At GLX Analytix ApS (“GLX Analytix”, “we”, “us” or “our”) we give high priority to confidentiality and data security. This privacy policy applies to our processing of personal data and establishes guidelines for the way GLX Analytix processes your personal data and provides you with the information that you are entitled to receive under applicable data protection laws. You should read the privacy policy before you hand over your personal data to GLX Analytix.
- HCP’s researchers, scientists, business, operations consultants and related contact details, etc.
Types of personal data and purposes of the processing
In order to communicate with you on subjects which we believe that may have your interest, we may process the following personal information: name, title, organisation that you work for, professional e-mail, postal address, telephone number, educational and professional details, qualifications and publications. We will also process information contained in the communication we have had with you as well as the seminars, training and other events you have participated in on our invitation.
- Also, we may some information directly from you when we meet in person at conferences or other events, when you interact with us at our website, or when we communicate with each other.
- We may also collect data from publicly available sources such as websites, publications, media coverage, or from third party providers, e.g., reference databases.
Legal basis
The legal basis for our processing of your personal data for the above purposes is our legitimate interest to provide information to the scientific research and health care sector of our products and services and generally to increase awareness of allergy and related diseases cf. The General Data Protection Regulation Article 6(1)(f).
When you register for and participate in seminars, webinars or training events etc. we process your personal data to perform and administer the contract to which you are a party or in order to take steps at your request prior to entering into a contract. The legal basis for our processing of your personal information is the General Data Protection Regulation Article 6(1)(b).
Where we are legally required to keep records of our communication and training and events you have participated in on our invitation, the legal basis for our processing is the General Data Protection Regulation Article 6(1)(c) cf. the Danish Ministerial order on Marketing of Medicines.
We may be legally required to send you pharmacovigilance communication related to products. The legal basis for our processing of your personal information for such purposes is the General Data Protection Regulation Article 6(1)(c) cf. the Danish Medicines Act.
Retention period
Your personal data will be deleted when we no longer have a legitimate purpose to process your data.
Generally, this will happen in accordance with the below time frames:
- When we become aware that you are no longer working as a professional in industries related to our products and services and operations.
- If you, on grounds relating to your particular situation, object to our processing based on our legitimate interest, unless we can demonstrate overriding compelling legitimate grounds for continued processing.
- If you withdraw your consent.
- If we are processing your information on basis of your consent, if you are withdrawing your consent and where there is no other legal ground for the processing. GLX Analytix is legally obligated by the EFPIA to retain your data. If you withdraw your consent, we will delete all unnecessary personal data, such as name, phone number, and email, but we will retain the information required to fulfil our obligation under the EFPIA.
Data may be retained for a longer period if we are legally obliged to do so, or if retention is necessary to establish, exercise or defend legal claims.
Our retention period is five years[BB2] , but data may be retained for a longer period. GLX Analytix is legally obligated by the EFPIA to retain your data. If you withdraw your consent, we will delete all unnecessary personal data, such as name, phone number, and email, but we will retain the information required to fulfil our obligation under the EFPIA. Furthermore, we may retain your data for a longer period if it is necessary to establish, exercise or defend legal claims.
2. If you apply for a job
Types of personal data and purposes of the processing
GLX Analytix may collect, process, and store the following personal data:
- Personal data which you have disclosed in your job application and CV as well as any attachments
- Personal data you disclose during any job interviews
- Information about you, including information regarding your previous jobs, activities, competencies, performance, as well as your general appearance, which is publicly available on the internet, including on social media
- References from your previous and/or current employers
Your personal data will be processed for the purpose of assessing whether we can offer you a position at GLX Analytix.
Legal basis
GLX Analytix will mainly process your personal data based on the following legal bases:
- Request to enter into an employment contract with us: We may process your personal data on the basis of your request to enter into an employment contract with GLX Analytix (Article 6 (1) (b) of the GDPR).
- Legitimate interests: We may process your personal data on the basis of our legitimate interests in carrying out further assessments of whether we want to hire you, including on the basis of publicly available information on the internet (Article 6 (1) (f) of the GDPR).
Retention period
If you are offered a position with GLX Analytix, your application and additional relevant personal data obtained during the recruitment procedure will be stored in your employee file.
If you are not offered a position, we will store your application and any additional personal data obtained during the recruitment procedure for a period of 6 months following our rejection, unless you have provided your consent to the storage hereof for a longer period.
3. Transmission to other controllers and entrustment to data processors
To achieve the above purposes, we may give third parties access to your personal data, which, based on a contractual relationship with GLX Analytix, provides relevant services, this could be IT suppliers or other suppliers that process personal data for us. Such suppliers will only process personal data in accordance with our instructions according to the signed data processing agreements.
In the context of GLX Analytix’s development, the corporate structure may change, e.g., by the total or partial sale of the company. In the case of a partial transfer of assets containing personal data, the processing basis for the related transfer of personal data is, as a rule, Article 6(1)(f) of the General Data Protection Regulation, since GLX Analytix has an interest in transferring parts of its assets and making commercial/structural changes.
In addition to what is described above, your personal data is generally not disclosed to a third party without your consent. However, in certain circumstances and under the law, it may be necessary to disclose your personal data to e.g. the police, lawyers, accountants, courts, other public authorities and potential buyers.
If your personal data are transferred to data processors or data controllers established in countries outside the EU/EEA that do not have an adequate level of protection, such a transfer will only take place once a transfer basis is secured. In addition, the transfer will be based on the EU Commission’s standard contracts and/or EU-US Data Privacy Framework.
4. Your Rights
- You have the right to access the personal data we process about you
- You have the right to object to our collection and further processing of your personal data
- You have the right to rectification and deletion of your personal data, however there are certain statutory exceptions, including the Bookkeeping Act
- You have the right to ask us to restrict the processing of your personal data
- In certain circumstances, you may also request to receive a copy of your personal data and to transmit the personal data you have provided to us to another data controller (data portability)
- You can withdraw any consents you may have given at any time. We will then delete your personal data unless we may continue the processing on another basis. You can cancel our newsletter by clicking on the link at the bottom of the newsletter
5. Questions and complaints
If you have any questions about this privacy policy or if you wish to complain about the way we process your personal data, please feel free to contact us/the data controller at:
GLX Analytix ApS
Address: Fruebjergvej 3, 2100 København Ø
CVR-no.: 39852284
E-mail: info@glxanalytix.com
If your complaint is not resolved by us and you want to proceed with the case, you can complain to the Danish Data Protection Agency:
The Danish Data Protection Agency
Carl Jacobsens Vej 35
2500 Valby
Phone number: 33 19 32 00
E-mail: dt@datatilsynet.dk