INFORMATION ON THE PROCESSING OF PERSONAL DATA.

INTRODUCTION

BioStock AB (“BioStock”) provides a digital news site via biostock.se (“Website”). BioStock is also involved in events as an organizer, either alone or together with others, and sometimes also promotes other people’s events.

BioStock respects your privacy and protects your personal data. Personal data means any information that can identify you as an individual (for example, name, address, images, etc.) and that is collected through our digital channels, such as via the Website, mobile applications and/or other future digital interface that links to this information on the processing of personal data (“Privacy Policy”).

The purpose of our Privacy Policy is to ensure that you feel confident that we process your information in accordance with applicable data protection legislation. This Privacy Policy describes how we handle and protect your personal data in our capacity as data controller. This Privacy Policy also describes your rights and how to proceed if you wish to exercise them.

It is important to us that you feel secure in our processing of your personal data (for example, we do not sell or transfer your personal data to another party other than as set out in this Privacy Policy) and you are always welcome to contact us with any questions.

You can find information about how to contact us under the Contact Information heading below.

HOW WE COLLECT YOUR PERSONAL DATA
Information you provide to us: Most of the information about you that BioStock collects comes directly from you (for example, when you fill out a form when ordering a subscription or when you register for and create an account on the Website). You can always choose not to share certain information with us. However, some personal information may be necessary for us to interact with our subscribers, customers, suppliers and other business partners.

Information we collect about you: BioStock may also collect personal information about you from someone else who, for example, registers you for an event or newsletter or someone who coordinates an event.

PERSONAL DATA WE PROCESS

•  Contact information. In order for us to deliver the service you have purchased from us or contact you regarding an event you have registered for, we save your name, email address, telephone number, and postal address.
•  User account information, in case you order our subscription service. If you order our subscription service, you need to create an account with us, after which we collect your email address.
•  Organizational personal data. If you use our services on behalf of your company, we also process where you work and your job title.
•  Payment information, in case you purchase services from us or tickets to an event we organize.
•  For users of our premium service. As a business customer, we may use you as an invoice reference if you choose invoice as your payment method. However, as a business or private customer who pays by card, we do not save any payment details from you. However, we use the payment service provider Stripe (Stripe, Inc.), which collects your debit or credit card details and is the data controller for the information they collect. For more information about how Stripe processes your personal data, look here.
•  Activity and device information. In order to manage and administer your user account and any support issues, we will collect and process technical information about the computer, mobile phone and other devices used and their settings. The information includes, among other things, IP address, language, browser, operating system and screen resolution, including when you were last logged in and the date of registration of a user account with us.
•  Your communications with us. This means the information you include in your emails to us or that you otherwise provide to us through communications. For example, we collect and process information if you contact us to express your views or in support matters, such as relevant circumstances, your contact details, the time you contacted us and other essential information we need in the individual case to be able to assist and handle the matter.
•  Event-specific information in the event that you participate in an event organized by us. This data includes information needed for event registration, including allergies or other dietary information.
•  Information from customer surveys. We may contact you to voluntarily participate in customer surveys. If you choose to participate in such surveys, you may be required to provide us with information that includes personal data.

HOW WE USE YOUR PERSONAL DATA AND LEGAL BASIS
BioStock processes your personal data in accordance with the purposes and legal bases set out below.

