal data: | Legal basis: |
| • Use of data such as cookie information (e.g. browser type, language preference, referring site, and the date and time of each visitor request). • Device data such as IP address. | For the use of cookies which are necessary for the functioning of the website, we process your personal data based on our legitimate interest, since we consider that our interest of providing and managing our website overrides your interest of protecting your personal data. |
Retention period:
Please see our Cookie Policy for more information about the retention times for your personal data for this purpose.
To communicate and interact with our business contacts
| Categories of personal data: | Legal basis: |
| • Name. • Email address. • Personal data which may be disclosed by the data subject in the context of the interaction. | The processing is necessary for the purposes of our legitimate interest of being able to communicate and interact with our business contacts, which overrides your interest of protecting your personal data. |
Retention period:
Personal data which is processed when interacting with our business contacts is stored during the period of which the business contact is ongoing and for a period after the closure of such business activity for a legitimate purpose such as ensuring the ability to provide information about previous projects.
To inform about our business operations e.g., via newsletters
We process your personal data within the scope of our marketing by sending newsletters. We also may send you invitations to various events organized by us. The purpose of our marketing measures is to provide you with information about our business operations. You can easily opt out of such communication. Information about how to opt out will be given in each communication to you.
| Categories of personal data: | Legal basis: |
| • Name. • Email address. | We process your personal data based on our legitimate interest in being able to market our business operations, which overrides your interest in protecting your personal data. If you wish to receive our newsletter, the legal basis for processing is your consent which we collect when you subscribe to the newsletter. You have always the right to withdraw your consent. |
Retention period:
Data processed as part of our marketing activities are stored during a period of two (2) years from the date we collected your data or the date when you last contacted us, whichever is later. The personal data necessary for sending out a subscribed newsletter is however retained until you unsubscribe from our newsletter. You may at any time object to our processing of your personal data for the purpose of direct marketing. For more information about your rights, see Your rights as a data subject below.
To receive and process your job application
We, or a recruiter engaged by us, process your personal data when you have submitted a job application to us or to a recruiter in order to evaluate and determine whether you might be a suitable candidate for a position at Abliva.
| Categories of personal data: | Legal basis: |
| • Contact information. • Curriculum vitae. • Personal statement. • References. • Other personal data which may be disclosed by you in the application. | We process your personal data based on our legitimate interest in being able to manage our business by processing personal data in the context of recruitment matters, which overrides your interest in protecting your personal data. |
To comply with legal obligations
We process your personal data to verify your individual identity when you contact us for example to exercise your rights as a data subject.
We also process your personal data when that is necessary to comply with our legal obligations under applicable law, e.g., legislation regarding accounting, audit, and tax as well as corporate law applicable to public companies.
| Categories of personal data: | Legal basis: |
| • All of the personal data as stated in the tables above. | We need to process your personal data to comply with our legal obligations under applicable legislation and to respond to your request to exercise your rights under the GDPR. We may also need to process your personal data within the scope of our corporate governance and relevant regulatory requirements. |
Retention period:
Your personal data is retained for a period of which is necessary to comply with applicable legal obligations.
To establish and defend legal claims
In case of dispute, we are entitled to process your data to establish, exercise, or defend legal claims.
| Categories of personal data: | Legal basis: |
| • All of the personal data as stated in the tables above. | Legitimate interest, since we consider that our interests of being able to establish, exercise, or defend legal claims override your interest in protecting your personal data. We ensure that this processing is necessary to pursue this interest, and that our interest outweighs your right not to have your information processed for this purpose. |
Retention period:
Your personal data is kept for as long as necessary for us to exercise or defend a reasonable expected legal claim in case of a dispute within the foreseeable future.
To enable mergers, divestitures, restructuring, reorganisation, dissolution and other sale or transfer of Abliva’s assets
We process your personal data to enable mergers, divestitures, restructuring, reorganization, dissolution, or other sale or transfer of Abliva’s assets.
| Categories of personal data: | Legal basis: |
| • All of the personal data as stated in the tables above. | The processing is necessary for the purposes of our legitimate interest to enable mergers, divestitures, restructuring, reorganization, dissolution and other sale or transfer of Abliva’s assets. Abliva is of the opinion that the processing for its above stated interests overrides and outweighs your interest and right not to have your information processed for this purpose. |
Where we collect your personal data from
The personal data we process about you is the information you have provided us with by using our website or by being in contact with us or information that we have requested based on a business contact.
