Privacy

PRIVACY NOTICE

OÜ GEARBOX BIOSCIENCES

Last updated: 05.03.2024

This Privacy Notice describes how OÜ Gearbox Biosciences (“Gearbox Biosciences”, „we“ or „us“) process and safeguard personal data of data subjects who visit our website at www.gearbox.bio, purchase or engage with our offered products and/or services, supply us with products and/or services, and with whom we otherwise interact.

1. Controller of your personal data

The controller of your personal data is Gearbox Biosciences. Gearbox Biosciences is responsible for ensuring that your personal data is processed in accordance with this Privacy Notice and applicable data protection laws, in particular with the General Data Processing Regulation (EU) 2016/679 (“GDPR”).

The contact details of the data controller are as follows:

            OÜ Gearbox Biosciences
            Registry code: 16215205
            Legal address: Nooruse tn 1, 50411 Tartu, Estonia
            Email address: privacy@gearbox.bio
            Phone number: +372 56 480 900

2. Personal data we process and use

We usually collect personal data directly from data subjects or from our contractual and business partners when the respective representatives interact with us. The data we collect depends on the context of your relationship and interactions with us and the choices you make, the exact services or products you purchase (or offer to us), and applicable data protection law.

Depending on the nature of the legal relationship between us, we may process the following personal data of our contractual and business partners’ representatives and employees:

• General personal data and contact details: such as your first and last name, e-mail address and phone number;
• Data on the company associated with the data subject: such as name and details of the company, work position, title or work profile of the data subject;
• Data collected in the course of using and engaging with our website: such as your IP address, used devices, e-mail and other communications, any usage, navigation, analytics and log data associated with the use and engagement with our website. Please note that for such collection of data, we may also use cookies or similar technologies (“Cookies”), the use of which (including the purposes, legal bases for such use) is further described in Section 4 of this Privacy Notice;
• Data provided by you or our partners by interacting with us: such as data required for establishing and maintaining a contractual or business relationship, information about our correspondence, feedback data and other content collected via client inquiries and support requests, or any other information that you or our partners voluntarily provide to us.

3. Purposes and legal bases for the processing of personal data

We may process the personal data of our contractual and business partners’ representatives and employees for the following purposes and on the legal bases:

• Establishing relationships with business partners, including by way of contacting leads or target clients by marketing our products and services, conducting service and product demos, etc. For these purposes, the legal basis for the processing of your personal data is our legitimate interest in establishing and entering into contracts in the course of our ordinary business activities, including by carrying out direct marketing (Article 6(1)(f) of the GDPR). You may object to receiving any electronic marketing information on behalf of the company you represent every time such marketing is provided by us.
• Management of contractual and business relationships, providing our products and/or services to our clients. For these purposes, the legal basis for the processing of your personal data is our legitimate interest in maintaining contractual and business relationships, including by managing databases of our partners and providing our services to our clients (Article 6(1)(f) of the GDPR).
• Managing and responding to client inquiries and support request. For these purpose, the legal basis for the processing of your personal data is our legitimate interest in managing and responding to such communications which concern our services, products and website (Article 6(1)(f) of the GDPR).
• Establishing, exercising and defending any potential legal claims. Where necessary for taking action on such legal claims, and for compliance, regulatory and investigative purposes, which all may derive from legal relationships with our partners (or data subjects interacting with us), the legal basis for the processing of your personal data is our legitimate interest (Article 6(1)(f) of the GDPR).
• Complying with our legal obligations deriving from applicable law. For these purposes, the legal basis for the processing of your personal data is the respective legal provision obliging us to process the relevant data (in accordance with Article 6(1)(c) of the GDPR). Such legal obligations may derive, for example, from accounting and tax laws.
• Improving and developing our website, including for security purposes. For these purposes, the legal basis for the processing of your personal data is our legitimate interest in improving our understanding of our partners’ needs and preferences in order to constantly enhance the functioning of our website and services, including by conducting analytics, improve access to content that Gearbox Biosciences publishes and to ensure the technical availability and security of our website and services (Article 6(1)(f) of the GDPR).

4. Cookies

We may use Cookies on our websites. Cookies are small bits of information that are placed on your device. For instances, Cookies enable us to remember information about your activities and preferences on our website to make the use and navigation more efficient and user-friendly by providing you a more customised experience when you use our website. These Cookies are divided into essential and optional Cookies.

Essential Cookies are necessary to make our website work and function properly. As these Cookies are strictly necessary for the functioning of our website, and your consent is not required for their use according to applicable law and therefore they cannot be turned off. We use these Cookies based on our legitimate interest to keep our website functional.

Optional Cookies are placed on your device only if you give your consent for this. Optional cookies are not strictly necessary for the functioning of the website, but for instance, they enable us to analyse the performance and design of our website (e.g., they enable us to see which sections of our website are the most popular, how much time is spent by users on each section, etc.). For such analytics, we may use third party cookies such as (without limitation) Google Analytics. Optional cookies also enable us to record data about your actions on the browser (tracking Cookies). Such cookies may also be used for targeted marketing. We use such optional Cookies only if you give us your consent to place and use these Cookies.

Please note that the Cookies are divided into two categories with different storage times on your device. Temporary session cookies are set per each use session and stored on your device until you close your device or browser. Persistent cookies are stored on your device after you have finished browsing until they expire or are deleted.

If you want to remove or block optional Cookies described herein, you can update your browser settings. Please be aware that the rejecting of Cookies may affect your user experience on our website.

5. Disclosure and transfer of personal data

We put our best efforts to keep your personal data safe and always require a high level of security and confidentiality from our employees and partners. Access to your personal data is restricted to our employees and partners only to the extent necessary for the performance of their specified tasks.

We may share certain categories of your personal data:

• with our trusted services providers when they provide services to us or to you, on behalf of us and under our instructions, such as cloud-based service providers, legal service providers, accounting service providers, etc. We will control and shall remain responsible for the use of your personal data in such cases;
• with our partners, who provide us with tools for analytics (who may, in particular, process statistical browsing data);
• to public authorities if we are required to disclose personal data by applicable law or to comply with a lawful request of authorities;
• in relation to a merger, investment round, acquisition or sale of our business or its part(s);
• other third parties where it may be necessary to protect our property or rights, or defend against legal claims.

We may transfer your personal data outside of the European Economic Area in limited cases. In such a case, we use adequate safeguards to protect your personal data, such as the standard contractual clauses for transfers established by the European Commission. You can contact us to get more information about the transfers of your personal data by using the contact details in Section 1 of this Privacy Notice.