•  Free newsletter. If you have signed up for our free newsletter, we collect your name and email address which is used to communicate our newsletters to you. This processing is done with your consent as the legal basis. If you no longer wish to receive such information, you can follow the unsubscribe link found in each email or by contacting us at [email protected].
•  Send marketing materials. If you have signed up for our newsletter, we also use your contact details to communicate with you about our services. For example, for the purpose of sending updates regarding our services, marketing materials and invitations to our and others' events. The legal basis for this processing is our legitimate interests, in particular our interest in marketing our services, maintaining our business relationships and informing you about our activities when you have shown an interest in us and our services. If you no longer wish to receive such information, you can follow the unsubscribe link found in each email or by contacting us at [email protected].
•  If you have ordered our subscription service: to provide the service and administer your user account. Your personal data will be processed in order for us to provide our product to you and fulfill the agreement between us (the Terms of Use).
•  Direct marketing and digital sales: BioStock sometimes uses different channels for marketing, e.g. email, SMS and other digital channels. Our marketing may, depending on the channel, refer to our own and other companies' services and products. BioStock processes name and contact details and, if applicable, purchase history and professional information for the digital sale of BioStock subscriptions. You always have the right to object to direct marketing and digital sales, including profiling for these purposes. The legal basis for this processing is based on the company's legitimate interest in selling BioStock subscriptions via digital sales. If you wish to unsubscribe from digital sales completely, please contact BioStock by email at [email protected].
•  To communicate with you and others or provide support. Your personal data, specifically the contact information you provide to us, and where necessary also device information, is used to communicate with you and others, e.g. in connection with support or when you contact us with comments about BioStock and our services. The processing carried out is necessary for subscribers to be able to provide our services to you within the framework of our agreement with you and otherwise for our legitimate interests, including BioStock's interests in our products and services functioning correctly and in communicating effectively with you and others.
•  To conduct customer surveys. Your contact information may be used to conduct customer surveys, e.g. to hear your opinions about BioStock and our products and services. Responding to customer surveys is voluntary. The information collected in connection with customer surveys is used to support our legitimate interest in improving our products and services.
•  Events. Your name, email, telephone number, company, and, where applicable, billing information in the event that you specify invoice as the payment method, as well as the specified free text, are collected either from you or someone who registers for events organized by BioStock. The personal data is used to compile participant lists, and where applicable for payment verifications and the creation of invoices. Participant lists are used by BioStock to be able to arrange preparations for the events, by booking premises, catering, nameplates, etc. Other contact information is used to convey information regarding the event and to send out a thank-you letter for participation in the event, which is issued afterwards. If you have participated in one of our events, we will save information about the type of event you attended, as well as your contact information in order to be able to communicate similar upcoming events to you. The legal basis for the processing we do in connection with the organization and provision of an event is to fulfill contractual obligations and for our legitimate interest in being able to enter into and fulfill contracts and to take care of day-to-day operations. This is normally also in the interest of the company you represent. The storage of your contact information after you have participated in an event is saved based on our legitimate interest in being able to market upcoming events to you, as you have previously shown an interest in us and the events we provide.
•  If you provide information about allergies or similar, such processing takes place based on your consent. You can always choose not to disclose any allergies, with the result that no consideration will be taken at the events.
•  To create aggregate statistics. Your personal data is used to create statistics in aggregate form, which means that the data cannot identify you. The processing is based on legitimate interests, in particular our interest in being able to develop and improve our products and services by seeing what content our users want to see more of.
•  To develop and improve the products and services we offer. Unit information and aggregated statistics are used as a basis for continuing to develop and improve the products and services we offer, including any new ones. This is done with the support of legitimate interests, in particular our interest in developing and improving the products and services we offer.
•  BioStock may also participate in events organized by external parties. In these contexts, the events are sometimes marketed via BioStock's channels (website, podcast and email). Emails are sent based on those who are subscribers to our newsletters. These email mailings are covered by the purpose and legal basis stated under the heading 'Newsletter'. BioStock also creates or receives and manages participant lists in order to prepare for the events. For participant lists, BioStock is a data processor in relation to the organizer of the external events.
•  To protect our interests and legal rights. When we are required to do so by law, or when we believe it is necessary to protect our legal rights, interests and the interests of others, we may use information about you in connection with legal claims, compliance, supervision or audit.
•  In connection with a business transfer. In the event that BioStock, for strategic or business reasons, decides in the future to sell or transfer all or part of the company, your personal data may be shared or transferred to parties involved in the transaction. This processing is based on our legitimate interest in being able to develop our business.
•  Individual information that is provided or collected. In some cases, we may collect specific information. You will then be informed of the purpose and legal basis for this. Otherwise, this Privacy Policy also applies to such information.

COLLECTION OF COOKIES AND TRACKING

Cookies are collected on bioStock.se. When you visit the Website, certain information is collected using cookies. A cookie is a small text file that is stored in your browser.

A cookie can contain text, numbers or a date, for example. The information is used to learn more about users of the Website, for example to show more relevant advertisements. You can read more about cookies and how to clear them here: http://www.youronlinechoices.com/se/

Tracking via Facebook pixel. BioStock has implemented Facebook pixel on the website biostock.se. This makes it possible for us to target Facebook ads to Facebook users, based on how they have browsed biostock.se. In concrete terms, this means, for example, that we can target an ad for a certain event to a group of Facebook users who have read about that event on our site. However, this is done anonymously, and we at BioStock do not handle any information about what individuals do on Facebook.

HOW WE SHARE OR TRANSFER YOUR PERSONAL DATA TO THIRD PARTIES

Suppliers. Where necessary to perform our services, we may use external suppliers (data processors). These suppliers may process personal data provided by you or collected through the digital channels or services we provide. Our suppliers are bound by so-called data processor agreements and are not entitled to use personal data for their own purposes. We use suppliers to help us with the following:

•  Payment Service Provider and Billing System (We share the payment information you provide to complete a purchase with banks and other institutions that process payment transactions or provide other financial services, as well as to prevent fraud and reduce credit card risks.).
•  Marketing (social media, media agencies or advertising agencies).
•  Customer support (where applicable)
•  Event registration services.
•  IT services (companies that handle data storage, hosting, email services, event planning solutions, technical support, internal communication channels and maintenance of our IT solutions).

We will always strive to limit such access and only share information that is necessary for the suppliers to perform their work. We always check that our suppliers can meet our high standards and that they have adequate safeguards in place. We require that they (i) protect your personal data in accordance with this Privacy Policy and relevant legislation and (ii) refrain from using your personal data for any purpose other than to provide us with the agreed product or service.

