Privacy Policy
Biovian Oy is committed to protecting your privacy. We respect your rights as a data subject. This Privacy Policy when you use our website www.biovian.com or https://biovian.com/, or otherwise use our services or interact with us. This statement outlines the purpose and legal basis of processing personal data, what personal data is processed, retention period for personal data and the rights of the data subject.
Communication regarding privacy matters
Biovian Oy is the data controller for the processing of personal data. We ensure that your information is handled in compliance with the applicable law. Our contact information is:
- Biovian Oy
- Address: Tykistökatu 6A, Biocity FIN-20520 Turku, FINLAND
- Email: Gdpr@biovian.com
Personal data being processed
We only collect personal data that is essential and relevant for the purposes explained in this privacy statement. The following data concerning the data subjects is processed:
- Basic information such as your name, the company you work for, your title and position.
- Contact information such as your postal address, e-mail address and telephone numbers.
- Technical information such as information from requests which you have sent through our website or communications which we have sent to you electronically.
- Information which you provide to us for the purposes of attending meetings or other events with us, such as access and dietary requirements
- Any other information relating to you which you provide to us.
Legal basis and purpose of processing personal data
We only process personal data when we have a legal basis to do so. The legal basis depends on the personal data concerned and the specific context in which we process it. Please note that we may process your data for more than one lawful basis depending on the specific purpose for which we are using your data.
The purposes and legal basis for the processing of your data are as follows:
Retention period for personal data
Generally, we keep your data for as long as is strictly necessary, as long as you interact with us or until you request deletion of your personal data. We may also have a legal obligation to retain your data longer, for example based on the Accounting Act.
How data is collected
We collect your personal data in general from you when you interact with us, either by email or phone, or visit our website. We may also collect some data from publicly available data sources such as companies’ websites, the trade register as well as from other public or private registers.
Data disclosures and transfers
We do not disclose your personal data to third parties unless required to do so by law. We may however outsource some of our processing activities to service providers such as communications service providers and IT-service providers.
These service providers may be located outside the EU. When transferring your personal data outside the EU we ensure the level of protection by entering into data processing agreements with relevant standard contractual clauses for data transfers between EU and non-EU countries approved by the European commission.
Rights of the data subject
As a data subject you have certain rights under the GDPR.
Right to access: You have the right to receive confirmation from us on whether we process your personal data. If you request, we provide you with a copy of the personal data we process.
Right to rectification: You have the right to demand the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
Right to erasure: In certain cases, you have the right to have your personal data removed. For example, when the personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
Right to restriction of processing: In certain cases, you may request us to restrict the processing of your personal data. The right to restriction exists, for example, when you contest the accuracy of the personal data. In such cases, the processing will be restricted for a period enabling us to verify the accuracy of the personal data.
Right to object: In certain situations, if we process your personal data based on our legitimate interest, you have the right to object to the processing of your personal data. In such cases, we will stop the processing unless we demonstrate compelling legitimate grounds for the processing which override your interests and rights.
If the personal data is processed for direct marketing based on our legitimate interest, you have the right to object at any time to the processing without any specific grounds.
Right to data portability: you have the right to receive the personal data that you have provided to us in a structured, commonly used, and machine-readable format and, if desired, transmit that data to another controller.
Right to withdraw consent: If we process personal data based on your consent, you have the right to withdraw your consent by informing the controller. Withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal of consent
If you have any concerns or questions regarding our data protection practices (including any requests to exercise your data rights) please contact Gdpr@biovian.com.
You also have the right to submit a complaint to the relevant supervisory authority related to the processing of your data. In Finland the data protection supervisory authority is The Office of the Data Protection Ombudsman. https://tietosuoja.fi/en/home
Changes to our Privacy Policy
We may update our privacy policy from time to time to reflect legal changes, technological progress and/or new business practices. Any amendment becomes effective upon publication on the website. We therefore recommend that you regularly visit the site to keep yourself informed on possible updates.
This notice was updated on 24 November 2022.