Effective: January 30, 2020
Data Protection Legislation means the applicable data protection legislation such as Regulation (EU) 2016/679 (General Data Protection Regulation; the “GDPR”) and national legislation implementing the GDPR.
Personal Data means any information that, directly or indirectly, can identify a living natural person.
Recipient means a natural or legal person, public authority or another body, to whom Personal Data may be disclosed by SAM Nordic. Examples of Recipients are found under section “When and to whom do we disclose your information?”.
Regulatory Legislation means the applicable rules and legislation, for example in regard to taxes and bookkeeping.
Services mean any of SAM Nordic’s services such as web shop and tools for chat and conversation.
Personal Data – what do we process and for which purposes?
Most of our services do not require any form of registration, allowing you to visit our site without telling us who you are. However, some services may require you to voluntarily provide us with Personal Data, which may include information such as your name, email address or telephone number. We may collect and use this Personal Data to provide you with products, services, and customer support, or to communicate with you for other purposes which are evident from the circumstances or about which we inform you when we collect your Personal Data.
Personal data used for providing services from the web shop
The web shop is intended for use only by knowledgeable and experienced professionals working in the healthcare and medical industry. Only customers verified by SAM Nordic and provided with an account can access our web shop.
To be able to provide products and services offered in the web shop and within the scope of the contractual relationship with the corporate customer, SAM Nordic collects and processes Personal Data from corporate representatives such as name, e-mail, address and telephone number. The main purpose of SAM Nordic’s processing the Corporate representative’s Personal Data is for SAM Nordic’s legitimate interest. Examples of purposes for processing are to provide personalized offers, direct marketing or to perform other business communication.
Personal Data used for website usage analytics
Also, we may use your Personal Data:
In order for SAM Nordic to be able to comply with its legal obligations, SAM Nordic processes Personal Data in accordance with regulatory legislation and data protection legislation.
- SAM Nordic may also process your personal data when we believe in good faith that the use of Personal Data is necessary to protect
- legal rights, the security or integrity of this website;
- to protect your safety or the safety of others; or,
- as part of any criminal or other legal investigation or proceeding in your country or in other countries.
Such processing activities are based on SAM Nordic’s legitimate interest.
When and to whom do we disclose your information?
SAM Nordic will not disclose more personal data than necessary for the purpose of the disclosure and only in accordance with Regulatory Legislation and Data Protection Legislation.
Geographical area of processing
As a general rule, personal data is processed within the EU/EEA but is in some cases transferred to and processed in countries outside EU/EEA. The transfer and Processing of Personal Data outside of the EU/EEA can take place provided there is a legal basis and appropriate safeguards are in place. Appropriate safeguards, such as:
- An agreement including the EU Standard Contractual Clauses or other approved clauses, code of conducts, certifications approved in accordance with GDPR.
- The country outside of the EU/EEA where Recipient is located has adequate level of data protection as decided by the EU Commission.
- The Recipient is certified under the Privacy Shield (applies to Recipients located in the United States).
Upon request, the Client can receive further details on Personal Data transfers to countries outside of the EU/EEA.
How do we protect your Personal Data?
SAM Nordic ensures, within the framework of Data Protection Legislation, the confidentiality of Personal Data and has implemented appropriate technical and organizational measures to safeguard Personal Data from unauthorized access, unlawful disclosure, accidental loss, modification, destruction or any other unlawful Processing.
Our website is directed at an adult audience (such as healthcare professionals, partners and individuals seeking information about SAM Nordic and healthcare products). We do not knowingly collect information from or about children. Please do not use this website if you are under 18.
How long do we store Personal Data?
We will only retain your Personal Data for as long as necessary to fulfil the purpose for which they were collected or to comply with legal or regulatory requirements.
What are your rights and how can you exercise them?
Whenever we process Personal Data, we take reasonable steps to keep your Personal Data accurate and up-to-date for the purposes for which they were collected. We will provide you with the ability to exercise the following rights under the conditions and within the limits set forth in the law.
If you wish to contact us regarding the use of your Personal Data or you want to object in whole or in part to the processing of your Personal Data, please contact us. If you have provided consent, you may withdraw consent. You may also request, subject to confidentiality obligations, to:
- access your Personal Data as processed by us;
- ask for correction or erasure of your Personal Data; and
- request portability, where applicable, of your Personal data, i.e. that the Personal Data you have provided to us, are returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format.
Privacy at SAM Nordic
The responsible use of personal data is a core value at SAM Nordic. SAM Nordic fully respects privacy laws and is subject to an internal framework of privacy rules and policies.
Last update: June 10th, 2020
If you wish to contact us to exercise your GDPR data privacy rights, you can email to firstname.lastname@example.org