LEGAL & Privacy Policy

PRIVACY & INTEGRITY POLICY

Processing of personal data

The purpose of this privacy policy is to provide information about how Intervacc processes your personal data.

In accordance with the GDPR
Intervacc respects your privacy and protects the personal data we process about you. All processing of personal data is carried out in accordance with the European Union's General Data Protection Regulation (the "GDPR"). How the company collects, processes, and shares your personal data when you visit our website is described below.

Privacy Policy

The Swedish company Intervacc AB (Intervacc), with registration number 556238-1748, is one of the companies within the Intervacc Group, which also includes the subsidiary Nordvacc Läkemedel AB and its subsidiaries Nordvacc Latvia Sia and Mybac-Vettech AB, and which, under agreement, is the provider or recipient of services, or the legal entity you have contacted ("Intervacc", "Nordvacc", "Mybac-Vettech", "we", "us", or "our"), is the controller responsible for the processing of personal data described below. You will find contact details at the end of this Privacy Policy (the Policy).

 

Objective

Intervacc values its customers' personal privacy. Intervacc's objective is to ensure that customers' personal data is processed correctly and securely. Intervacc processes personal data only for its intended purposes and takes the necessary and appropriate technical measures to protect personal data against unauthorized access, accidental loss, or disclosure. All processing of personal data is carried out in accordance with applicable data protection law and other legislation.

 

Our processing of personal data

We collect personal data in one of the following contexts:

• When you provide personal data to us yourself, for example to become a customer, visit us at trade fairs, or through digital channels such as the contact form on our website, email, or when you submit a referral or letter, or through direct contact with our operations.
• When you report a possible adverse reaction or make a complaint.
• When you provide your information to one of our clients, such as a veterinarian, animal clinic, or stud farm.
• When you voluntarily respond to surveys.

The personal data and related information collected can be categorized as follows:

• Customer information
Information required to become a customer of ours, such as name, company/organization, address, telephone number, and email address.
• Assignment information
Information required to carry out an assignment, such as the animal owner's name and the animals' names and ID numbers.
• Billing information
Information required to generate an invoice, such as the invoice recipient's name, address, telephone number, and, if applicable, personal identity number.
• Recruitment information
Information required to process your application documents in connection with recruitment for advertised positions.
• Service information
Information required to correspond on specific matters, such as orders for printed materials and sampling equipment, any complaints, responses to
customer surveys, and feedback about our products and services. Where applicable, information provided in connection with surveys and any prize draws.

 

Other information that may be recorded

When you visit our website, your IP address is automatically recorded and used to measure traffic patterns and generate statistics for the website. The IP address is not stored at an individual level.

Information regarding your computer and software, such as a unique ID, your IP address, your operating system, the type of browser you use, connection speed, and internet service provider.

We may also use cookies and similar technology to collect information about how you use our services. You can read more about this in the cookies section.

 

Our purposes

We process your personal data for the following purposes:

A) For the purposes of our contractual relationship:

• To provide our products or services to you, including fulfilling your requests, giving you a better experience of our products and services, and managing our contractual relationship with you.
• To process payments for your purchased services or products and send you order and billing information.
• To administer your orders and purchases.
• To communicate with you regarding your order or orders of our products or services.
• To notify you of changes to our products or services.
• To conduct service and user surveys that help us give you a better experience of what we offer.
• To send you offers, news, information, products, or services that you have requested from us.

B) For our legitimate purposes:

• To conduct analyses at an aggregated level in order to improve our products and services.
• To share your information with other companies within the Intervacc Group when required for administrative purposes or to provide our products or services to you.
• To use IP addresses, device identifiers, or other necessary information to block improper use of our services, in order to protect our services or otherwise enforce and apply our general terms and conditions.
• To improve our services, identify breaches, and protect your data through the use of log files.
• To provide information in connection with mergers and acquisitions as part of the business and strategic management of our operations.
• To send you product offers, news, information, and products or services that we believe may be of interest to you, including tailoring advertising to reflect your likely interests.
• For analysis and statistical purposes in order to improve our offerings.
• To establish, exercise, or defend legal claims.