6. Retention of your personal data

We process your personal data only for as long as necessary for the fulfilment of the original purposes of personal data processing, which are described above, or as long as required to fulfil our legal obligations. We determine the appropriate retention period for personal data on the basis of the amount, nature, and sensitivity of the personal data being processed, the potential risk of harm from unauthorised use or disclosure of the personal data, whether we can achieve the purposes of the processing through other means, and on the basis of applicable legal requirements (such as applicable statutes of limitation).

When the retention of your personal data is no longer necessary to achieve the purposes of processing, your data will be permanently removed, unless you instruct us otherwise and we agree on the terms on longer storage of your data.

7. Your rights as a data subject

You may exercise your rights as the data subject to the extent permitted under applicable law, including the following rights:

• You may request access to your personal data;
• To the extent permitted under applicable law, you may request us to correct, update, change or erase your personal data. In some cases you may also have a right to object to processing of your personal data;
• If you request the erasure of your personal data, please note that certain personal data is strictly necessary in order to fulfil the purposes defined in this Privacy Notice and the processing of which may also be required by applicable law. If personal data is erased under your request, we will only retain such copies of the information as are necessary for us to protect our or third parties’ legitimate interests, comply with governmental orders, resolve disputes, troubleshoot problems, or enforce any agreement you have entered into with us. Therefore, such personal data may not be erased in full;
• You may withdraw your consent regarding the processing of your personal data, where the legal basis for processing is your consent. Please note that withdrawal of consent does not affect the lawfulness of the processing of personal data carried out on the basis of consent before withdrawal;
• You may use your right to data portability. In some cases we may limit or deny your request if we are required or permitted by applicable law to do so, e.g., if it is necessary for the purpose of our legitimate interest to protect our trade secrets or any other confidential information; and
• To the extent permitted under applicable law, you may request more information about our legitimate interest and why we think our legitimate interest overrides your rights and interests as a data subject. This applies where the legal basis for the processing of your personal data is our legitimate interest.

To exercise your rights or if you have any privacy-related questions, please contact us by using the contact details in Section 1 of this Privacy Notice. We will respond to your requests and to provide you with additional privacy-related information within the timeframes specified in applicable personal data protection law. Please note that we may ask you for additional information to adequately verify your identity before taking action on your request to exercise your rights as a data subject.

If you are not satisfied with our response or have a concern that your privacy rights have been infringed, you have the right to lodge a complaint with your local supervisory authority. List and contact details of European supervisory authorities can be found here.

8. Security measures

We use reasonable technical and organisational measures (including physical, electronic and administrative) to protect your personal data from loss, destruction, misuse and unauthorised access or disclosure. Please note that no method of transmission over the Internet, or method of electronic storage, is fully secure. While we use all reasonable efforts to protect your personal data from loss, destruction, unauthorised access, misuse, or disclosure, we cannot fully guarantee the security of your personal data.

9. Updates

From time to time, we may update this Privacy Notice in order to adapt it to any updates that might arise. In case of making any substantial update, we will notify you via the e-mail that you have, or the company on behalf of whom you interact with us, communicated us. This Privacy Notice was last updated as of the “Last updated” date indicated above.

Pivacy notice for job applicants

OÜ GEARBOX BIOSCIENCES

Last Updated: January 16, 2024

This privacy notice explains how OÜ Gearbox Biosciences (hereinafter also referred to as“Gearbox Biosciences” or “we”) processes your (“candidate” või “you”) personal data in the event that you apply for a job with us either on your own initiative, on the basis of our job advertisements or as a result of a targeted search conducted by us. The privacy notice will also apply, if necessary, when applying for internships.

1. Controller

The controller of your personal data within the meaning of the General Data Protection Regulation („GDPR“) of the European Union is Gearbox Biosciences. Gearbox Biosciences is obliged to ensure that your personal data is processed in accordance with the privacy notice and relevant legislation, in particular the GDPR and the Personal Data Protection Act.

The contact details of the controller are as follows:

OÜ Gearbox Biosciences
Reg. code: 16215205
Address: Nooruse tn 1, 50411 Tartu, Estonia
E-mail aadress: privacy@gearbox.bio
Phone number: +372 56 480 900

2. What personal data do we process

In particular, we process personal data that you yourself have provided to us during the application and recruitment process. To the extent permitted by applicable law, we may also collect your personal data to the extent justified by third parties, such as public databases, recruitment agencies or portals.

During the recruitment process, we may process, in particular, the following personal data:

• general personal data such as your first and last name, home address, e-mail address, telephone number, personal identification code and/or date of birth, gender, nationality;
• data included in the job application and curriculum vitae (CV), e.g. your level of education and the relevant educational institution(s), language skills, details of your previous jobs and experience (including previous employers, periods of employment, job descriptions and titles, training completed), information on the desired salary and other benefits, information on the existence or need for a visa and/or residence permit, if applicable;
• other data collected during the recruitment process, e.g. the status of the recruitment process, communication related to the recruitment process, information on recommendations and referees (including data on the recommender), information on the performance and results of aptitude tests and tasks, information on the outcome and reasons for the recruitment process.

We may additionally collect other personal data that you voluntarily provide to us during and after the recruitment process.

3. Purposes and legal bases for the processing of personal data

Depending on the specific processing operation during the recruitment process, we may process your personal data for the following purposes and legal bases:

• based on our legitimate interest as the legal basis for the processing of personal data (Article 6(1)(f) of the GDPR) for the following purposes:
  • to assess the application you have submitted and your suitability for the position offered, including checking the information you have provided, taking aptitude tests and tasks and contacting the referees you have indicated;
  • contacting you in connection with the application you have submitted and, more generally, in relation to the recruitment process; and
  • where necessary, for the establishment, prosecution and defence of legal claims.
• the taking of pre-contractual measures, including the negotiation of the establishment of the employment relationship and related activities (e.g. preparation of the employment contract). In this case, the legal basis for the processing of personal data is the adoption of measures prior to the conclusion of the contract (Article 6(1)(b) of the GDPR);
• if you have given your consent (Article 6(1)(a) of the GDPR), we will retain your data in order to contact you in the future, if possible, in connection with vacancies or job offers. You may withdraw your consent at any time by contacting us as set out in this privacy notice.

4. Transfer and disclosure of personal data

We make every effort to keep your personal data protected and require our employees and partners to be strictly secure and confidential. Only our employees and cooperation partners have access to your personal data if it is necessary for the performance of their specified tasks.

We may transfer your personal data to third parties in the following cases and ways:

• our partners, whom we use to better organize our activities (e.g. providers of accounting services or IT services). In such cases, we will ensure that all persons to whom we transfer your personal data process personal data strictly in accordance with our instructions, the legal basis for the processing of personal data in accordance with applicable law;
• public bodies, if the transfer of personal data is necessary to comply with their legal obligations or to prevent or investigate possible criminal offences; and
• other third parties, where this is necessary to protect their property and rights or to defend themselves against legal claims.

