Privacy policy

At Signum Life Science, we respect your privacy and protect the personal data we hold about you. We want you to feel confident when you share your data with us, and we want you to know what we do with it.


This Privacy Policy explains how we collect, use, share and protect your personal data, and which rights you have. It applies when you visit our websites, sign up for our newsletter, attend our courses, events and webinars, apply for a job, use our customer portals, buy our services, or otherwise interact with us as a customer, contact, supplier or partner.


Signum Life Science operates across the Nordics, with teams in Denmark, Sweden and Norway. Where relevant, our Danish, Swedish and Norwegian entities cooperate to provide services to you. Signum Life Science ApS is responsible for the processing described in this policy, unless you are informed that another Signum Life Science entity is responsible for a specific processing activity. Where another group entity acts as data controller, that entity is responsible for its own processing.


We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act (databeskyttelsesloven).

Respondents in qualitative and quantitative studies by Signum

This policy does not cover our processing of personal data about respondents in qualitative and quantitative studies. Please see our separate Privacy Policy for research respondents found here in Danish and here in English.

Data controller and contact

Signum Life Science ApS is the data controller for the personal data described in this policy.

Signum Life Science ApS
CVR no. 36559241
Lersø Parkallé 101
DK-2100 Copenhagen Ø
Denmark
info@signumlifescience.com

Signum Life Science also operates through affiliated companies in Sweden (Signum Life Science AB org. no.: 559036-3692) and Norway (Signum Life Science AS vat. no.: 970 983 082). These companies are part of the same group and apply the same privacy standards. Where relevant, we share your personal data within the group so that we can serve you as one company. Such sharing takes place under an intra-group agreement that protects your data and limits its use to the purposes described in this policy.

If your enquiry concerns access, erasure, rectification, restriction, objection or data portability, please read the section “Your rights” first.

The personal data we process and why

How we process your personal data depends on your relationship with us. Below we describe each situation. You may fall into more than one category at the same time.

  1. Recipients of our marketing and newsletters
    We process your name, e-mail address, areas of professional interest, your activity (such as opens and clicks in our e-mails), and your subscriptions to our communications. We use this data to send you newsletters, invitations and marketing, to tailor our marketing to your professional interests, and to analyse how our marketing performs.

    We process this data based on your consent to receive electronic marketing (GDPR Article 6(1)(a) and §10 of the Danish Marketing Practices Act (markedsføringsloven)). Where our e-mails contain tracking pixels or tracked links, we use these only where we have a valid consent or another lawful basis. The analysis and profiling that follow rest on our legitimate interest in improving our communication (GDPR Article 6(1)(f)). You can withdraw your consent at any time.

  2. Customers and their contacts
    We process your name, employer, position, contact details, preferred language, and your activity with us (calls, e-mails, meetings, event registrations and contractual contact). We use this data to establish and maintain the customer relationship, to deliver our services, to stay in contact, and to issue invoices.

    We process this data based on our legitimate interest in managing and developing the commercial relationship with you and your organisation (GDPR Article 6(1)(f)). Where you are personally a party to an agreement with us, we process the data to perform that agreement (GDPR Article 6(1)(b)). Invoicing data is processed to meet our legal obligations under the Danish Bookkeeping Act (GDPR Article 6(1)(c)).

  3. Participants and tutors at our courses, events and webinars
    We process your name, workplace, position, contact details, preferred language, any platform username, billing details and the courses or events you register for or attend. We use this data to register and administer participants, to plan and run the activity, to send you service messages before and after it, to issue certificates where relevant, and to invoice.

    We process this data to perform our agreement with you where you register personally (GDPR Article 6(1)(b)), and otherwise based on our legitimate interest in running the activity (GDPR Article 6(1)(f)). Invoicing data is processed to meet our legal obligations under the Danish Bookkeeping Act (GDPR Article 6(1)(c)).

  4. Exhibitors, sponsors and event partners
    We process your name, employer, position, contact details, preferred language and your activity in connection with the event. We use this data to manage the cooperation, to plan and run the event, to send out relevant exhibitor and sponsor information, and to invoice.

    We process this data based on our legitimate interest in managing the cooperation (GDPR Article 6(1)(f)), to perform an agreement where you are personally a party (GDPR Article 6(1)(b)), and to meet our obligations under the Danish Bookkeeping Act for invoicing data (GDPR Article 6(1)(c)).

  5. Suppliers and business partners
    We process your name, employer, position, contact details and your activity with us. We use this data to manage the cooperation, including consultancy, system supply and support.

    We process this data based on our legitimate interest in managing the relationship (GDPR Article 6(1)(f)) and, where relevant, to perform an agreement (GDPR Article 6(1)(b)).

  6. Users of our customer portals and online platforms
    We process your name, e-mail address, personal login and your use of the portal and related systems. We use this data to give you access, to operate and secure the service, and to produce statistics on the use of our systems.

    We process this data based on our legitimate interest in delivering, operating and securing our platforms (GDPR Article 6(1)(f)) and, where relevant, to perform an agreement (GDPR Article 6(1)(b)).

  7. Visitors to our website
    When you visit our website, we collect data about your use of the site to produce statistics and improve it. We do this based on your consent collected through the cookie banner (GDPR Article 6(1)(a)). You can read about cookies in our separate Cookie Policy.