Data retention
We only keep your personal data as long as it is necessary to achieve the purposes for which they were collected in accordance with this Privacy Notice. When we no longer need your personal data, we remove the data from our systems, databases, and backups. The retention period depends on the circumstances and cannot in all cases be specified in advance.
We may be required to keep your personal data for other reasons, such as to comply with legal obligations or to safeguard our legal interest, or for any other important public interest.
With whom do we share your personal data?
Abliva may share your personal data with third parties such as our IT service providers, external advisors as well as other companies in situations of raising of capital, mergers, divestitures, restructuring, reorganization, dissolution, or other sale transfer of Abliva’s assets. Regarding information provided by cookies, please see our Cookie Policy.
Additionally, we may in certain cases be required to share your personal data with public authorities or other third parties in connection with audits, court proceedings, or similar reasons.
Where do we process your personal data?
Abliva may transfer your personal data to a country outside of the EU/EEA. If personal data is transferred to any such country, we will ensure that your personal data is protected and that the transfer is carried out in accordance with applicable law.
When carrying out any transfer to a third country that lacks an adequate decision by the European Commission, Abliva will use the standard contractual clauses (SCC) as a legal basis for the transfer. In order to enable you to effectively exercise your rights pursuant to the SCCs you have the right to obtain a copy of those SCCs and to receive information about the identity of the recipient of your personal data.’
Data security
Abliva has implemented appropriate security measures to protect your personal data against unauthorized access, alteration, and erasure. In case of a security breach that may significantly affect you or your personal data, we will contact you and inform you of what you can do to reduce such risk.
Your rights as a data subject
Our responsibility for your rights
Abliva is responsible for ensuring that you can exercise your rights in accordance with applicable law. You may at any time contact us to exercise your rights. You will find our contact details in How to contact us below. Any requests by you are free of charge unless your requests are manifestly unfounded or excessive, in which case we may charge you an administrative fee or refuse to meet your request. Abliva is responsible for responding to your request to exercise your rights within one month from our receipt of your request. We are entitled to extend this period by two months when necessary, taking into account the complexity of your request or if we have received a large number of requests. In such case, we will inform you about the reason for the extension and about your right to lodge a complaint with a supervisory authority.
Your right to access, rectification, erasure, and restriction of processing:
- Access: Individuals have the right to know if we are processing personal data about them and, if so, to access and obtain a copy of personal data about them, as well as information relating to the processing of that data.
- Rectification: Individuals have the right to have us correct or update any personal data about them that is inaccurate or incomplete without undue delay.
- Restriction: Individuals have the right to restrict or limit the ways in which we process personal data about them where the accuracy of the personal data is contested by them, where data has been obtained by us unlawfully, where the individual has objected to our processing of the data (see right of objection below) and we are considering whether to cease processing, or where we no longer need to process the personal data.
- Objection: Individuals have the right to object to our processing of their personal data where we are relying on legitimate interests as our legal basis and their rights override our legitimate interests in processing their personal data. Individuals also have the right to object to our processing of their personal data for direct marketing purposes. If you object to processing of personal data when we are relying on legitimate interests, we will cease with the processing unless we can demonstrate that our interests override your interest of protecting your personal data taking into account your personal circumstances. If you object to direct marketing, we will automatically cease processing of your personal data for direct marketing purposes.
- Withdrawal of Consent: Where we rely on consent as the basis for processing personal data, individuals have the right to withdraw their consent at any time.
- Erasure: Individuals have the right to request deletion or erasure of their personal data in a number of circumstances where required by law. These include where we no longer require the personal data for the purposes for which it was collected, the individual has withdrawn their consent, or where we are relying on legitimate interests as a legal basis and the individual’s rights override our legitimate interests.
- Make a Complaint: You have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority (in Sweden: Integritetsskyddsmyndigheten, “IMY”).
Updates to this privacy notice
Abliva has the right to amend this Privacy Notice at any time. The latest version will always be available on our website. If the changes are not purely linguistic or have no impact on your interests, rights, or freedoms, Abliva will inform you of any changes to the Privacy Notice with reasonable prior notice.
Cookies
Abliva uses cookies. Abliva collects data through cookies in order to be able to provide and manage our website. In our Cookie Policy, we provide you with more detailed information on how we use cookies.
How to contact us
If you have any questions regarding this Privacy Notice, our processing of your personal data, or if you want to exercise your rights, you can contact us in any of the following ways:
Email: ir@abliva.com
Mailing: Abliva AB, Medicon Village, SE-223 81 Lund, SWEDEN
Last updated: 9 March 2022