1. Introduction
We are Novacura AB with company registration number 556675-8156 (“Novacura”) and are responsible as data controller for the processing of your personal data. All references in this privacy policy to “we”, “us” or “our” should be considered a reference to Novacura. Our contact information is included in the end of this privacy policy. We respect your privacy and are committed to protecting your personal data.
2. Scope of privacy policy
This privacy policy applies to our processing of your personal data when you visit our website https://www.novacura.com/ or Novacura Marketplace https://marketplace.novacura.com (collectively the “Website”). This privacy policy also applies to our processing when you as a customer, user or representative of a customer, use our products and services. This privacy policy, inter alia, contains information about the purposes for which we process your personal data, with whom we share it, and what rights you have in relation to your personal data.
For more information on how we handle cookies, please see our Cookie Policy.
3. What categories of personal data do we process, for what purpose, on what legal basis and for how long?
Novacura processes your personal data for the purposes set forth below. For each purpose, Novacura must have a legal basis. A legal basis could e.g. be (i) your consent to the relevant processing activity, (ii) that the processing is necessary in order for the performance of a contract to which you are a party, or (iii) that Novacura or a third party has a legitimate interest to process the personal data which is not overridden by your interest of not having the personal data processed. In the tables listed below, the categories of personal data, retention period and legal basis that Novacura relies on for each purpose will be identified.
Purpose | Processing activities | Categories of personal data |
Administrating customer’s purchase of products and services. |
|
|
Legal basis: Legitimate interest. This processing is based on Novacura’s legitimate interest of providing its products and services to customers. | ||
Retention period: Novacura will process the information for 12 months upon termination of service agreement. |
Purpose | Processing activities | Categories of personal data |
Marketing of our products and services. |
|
|
Legal basis: Legitimate interest. This processing is based on Novacura’s legitimate interest of marketing its products and services. | ||
Retention period: Novacura will process the information up to 12 months after creation unless you become a customer of Novacura. |
Purpose | Processing activities | Categories of personal data |
Customer support |
|
|
Legal basis: Legitimate interest. This processing is based on Novacura’s legitimate interest of providing support to its customers. | ||
Retention period: Novacura will process the information up to 24 months after closing the support ticket. |
Purpose | Processing activities | Categories of personal data |
Administration and improvement of our Website |
|
|
Legal basis: Legitimate interest. This processing is based on Novacura’s legitimate interest of maintaining and improving the functionality and user experience of our Website. | ||
Retention period: Novacura will process the information up to 24 months after your visit to our Website. |
Purpose | Processing activities | Categories of personal data |
Financial management |
|
|
Legal basis: Legal obligation. This processing is based on Novacura’s legal obligation of bookkeeping in accordance with applicable Swedish laws. | ||
Retention period: For bookkeeping purpose, your personal data will be processed for 7 years in accordance with the Swedish Accounting Act (Sw. Bokföringslag (1999:1078). |
Purpose | Processing activities | Categories of personal data |
Recruitment |
|
|
Legal basis: Legitimate interest. This processing is based on Novacura’s legitimate interest of recruiting personnel. | ||
Retention period: Novacura will process the information during 2 years from receipt of your job application. |
We solely use personal data as relevant in each specific case in order to handle any customer complaints or defend and/or establish legal claims. We will generally process such personal data for 10 years from creation or for the time necessary to fulfill the purpose in the relevant case. This processing of your personal data is based on our legitimate interest.
4. From where do we obtain your personal data?
Novacura collects your personal data directly from you when you send us inquires, visit our Website or use our products and services.
5. What happens if you do not provide us with your personal data?
In order for us to fulfill the purposes in section 3it is necessary for you to provide us with certain personal data. If you do not provide us with the personal data, we may not be able to fulfill or obligations towards you and you will consequently not be able to use our products and services. We will inform you of what personal data is required when asking you to provide your personal data.
6. With whom do we share your personal data?
In order to fulfill the purposes listed above, Novacura may share your personal data with the following recipients.
(a) External payment providers.
(b) Insurance companies.
(c) Providers of business administration systems.
(d) IT suppliers.
(e) Marketing agencies.
(f) Web traffic analysis companies
7. Will we transfer your personal data outside of the EU/EEA?
Novacura may transfer some of your personal data to countries outside the European Union (“EU”)/ European Economic Area (“EEA”). If the EU Commission has not decided that a country listed below ensures an adequate level of protection for your personal data, then we will provide a description of the safeguards implemented by us or the legal basis relied on by us to ensure that the transfer of your personal data is in compliance with European data protection legislation. For more information on whether we have transferred your personal data outside of the EU/EEA, what countries your personal data has been transferred to and what safeguards Novacura has implemented, please contact us using our contact details listed in the end of this privacy policy.
8. What rights do you have?
Below is a summary of the rights you have under European data protection legislation. The exercise of these rights is free of charge and you may exercise the rights by sending an email or mail to the contacts listed at the end of this document. Please do not hesitate to contact us should have any questions regarding your rights (see contact details in the end of this privacy policy).
Note that Novacura will always assess a request to exercise a right to determine whether the request is valid. All rights listed below are not absolute and exceptions may apply.
In addition to the rights set forth below, you always have the right to lodge a complaint with a supervisory authority regarding Novacura’s processing of your personal data.
(a) Right of access.You are upon request entitled to receive a copy of your personal data that Novacura processes and also to obtain supplementary information about Novacura’s processing of your personal data.
(b) Right to rectification. You have the right to have your personal data corrected and/or completed if it is inaccurate and/or incomplete.
(c) Right to erasure. You have the right to request that Novacura erases your personal data without undue delay in the following circumstances:
- the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- you withdraw your consent to a processing activity and there is no other legal basis for the processing;
- you make a valid objection to the processing of your personal data;
- the personal data has been unlawfully processed; or
- the personal data has to be erased for compliance with a legal obligation.
(d) Right to restrict processing. You have the right to request restriction of the processing of your personal data in the following circumstances:
- the accuracy of the personal data is under examination;
- the processing is unlawful or is no longer needed for the purposes of the processing but you oppose the erasure of personal data and request restriction instead;
- Novacura no longer needs the personal data but you need the personal data for the establishment, exercise or defence of legal claims; or
- you have objected to the processing of your personal data and such objection is under verification.
(e) Right to data portability. Under certain circumstances you have the right to receive the personal data concerning you which you have provided to Novacura order to transmit these to another service provider if the processing of the personal data is based on your consent or the performance of a contract.
(f) General right to object. You have the general right to, at any time, object to the processing of your personal data that is based on Novacura’s legitimate interests. If you object we have to demonstrate that we have compelling legitimate grounds for such processing or that we need the personal data for the establishment, exercise or defence of legal claims.
(g) Right to object to direct marketing. You have a right to, at any time, object to the processing of your personal data for direct marketing purposes. If you do this, Novacura may no longer process your personal data for such purposes.
6. How can you contact us?
You may come in contact with us through the following communication channels: Novacura AB | Björklundabacken 10, 436 57 Hovås, Sweden | info@novacura.se | +46 (0) 31 760 46 00
Ask to be forgotten (Right to erasure):
7. Amendments to this privacy policy
Novacura may, at any time and for any reason, make amendments to this privacy policy by publishing the updated version of the privacy policy on our Website. The updated privacy policy will be applicable with immediate effect upon publication, however it will not apply retroactively. Upon making a significant change to this privacy policy we will publish information of this on our Website.