    Our website also includes a chat feature, or chatbot, provided by GetKarla.ai, which acts as our data processor. The chatbot helps you find the information you are looking for more easily. We use chat data to respond to your enquiry, operate the chat function, perform quality control and improve our website support. We do not use the content of your chat messages for training AI models. We process this data based on our legitimate interest in offering and improving support on our website (GDPR Article 6(1)(f)). Please do not share sensitive personal data in the chat. GetKarla.ai processes the chat data only on our instructions and under a data processing agreement and may not use data for its own purposes including AI training.

  8. Contacts we identify for sales purposes
    We may collect contact details, such as name and position, from public sources and professional networks in order to contact you about our services. We do this based on our legitimate interest in marketing and selling our services (GDPR Article 6(1)(f)), after weighing this interest against your rights. When we collect data about you from sources other than yourself, we may choose to inform you within 30 days (GDPR Article 14) or we may choose not to inform you, based on a weighing of interests (Danish Data Protection Act §22) along with a concrete assessment.

    Any marketing outreach will be in accordance with the Danish Marketing Practices Act.

  9. Job applicants
    When you apply for a job with us, we process the application, CV and the contact and background information you choose to send us, such as your education and professional experience. We use this data to assess you in relation to the position.

    Please do not include confidential or sensitive personal data in your application unless we specifically ask for it.

    We process this data based on our legitimate interest in assessing applicants and filling the role (GDPR Article 6(1)(f)). If your application leads to employment, we keep your application and CV on your employee file. Otherwise we delete your data within six months of giving you a final answer, unless we are still in dialogue with you.

    With your consent, we may keep your application data for up to one year after the recruitment process, so that we can contact you if a similar vacancy becomes relevant. If we choose to keep your data, we always ask for your consent (GDPR Article 6(1)(a)) in advance.

Purposes common to all categories

In addition to the purposes above, we process personal data across all categories to comply with the law and to protect our business. This includes keeping records of our processing, applying the data protection principles and documenting our legal basis, maintaining technical and organisational security, investigating and reporting security breaches, handling enquiries and complaints and confirming identity, handling inspections from authorities, handling disputes, and carrying out statistical and satisfaction surveys. We rely on our legal obligations (GDPR Article 6(1)(c)) and on our legitimate interest in running and protecting our business (GDPR Article 6(1)(f)).

When we rely on legitimate interests, we normally process only professional contact and interaction data, and we do not use sensitive or private information for these purposes.

Profiling

We use profiling for marketing purposes, in that we tailor our marketing based on data such as your position and professional interests. We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing.

Where we collect your data from

We collect personal data from you directly, from your employer or the organisation you are associated with, and from public sources such as websites and professional networks. We may supplement the data we hold with publicly available information.

How we share your data

We use external service providers that process personal data on our behalf. These are our data processors, and we enter into a data processing agreement with each of them to make sure your data is protected and used only on our instructions. In some cases, we disclose personal data to independent controllers, such as public authorities, where the law requires it or where we have a legitimate interest in doing so.

Transfers outside the EU/EEA

We sometimes use data processors located outside the EU/EEA, mainly in the United States. When we transfer personal data outside the EU/EEA, we make sure the transfer is protected and legal. For certified providers in the United States, transfers take place under the EU-US Data Privacy Framework (DPF). For other transfers, we rely on the European Commission’s Standard Contractual Clauses (SCCs), supported by Transfer Impact Assessments (TIAs) that assess the level of protection in the recipient country (GDPR Chapter V, Articles 44 to 49).

Retention

We keep your personal data only for as long as we need it. We retain it to fulfil the purposes described above and to document our right to process it, including your consent to direct marketing where given. Invoicing and accounting data is kept for five years after the end of the financial year in line with the Danish Bookkeeping Act (§12). When the data is no longer needed, we delete it.

Voluntary provision of data

When we collect personal data from you directly, you provide it voluntarily or in order to enter into an agreement with us. You are under no obligation to provide it. If you do not provide the information we need, we may be unable to respond to your request, provide our services, register you for courses or events, give you access to our portals, or send you marketing where you have requested it.

Your rights

Within the limits set by law, you have the following rights regarding our processing of your personal data:

  • The right of access to the personal data we hold about you.
  • The right to rectification of inaccurate data.
  • The right to erasure.
  • The right to restriction of processing.
  • The right to data portability for data you have provided to us.
  • The right to object to processing based on our legitimate interest, including profiling for that purpose.
  • The right to object at any time to processing for direct marketing, after which we will no longer process your data for that purpose.
  • The right to withdraw your consent where our processing is based on consent, without affecting processing carried out before the withdrawal.

To exercise your rights, contact us at info@signumlifescience.com. We will confirm your identity before we act on your request, so that we do not disclose personal data to the wrong person.

You also have the right to lodge a complaint with a supervisory authority. In Denmark, this is the Danish Data Protection Agency, Datatilsynet (www.datatilsynet.dk).

Changes to this policy

We update this policy when our processing or the law changes.
This is version 2.0, effective 07-07-2026, and it replaces the previous version 1.1 of 28 February 2019.