About This Policy
The purpose of this Policy is:
- To make sure you know what personal data we collect about you, why we collect and process it, and who we share it with.
- To make clear how we use the personal data you have shared with us.
- To explain your rights and choices regarding the personal data collected and processed when you visit and use the website.
Definitions
- “PERSONAL DATA”: any information relating to an identified or identifiable natural person (data subject) who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- “APPLICABLE DATA PROTECTION LAW”: the General Data Protection Regulation (EU) 2016/679 and EU and national legislation on the protection of personal data and privacy in electronic communications, as in force from time to time.
Purpose of Processing / Lawfulness
How Personal Data Is Collected
Personal Data Collected and the Purpose of Processing
Data Recipients & Transfers to Third Countries
- (a) Nordoc AB and its authorized employees, who may process your personal data strictly under the same terms and conditions set out in this Policy, to which you consent by browsing and using the website. Your data is kept securely and is not disclosed to third parties for any reason.
- (b) External partners/third-party internet service providers who host, store, manage and maintain the website, its content and the data collected, and any other service providers (e.g. email services) used to communicate with you where you have given your explicit consent to such communication. Nordoc AB only uses third-party service providers who agree to use the personal data provided to them solely for the purpose for which it was provided, and who agree and guarantee that all processing they carry out will be lawful and compliant with applicable data protection law. Nordoc AB does not sell, distribute or rent your personal data to third parties unless you have given your explicit consent or it is required by law to disclose such data. More specifically, Nordoc AB may disclose your personal data to third parties when this is necessary for the establishment, exercise or defense of legal claims, whether in court proceedings or in response to a request from the competent authorities, in administrative or out-of-court proceedings, or to prevent or stop an attack on its computer systems or networks or to protect its rights or property. The server and data center used by the website are located within the European Union and are therefore obliged to comply with applicable data protection law. Finally, the website may contain links to third-party websites. Nordoc AB does not control and is not responsible for the privacy policies and data protection practices of such websites. When you go to those websites this Policy no longer applies, and we recommend that you read their privacy policies to learn how they collect and process your personal data.
Security
Retention Period of Personal Data
Use of Cookies
How to Access and Control Your Personal Data
If your personal data is incorrect, you have the right:
- To request its correction to the extent that it is inaccurate and/or incomplete (“right to rectification”).
- To request its deletion (“right to erasure”). Nordoc AB will delete your personal data without undue delay under the terms and conditions of applicable law. Nordoc AB can only delete the data if there is no legal obligation or other legitimate interest in keeping it. Of course, if the data of a website visitor / user is deleted, Nordoc AB will no longer be able to provide its services to that user where they require the use of that data.
- To request restriction of the processing of your personal data under the terms and conditions of applicable law and to be informed before the restriction is lifted.
- To receive your personal data in a structured, commonly used and machine-readable format, i.e. in electronic form, and to transmit it to another controller (“right to data portability”).
- To object at any time to the processing of your personal data on grounds relating to your particular situation (“right to object”).
- Not to be subject to a decision based solely on automated processing, including profiling, where that decision would produce legal effects concerning you or similarly significantly affect you.
- To withdraw your consent to the future use of your personal data, in whole or in part. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Finally, under applicable data protection law, you have the right to lodge a complaint with the Hellenic Data Protection Authority.