Privacy Policy
プライバシーポリシー（個人情報保護方針）
1. 概要
BioGaia AB（以下「バイオガイア」）は、お客様のプライバシーを尊重し、保護することに尽力しています。
本プライバシー通知は、専門家向けサイト（jp-professionals.biogaia.com、以下「当サイト」）の利用等に関連して、バイオガイアがどのようにお客様の個人データを処理するかを説明するものです。また、お客様のプライバシーに関する権利と、法律による保護についても解説します。
当社は主に、お客様とのコミュニケーションや当サイトの評価を目的として個人データを処理します。場合によっては、マーケティング目的や法的義務の遵守のために処理することもあります。
2. 当社について
バイオガイアは、自社の個人データ処理におけるデータ管理者（Controller）です。すべての個人データは、EU規則 2016/679（GDPR：一般データ保護規則）に従って収集・処理されます。
- 個人データとは： 直接的または間接的に個人を特定できる情報（氏名、住所、メールアドレス、個人識別番号、IPアドレスなど）。
- 処理とは： 個人データに対して行うあらゆる操作（収集、保存、登録、分類、修正、転送、消去など）。
3. 収集する個人データとその目的
バイオガイアは、特定の目的のためにのみ個人データを収集します。各目的、法的根拠、保存期間は以下の通りです。
採用応募について
バイオガイアの求人に応募される際、当社はお客様の氏名、連絡先、メールアドレス、および履歴書（CV）を収集します。
- 目的： 新規従業員の採用に関する評価および意思決定を行うため。
- 法的根拠： 求職者を評価し、バイオガイアでの雇用を提案するという当社の「正当な利益」に基づきます。
- 保存期間： 採用プロセスに必要な期間にわたって保存されます。
ビジネスパートナーについて
既存の取引関係の管理、および潜在的なビジネスパートナーを評価するために、氏名とメールアドレスに関するデータを収集します。
- 目的： ビジネスパートナーとの契約上の義務を履行するためにも、これらの個人データを使用します。
- 法的根拠： 事業としての「正当な利益」に基づき、ビジネス関係を管理します。
- 保存期間： 適用される会計規則の遵守、および当社の法的権利を保護するため、7〜10年間保存されます。
ニュースレターによるマーケティングについて
ニュースレターの購読を申し込まれた際、バイオガイアや当社製品に関する有益な情報を提供するために、氏名とメールアドレスを収集します。
- 目的： お客様の関心を引く可能性のあるバイオガイアの活動や製品についてお知らせするため。
- 法的根拠： ニュースレター購読申し込み時にお客様からいただいた「同意」に基づきます。
- 保存期間： 購読を解除されるまで保存され、解除後2ヶ月間保持されます。
株主および年次総会について
株主としての登録時、持ち株に関連するやり取り、または年次総会への出席登録の際、氏名、社会保障番号（個人番号）、およびメールアドレスを収集します。大株主の場合、年次報告書や当サイトにおいて氏名や持ち株数を公開することで個人データを処理する場合があります。
- 目的： 株主として関連情報を提供し、年次総会への出席を可能にするため。
- 法的根拠： 「法的義務」に基づきます。
- 保存期間： 適用される規制に従い、処理目的を果たすために必要な期間保存されます。なお、年次総会の出席登録に関するデータは12ヶ月間保存されます。
サイトおよびサービスの分析・開発・運営について
事業開発を目的として、お客様のユーザー行動に関するデータを収集します。
- 目的： 以下の活動を目的としています。当サイトの利用状況の評価・開発・特定不正行為の検知・防止・調査、およびセキュリティ監視当社の事業運営の開発と改善
- 法的根拠： 当サイトの開発および運営において、当社の「正当な利益」を満たすために必要な処理です。
- 保存期間： 個人データは2年間保存されます。
また、当サイト上での行動に関する個人データを収集するためにクッキー（Cookie）を使用しています。クッキーの詳細については、後述のセクションをご確認ください。
4. 個人データの共有先
バイオガイアは、第三者と個人データを共有する場合があります。共有先は以下のいずれかです。
データ処理者（委託先）
当社の定義した特定の目的のためにのみデータを処理します。
- プラットフォーム・技術サプライヤー： IPアドレス、連絡先情報、購入履歴などを取り扱います。
データ管理者（独立した責任主体）
独自の目的でデータを使用し、その処理に対して独立して責任を負う企業です。
- バイオガイア・グループ各社： 上記の目的達成に必要な場合。
- 政府機関： 法律や法的義務によって求められる範囲内。
※組織再編、合併、売却等の際にも、第三者にデータを移転する場合があります。
5. EU/EEA域外へのデータ転送（第三国転送）
当社の目標は、常にEU/EEA域内でデータを処理することです。域外へ転送する場合は、GDPRが定める適切な保護水準が維持されている国、または欧州委員会が定義する**標準契約条項（SCC）**に基づき行います。
- ソーシャルメディア： SNSで当社とやり取りする場合、お客様の氏名や写真はEU域外（通常は米国）に転送されます。これにより、第三国の当局によるアクセス等のリスクが生じる可能性がありますが、SNSを通じたお問い合わせに対応するために必要な転送です。