C) For marketing purposes:
To send you direct marketing by email or SMS, which may also include offers, news, or information regarding our products or services, if you have consented to this. Please note that you can unsubscribe from such communications at any time by clicking the "Unsubscribe" link included in any such messages.

D) We may also process your personal data if necessary to comply with a legal obligation or a decision by a public authority.

 

Recipients of transferred personal data

We may disclose your personal data to other companies within the Intervacc Group if required for administrative purposes or to enable us to provide our products or services to you. With your consent, we may also disclose your personal data to companies within the Intervacc Group for marketing purposes. Companies within the Intervacc Group that gain access to your personal data follow procedures consistent with this policy.

Personal data may be transferred to companies within the Intervacc Group.

Personal data may also be shared with subcontractors engaged by Intervacc to provide a service, such as deliveries, collection of samples, or sending invitations.

Personal data may be shared with authorities that Intervacc is legally obligated to share information with, in accordance with law or a decision by a public authority.

Third parties for security purposes or other legitimate purposes

We may also disclose personal data to third parties if we have reasonable grounds to believe this is necessary:

● to comply with valid legal obligations, such as responding to subpoenas, complying with court orders, or complying with search warrants, and otherwise as permitted by law,
● to protect our rights or assets, or the safety of our customers or employees,
● to prevent abuse or fraudulent, harmful, unauthorized, or illegal use of or subscription to our Services, and to protect our network, Services, devices, and users from such use,
● to assert or defend ourselves against complaints or legal claims in court, administrative, or other proceedings,
● to determine credit risk, for reporting purposes, and to obtain payment for our Services,
● as part of mergers and acquisitions, provided that the potential buyer or seller undertakes to respect your personal data in a manner consistent with our privacy policy,
● to external auditors and supervisory authorities.

Third-party providers
We may engage third-party providers to perform services on our behalf, such as providing infrastructure and IT services (for example, data storage), handling credit and debit card payments, providing services to our customers, collecting credit assessments, improving data, processing customer inquiries, and conducting other statistical analysis. Third-party providers have access to your personal data when performing these services, but are only entitled to process it on our behalf and in accordance with our instructions.

 

Geographic area of personal data processing

Personal data is processed within our market areas, which include the Nordic and Baltic regions.

 

What is the purpose of the processing, the legal basis, and the retention period?

We will only use your personal data for the purposes and on the legal grounds set out below. We will not use your personal data for purposes incompatible with those stated below. Furthermore, we will only use your personal data for the period of time specified in the right-hand column. After this period has expired, your data will be deleted.

 

What rights do I have as an individual?

Under applicable law, you have the following fundamental rights:

• Right of access: you can request access to your personal data at any time.
• Right to rectification: you have the right to have inaccurate personal data corrected and incomplete personal data completed.
• Right to erasure ("right to be forgotten"): under certain circumstances (including personal data processed on the basis of your consent), you have the right to request that we delete your personal data. Please note that this right is not absolute. For this reason, we will not always take action if you invoke this right.
• Right to object: to certain processing activities carried out by us regarding your personal data, such as processing based on our legitimate interest. The right to object also applies to the processing of your personal data for direct marketing purposes.
• Right to restriction of processing: under certain circumstances, you have the right to request that we restrict our processing of your personal data. Please note that this right
is not absolute. For this reason, we will not always take action if you invoke this right. • Right to data portability: you have the right to receive your personal data (or have your personal data transferred directly to another controller) in a structured, commonly used, and machine-readable format.

 

Cookies

We use cookies on our websites. A cookie is a small text file that is placed on your computer, mobile phone, or other device when you visit a website. The cookie helps the website owner recognize your device the next time you visit the website. Cookies may contain personal data.

Most browsers accept cookies automatically, but you can change the settings for this. If you do not want your personal data to be stored through cookies, you can configure your browser to notify you every time a cookie is placed. This way, you can always decide whether to accept cookies or not. If you do not consent to the use of cookies at all, you can set your browser to automatically reject all cookies from being stored. Please note, however, that the use of cookies may be necessary to provide certain functions, and if you choose to reject cookies, it may reduce the functionality of the website.