In addition, we share your personal data with suppliers who are independent data controllers for their processing of your personal data.

•  LinkedIn, Facebook and Twitter – if you use the “share buttons” on biostock.se or in any of our newsletters to share articles via Facebook, LinkedIn or Twitter, your browser will transfer device data to the social media. We do not exercise influence over Facebook’s processing of your personal data, such as the date and time of the sharing, the type of device you are using, your operating system and IP address, the URL of the visit, and information about which article you are sharing, which is why we ask you to read the terms and conditions and privacy policies of the respective social media.
•  Authorities and in legal contexts. Your personal data may sometimes need to be shared with authorities, courts and other parties. For example, if required by law, in connection with a legal process or to respond to a request from regulatory authorities or other authorities.
•  Parties involved in a business transfer. In the event that BioStock, for strategic or business reasons, in the future decides to sell or transfer all or part of the company, your personal data may be shared or transferred to parties involved in the transaction. This processing is based on our legitimate interest in being able to develop our business.

LINKS TO OTHER WEBSITES

Our website may contain links to third-party websites, such as the website of a life science company. Users who follow such a link should check the terms and policies of the relevant website before providing their personal information to the provider of the website. BioStock is under no circumstances responsible for such third-party websites.

TRANSFER TO A THIRD COUNTRY

We always try to keep your personal data within the EU/EEA and most of our own IT systems are located there. Suppliers outside the EU/EEA include MailChimp and Google LLC. During support and maintenance, we may also temporarily need to transfer the information outside the EU/EEA.

All such data will always be kept to a minimum and relevant for the purpose. Regardless of where the personal data is transferred, we always take appropriate technical and organizational measures to ensure that the level of security is the same as in the EU/EEA and thus maintain an adequate level of security, for example by using the EU Commission's standard contractual clauses or companies affiliated with the Privacy Shield.

HOW LONG DO WE STORE YOUR DATA?

BioStock stores your personal data for as long as is necessary to fulfill the purposes for which the personal data was collected. The duration depends on the nature of the information collected. We conduct regular reviews of our need to retain data, taking into account relevant legislation.

When you subscribe to our free newsletter, we store your personal data for as long as you wish to maintain your subscription.

If you have registered for any of our paid services, we will save your personal data until you choose to delete it by informing us at [email protected] and otherwise for 12 months after you cancel your subscription so that we can easily restore your user account at your request.

If you have participated in an event we organize, we will save your personal data until the event has taken place, after which we will delete information about dietary preferences, allergies, etc. However, we will save information about the event you participated in and your contact details, in order to be able to contact you about similar upcoming events.

Your data may also be stored for a longer period if necessary according to applicable statutory retention periods, such as tax and accounting legislation.

CHANGES TO THIS PRIVACY POLICY

If we need to change the content of this Privacy Policy, we will notify you when you log in to our Website and/or other digital channels.

UPDATE OF YOUR PERSONAL DATA

We work continuously to ensure that the information held in our records is both accurate and up-to-date. If your personal information changes, please inform us of such changes.

YOUR RIGHTS

You have the right to request information about the personal data we process about you and to have inaccurate data corrected. Please note that we may request additional information about you to ensure the secure and efficient handling of your request and to ensure that the information is provided to the right person.

You can request that we delete the personal data we hold about you, for example if the information is no longer necessary to fulfil the purpose for which it was collected or if you no longer wish to receive direct marketing, etc. Please note that where necessary we may need to refuse your request, for example if the personal data is needed for tax or accounting purposes.

You also have the right to request restriction of processing. In such cases, we may need to investigate the situation further before making a decision.

You have the right to object to your personal data being processed for legitimate interests and we must cease processing unless we can demonstrate compelling legitimate grounds for continued processing. You can contact us for more information about the balancing of interests that has been carried out for the processing that we base on our legitimate interests.

You have the right to withdraw consent that you have given us at any time. Please note, however, that this will not affect the processing carried out before the withdrawal.

Where you have given your consent or the processing is based on a contractual relationship with you, you have the right to have your data transferred to another controller under certain circumstances. However, this requires that the transfer is technically feasible and can be carried out automatically.

You have the right to contact and file a complaint with the Swedish Data Protection Authority or the supervisory authority in the country where you live or work, if you believe that your personal data has been processed incorrectly by us. Read more at www.datainspektionen.se.

If you would like to know how we process your personal data, please send us a written and signed request (see Contact Information below).

SECURITY

We take all appropriate technical and organizational security measures necessary to protect personal data against unauthorized access, alteration or destruction. However, providing personal data via digital channels always involves a risk as it is not possible to completely protect technical systems from unauthorized access.

CONTACT INFORMATION

If you have any questions regarding our personal data processing, please contact us: [email protected]