- クッキー（Google Analytics等）： 同意を得た場合、米国等へデータが転送されることがあります。ブラウザ設定でブロック可能です。
6. お客様の権利
お客様には以下の権利があります。
- アクセス権： 自分のデータの内容、取得元、共有先、法的根拠を確認できます。
- 消去権（忘れられる権利）： 不要になった場合や同意を撤回した場合など、一定の条件下でデータの削除を請求できます。
- 修正権： 誤った情報や不完全な情報の訂正・追記を請求できます。
- 制限権： データの正確性を確認中である場合など、処理の制限を請求できます。
- データポータビリティ権： 構造化された形式でデータを取り出し、他の管理者に移行できます。
- 異議申立権： 正当な利益に基づく処理やダイレクトマーケティングに対して異議を唱えることができます。
- 同意の撤回権： 同意に基づき処理されている場合、いつでも撤回できます。
- 苦情申立権： 処理が不適切と感じる場合、監督当局（スウェーデン個人情報保護局：IMY）へ苦情を申し立てられます。
7. その他
- 保護措置： 組織的・技術的なセキュリティ対策を講じてデータを保護しています。
- 未成年者： 当サイトは18歳未満を対象としておらず、未成年者のデータは処理しません。
- 変更： 本通知は随時更新されます（最終更新：2024年7月3日 日本語訳最終更新2026年2月26日）。
原文（English）
General
BioGaia AB (“BioGaia”) is committed to respecting and protecting your privacy.
This privacy notice sets out how BioGaia processes your personal data for example in conjunction with your use of professionals.biogaia.com (our “Site”). It also explains your privacy rights and how to the law protects you.
We process your personal data primarily so that you can communicate with us and for evaluation of the Site. In some cases, we will also process your data for marketing purposes or to fulfil a legal obligation. More details in this respect are set out below.
About us
BioGaia is the personal data controller for the company’s processing of personal data. All personal data is collected and processed in accordance with Regulation (EU) 2016/679 (the “GDPR”).
What is personal data, and what is processing?
Personal data is information that, either directly or indirectly, can identify a physical person. Personal data can thus be names, addresses, e-mail addresses, personal identification numbers, IP addresses, and so on. Processing is everything we do with your personal data. For example, processing can be collection, storage, registration, sorting, revision, transfer or erasure of data.
What personal data do we collect, and why?
BioGaia collects personal data only for specific purposes. Those purposes, together with our legal basis for processing the data, and the relevant data retention periods, are set out below:
Job applications
When you apply for a job at BioGaia, we collect your name, contact details, e-mail address and CV.
Purpose: To evaluate and make decision regarding recruitment of new employees.