We generally do not transfer your personal data outside the European Economic Area. When we do so, we will take appropriate safeguards to ensure that such transfers comply with applicable law and are secure. In connection with the transfer of personal data to countries that do not provide an adequate level of data protection, we use appropriate safeguards when transferring personal data, for example, by using the European Commission’s standard data protection clauses in personal data transfer agreements. You can review the applicable safeguards by contacting us using the contact details set out in section 1.

5. Retention of personal data

We process your personal data during the recruitment process and retain your personal data for as long as necessary to achieve the specific purposes described in the Privacy Notice. If you are not selected for a vacancy, we will retain your data for up to 1 year from the end of the application process, in particular for the purpose of filing, processing and defending possible legal claims arising from the recruitment process. In some cases, personal data may be stored for a longer period of time if the retention of personal data is necessary to protect our legitimate interests or those of third parties, for example in the event of ongoing legal disputes. If you have given consent to the processing of personal data, we will retain your personal data for the purpose described in the consent until the consent is withdrawn.

If, as a result of applying, we enter into an employment contract with you, a separate privacy notice directed to employees will apply to further processing of personal data, including storage, which will be made available to you before entering into an employment contract.

If the retention of your personal data is no longer required by law or necessary to achieve the purpose for which it was stored, we will permanently delete or anonymize your personal data.

6. Your rights as a data subject

As a data subject, you have the following rights, in accordance with the applicable legislation on the protection of personal data and subject to any restrictions on the exercise of these rights arising from these laws:

• the right to receive information and access to personal data that is processed about you;
• the right to rectification if the personal data processed are inaccurate;
• the right to request the deletion of personal data, unless we can lawfully refuse to do so (i.e. if we have a legal basis for the continued processing of the data);
• the right to request restriction of the processing of personal data and to object to the processing of your personal data;
• the right to data portability if the legal basis for the processing is your consent or a contract concluded between us;
• the right to request, to the extent required by law, information about our legitimate interest and why we consider that our legitimate interest outweighs your rights and interests as a data subject. This applies if the legal basis for the processing of personal data is our legitimate interest; and
• the right to withdraw consent to the processing of personal data at any time if the processing of personal data is based on consent. Please note that the withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal.

In order to exercise your rights or if you have any questions, please contact us using the contact details provided in section 1 of this Privacy Notice. We encourage you to contact us even if you believe that we have processed your personal data in violation of applicable law. You also have the right to go to court or file a complaint with the Data Protection Inspectorate (e-mail: info@aki.ee; web: www.aki.ee).

7. Security

We use appropriate security measures (including physical, electronic and organizational) to protect your personal information from loss, destruction, misuse, and unauthorised access or disclosure. However, please note that while we strive to protect the security of personal data with appropriate measures, no system of security measures completely excludes all possible security risks.

8. Changes to the privacy notice

This Privacy Notice may change from time to time. If we make any substantive changes to this Privacy Notice, we will notify you via the email address you provided during the recruitment process, as well as make the updated notice available on our website. The privacy notice was last updated on the “Last Updated” date above.

Privaatsusteade tööle kandideerijale

OÜ GEARBOX BIOSCIENCES

Viimati uuendatud: 16. jaanuar 2024

Käesolev privaatsusteade selgitab, kuidas OÜ Gearbox Biosciences (edaspidi ka “Gearbox Biosciences” või “meie”) töötleb teie (“kandidaat” või “teie”) isikuandmeid juhul, kui te kandideerite meile tööle kas omal algatusel, meie töökuulutuste alusel või meie enda poolt läbiviidud sihtotsingu tulemusena Privaatsusteadet kohaldatakse vajadusel ka praktikakohtadele kandideerimisel.

1. Vastutav töötleja

Teie isikuandmete vastutav töötleja Euroopa Liidu isikuandmete kaitse üldmääruse („GDPR“) tähenduses on Gearbox Biosciences. Gearbox Biosciences on kohustatud tagama, et teie isikuandmeid töödeldakse kooskõlas privaatsusteate ja asjakohaste õigusaktidega, eelkõige GDPR-iga ja isikuandmete kaitse seadusega.

Vastutava töötleja kontaktandmed on järgmised:

OÜ Gearbox Biosciences
Registrikood: 16215205
Aadress: Nooruse tn 1, 50411 Tartu, Eesti
E-posti aadress: privacy@gearbox.bio
Telefoninumber: +372 56 480 900

2. Milliseid isikuandmeid me töötleme

Eelkõige töötleme me isikuandmeid, mille te olete ise meile edastanud kandideerimis- ja värbamisprotsessi käigus. Kohaldatava õigusega lubatud ulatuses võime me koguda teie isikuandmeid põhjendatud ulatuses ka kolmandatelt isikutelt, nt avalikest andmebaasidest, värbamisagentuuridelt või -portaalidest.

Värbamisprotsessi käigus võime töödelda eelkõige järgmisi isikuandmeid:

• üldised isikuandmed nagu teie ees- ja perekonnanimi, kodune aadress, e-posti aadress, telefoninumber, isikukood ja/või sünniaeg, sugu, kodakondsus;
• tööle kandideerimise avalduses ja elulookirjelduses (CV) sisalduvad andmed, nt teie haridustase ja vastav(ad) haridusasutus(ed), keeleoskus, üksikasjad teie eelmiste töökohtade ja kogemuse osas (sh eelmised tööandjad, töötamise perioodid, ametikirjeldused ja -nimetused, läbitud koolitused), teave soovitud palga ja muude hüvede osas, vajadusel teave viisa ja/või elamisloa olemasolu või vajaduse kohta;
• muud värbamisprotsessi käigus kogutud andmed, nt värbamisprotsessi staatus, värbamisprotsessiga seotud teabevahetus, teave soovituste ja soovitajate kohta (sh andmed soovituse andja kohta), teave sobivustestide ja -ülesannete täitmise ja tulemuste kohta, teave värbamisprotsessi tulemuse ja põhjuste kohta.

Me võime täiendavalt koguda ka muid isikuandmeid, mida te vabatahtlikult meile värbamisprotsessi käigus ja selle järgselt edastate.