Your browser should contain detailed instructions on how to control the acceptance of cookies.

We use two types of cookies. The first type saves a file on the user's computer for a long period of time. It is used, for example, for functions that tell the user what is new since their last visit to the page. The second type of cookie is called a session cookie and is temporarily stored in the user's computer memory during the time the user visits the page. Session cookies are deleted when the browser is closed, or shortly thereafter.

Our websites also use cookies generated by third-party products and services used on the site, primarily including the following tools and products.

Google Analytics:
Intervacc uses Google Analytics as a statistics tool for websites. This feature saves cookies on your computer. Data collected through Google Analytics is used to better understand our visitors and how they use the website.

Google Analytics cookies, domain: google-analytics.com

Use this link if you want to learn more about cookies from Google: http://www.google.com/intl/en/policies/technologies/types/

YouTube:
The website displays videos from Intervacc's YouTube channel. The videos are displayed using YouTube's video player, and cookies are used when videos are played.

YouTube cookies, domain: youtube.com

Use this link if you want to learn more about cookies from YouTube (Google): www.google.com/intl/en/policies/technologies/types/

 

Data security

To protect your personal data, we have implemented a number of technical and organizational measures. For example, all our systems have a high level of technical security protection (including traceability, disaster recovery capabilities, access restrictions, etc.).

 

Personal data concerning minors

Our websites are not directed at data subjects under the age of eighteen (18), and we encourage such individuals not to provide personal data to us through our websites. If we discover that personal data has been collected from a data subject under the age of 18 on or through our websites, we will take appropriate measures to delete the information in question.

 

How to exercise your rights as a data subject

If you would like to exercise your rights as a data subject, we would like to inform you that these rights are not absolute, and a request to exercise a particular right will therefore not always result in the requested action being taken. You have the right to receive, free of charge, information about what personal data we process about you (a so-called register extract). To ensure that we do not disclose personal data or otherwise fulfill your rights to someone else, a request to exercise a right must be made in writing and signed by you. The request must also be accompanied by a copy of a valid ID document signed by you.

When submitting your request to exercise your rights, you should specifically state which information you are interested in, e.g. assignment information, service information, or similar. This allows us to provide you with the information that is most relevant to you.

If you submit multiple requests for an extract of the register, we may charge a fee. The extract of the register will be sent to you within 30 days of our receipt of the request. If the extract is extensive and we need more time, or if for any reason we are unable to fulfill your request, we will inform you of this.

To request an extract of the register, you need to send us a letter stating which information you are interested in, your name and personal identity number, your address, and a copy of a valid ID document signed by you. We will send the requested extract of the register to your registered address. Please send your request to us using the contact details below.

We would be grateful if you would let us know if there is anything you are not satisfied with regarding our processing of personal data.

 

Our contact details

Intervacc AB
Data Protection Manager (DPM)
Box 112, 129 22 Hägersten, Sweden
Phone +46-(0)8-120 10 600
Email address: dpm@intervacc.com

If you have any comments regarding our processing of personal data, for example if you feel that we are not fulfilling your rights as a data subject, you have the right to contact the relevant supervisory authority.

You can get in touch with the relevant supervisory authority using the following contact details:

Sweden
Integritetsskyddsmyndigheten (The Swedish Authority for Privacy Protection)
Box 8114, 104 20 Stockholm
www.imy.se
imy@imy.se

Finland
Office of the Data Protection Ombudsman
PL 800, 00521 Helsinki, Finland
www.tietosuoja.fi
tietosuoja@om.fi

Denmark
Datatilsynet (The Danish Data Protection Agency)
Borgergade 28, 5.
1300 Copenhagen K
www.datatilsynet.dk
dt@datatilsynet.dk

You may also, within the scope of applicable law, contact the supervisory authority in another EU country where you have your permanent residence, your workplace, or the location where the alleged infringement occurred.

 

Amendment of the policy

Intervacc may make changes to this policy from time to time. The latest version of the policy is available at our office, at www.intervacc.com, or by calling 08-120 10 600.

This version of the Privacy Policy was last updated in September 2020.