Legal basis: The processing is our legitimate interest to evaluate and offer a jobseeker employment at BioGaia.
Storage period: Your personal data is stored as long as it’s necessary for the recruitment process.
Business partners
To manage our existing business relations, and to evaluate potential business partners, we collect data regarding your name and e-mail address.
Purpose: We will also use your personal data to fulfil our contractual obligations with our business partners.
Legal basis: To manage our business relations is supported by our legitimate interest as a business.
Storage period: Your personal data is stored 7-10 years, in accordance with applicable accounting regulations and for the protections of our legal rights.
Marketing via newsletter
When you sign up for our newsletter, we collect data regarding your name and e-mail address in order to provide you with relevant information about BioGaia and our products.
Purpose: Letting you know about BioGaia and our products that could be of interest to you.
Legal basis: Your consent when signing up for the newsletter.
Storage period: Your personal data is stored until you unsubscribe from our newsletter, and for two months afterwards.
Shareholders and Annual General Meeting
When you register as a shareholder, when you interact with us in relation to your shareholding in BioGaia, and registrations of participants of the annual general meeting, we collect data regarding your name, social security number, and e-mail address. If you are a major shareholder, we may also process your personal data by publishing names and shareholdings in annual reports and on our Site.
Purpose: To provide you with relevant information as a shareholder and to be able to attend the annual general meeting.
Legal basis: Legal obligation,
Storage period: Your personal data is stored in accordance with applicable regulations and as long as it is needed to fulfil the purpose of the processing. Personal data for registrations of participants of the annual general meeting is stored for 12 months.
Analysis, development and operations of the Site and our services
For the purpose of developing our operations, we collect data about your user behavior.
Purpose: We do this in order to: i) evaluate, develop and identify how you use the Site; ii) detect, prevent and investigate fraud and security monitoring; and iii) develop and improve our business operations.
Legal basis: Processing is necessary in order to satisfy our legitimate interest in developing and operating the Site.
Storage period: Personal data is stored for two years.
We also use cookies to collect personal data about your behavior on the Site. For more information about cookies, see below.
Who do we share personal data with?
BioGaia may share your personal data with third parties. These parties are either
Data Processors
These are allowed to process personal data only for the specific aims and purposes defined by us. Our processors, and the data they receive, include:
– Platform and technology suppliers: IP addresses, contact information and purchase history
Data controllers
These companies use personal data for their own purposes and are independently responsible to you for the personal data processing they carry out.
BioGaia may share your personal data with:
– other companies in the BioGaia Group, if required for completion of the purposes and the legal basis indicated above; and
– government agencies, to the extent that it results from law or other legal obligation incumbent upon us.
On rare occasions, we may share personal data when we believe it is necessary to comply with the law, regulation or legal request (including a court order or government inquiry), or to enforce or apply our terms of use or other agreements. In addition, we may use, make available or transfer personal data to third parties in conjunction with reorganisation, merger, sale, joint venture, conveyance, transfer or other disposition of all or part of our operations, assets or shares (including in conjunction with bankruptcy or similar proceedings).
Our ambition is for your personal data to always be processed within the EU/EEA.
In the event that personal data for which BioGaia is responsible is to be transferred to a country outside the EU/EEA, we will only do so in those cases where the transfer country and recipient are deemed to maintain an adequate level of protection under the rules of the GDPR, or the transfer takes place in accordance with the standard contractual clauses as defined by the EU Commission to regulate such transfers.
Third country transfers
If you interact with us on social media, this means that your personal data – your picture and name, for example – will be transferred to a country outside the EU/EEA, normally the US. The transfer will take place in accordance with applicable privacy protection legislation, including the GDPR. However, the GDPR is not valid in the third country, which could entail an increased risk as regards privacy, concerning situations such as the possibility of government authorities in the third country having access to your personal data and your possibilities of exercising control over your personal data. This transfer is necessary in order for you to be able to contact us on social media so that we can fulfil your request.
