Privacy and Cookie Policy
About the policy
This privacy policy describes what data we collect and may use that we obtain from our website as well as information sent to us via email, telephone, or other ways of communication, both online and offline as well as our service and sets the transparent information that the data we receive is processed.
Aeterna is regarded as data controller in the cases where you provide us your personal data and when we retrieve personal data within the scope of our service.
The Service
Aeterna is trying to make a change in the advertising industry for companies to be able to use less personal and intrusive data. Our service is referred to as contextual advertising, where we do not use any personal data, sensitive data or special categories data to track customers. In case we work with third parties we might receive personal data.
Our Site and Service are not directed at children under 13 years of age (or older age under applicable laws that specifically address the collection of personal data from children differently from adults), and we do not knowingly collect or use any personal data from Children. No information should be submitted to this Site by children, and children are not allowed to register with our Site or Service.
Cookies and tracking
This website does not use any tracking cookies. The only cookie we use is to make sure the contact form cannot be exploited in cross-site-attacks.
The personal data you provide to us
Since we do not use any tracking technology on our websites, we obtain no personal data from you this way. We only collect the information you provide us, such as name, telephone number and email address. We also process personal data our partners provide us. In these cases we act as data processors. See below in which cases we process personal data.
When you contact us
We receive your personal data and potentially other parties when you provide us with contact details via our website, by filling out a form or if you contact us via email, mail or telephone. This means that we process the following information:
- Name
- E-mail address
- Any other information that you may provide us
When you apply to work with us
We also collect Personal data that employees provide us and applicants personal data. This means that we will process the following data:
- Name
- E-mail address
- Address
- Telephone number
- Social security number
We process this data for the purpose of administrating the employee and communicating with the employee. The personal data is stored for as long as the person is an employee at Aeterna. Personal data collected in connection with job applications is generally stored for 24 months. Exceptions are made for personal data collected in spontaneous applications, as such data is stored for a maximum of 12 months.
When you apply to work with us, we process your personal data for our legitimate interest in administrating your application. This means that after careful consideration, we have assessed that our interest in processing your application outweighs your interest of protection of your personal data. In case you are an employee, we process the data in accordance with the employment agreement you have entered with us.
When we enter into agreements with contractors or partners
We process personal data that our contractors, or agents of our customers provide to us when they register for access to use our Service or to work with us in other ways. We also use the information to uphold business retaliations and support activities. This means that we process the following data:
- Name
- E-mail address
- Telephone number
- Social security number in some cases
We process this personal data in order to carry out our obligations under the agreement with the contractor/partner. We store the data during the agreement period.
When you register for our newsletters
If you sign up for our newsletter, we will process the personal data that is necessary to be able to send it to you. This means that we will process the following data:
- Name
- E-mail address
When you register for our newsletter, we will process your personal data by sending out newsletters and/or marketing emails. Your information is processed based on the fact that you have previously given consent to the processing. We only use the information provided to give information about the service or the company.
You may revoke your consent at any given time by clicking the link in the newsletter to opt-out from receiving our newsletters. We will then stop processing your data for this purpose.
Retrieving information from websites
As a part of carrying out our service of contextual advertising, we might process information from websites. This information may include personal data. When we analyse this information within the scope of our service, we potentially thereby process personal data. This means that we may process the following personal data:
- Names of the persons occurring in texts on websites.
When we process this personal data in order to fulfill the service agreement that we have entered with our partners, we support the processing on the agreement. In some cases, we support the processing on our legitimate interest.
We store the data for as long as ongoing service agreement states with the partners from which we retrieved the data. Data processed based on legitimate interest is deleted instantly or when the texts are deleted on the websites they were retrieved from, in cases data is stored, it´s stored no longer than 24 months.
Security and data
We will keep your information secure by taking appropriate technical and organisational measures against its unauthorised or unlawful processing and against its accidental loss, destruction or damage. We will do our best to protect your personal data but we cannot guarantee the security of your information which is transmitted to our website or services or to other website, applications and services via an internet or similar connection.
Location of data storage
We store our data on our own servers (on-premises) or other servers located within the EU/EES. Data servers located within the EU/EES but owned by an American company may be subject to American law, meaning that American authorities may access personal data stored by Aeterna if necessary. In case data is transferred to the USA the EU Commissions standard contractual clauses will apply to the transfer together with appropriate organizational and technical safeguards.
Your Rights
In case we process your personal data, you have certain rights towards us in accordance with the GDPR.
Right to access
You have the right to obtain confirmation as to whether or not your personal data is being processed. Furthermore, you have the right to receive a copy of the personal data that we process about you.
A request for an extract from the register must be made in writing to support@aeterna.eu. Once we receive a request for access, we may ask for additional information to ensure that the information is provided to the right person.
Correction of data
If your personal data is inaccurate, you can request to have the data rectified. You can also request the data to be completed if it is incomplete. Such request can be sent to support@aeterna.eu.
Right to be forgotten
In some cases, you can ask us to delete your personal data in whole or in part. This means that you can, for example, object to a balance of interest assessment we have made or claim that the information is no longer necessary to fulfil the purpose for which it was collected.
To the extent that it is necessary for us to continue the processing of your personal data, for example to fulfil our legal obligations, we are not obliged to delete the data. This means that certain data can be stored until we are no longer obliged to process them.
Right to restriction of processing
Under some circumstances, you can ask us to stop processing all or some of your personal data or to limit our use of it. A restriction can be made for several reasons.
- In case you dispute that the personal data we process is correct, you can request a limited processing during the time we control whether the personal data is correct.
- In case you demand that we delete your personal data but we cannot meet the request, you may request restriction of processing. This could be because we need the data we have about you in order to establish, assert or defend legal claims. In these cases, you can request limited processing of the data from us.
- In case you have objected to a balance of interest assessment that we have made as a legal basis for processing, you may request limited processing during the time we work to control whether our legitimate interests outweigh your interests in having the data deleted.
If the processing has been restricted as described above, we may only store your personal data and process it to establish, assert or defend legal claims or to protect someone else's rights or because you have given your consent.
Right to object
At any time, you have the right to object to our processing of your personal data based on a balance of interests as a legal basis. A continued processing of your personal data requires that we can show that we have a justified reason for the processing. If we cannot prove a justified reason, we may only process the data to establish, exercise or defend legal claims. You also have the right to object to direct marketing, including profiling.
Right to withdraw consent
For processing where your consent forms the legal basis, you have the right to withdraw your consent to our further processing as described in this Privacy Policy. However, if you withdraw your consent, we may no longer be able to provide you with the services you have requested. We may be required to continue to process or store your personal data to fulfil legal and regulatory obligations.
Data portability
Under some circumstances, you have the right to transfer the data to another controller. This however requires that the processing is based on consent or contract and that it has been carried out by automated means.
Right to refrain from marketing mailings
At any time, you have the right to refrain from receiving marketing mailings that we send to you via e-mail. To refrain from such mailings, you can either unsubscribe by following the link directly in the mailing or by writing to us at support@aeterna.eu.
Right to complain
You have the right to lodge a complaint with the Swedish Authority for Privacy Protection if you are not satisfied with how we process your personal data.
Integritetsskyddsmyndigheten
Box 8114
104 20 Stockholm
imy@imy.se
+46 (0)8 657 61 00
Amendments to this policy
Aeterna reserves the right to update, change or replace any part of this Privacy Policy at any time in order to keep it compliant with applicable laws such as the GDPR. The latest version can always be found on our website aeterna.eu.