3. Isikuandmete töötlemise eesmärgid ja õiguslikud alused

Sõltuvalt konkreetsest töötlemistoimingust värbamisprotsessi käigus võime teie isikuandmeid töödelda järgmistel eesmärkidel ja õiguslikel alustel:

• tuginedes meie õigustatud huvile kui isikuandmete töötlemise õiguslikule alusele (GDPR artikli 6 lõike 1 punkt f) järgmistel eesmärkidel:
  • teie poolt esitatud kandideerimisavalduse ja teie sobivuse hindamiseks pakutavale tööpositsioonile, sh teie poolt esitatud andmete kontrollimiseks, sobivustestide ning -ülesannete labiviimiseks ja teie poolt märgitud soovitajatega ühendust võtmiseks;
  • teiega ühendust võtmine seoses teie poolt esitatud avalduse ja üleüldiselt seoses värbamisprotsessiga; ja
  • vajadusel õiguslike nõuete esitamiseks, menetlemiseks ja kaitsmiseks.
• lepingu sõlmimisele eelnevate meetmete võtmiseks, sealhulgas töösuhte loomise läbirääkimiseks ja sellega seotud toiminguteks (nt töölepingu ettevalmistamiseks). Sellisel juhul on isikuandmete töötlemise õiguslik alus lepingu sõlmimisele eelnevate meetmete võtmine (GDPR artikli 6 lõike 1 punkt b);
• kui olete andnud selleks nõusoleku (GDPR artikli 6 lõike 1 punkt a), siis säilitame teie andmeid selleks, et tulevikus võimaluse korral võtta teiega ühendust seoses vabade ametikohtadega või tööpakkumiste tegemiseks. Te võite nõusoleku igal ajal tagasi võtta, võttes meiega ühendust vastavalt privaatsusteates sätestatule.

4. Isikuandmete edastamine ja avaldamine

Teeme kõik endast sõltuva, et hoida teie isikuandmed kaitstuna ja nõuame oma töötajatelt ning koostööpartneritelt ranget turvalisust ja konfidentsiaalsust. Teie isikuandmetele on ligipääs üksnes meie töötajatel ja koostööpartneritel, kui see on vajalik nende kindlaksmääratud ülesannete täitmiseks.

Me võime edastada teie isikuandmeid kolmandatele isikutele järgmistel juhtudel ja viisidel

• meie koostööpartneritele, keda kasutame oma tegevuse paremaks korraldamiseks (nt raamatupidamisteenuse või IT-teenuste osutajad). Sellistel juhtudel tagame, et kõik isikud, kellele me edastame teie isikuandmeid, töötlevad isikuandmeid rangelt vastavalt meie juhistele, isikuandmete töötlemise õigusliku alusega kooskõlas kohaldatavate õigusaktidega;
• avalik-õiguslikele asutustele, kui isikuandmete edastamine on vajalik, et täita oma seadusest tulenevaid kohustusi või ennetada või uurida võimalikke süütegusid; ja
• teistele kolmandatele isikutele, kui see on vajalik, et kaitsta oma vara ja õigusi või kaitsta end õiguslike nõuete vastu.

Me ei edasta üldjuhul teie isikuandmeid Euroopa Majanduspiirkonnast väljapoole. Kui me seda teeme, rakendame asjakohaseid kaitsemeetmeid tagamaks, et selline edastamine oleks kooskõlas kohaldatava õigusega ja turvaline. Seoses isikuandmete edastamisega riikidesse, mis ei paku andmekaitse piisavat taset, kasutame me isikuandmete edastamisel asjakohaseid kaitsemeetmeid, näiteks kasutades isikuandmete edastamise lepingutes Euroopa Komisjoni standardseid andmekaitseklausleid. Teil on võimalik kohaldatavate kaitsemeetmetega tutvuda, võttes meiega ühendust punktis 1 toodud kontaktandmetel.

5. Isikuandmete säilitamine

Me töötleme teie isikuandmeid värbamisprotsessi ajal ja säilitame isikuandmeid nii kaua, kui see on vajalik privaatsusteates kirjeldatud konkreetsete eesmärkide saavutamiseks. Kui te ei osutu valituks vabale tööpositsioonile, säilitame teie andmeid kuni 1 aasta kandideerimisprotsessi lõpust, eelkõige eesmärgiga esitada, menetleda ja kaitsta värbamisprotsessist tulenevaid võimalikke õiguslikke nõudeid. Mõnel juhul võib isikuandmeid säilitada pikema aja jooksul, kui isikuandmete säilitamine on vajalik meie või kolmandate isikute õigustatud huvide kaitsmiseks, näiteks käimasolevate õigusvaidluste korral. Kui olete andnud isikuandmete töötlemiseks nõusoleku, siis säilitame teie isikuandmeid nõusolekus kirjeldatud eesmärgil kuni nõusoleku tagasivõtmiseni.

Juhul, kui kandideerimise tulemusena sõlmime teiega töölepingu, kohaldub edasisele isikuandmete töötlemisele, sh säilitamisele, töötajatele suunatud eraldiseisev privaatsusteade, mis tehakse teile kättesaadavaks enne töölepingu sõlmimist.

Kui teie isikuandmete säilitamine ei ole enam õigusaktide alusel nõutud ega nende säilitamise eesmärgi saavutamiseks vajalik, kustutame me teie isikuandmed jäädavalt või muudame need anonüümseks.

6. Teie kui andmesubjekti õigused

Teil kui andmesubjektil on järgmised õigused, vastavalt kohalduvatele isikuandmete kaitset puudutavatele õigusaktidele ja arvestades nendest õigusaktidest tulenevaid piiranguid nende õiguste teostamisel:

• õigus saada teavet ja juurdepääsu isikuandmetele, mida teie kohta töödeldakse;
• õigus isikuandmete parandamisele juhul, kui töödeldavad isikuandmed on ebaõiged;
• õigus nõuda isikuandmete kustutamist, v.a. juhul, kui me võime sellest õiguspäraselt keelduda (st juhul, kui meil on andmete jätkuvaks töötlemiseks õiguslik alus);
• õigus nõuda isikuandmete töötlemise piiramist ja esitada vastuväiteid oma isikuandmete töötlemisele;
• õigus isikuandmete ülekandmisele, kui töötlemise õiguslik alus on teie nõusolek või meie vahel sõlmitud leping;
• õigus taotleda õigusaktidega ettenähtud ulatuses teavet meie õigustatud huvi kohta ja selle kohta, miks me leiame, et meie õigustatud huvi kaalub üles teie kui andmesubjekti õigused ning huvid. See kohaldub juhul, kui isikuandmete töötlemise õiguslik alus on meie õigustatud huvi; ja
• õigus isikuandmete töötlemiseks antud nõusolek igal ajal tagasi võtta, kui isikuandmete töötlemine põhineb nõusolekul. Palume arvestada, et nõusoleku tagasivõtmine ei mõjuta enne tagasivõtmist nõusoleku alusel toimunud isikuandmete töötlemise seaduslikkust.

