Symphogen a/s’ Privacy Policy
Introduction
This privacy policy (“Privacy Policy”) describes how Symphogen A/S CVR-no. 10013267, located at Pederstrupsvej 93, 2750 Ballerup (“Symphogen”) processes your personal data, and what your rights are in relation to Symphogen’s collection, processing and retention of your personal data. We have created this privacy policy as we remain firm on fulfilling our obligations in terms of securing personal data.
This website may contain links to other websites operated by third parties. Symphogen is not accountable for the privacy practices or the contents of such websites operated by third parties.
Collection of personal data
Symphogen collects personal data from you in various ways e.g.:
- When applying for a job (solicited or unsolicited);
- If you approach Symphogen regarding an existing business collaboration;
- If you approach Symphogen in order to initiate a business collaboration;
- When signing up for our newsletter;
- If you approach Symphogen in other matters.
Following information may be gathered in relation to the above-mentioned collection of personal data, e.g.:
Name, address, telephone-number, e-mail address, birthday; CPR-number; previous job history, work places; professional career, spare time activities and other specific information you may choose to provide us.
Purpose of the collection
Symphogen limits its collection, storing and processing of personal data to situations where a specific purpose exists, such as being able to process your job application, being able to deliver our newsletter to you, being a responsible business partner etc.
Legal basis for processing
Symphogen may process your personal data based on the following legal basis:
- Your freely given, specific, informed and unambiguous consent to the processing of the personal data regarding you. If sensitive personal data, such as health data, information about your ethnicity, sexuality or genetic data is collected from you, such consent will also be explicit.
- In order to comply with a legal obligation.
- In cases where the processing is necessary for reasons of public health.
- In cases where the processing is necessary for research purposes.
- In order to fulfil or protect a legitimate interest, unless your interests or fundamental rights and freedoms which require protection of your personal data override the interests of Symphogen. The interests Symphogen may pursue include the interests in relation to being able to process your job application, being able to deliver our newsletter to you.
Recipients of your personal data
Symphogen may disclose or transfer your personal data to the following recipients:
- Affiliates of Symphogen;
- Suppliers, business partners or other collaborators;
- Public authorities;
- Health professionals and other health personnel.
Certain recipients process personal data on behalf of Symphogen and may only process your personal data in accordance with the instructions given by Symphogen. These third parties may not process your personal data for their own purposes.
To the extent Symphogen disclose or transfer your personal data to these third parties who may use your personal data for their own purposes, such disclosure or transfer will only take place if it is in accordance with applicable law or with prior consent obtained from you, where required.
Transfer of your personal data to a third country (outside of eu/eea)
As a general rule, Symphogen does not transfer your data outside the EU/EEA. If such transfer is needed in certain cases, Symphogen will ensure that such transfer will be carried out accordance with the applicable data protection laws. This entails that any party outside of EU/EEA that comes in possession of your personal data must ensure an adequate level of protection, for example, by entering into the EU standard contractual clauses with Symphogen. If you have any inquiries in relation hereto, you are welcome to contact Symphogen – please see the contact information below.
Storage of your personal data
Symphogen will only store your personal data as long as necessary to fulfil the purpose for the processing of your data. However, special regulations may apply and within certain areas you may be given the option to an extended time of storage of your personal data. For further information about the special regulation, please contact Symphogen – please see the contact information below.
Some of your personal data must be stored for accounting purposes or for defence of legal claims. This personal data will be stored until the expiration of the statutory limitation period which for instance is 5 years for retention of accounting material.
Your rights as a data subject
Symphogen has taken all necessary and adequate steps in order to protect your personal data and ensure your rights as a data subject.
You have certain rights, which are described below. Please note that certain exceptions may apply, e.g. if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims. If you have any questions to your rights as a data subject, please contact Symphogen – please see the contact information below.
Right of access
- You have the right to request access to the personal data Symphogen has stored concerning you. Symphogen must provide you with the following information:
- the purposes of the processing,
- the categories of the personal data concerned,
- the recipients or categories of recipients, including recipients in third countries,
- the retention period or the criteria for the determination of the retention period,
- the specific data subject’s rights regarding rectification, erasure or restriction of processing of personal data as well as the right to object to such processing,
- the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet),
- where the personal data are not collected from the data subject, any available information as to their source; and,
- the existence of automated decision-making, including profiling and meaningful information on the logic behind and the envisaged consequences of such processing for the data subject.
Symphogen must provide a copy of the personal data undergoing processing free of charge and by electronic means, if the request has been submitted in a commonly used electronic form.
Right to rectification
- You have the right to rectify inaccurate personal data concerning you, including completion of incomplete personal data.
Right to erasure (right to be forgotten)
- Under certain circumstances, you have the right to erasure; meaning upon your request, Symphogen must erase the personal data stored concerning you. Please note that the right to erasure is not absolute, thus one of the following conditions must apply:
- the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed,
- you withdraw your consent and there is no other legal ground for processing (such as legitimate interests pursued by Symphogen),
- you object to the processing and there are no overriding legitimate grounds for processing,
- the personal data have been unlawfully processed, or
- the personal data must be erased for compliance with a legal obligation in accordance with EU or Danish law.
Right to restriction
- If one of the following circumstances applies, you have the right to restrict Symphogen’s processing of personal data concerning you.
- the accuracy of the personal data is contested by you – however, only for a period enabling Symphogen to verify the accuracy of such personal data,
- the processing is unlawful and you request restriction of use of personal data instead of erasure,
- Symphogen no longer needs the personal data for the purposes of processing but the personal data is required by you for the establishment, exercise or defence of claims, for example, as documentation or evidence,
- you have objected to processing, on grounds related to his or her particular situation, and is pending the verification whether legitimate grounds of Symphogen override those of the data subject.
Right to data portability
- You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. Where processing is based on a consent or a contract and the processing is carried out by automated means format, you have the right to transmit this personal data to a third party without hindrance from Symphogen.
The right to object
- Under certain circumstances, you have the right to object at any time to Symphogen’s processing of personal data concerning you.
Withdrawal of consent
- When processing of your personal data is based on your consent, you may withdraw your consent at any time. Please note that this does not affect Symphogen’s processing of your personal data prior to withdrawal of your consent.
Filing of complaint
If you wish to file a complaint regarding Symphogen’s processing of your personal data, you can contact Symphogen. If your complaint is not resolved, please feel free to contact the Danish Data Protection Agency.
Symphogen A/S
CVR-no. 10013267
Pederstrupsvej 93
DK-2750 Ballerup
Tel +45 4526 5050
Fax +45 4526 5060
GDPR@symphogen.com
Danish Data Protection Agency (Datatilsynet)
Borgergade 28, 5
DK-1300 København K
Telephone number: +45 33 19 32 00
Email address: dt@datatilsynet.dk
Website: www.datatilsynet.dk
COOKIE POLICY
Lastly, we recommend you read our policy on Cookies.
Changes to the privacy policy
This Privacy Policy will be updated on a regular basis and when necessary due to changes in applicable law. The Privacy Policy will always include information on the effective date of the most recent version. To the extent, the changes of the Privacy Policy are regarded as material and significant, you will be expressly informed hereof, for example, on Symphogen’s website.
Effective date of the recent update of the privacy policy
March 9, 2022