The transfer between us and social media services is based on the EU Commission’s standard contractual clauses, and is supplemented with technical and organisational protective measures. Read more about the EU Commission’s standard contractual clauses here.
If you accept cookies and other similar technology for marketing and/or analysis such as the Facebook pixel or Google Analytics, your personal data may be transferred to a third country – more specifically, the US. The transfer then takes place based on the consent you provide when you accept the use of cookies. To terminate future transfers to third countries, you can contact us using the contact information below, or block all cookies via the settings in your web browser. More information on blocking cookies is available on your browser’s help pages. You can also read more about cookies in our cookie notice; see below.
How is your personal data protected?
All personal data you provide to us is protected using both organisational and technical security measures. These measures are used to store, process and communicate the data securely. In the event that you would like to know which security measures we apply, you can contact us using the contact information above.
Your rights
Right to access
You can always request access to your personal data, which includes the right to request information on where we retrieved the data from, the scope, and which recipients your personal data has been distributed to, as well as the legal basis.
Right to erasure
You also have the right, in certain cases, to demand that we erase some or all of your personal data, provided that it is not necessary for us to retain this data in order to fulfil our legal obligations. You have the right to request that your data be erased if:
– your personal data is no longer necessary for the purpose behind the processing;
– you withdraw your consent on which the processing is based;
– you object to the processing and we are not considered as having a legitimate interest;
– the personal data has been processed unlawfully.
To the extent that continuing to process your personal data is necessary – for example, to fulfil our legal obligations – we are not obligated to remove your personal data. This means that some information may be stored until we are no longer obligated to process it.
Right to rectification
You have the right to have erroneous personal data concerning you corrected without unnecessary delays. When you discover errors in the data about you that we have registered, you can contact us via e-mail to have your data corrected. You also have the right to supplement incomplete data that we have on you.
You must provide us with correct data and inform us in the event your data changes so that we can update it in accordance with the GDPR.
Right to limitation
You have the right to request that we limit our processing of your personal data. A limitation can be imposed for several reasons.
– If we cannot fulfil your request for erasure owing to our legal obligations, you can request limited processing of the data we have.
– If you believe that the data we have on you is incorrect and request correction, you can request limited processing during the time we take to check whether the personal data is correct.
– If you objected to a legitimate interest, you can request limited processing during the time we take to check whether our legitimate interest outweighs your interest in having the data erased.
Data portability
Under certain conditions, you have the right to extract and transfer your personal data in a structured, generally used and machine-readable format to another personal data controller. One condition for data portability is that the transfer is technologically possible and can take place automatically, and that BioGaia processes your personal data on the basis of your consent or to fulfil an agreement.
Right to object
You have the right to object at any time to our processing of your personal data on the basis of legitimate interest. Continued processing of your personal data requires that we demonstrate a legitimate reason for the processing in question. Otherwise, we can only process the information to establish, exercise or defend a legal claim. You also have the right to object to direct marketing, including profiling.
Right to withdraw consent
In the event we base our processing on your consent as a legal basis, you can withdraw your consent at any time either by contacting us or by unsubscribing from our online mailings.
Right to complaint
If you feel we are processing your personal data incorrectly, you can submit a complaint to our supervisory authority, the Swedish Authority for Privacy Protection (www.imy.se).
Contact information
If you wish to exercise any of your rights, please contact us via e-mail at info@biogaia.us. In the event you request that your personal data be erased, it is not certain that we will be able to communicate with you in accordance with the above.
Minors
This Site is not aimed at persons under the age of 18 years, and we will not process personal data that could be linked to minors.
Changes
We have the right to change this privacy notice at any time by publishing a new version on the Site. In the event it is required, we will inform you of current changes. This privacy notice was updated on 3 July 2024.
.
Contact Us
If you have any questions about this Privacy Policy, You can contact us:
- By email: info@biogaia.us
- By phone number: (877) 776-0101
- By mail: 2900 Brannon Ave. St. Louis, MO 63139, United States