Oma õiguste kasutamiseks või küsimuste korral võtke palun meiega ühendust käesoleva privaatsusteate punktis 1 toodud kontaktandmetel. Julgustame teid meiega ühendust võtma ka juhul, kui leiate, et oleme teie isikuandmeid töödelnud vastuolus kohaldatava õigusega. Samuti on teil õigus pöörduda kohtu poole või esitada kaebus Andmekaitse Inspektsioonile (e-post: info@aki.ee; veeb: www.aki.ee).

7. Turvalisus

Me kasutame asjakohaseid turvameetmeid (sealhulgas füüsilisi, elektroonilisi ja organisatsioonilisi) teie isikuandmete kaitsmiseks kaotsimineku, hävimise, väärkasutamise ning loata juurdepääsu või avaldamise eest. Palume siiski arvestada, et kuigi me püüame isikuandmete turvalisust asjakohaste meetmetega kaitsta, ei välista ükski turvameetmete süsteem täielikult kõiki võimalikke turvariske.

8. Privaatsusteate muutmine

Käesolev privaatsusteade võib aeg-ajalt muutuda. Kui me teeme privaatsusteates sisulisi muudatusi, teavitame me teid sellest teie poolt värbamisprotsessis edastatud e-posti aadressi kaudu, samuti teeme uuendatud teate kättesaadavaks oma veebilehel. Viimati uuendati privaatsusteadet eespool märgitud „Viimati uuendatud“ kuupäeval.

Privacy notice for employees

OÜ GEARBOX BIOSCIENCES

Last Updated: February 19, 2024

This privacy notice explains how OÜ Gearbox Biosciences (hereinafter also referred to as “Gearbox Biosciences” or “we”) processes the personal data of its employees, agents, contractors and trainees (“employee” or “you”) in connection with the employment or service relationship between the employee and Gearbox Biosciences.

1. Controller

The controller of your personal data within the meaning of the General Data Protection Regulation („GDPR“) of the European Union is Gearbox Biosciences. Gearbox Biosciences is obliged to ensure that your personal data is processed in accordance with the privacy notice and relevant legislation, in particular the GDPR and the Personal Data Protection Act.

The contact details of the controller are as follows:

OÜ Gearbox Biosciences
Reg. code: 16215205
Address: Nooruse tn 1, 50411 Tartu, Eesti
E-mail address: privacy@gearbox.bio
Phone number: +372 56 480 900

2. What personal data do we process?

As your employer, we may process your personal data in different ways during your employment relationship. We also process personal data that we have received from you during the recruitment process, during the conclusion of an employment contract and during the employment relationship, as well as personal data that we have received from third parties, e.g. public databases, authorities or occupational health service providers (to the extent permitted by relevant legislation).

In particular, we process the following personal data within the framework of an employment relationship:

• general personal data, e.g. your first and last name, home address, e-mail address, telephone number, personal identification code and/or date of birth, gender, nationality;
• details of your employment relationship and qualifications, e.g. your job description and title, level of education, relevant educational institution(s) and ongoing studies, language skills, information on whether the Gearbox Biosciences job is your main job, information on the tasks/projects assigned to you and completed by you, work experience at Gearbox Biosciences (including start and end dates of employment), completed and ongoing training (including training certificates/certificates), and data on aptitude tests, if any, as well as information on existing competitive constraints;
• details of your professional development, e.g. developmental interview materials, disciplinary documents, assessments and related documents, warnings, probationary documents;
• details of your previous jobs, e.g. previous employers, periods of employment, job descriptions and titles, training completed;
• data relating to salary and other benefits, and to employee stock options, e.g. amount of salary and related benefits, bank account details, taxes paid, information relating to employee stock options (existence of stock options and related conditions);
• data relating to vacations, working hours, and absences, e.g. working time, working hours and absences, annual leave, types of leave;
• administrative data related to the employment relationship, e.g. information about the IT equipment provided to you and the access cards issued, information about Gearbox Biosciences user accounts and their use (e.g. usage logs), data on business trips and business trips (purpose, location, time, accommodation, costs, etc.), if necessary, information on the work visa or residence permit, information on termination of the employment relationship and the reasons for it;
• to a limited extent, health data, including data on the payment of temporary incapacity for work and incapacity benefit, data on the provision of occupational health services and decisions of the occupational health doctor, information and documentation related to accidents at work and occupational diseases, the presence of health contraindications in connection with a specific work position;
• information collected during employment on an ongoing basis, such as data processed in email systems and other means of communication (e.g. Slack), including usage data and the content of communications via email and other internal communication channels. The aforementioned data may include your interactions with customers, suppliers and other third parties;
• emergency contacts, including the name and contact details of the contact person;
• your images, voice and other images, e.g. when you are photographed or filmed (or the corresponding captures are used) for employment purposes, at Gearbox Biosciences events, or if you have separately agreed to participate in our marketing projects;
• other data, such as your feedback and other information provided to Gearbox Biosciences (including during the recruitment process), if you voluntarily choose to provide such data to us during the employment relationship.

As noted above, we may process special categories of personal data about you, such as personal data related to your health. We will only do this if statutory and contractual rights and obligations applicable to us as an employer so require and if permitted by applicable law.

3. Purposes and legal bases for the processing of personal data

Depending on the specific processing operation, we may process your personal data for the following purposes and legal bases:

• performance of obligations arising from the contract concluded with you, e.g. to ensure and facilitate the performance of duties, to determine and pay remuneration and other benefits in connection with the employment relationship. In this case, the legal basis for the processing of personal data is the performance of our obligations as an employer arising from the contract concluded with you (Article 6(1)(b) of the GDPR);
• performance of legal obligations arising from legislation, e.g. fulfilling obligations arising from tax laws, the Occupational Health and Safety Act, the Accounting Act, etc. In this case, the legal basis for the processing of personal data is compliance with a legal obligation that applies to us (Article 6(1)(c) of the GDPR in conjunction with the relevant provisions of other applicable legislation);
• protecting your vital interests (Article 6(1)(d) of the GDPR), in particular contacting your designated contact person in the event of an emergency;
• our legitimate interest (Article 6(1)(f) of the GDPR), in particular ensuring and protecting our (business) interests, e.g.:
  • ensuring the safety of our buildings, assets and the functioning of our systems, preventing misuse and malicious activities,
  • monitoring the fulfillment of contractual obligations to the extent permitted by law;
  • ensuring the performance of our contractual obligations to our customers and other third parties;
  • developing our products and services, as well as enabling the development of our employees, including for the purpose of a positive internal culture and employee satisfaction;
  • maintaining your professional communication after the end of the employment relationship to the extent permitted by law for the purpose of our business continuity;
  • branding us as an employer; or
  • lodging, processing and defending legal claims.

