General
We never store or process personal information unless we have explicit consent, we have conducted a Legitimate Interests Assessment, we are required to process your personal information according to law or when it is necessary to fulfil an agreement with you.
Our legitimate interest for processing your personal information on the basis of a Legitimate Interests Assessment is to inform you about our activities; administer events, arrangements, our website and networks; and document and communicate our events and arrangements.
Personal information is never stored longer than deemed necessary to fulfil the purpose for which it was collected. Personal information that we process on the basis of a Legitimate Interests Assessment is normally processed for the period that is necessary for fulfilling the purposes of the processing. Personal information that we process for the purpose of fulfilling an agreement with you is normally processed for the duration of our agreement and for fifteen months after expiry of the agreement. To comply with legal obligations or because you have given your consent, we may keep your personal information for a longer period.
You have the right to:
Request access to your personal information. This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected, though we may need to verify the accuracy of the new information you provide to us.
Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us to continue to process it. You also have the right to ask us to delete or remove your personal information where you have successfully exercised your right to object to processing, where we may have processed your information unlawfully or where we are required to erase your personal information to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons, which will be communicated to you, if applicable, at the time of your request.
Withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.
Request restriction of processing of your personal information. This enables you to ask us to suspend the processing of your personal information in the following scenarios: (a) if you want us to establish the information’s accuracy; (b) where our use of the information is unlawful but you do not want us to erase it; (c) where you need us to retain the information even if we no longer require it because you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Object to processing of your personal information where we are relying on a legitimate interest (or that of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object when we process your personal information for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
Request the transfer of your personal information to you or to a third party. We will provide you, or a third party you have chosen, with your personal information in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use, or where we used the information to fulfil a contract with you.
Transfers of personal information to third countries
As a general rule, we process your personal information only within the European Union/European Economic Area. Under certain circumstances, we may transfer your information outside of the EU/EEA. When we do so, we will ensure appropriate safeguards are in place in compliance with EU and national law.
Our website
The Nobel Assembly manages the website www.nobelprizemedicine.org.
Information we collect
Emails or other communications that you send may be retained by us in order to process your inquiries or respond to your requests.
We may collect information about your visit, including the pages you view, the links you click and other actions taken in connection with sites and services. We may also collect certain standard information that your browser sends to every website you visit.
How we use your personal information
We collect and process personal information for the purposes described in this Privacy Policy. Such purposes include providing audits, research and analyses in order to maintain, protect and improve our information services. Personal information collected on our sites and in relation to our services may be stored and processed within the EU. Storage and processing are in adherence with applicable EU law.
Cookies
When you visit our site, we send one or more cookies to your computer that uniquely identifies your browser. A cookie is a small file that is placed on your hard disk by a web server. The cookie contains a string of characters that can later be read by a web server in the domain that issued the cookie to you. Cookies cannot be used to run programmes or deliver viruses to your computer. We only use standard first-party cookies, which are a communication tag only viewable by the site in the same nature as session ids. They are not third-party cookies, which may provide information outside our domain, violating our Privacy Policy.
We may use cookies:
- to store your preferences and other information on your computer in order to save you time by eliminating the need to repeatedly enter the same information and to display your personalised content on your current and later visits to our sites; and
- to make it easy for visitors to bookmark and share content to their favourite social destinations.
Most browsers are initially set up to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features and services may not function properly if your cookies are disabled.
Affiliated sites and links
This policy applies to the web site owned and operated by the Nobel Assembly. We do not exercise control over sites displayed as links from within our site. Our site may present links in a format that enables us to keep track of whether these links have been followed. We use this information to improve the quality of our services.
Events and arrangements
The Nobel Assembly organises certain events and arrangements.
How we use your personal information
We collect and process personal information for the purposes described in this Privacy Policy. Such purposes include:
- communication in connection with an event;
- ensuring proper identification at the event;
- making sure dietary preferences or similar requirements can be met;
- quality assurance and development of future events; and
- archiving for research purposes.
We also use photography, video and audio recording to promote events and to share events remotely with those who are unable to attend in person. This material is also used in our communication efforts and to provide an archive of the events.
Information sharing
The Nobel Assembly only shares personal information with other entities or individuals outside of the Nobel Assembly in situations in which we (i) explicitly say we are doing so and include a description of the purpose for sharing personal information in the form where the information would be collected; or (ii) in the following limited circumstances: We have a good-faith belief that access, use, preservation or disclosure of such information is reasonably necessary to (a) satisfy any applicable law, regulation, legal process or enforceable governmental request; (b) detect, prevent, or otherwise address fraud, security or technical issues; and (c) protect against imminent harm to the rights, property or safety of the Nobel Assembly, its users or the public as required or permitted by law. We may share with third parties certain pieces of aggregated, non-personal information, such as the number of users who searched for a particular term, for example, or how many users took advantage of a particular service. Such information does not identify you individually.
Your personal information may further be shared with parties that process personal information on our behalf, i.e. data processors. Such data processors are, amongst others, our IT and system suppliers.
Your personal information may also be shared with parties that are independent data controllers when processing your personal information, such as, when applicable, law enforcement authorities (for security purposes in connection with events).
Information security
The Nobel Assembly is committed to protecting the security of your personal information. We use a variety of security technologies and procedures to help protect your personal information and data from unauthorised alteration, access, use, destruction or disclosure. Our measures to protect the security of your personal information include:
- storing the personal information you provide on computer systems with limited access, which are located in controlled facilities;
- restricting access to personal information to Nobel Assembly employees, contractors and agents who need to know that information in order to operate, develop or improve our services. These individuals are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations; and
- performing internal reviews of our data collection, storage and processing practices and security measures, as well as physical security measures to guard against unauthorised access to systems in which we store personal information.
If a password is used to help protect your accounts and personal information, it is your responsibility to keep your password confidential. If you are sharing a computer with anyone you should always log out before leaving a site or service to protect access to your information from subsequent users.
Questions, concerns and compliance
If you have any questions, comments or concerns about any aspect of this Privacy Policy or how the Nobel Assembly handles your information, please email us at nobelforum@nobelprizemedicine.org.
If you have any complaints regarding our processing of your personal information you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).