PRIVACY POLICY

Users of the website/cookies

Celltech Oy
Version 1.0, updated 23-May-18

1. Introduction

We, Celltech Oy (“Company”), use cookies on our website and thereby collect certain personal data regarding the persons who use our website. This information policy explains, among other things, which cookies we use, what they are used for, and which choices you can make with respect to our cookies. The privacy policy also describes your rights towards us and how you can enforce your rights regarding the processing of your personal data.

2. Who is the controller of personal data?

The Company is the controller of personal data for the processing of personal data collected from users of the Company’s website.

Set forth below is the Company’s contact information.

Celltech Oy, VAT FI09054355
Höyläämötie 11 A, 00380 Helsinki, Finland
Tel. +358 207 999 640

Should you have any questions about the Company’s processing of your personal data, please contact Niklas Heikkilä at gdpr@remove-this.celltech.fi.

3. What is a cookie?

A cookie is a small text-based file which is placed on your computer, mobile telephone or similar unit containing information about your navigation on the website. There are temporary cookies and persistent cookies. Temporary cookies (also referred to as session cookies) are saved in your unit until you close the web browser. A persistent cookie has an expiration date and, once this date has expired, is deleted when you return to the website which created it.

Cookies may be “first-party cookies” or “third-party cookies”. First-party cookies are cookies which are placed on the website by the Company. Third-party cookies are cookies which are placed on the website by a party other than the Company.

4. Which specific cookies are used on this website and for what purpose?

The table below contains a specification of the cookies we use on our website together with information about the purpose, which personal data is collected, duration, and who handles the cookie.

Cookie

Purpose

Has personal data been collected? If yes, which personal data?

Duration

Handling

__utma

This cookie lets us know if you've visited before, so we can count how many of our visitors are new to our website or to a certain page.

No

2 years

Google Analytics

__utmb

Registers a timestamp with the exact time of when the user accessed the website. Used by Google Analytics to calculate the duration of a website visit.

No

Session

Google Analytics

__utmc

Registers a timestamp with the exact time of when the user leaves the website. Used by Google Analytics to calculate the duration of a website visit.

No

Session

Google Analytics

__utmt

Used to throttle request rate

No

Session

Google Analytics

__utmz

This tells us how you reached our website (e.g. from another website or a search engine). This helps us measure which marketing channels are most efficient.

Yes, previous website

6 months

Google Analytics

IDE

Tracking cookie used by Google to improve your online experience, including the display of more relevant ads

Yes, IP address

390 days

DoubleClick

GPS

Registers a unique ID on mobile devices to enable tracking based on geographical GPS location

Yes, location

Session

YouTube

VISITOR_INFO1_LIVE

Tries to estimate the users' band­width on pages with integrated YouTube videos.

No

179 days

YouTube

YSC

Registers a unique ID to keep statistics of what videos from YouTube the user has seen. This cookie is set by the YouTube video service on pages with embedded YouTube videos.

Yes, if the user has watched the embedded YouTube videos on our website

Session

YouTube

5. What are the legal grounds for the company processing your personal data?

The Company processes your personal data as set forth above based upon consent from you, which you provide when you enter our website.

6. Can I say no to cookies?

If you do not wish to permit the storage of cookies on your unit, you can normally turn this off entirely or partially in the settings of your web browser. In certain web browsers, for example, you can choose to block all cookies, only accept first party cookies, or delete cookies when you close down your web browser. In your web browser’s settings, you can also delete cookies which have been stored previously.

Remember that if you choose to delete or block cookies, this may result in our website or our services not functioning.

7. Who might we share your personal data with?

The personal data collected via third-party cookies will also be disclosed to the third party which provides the cookie (see the table under section 4). The third parties uses the information to optimize the web content and ads the user sees.

The Company may also transfer your personal data to service providers that analyze the traffic on our web site. These recipients are only entitled to process your personal data on behalf of the Company while performing a service for the Company, for example delivering a product ordered by the Customer. The Company takes all reasonable legal, technical and organizational measures in order to ensure that your data is handled securely and with an adequate level of protection when transferring to, or sharing with, such selected third parties.

The Company may also release your personal data to public authorities where we are obligated to do so by law. In the event all or part of the Company’s operations are sold, the Company may transfer your personal data to a potential purchaser of the business.

8. Transfers of personal data outside of the EU/EEA?

Your personal data will be processed primarily within the EU/EEA, but may be transferred to USA. The Company is only using established and reliable third party suppliers of cookies like Google Analytics, YouTube and DoubleClick to protect your personal data.

9. Your rights

You have certain legal rights which you can enforce against the Company. Set forth below is a summary of these rights. For complete information regarding your rights, please see the General Data Protection Regulation, sections 3–5.

(a) Right to access to/extracts from registers. You are entitled to be informed as to whether the Company is processing personal data about you. If it is, you are entitled to information regarding, among other things, which personal data is being processed, the purposes of the processing, which external recipients have access to your personal data, and how long we save your personal data.

(b) Right to data portability. You have a right to a copy of the personal data which you have provided to the Company, in a structured, commonly used, and machine-readable format. You also have the right to require that the Company transfer this personal data to another controller of personal data. The right to data portability applies to personal data which is processed in an automated manner and which is based on your consent or on an agreement to which you are a party.

(c) Correction of erroneous data. You have a right to require that the Company correct erroneous or incomplete information about you.

(d) Deletion of certain data. You have a right to require the Company to delete your personal data under certain circumstances, for example where the personal data is no longer necessary for the purpose for which we collected it.

(e) Right to object to the Company’s processing of personal data. You have the right, under certain circumstances, to object to the Company’s processing of your personal data. The right to object applies, among other things, where the processing is based on a weighing of interests unless the Company can demonstrate (i) compelling legitimate reasons for the processing which outweigh your interests, rights, and freedoms; or (ii) where the processing takes place in order to establish, enforce, or defend against legal claims.

(f) Right to object to direct marketing. You have the right at any time to object to the Company processing your personal data for direct marketing purposes. If you object to such processing, the Company must discontinue all direct marketing to you without unnecessary delay.

(g) Right to restrict the processing of your personal data. You have the right to require the Company to restrict its processing of your personal data in certain circumstances. For example, if you have denied that your personal data is correct, you can request a restriction on the processing during a period which allows the Company to verify whether the personal data is correct.

(h) Complaints. If you have any complaints regarding the Company’s processing of your personal data, you are entitled to file such complaints with the Privacy Protection Authority.

If you would like to submit a request for a extract from the register, data portability, correction, deletion, objection or restriction, please contact the Company at gdpr@remove-this.celltech.fi.

10. Changes in the privacy policy

The Company reserves the right to make changes to this privacy policy. Where such changes are made, notice will be provided on our website.