We rely on our legitimate interest only if it outweighs your interests and rights as a data subject.

4. Transfer and disclosure of personal data

We make every effort to keep your personal data protected and require our employees and partners to be strictly secure and confidential. Only our employees and cooperation partners have access to your personal data if it is necessary for the performance of their specified tasks.

In certain cases, we may record Gearbox Biosciences’ own or related events, seminars or trainings and recordings on our website or social media accounts, as well as share them with other employees on internal communication channels. If you do not want your image to be published for this purpose, please let us know.

We may also transfer your personal data to third parties in the following cases and ways:

• our partners, whom we use to better organize our activities (e.g. providers of IT services, including cloud and accounting services). In such cases, we will ensure that all persons to whom we transfer your personal data process personal data strictly in accordance with our instructions, the legal basis for the processing of personal data in accordance with applicable law;
• public bodies, if the transfer of personal data is necessary to fulfil their legal obligations or to prevent or investigate possible offences (e.g. tax and insurance institutions, auditors, occupational health service providers, legal service providers and other similar institutions);
• potential contractual partners in connection with takeover and merger transactions, investment transactions, sale of the company or part of it, sale of shareholdings, etc.; and
• other third parties, where this is necessary to protect their property and rights or to defend themselves against legal claims.

We generally do not transfer your personal data outside the European Economic Area. When we do so, we will take appropriate safeguards to ensure that such transfers comply with applicable law and are secure. In connection with the transfer of personal data to countries that do not provide an adequate level of data protection, we use appropriate safeguards when transferring personal data, for example, by using the European Commission’s standard data protection clauses in personal data transfer agreements.

You can review the applicable safeguards and request additional information regarding the transfer and disclosure of personal data by contacting us using the contact details set out in Section 1 of this privacy notice.

5. Retention of personal data

As a general rule, we process your personal data only during the course of the employment relationship and retain personal data for as long as it is necessary to achieve the specific purposes described in the privacy notice or as required by applicable legislation (e.g. retention of accounting source documents for 7 years in accordance with the provisions of the Accounting Act, retention of the employment contract for 10 years after the end of the employment contract in accordance with the Employment Contracts Act). In some cases, personal data may be stored for a longer period of time if the retention of personal data is necessary to protect our legitimate interests or those of third parties, for example in the event of ongoing litigation.

If the retention of your personal data is no longer required by law or necessary to achieve the purpose for which it was stored, we will permanently delete or anonymize your personal data.

6. Your rights as a data subject

As a data subject, you have the following rights, in accordance with the applicable legislation on the protection of personal data and subject to any restrictions on the exercise of these rights arising from these laws:

• the right to receive information and access to personal data that is processed about you;
• the right to rectification if the personal data processed are inaccurate;
• the right to request the deletion of personal data, unless we can lawfully refuse to do so (i.e. if we have a legal basis for the continued processing of the data);
• the right to request restriction of the processing of personal data and to object to the processing of your personal data;
• the right to data portability if the legal basis for the processing is your consent or a contract concluded between us;
• the right to request, to the extent required by law, information about our specific legitimate interest and why we consider that our legitimate interest outweighs your rights and interests as a data subject. This applies if the legal basis for the processing of personal data is our legitimate interest; and
• the right to withdraw consent to the processing of personal data at any time if the processing of personal data is based on consent. Please note that the withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal.

In order to exercise your rights or if you have any questions, please contact us using the contact details provided in section 1 of the privacy notice. We encourage you to contact us even if you believe that we have processed your personal data in violation of applicable law. You also have the right to go to court or file a complaint with the Data Protection Inspectorate (e-mail address: info@aki.ee; website: www.aki.ee).

7. Security

We use appropriate security measures (including physical, electronic and organizational) to protect your personal information from loss, destruction, misuse, and unauthorised access or disclosure. However, please note that while we strive to protect the security of personal data with appropriate measures, no system of security measures completely excludes all possible security risks.

8. Changes to the privacy notice

This privacy notice may change from time to time. If we make any material changes to this privacy notice, we will notify you via the email address you provide or through other internal communication channels of Gearbox Biosciences. The privacy notice was last updated on the “Last Updated” date above.

Privaatsusteade tööle kandideerijale

OÜ GEARBOX BIOSCIENCES

Viimati uuendatud: 19. veebruar 2024

Käesolev privaatsusteade selgitab, kuidas OÜ Gearbox Biosciences (edaspidi ka “Gearbox Biosciences” või “meie”) töötleb oma töötajate, käsundisaajate, töövõtjate ja praktikantide (“töötaja” või “teie”) isikuandmeid seoses töötaja ja Gearbox Biosciences vahelise töö- või teenistussuhtega.

1. Vastutav töötleja

Teie isikuandmete vastutav töötleja Euroopa Liidu isikuandmete kaitse üldmääruse („GDPR“) tähenduses on Gearbox Biosciences. Gearbox Biosciences on kohustatud tagama, et teie isikuandmeid töödeldakse kooskõlas privaatsusteate ja asjakohaste õigusaktidega, eelkõige GDPR-i ning isikuandmete kaitse seadusega.

Vastutava töötleja kontaktandmed on järgmised:

OÜ Gearbox Biosciences
Registrikood: 16215205
Aadress: Nooruse tn 1, 50411 Tartu, Eesti
E-posti aadress: privacy@gearbox.bio
Telefoninumber: +372 56 480 900

2. Milliseid isikuandmeid me töötleme?

Teie tööandjana võime töösuhte jooksul töödelda teie isikuandmeid erinevatel viisidel. Töötleme sealhulgas nii isikuandmeid, mille oleme teilt saanud värbamisprotsessi käigus, töölepingu sõlmimisel ja töösuhte ajal, kui ka isikuandmeid, mille oleme saanud kolmandatelt isikutelt, nt avalikest andmebaasidest, ametiasutustelt või töötervishoiuteenuse pakkujatelt (asjakohaste õigusaktide alusel lubatud ulatuses).

