Privacy Policy

To manage our Customer relations in general and to meet our Customer commitments, BioAware needs information about you in your role as Customer contact person or user of a service. The purposes of processing this personal data are:

BioAware process personal data about Leads for marketing purposes. In order to provide targeted and relevant content to potential Customers, BioAware builds an interest profile manually based on your expected profile as well as your response to marketing content per email. The legal grounds for such processing is mainly your consent.

You can read more about how we create such profiles, how you can adjust the profile as well as withdraw your consent in the sections below.

In order to monitor access to our premises, we process personal data about visitors. The processing is based on our legitimate interest to protect our business secrets, employees, premises and you as a visitor. You will be informed of your rights in this context when you register in our electronic visitor system.

BioAware uses different digital tracking technologies to collect information about your movements on BioAware Sites and when interacting with us.

Google Analytics: These cookies allow us to see information on user website activities including, but not limited to page views, source and time spent on a website. The information is depersonalized and is displayed as numbers, meaning it cannot be traced back to individuals. This will help to protect your privacy. Using Google Analytics, we can see what content is popular on our websites.

You can prevent the information generated by the Google cookie about your use of our Sites from being collected and processed by Google in the future by downloading and installing Google Analytics Opt-out Browser Add-on for your current web browser. This Add-on is available at http://tools.google.com/dlpage/gaoptout.

BioAware may share your personal data with external third parties in the following contexts:

If you make a post, comment or similar on BioAware user communities or other forums on the BioAware website, such information can be read and used by anyone with access to such forums and used for purposes over which neither BioAware nor you have control. BioAware is not responsible for any information you submit on such forums or BioAware website. BioAware will not post any comment, testimonial or similar made by you without your prior consent.

The police and other authorities may demand the handover of personal information from BioAware. In these cases, BioAware will only hand over the data if there is a court order etc. to do so.

In connection with mergers, acquisitions or divestiture of all or parts of BioAware‘s business, the acquiring entity, as well as its consultants, would obtain access to data managed by the BioAware entity/entities involved and this may in some cases include personal data. In such cases, external parties would enter into an NDA with BioAware.

You have the right to opt-out of receiving marketing communications from BioAware and may do so by either:

(a) Following the instructions for opt-out in the relevant marketing communication,

(b) Change preferences under the account settings section if you have an account with BioAware.

(c) Contacting us via e-mail on info@bio-aware.com

Please note that even if you opt-out from receiving marketing communications, you may still receive administrative communications from BioAware, such as order confirmations and notifications necessary to manage your account or the services provided to Customers.

You have the right to access your personal data by requesting an overview of the personal data we process about you and you may have a right to download such data. You also have the right to request that BioAware corrects inaccuracies in your personal data. If you have an account with BioAware on the website, this can usually be done through the appropriate "your profile" section on the BioAware website.

Further, you have a right to request deletion of personal data, and to restrict or object to our processing of your personal data according to this Privacy Statement or other service specific terms.

Please use info@bio-aware.com to file all requests as mentioned in this section.

BioAware takes the trust you, and our Customers, place in us very seriously. BioAware is committed to preventing unauthorized access, disclosure or other deviant processing of personal data. BioAware shall ensure the confidentiality of personal data we process, maintain the personal data integrity and secure its availability according to applicable privacy legislation.

As part of our commitments, we utilize reasonable and appropriate organizational, technical and physical procedures and measures to safeguard the information we collect and process, taking into account the type of personal data and risk posed to you and our Customers upon breach. Since root causes for privacy breaches are most likely to be found internally, we believe that building a strong corporate culture where respect for and awareness around privacy among our employees are fundamental to ensure lawful processing and protection of your data. The following measures are of particular importance in this regard:

• Data Protection Officer acting as advisor in private policy related matters has been appointed and controls in privacy matters.

• Privacy courses that are mandatory for all employees are given by our DPO.

• Data processing agreements with subcontractors that process data on behalf of BioAware.

 

• Assess the use of encryption and pseudonymization as risk mitigating factors.

• Limiting access to personal data to those that need access to fulfill obligations according to law or service agreement etc.

• Manage systems that detects, restores, prevents and reports privacy incidents.

 

• Premises protected by access control and video surveillance systems (at datacenters).

• The BioAware servers are stored in Microsoft Azure high security datacenters where access is strictly monitored.

BioAware will only retain your personal data for as long as necessary for the stated purpose, while also taking into account our need to answer queries or resolve problems and to comply with legal requirements under applicable laws.

This means that BioAware may retain your personal data for a reasonable period after you and our Customer’s last interaction with us. When the personal data that we collected are no longer required we erase them. We may keep personal data for historical purposes (ie to keep track of previous users or customers).

When the Customer acts as data controller the Customer shall, according to applicable privacy legislation, ensure the legal grounds for processing the personal data. Further, the Customer shall assess and establish ownership to the risks posed to data subjects by processing their personal data. Another important aspect of the Customer’s duty as data controller is to comply with the information duty towards data subjects.

BioAware is a natural part of the Customers duties as data controller, in the sense that BioAware’s services constitutes parts of the processing of personal data that the Customer must ensure are compliant with applicable privacy legislation. Thus, when BioAware processes personal data on behalf of its Customers, we must do so in accordance with privacy legislation applicable for data processors.

In short, the Customer and BioAware are obligated to cooperate to ensure privacy for data subjects. BioAware shall provide the information necessary for the Customer to be compliant with applicable privacy legislation.