GDPR – Xintela AB (Publ)
Xintela protects your personal integrity. We therefore always strive to protect your personal data in the best way, comply with applicable laws and regulations for personal data protection at all times. Through this privacy policy, we want to inform you about how your personal data is processed by Xintela. This policy helps you, among other things, to understand what kind of information Xintela collects and how it is used.
Xintela AB (Publ), org.nr. 556780–3480, with address Medicon Village, 223 81 Lund is responsible for the processing of your personal data. Xintela is the data controller for the processing of your personal data and is therefore responsible for ensuring that your data is handled correctly and securely in accordance with applicable legislation.
When personal data is to be processed, it is required that the data subject has given his or her consent to the processing or that the processing is necessary for the performance of a task carried out in the public interest.
According to the general rule, it is prohibited to process sensitive personal data, such as those revealing racial or ethnic origin, political opinions, religious beliefs and data relating to health or sex life. But there are exceptions in the law.
An exception is if the data subject has given his or her explicit consent. Another exception is for research purposes if the processing has been approved in accordance with the Act on the Ethical Review of Research Involving Humans (The Ethical Review Act). In addition, sensitive personal data may be processed for statistical purposes, without the data subject's consent, if the processing is necessary for the performance of a task carried out in the public interest and if the public interest in the research in question clearly outweighs the risk of undue invasion of the data subject's personal integrity. If the treatment has been approved by an ethical review board, these conditions are considered to be met. It is not permitted to collect sensitive personal data in a separate database for research or statistical purposes that are not determined at the time of collection.
All research involving the processing of sensitive personal data or information about violations of the law must be ethically reviewed. The ethical review is carried out by an ethical review board with representatives both for the public and for the research, and it includes the research project itself and the processing of personal data in accordance with the Personal Data Act. The starting points for the examination are set out in the Ethical Review Act, where the review of research ethics must be a sufficient guarantee that sensitive personal data is processed for research only in the exceptional cases where a certain intrusion into personal integrity is really justified.
The Ethical Review Board does not need to apply the balancing standard that normally exists, i.e. that the public interest must clearly outweigh the risk of intrusion into individuals' personal integrity that the processing may entail. However, how the balancing standard is normally applied can guide the boards' assessment.
Your personal data may be used for direct marketing, newsletters, customer surveys and for statistical purposes and may be used for mailings by mail or e-mail to you until you withdraw your consent. The sender for mailings is Xintela AB (Publ).
Xintela will process your personal data during the recruitment process and for future career opportunities. Xintela will contact you if a matching service has become available. When you submit your CV to us, you also give your consent that your CV will be archived with Xintela for a maximum of one year, then deleted. You can contact us at any time and request that we delete your personal data.
We collect and store information about you that you provide to us.
For tissue donation and research purposes, Xintela collects different personal data from you, depending on the study and scope. Everything is done in accordance with your consent.
Xintela collects personal data from third parties regarding shareholder information. This information comes from Euroclear Sweden AB.
Depending on the conditions under which your personal data has been registered with Xintela, you may appear under one or more categories.
The processing of personal data by Xintela AB (Publ) takes place with the following legal basis.
Your personal data will not be transferred or sold to third parties.
Xintela AB (Publ) takes the technical and organizational security measures required by law to ensure that your personal data is not tampered with, lost or destroyed or that unauthorized persons access them. Our security practices are constantly changing in line with technological developments.
Xintela AB (Publ) stores all personal data collected from you within the EU and EEA. We do not disclose personal data to third parties, except in situations where this is a requirement arising from a legal obligation or to fulfil our obligations to you. See more information under the section "Who can access your personal data".
When you submit your personal data to Xintela AB (Publ), you give consent to Xintela to register and process the stated data for the above-mentioned purposes.
We never process your personal data for a longer period than is permitted by applicable law, regulation, practice or government decision. For example, data can be stored longer if required by the Ethical Review Act, the Medicines Act, the Act for the Handling of Human Tissues and Cells, the Consumer Purchase Act or the Accounting Act. The personal data is stored and processed in Xintela's IT system. You can contact us at any time and request that we delete your personal data, which is then done immediately if it does not violate then applicable law. If then applicable law does not allow your personal data to be deleted but that it is instead possible to anonymize your personal data, this is done.
In other situations, your personal data is not stored longer than necessary for the specific purpose.
Your rights to request access to your personal data and receive information, among other things, about what personal data is stored with us, the purposes of the processing of this personal data, the recipients or categories of recipients to whom the personal data has been or is to be disclosed, the foreseen period or the criteria for determining the period during which the personal data will be stored. You can contact us at the address below and request to have the information sent by post or email. For your security, this information is only sent to your registered address or specified e-mail in our customer database.
If you believe that the personal data that Xintela AB (Publ) has processed is incorrect or has been processed in violation of applicable legislation, you also have the right to request that this personal data be corrected, blocked or deleted. You do this by contacting us. Xintela AB (Publ) is in some cases obliged by law to process your personal data even though you have requested that these be deleted.
In the event that you wish to have the personal data you have provided transferred in order to be able to use it elsewhere (data portability), please contact us at the address below.
If you believe that your personal data has been processed in violation of current legislation, you always have the right to file a complaint with the Data Inspectorate.
On Xintela.se, there may be links to external websites over which Xintela has no control. These are not covered by this policy.
If you have questions about how we handle your personal data or if you want to change or transfer your information, please contact gdpr@xintela.se. When it comes to the handling of personal data, you can also talk to the Data Inspectorate, which is the supervisory authority for this handling.
Address:
Xintela AB (Publ)
Medicon Village
223 81 Lund
info@Xintela.se
These terms and conditions have been established by Xintela AB (Publ) and apply from 2018-05-01.
Xintela AB – Ver 2.1 2022-09-22