Töötleme töösuhte raames eelkõige järgmisi isikuandmeid:

• üldised isikuandmed, nt teie ees- ja perekonnanimi, kodune aadress, e-posti aadress, telefoninumber, isikukood ja/või sünniaeg, sugu, kodakondsus;
• üksikasjad teie töösuhte ja kvalifikatsiooni kohta, nt teie ametikirjeldus ja -nimetus, haridustase, vastav(ad) haridusasutus(ed) ja käimasolevad õpingud, keeleoskused, teave selle kohta, kas Gearbox Biosciences’ töökoha näol on tegemist teie põhitöökohaga, teave teile määratud ja teie poolt täidetud ülesannete/projektide kohta, töökogemus Gearbox Biosciences’ (sh töösuhte algus- ja lõppkuupäev), läbitud ja käimasolevad koolitused (sh koolituste tunnistused/sertifikaadid) ning sobivustestide andmed, kui neid on läbi viidud, samuti teave olemasolevate konkurentsipiirangute kohta;
• üksikasjad teie ametialase arengu osas, nt arenguvestluste materjalid, distsiplinaardokumendid, hindamised ja nendega seotud dokumendid, hoiatused, katseajaga seonduvad dokumendid;
• üksikasjad teie eelmiste töökohtade osas, nt eelmised tööandjad, töötamise perioodid, ametikirjeldused ja -nimetused, läbitud koolitused;
• palga ja muude hüvitistega ning osalusoptsioonidega seonduvad andmed, nt palga ja seotud hüvitiste suurus, pangakonto andmed, tasutud maksud, osalusoptsioonidega seotud teave (optsioonide olemasolu ja nendega seotud tingimused);
• andmed puhkuste, tööaja ja töölt puudumiste kohta, nt tööaeg, töötunnid ja töölt puudumised, iga-aastased puhkused, puhkuste liigid;
• töösuhtega seotud administratiivsed andmed, nt teave teile kasutamiseks antud IT-seadmete ja väljastatud ligipääsukaartide kohta, teave Gearbox Biosciences’ kasutajakontode ja nende kasutamise kohta (nt kasutuslogid), andmed tööreiside ja -lähetuste kohta (eesmärk, asukoht, aeg, majutus, kulud jne), vajadusel korral teave tööviisa või elamisloa kohta, teave töösuhte lõpetamise kohta ja selle põhjused;
• piiratud ulatuses terviseandmed, sh andmed ajutise töövõimetuse ja töövõimetushüvitiste maksmise kohta, andmed töötervishoiuteenuste osutamise ja töötervishoiuarsti otsuste kohta, tööõnnetuste ja kutsehaigustega seonduv teave ning dokumentatsioon, tervislike vastunäidustuste olemasolu seoses konkreetse tööpositsiooniga;
• teave, mida kogutakse jooksvalt töösuhte käigus, nt e-posti süsteemides ja muudes suhtlusvahendites (nt Slack) töödeldud andmed, sh kasutusandmed ja suhtluse sisu e-posti ning muude sisekommunikatsioonikanalite kaudu. Eelnimetatud andmed võivad hõlmata teie suhtlust klientide, tarnijate ja teiste kolmandate isikutega;
• hädaabikontaktid, sh kontaktisiku nimi ja kontaktandmed;
• teie pildid, hääl ja muud kujutised, nt kui teid pildistatakse või filmitakse (või vastavaid jäädvustusi kasutatakse) töösuhtega seotud eesmärkidel, Gearbox Biosciences’ üritustel või kui te olete eraldiseisvalt nõustunud osalema meie turundusprojektides;
• muud andmed, nt teie tagasiside ja muu Gearbox Biosciences’le edastatud teave (sh värbamisprotsessi käigus), kui te otsustate töösuhte jooksul vabatahtlikult meile selliseid andmeid edastada.

Nagu eespool märgitud, võime me töödelda teie eriliigilisi isikuandmeid, nt teie tervisega seonduvaid isikuandmeid. Seda teeme me üksnes juhul, kui meile kui tööandjale kohalduvad seadusjärgsed ja lepingulised õigused ning kohustused nõuavad ja kui see on kohaldatavate õigusaktidega lubatud.

3. Isikuandmete töötlemise eesmärgid ja õiguslikud alused

Sõltuvalt konkreetsest töötlemistoimingust võime teie isikuandmeid töödelda järgmistel eesmärkidel ja õiguslikel alustel:

• teiega sõlmitud lepingust tulenevate kohustuste täitmine, nt et tagada ja võimaldada tööülesannete täitmist, määrata ja maksta töötasu ning muid hüvitisi seoses töösuhtega. Sellisel juhul on isikuandmete töötlemise õiguslik alus teiega sõlmitud lepingust tulenevate meie kui tööandja kohustuste täitmine (GDPR artikli 6 lõike 1 punkt b);
• õigusaktidest tulenevate juriidiliste kohustuste täitmine, nt maksualastest seadustest, töötervishoiu ja tööohutuse seadusest, raamatupidamise seadusest jne tulenevate kohustuste täitmine. Sellisel juhul on isikuandmete töötlemise õiguslikuks aluseks meie suhtes kohaldatava õigusliku kohustuse täitmine (GDPR artikli 6 lõike 1 punkt c koostoimes muude kohaldatavate õigusaktide asjakohaste sätetega);
• teie eluliste huvide kaitsmine (GDPR artikli 6 lõike 1 punkt d), eelkõige teie poolt märgitud kontaktisikuga ühendust võtmine hädaolukorra korral;
• meie õigustatud huvi (GDPRi artikli 6 lõike 1 punkt f), eelkõige meie (äri)huvide tagamine ja kaitsmine, nt:
  • meie hoonete, varade ohutuse ja süsteemide toimimise tagamine, väärkasutuse ning pahatahtliku tegevuse ennetamine,
  • lepinguliste kohustuste täitmise jälgimine seadusega lubatud ulatuses;
  • meie lepinguliste kohustuste täitmise tagamine klientide ja muude kolmandate isikute ees;
  • meie toodete ja teenuste arendamine, samuti töötajate arengu võimaldamine, mh positiivse sisekultuuri ja töötajate rahulolu eesmärgil;
  • meie äritegevuse järjepidevuse eesmärgil teie tööalase suhtluse säilitamine pärast töösuhte lõppu seadusega lubatud ulatuses;
  • meie kui tööandja brändi kujundamine; või
  • õiguslike nõuete esitamine, menetlemine ja kaitsmine.

Me tugineme oma õigustatud huvile üksnes siis, kui see kaalub üles teie kui andmesubjekti huvid ning õigused.

4. Isikuandmete edastamine ja avaldamine

Teeme kõik endast sõltuva, et hoida teie isikuandmed kaitstuna ja nõuame oma töötajatelt ning koostööpartneritelt ranget turvalisust ja konfidentsiaalsust. Teie isikuandmetele on ligipääs üksnes meie töötajatel ja koostööpartneritel, kui see on vajalik nende kindlaksmääratud ülesannete täitmiseks.

