Updated November 16, 2024

Privacy policy

1. INTRODUCTION

Cellcolabs Clinical Ltd, Business License: 10330640 (“Cellcolabs”, “we”, “our” or “us”) values your privacy and we are committed to protecting your personal data. It’s important to us that you are fully informed about our use and processing of your personal data in accordance with the law, including the General Data Protection Regulation (the “GDPR”). This privacy policy (the “Privacy Policy”) describes how we collect, use and protect your data. It also aims to describe your rights concerning that data.

As the data controller for the processing activities described in this Privacy Policy, Cellcolabs is responsible for our processing of your personal data and for providing you clear, accurate, and comprehensive information about that processing. We have taken a great deal of care to ensure that this Privacy Policy contains the information you need. However, should you have any questions, please do not hesitate to contact us at privacy@cellcolabs.com.

For additional details regarding our use of cookies and similar technologies, please refer to our Cookie Policy.

We review and update this Privacy Policy regularly. Consequently, we recommend that you periodically review this Privacy Policy to stay informed about, and understand, our personal data practices. If we need to implement any significant updates to this Privacy Policy that could materially affect you, we will provide you with prior notification of such changes before commencing any new processing activities.

2. THE SOURCE OF YOUR PERSONAL DATA

We collect and process various types of personal data depending on our relationship. Personal data can be submitted, for instance, by website visitors, job applicants, and businesses seeking to collaborate with us. Sometimes it’s requested in order to better understand a situation.

Chapter 3 of this Privacy Policy gives a more detailed description of this and further describes the categories of personal data processed, the reasons why the personal data is processed, and the legal grounds for the processing.

3. HOW AND WHY WE PROCESS YOUR PERSONAL DATA
3.1 Suppliers and business partners

Purposes and types of personal data processed

  • Personal identification information: name, business address, shipping/billing address, email address, phone number — to communicate, manage business relationships, fulfill contracts.
  • Professional data: job title, department, organisation — to understand your role.
  • Transactional data: details about products/services supplied, payments, etc.

Legal grounds

  • Performance of contract
  • Legitimate interests (especially before contract: business suitability, etc.)
  • Compliance with legal obligations (e.g. anti-money laundering, accounting laws)
3.2 Website visitors

Purposes and types of personal data processed

  • Personal identification info (if provided): name, email, phone — for contact & inquiries
  • Technical data: IP address, browser, device type, etc. — to ensure site works correctly
  • Usage data: pages viewed, clicks, etc. — to improve user experience
  • Marketing preferences: consented communication, etc.

Legal grounds

  • Legitimate interests for basic processing
  • Consent for marketing, cookies, etc.
3.3 Clinical trial candidates and participants

If you express interest or are participating in a clinical trial, you will receive Information and Consent Forms that explain what personal data we collect, how it’s used, and the legal bases (including sensitive data under GDPR).

4. HOW LONG WE STORE YOUR PERSONAL DATA

We store personal data only as long as needed for the purpose for which it was collected, or to satisfy legal/regulatory obligations. We delete data no longer required. If you unsubscribe from marketing/communications, we stop processing data for those specific purposes.

5. SECURITY MEASURES

We take reasonable technical, administrative, and physical measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. This includes encryption, secure servers, and audits of IT providers.

6. TRANSFER AND DISCLOSURE OF PERSONAL DATA

We may share your data with third parties that help us perform our services (e.g. IT or marketing partners), under contracts that ensure secure, confidential processing.

If data is transferred outside the EU/EEA, we ensure legal safeguards to protect it under GDPR or equivalent rules.

We do not sell your data. We only share it as described here, or as required by law or regulation.

7. YOUR RIGHTS

You have a number of rights under GDPR, including:

  • Your right of access — to know whether we process your data, and get a copy.
  • Your right to rectification — to correct wrong or incomplete data.
  • Your right to erasure (“right to be forgotten”) — in appropriate circumstances (e.g. consent withdrawn, data no longer needed).
  • Your right to restriction — limit how data is processed while disputes are resolved.
  • Your right to data portability — get your data in a commonly used format.
  • Your right to object — especially if data processing is based on legitimate interest.
  • Your right to withdraw consent — for any processing based on it.
  • Your right to lodge a complaint — with a supervisory authority (e.g. the Swedish Authority for Privacy Protection or another in your country if you live outside Sweden).
8. CONTACT INFORMATION

Cellcolabs AB
Scheeles väg 3
171 65 Solna, Sweden
E-mail: privacy@cellcolabs.com

We will address your inquiries within the legally mandated timeframes, and in accordance with this Privacy Policy. As detailed in Section 7 above, please note that certain legal exemptions or limitations may apply to the exercise of your rights. Additionally, verification of your identity may be required prior to processing your request. If we are unable to comply with your request, we will explain the reasons for this and inform you of your options.