EBB Medical Group Privacy Policy
Effective date: June 4, 2025
1. Introduction
This Privacy Policy applies to all companies within the EBB Medical Group and governs the processing of personal data when using our website or communicating with us. It has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national data protection laws in Sweden, Lithuania, Germany, and Denmark.
By using our website or submitting your data, you agree to the terms of this Privacy Policy.
2. Data Controllers
Your personal data may be jointly controlled by the following group companies:
– Ebb Medical AB, Östra Köpmansgatan 36, 371 32 Karlskrona, Sweden | Email: info.de@ebbmedical.com
– Actiofarma UAB, Gaižiūnų g. 5B, LT-50129 Kaunas, Lithuania | Email: info@actiofarma.com
– Lakameda UAB, Gaižiūnų g. 5B, LT-50129 Kaunas, Lithuania
– Ebb Medical AG, [Germany Office Address] | Email: info.de@ebbmedical.com
For questions regarding this Privacy Policy, contact: info@actiofarma.com
3. What Personal Data We Collect
We may collect the following data directly from you:
– Full name
– Email address
– Telephone number (optional)
– Message or inquiry content
– IP address (if not disabled)
– Health-related data (only if voluntarily provided, e.g., adverse event reports)
We do not collect sensitive personal data unless voluntarily submitted and necessary for the processing purpose.
4. Purposes of Data Processing
We process your personal data for the following purposes:
– Responding to your inquiries or contact form submissions
– Managing business relationships with clients, partners, or applicants
– Meeting pharmacovigilance (drug safety) obligations
– Complying with regulatory requirements
– Ensuring website security and technical functionality
– Handling job applications
– Managing internal communications or site visits
5. Legal Basis for Processing
Your data is processed based on:
– Your consent (Art. 6(1)(a) GDPR)
– Performance of a contract or pre-contractual steps (Art. 6(1)(b))
– Compliance with legal obligations (Art. 6(1)(c))
– Legitimate interests pursued by the Group (Art. 6(1)(f))
6. Cookies and Website Analytics
We use only essential cookies by default to ensure our website functions properly. Our website uses a cookie management tool provided by HumanityCo to help you manage your cookie preferences and stay informed about the types of cookies we use. You can review and adjust your preferences at any time through the cookie banner displayed on our site.
If you give consent, we may also use analytical tools such as Google Analytics or similar services to better understand how visitors use our website and to improve its performance. These analytics tools operate only with your explicit consent.
You may disable cookies via your browser settings. For more information, visit: AllAboutCookies.org
7. Data Recipients
Your data may be shared with:
– IT service providers or contractors (Art. 28 GDPR)
– Regulatory authorities when legally required
– Authorized internal staff
8. Data Retention
We retain personal data only as long as necessary for the purposes listed above:
- General inquiries: Up to 12 months
- Adverse event reports: Minimum of 5 years, or longer as required by pharmaceutical law
- Product inquiries: At least 10 years, unless a longer term is legally required
- Job applications: No longer than 6 months unless further consent is obtained
Data no longer needed will be securely deleted or anonymized.
9. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access – Obtain confirmation of data processing
- Right to rectification – Correct incomplete or inaccurate data
- Right to erasure – Request deletion when lawful grounds apply
- Right to restriction – Temporarily suspend processing
- Right to object – Opt out from processing based on legitimate interest
- Right to data portability – Receive or transfer your data
- Right to lodge a complaint – Contact a national supervisory authority
To exercise your rights, please contact us at: info@actiofarma.com
10. Supervisory Authorities
If you believe your data protection rights have been violated, you can contact the data protection authority in your country:
Sweden: Swedish Authority for Privacy Protection – www.imy.se
Lithuania: State Data Protection Inspectorate – www.vdai.lrv.lt
Germany: BfDI – www.bfdi.bund.de
Denmark: Danish Data Protection Agency – www.datatilsynet.dk
11. Policy Updates
We may update this Privacy Policy periodically. The latest version will always be published on our website.
12. Children’s Privacy
Our website and services are not intended for use by children under the age of 13, and we do not knowingly collect or process personal data from children without verified parental consent.
If we become aware that personal data has been collected from a child without appropriate consent, we will take immediate steps to delete such data.
In countries where a higher age threshold applies for parental consent (such as 16 years in Germany, in accordance with Section 25(1) of the German Federal Data Protection Act), we comply with the relevant national age limit.
If you are a parent or legal guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at info@actiofarma.com, and we will delete such information from our systems.