Teatud juhtudel võime jäädvustada Gearbox Biosciences’ enda või seotud üritusi, seminare või koolitusi ja jäädvustusi avaldada meie veebisaidil või sotsiaalmeediakontodel, samuti jagada neid teiste töötajatega sisekommunikatsioonikanalites. Kui te ei soovi, et teie kujutist sel eesmärgil avaldataks, palume sellest meile teada anda.

Me võime edastada teie isikuandmeid kolmandatele isikutele veel järgmistel juhtudel ja viisidel:

• meie koostööpartneritele, keda kasutame oma tegevuse paremaks korraldamiseks (nt IT-teenuste, sh pilve- ja raamatupidamisteenuste pakkujad). Sellistel juhtudel tagame, et kõik isikud, kellele me edastame teie isikuandmeid, töötlevad isikuandmeid rangelt vastavalt meie juhistele, isikuandmete töötlemise õigusliku alusega kooskõlas kohaldatavate õigusaktidega;
• avalik-õiguslikele asutustele, kui isikuandmete edastamine on vajalik, et täita oma seadusest tulenevaid kohustusi või ennetada või uurida võimalikke süütegusid (nt maksu- ja kindlustusasutustele, audiitoritele, töötervishoiuteenuste pakkujatele, õigusteenuse osutajatele ning muudele sarnastele asutustele);
• võimalikele lepingupartneritele seoses ülevõtmis- ja ühinemistehingutega, investeerimistehingutega, ettevõtte või selle osa müügiga, osaluse müügiga jne; ja
• teistele kolmandatele isikutele, kui see on vajalik, et kaitsta oma vara ja õigusi või kaitsta end õiguslike nõuete vastu.

Me ei edasta üldjuhul teie isikuandmeid Euroopa Majanduspiirkonnast väljapoole. Kui me seda teeme, rakendame asjakohaseid kaitsemeetmeid tagamaks, et selline edastamine oleks kooskõlas kohaldatava õigusega ja turvaline. Seoses isikuandmete edastamisega riikidesse, mis ei paku andmekaitse piisavat taset, kasutame me isikuandmete edastamisel asjakohaseid kaitsemeetmeid, näiteks kasutades isikuandmete edastamise lepingutes Euroopa Komisjoni standardseid andmekaitseklausleid.

Teil on võimalik kohaldatavate kaitsemeetmetega tutvuda ja küsida täiendavat teavet seoses isikuandmete edastamise ja avaldamisega, kui võtate meiega ühendust privaatsusteate punktis 1 toodud kontaktandmetel.

5. Isikuandmete säilitamine

Üldjuhul me töötleme teie isikuandmeid üksnes töösuhte kestvuse ajal ja säilitame isikuandmeid nii kaua, kui see on vajalik privaatsusteates kirjeldatud konkreetsete eesmärkide saavutamiseks või kohalduvate õigusaktide kohaselt nõutud (nt raamatupidamise algdokumentide säilitamine 7 aasta jooksul vastavalt raamatupidamisseaduses sätestatule, töölepingu säilitamine 10 aastat pärast töölepingu lõppu vastavalt töölepingu seadusele). Mõnel juhul võib isikuandmeid säilitada pikema aja jooksul, kui isikuandmete säilitamine on vajalik meie või kolmandate isikute õigustatud huvide kaitsmiseks, näiteks käimasolevate kohtuvaidluse korral.

Kui teie isikuandmete säilitamine ei ole enam õigusaktide alusel nõutud ega nende säilitamise eesmärgi saavutamiseks vajalik, kustutame me teie isikuandmed jäädavalt või muudame need anonüümseks.

6. Teie kui andmesubjekti õigused

Teil kui andmesubjektil on järgmised õigused, vastavalt kohalduvatele isikuandmete kaitset puudutavatele õigusaktidele ja arvestades nendest õigusaktidest tulenevaid piiranguid nende õiguste teostamisel:

• õigus saada teavet ja juurdepääsu isikuandmetele, mida teie kohta töödeldakse;
• õigus isikuandmete parandamisele juhul, kui töödeldavad isikuandmed on ebaõiged;
• õigus nõuda isikuandmete kustutamist, v.a. juhul, kui me võime sellest õiguspäraselt keelduda (st juhul, kui meil on andmete jätkuvaks töötlemiseks õiguslik alus);
• õigus nõuda isikuandmete töötlemise piiramist ja esitada vastuväiteid oma isikuandmete töötlemisele;
• õigus isikuandmete ülekandmisele, kui töötlemise õiguslik alus on teie nõusolek või meie vahel sõlmitud leping;
• õigus taotleda õigusaktidega ettenähtud ulatuses teavet meie konkreetse õigustatud huvi kohta ja selle kohta, miks me leiame, et meie õigustatud huvi kaalub üles teie kui andmesubjekti õigused ning huvid. See kohaldub juhul, kui isikuandmete töötlemise õiguslik alus on meie õigustatud huvi; ja
• õigus isikuandmete töötlemiseks antud nõusolek igal ajal tagasi võtta, kui isikuandmete töötlemine põhineb nõusolekul. Palume arvestada, et nõusoleku tagasivõtmine ei mõjuta enne tagasivõtmist nõusoleku alusel toimunud isikuandmete töötlemise seaduslikkust.

Oma õiguste kasutamiseks või küsimuste korral võtke palun meiega ühendust privaatsusteate punktis 1 toodud kontaktandmetel. Julgustame teid meiega ühendust võtma ka juhul, kui leiate, et oleme teie isikuandmeid töödelnud vastuolus kohaldatava õigusega. Samuti on teil õigus pöörduda kohtu poole või esitada kaebus Andmekaitse Inspektsioonile (e-posti aadress: info@aki.ee; veebileht: www.aki.ee).

7. Turvalisus

Me kasutame asjakohaseid turvameetmeid (sealhulgas füüsilisi, elektroonilisi ja organisatsioonilisi) teie isikuandmete kaitsmiseks kaotsimineku, hävimise, väärkasutamise ning loata juurdepääsu või avaldamise eest. Palume siiski arvestada, et kuigi me püüame isikuandmete turvalisust asjakohaste meetmetega kaitsta, ei välista ükski turvameetmete süsteem täielikult kõiki võimalikke turvariske.

8. Privaatsusteate muutmine

Käesolev privaatsusteade võib aeg-ajalt muutuda. Kui me teeme privaatsusteates sisulisi muudatusi, teavitame me teid sellest teie poolt edastatud e-posti aadressi kaudu või muude Gearbox Biosciences sisekommunikatsioonikanalite kaudu. Viimati uuendati privaatsusteadet eespool märgitud „Viimati uuendatud“ kuupäeval.