Based on your professional role (and the organisation you represent) your personal data can exist in Bariums marketing system. Bariums process your data based on our legitimate interest. This mean that Barium, in each individual case, have identified a mutual interest/need for Barium to offer you our services, and that this interest is not overridden by the interests or fundamental rights and freedoms of the data subject (you). Based on this weighing of interests your contact information can be collected from publicly available areas like your company's website.
After we have collected your contact information we will inform you of this by a sending you a marketing e-mail. In this email you will be able to opt out from future marketing communication of the same type.
You can initiate contact with Barium thorough different communication channels. Perhaps you are interested in our products and services and want to download a white paper or join one of our events. When you contact us, your contact information will be processed in our marketing system.
Legitimate interest is used as a lawful ground in this case. If you have shown interest in Barium we believe we have a legitimate interest of performing more direct marketing actions towards you. Of course, you will still be able to opt out from email marketing communication if you wish.
Barium do log user information about how you use our website and our services. This information includes IP: number, type of client, web browser and information of how you interact with our website and services. e.g. the functions you use, or which buttons being clicked.
Barium base all processing of information about you as a visitor on legitimate interest. Barium are responsible of the security and integrity of our website. Barium will delete the processed data when we no longer think it’s no longer needed. Maximum 24 months though.
In situations when you have initiated contact with Barium we will process your data as long as you or Barium want to stop the processing. Easiest way for you to stop all further processing by email marketing events is by klick on the link in any of the mails you get from us.
If Barium have initiated contact with you, we will only store your personal data for the duration of time we think they are relevant for us to fulfil the purpose (marketing activities). This means that if we don't have had an active dialogue the last 12 month, your contact information will be deleted from our CRM system.
Barium do not share your personal data with other external parties except the sub processors we have data processing agreements with. Some of these sub processors are located outside EU/EES area. In these cases, Barium guarantee that it exists an lawful ground of the data transmission of your personal data to that country. This is guaranteed by an agreement that include EU: s standard clauses or by the fact that the sub processor can show compliance EU: s agreement with USA, the Privacy Shield framework. One example of such subcontractor is our CRM supplier SalesForce. We have listed all our sub processors on out legal page on our website.
When Barium perform marketing activities via email, your personal data (email address, and name) may temporarily be stored in USA before the email is forwarded to you as a recipient somewhere in the world. Sub processors involved in this processing activities are compliant to the Privacy Shield Framework.
Personal data (contact information) stored in our CRM systems are physically stored in USA. Sub processors involved in this processing activities are compliant to the Privacy Shield Framework.
Barium is obligated to only process personal data that are correct, relevant and necessary to our legitimate processing purposes. As a data subject you always have right to access your own personal data and check that Barium is processing it correctly. All according to GDPR article 15.
Barium want it to be easy for you to have control over your personal data. Even though Barium does not use consent when we collect and process your personal data you can always opt out from marketing emails. And you can always claim your right to access (and other rights as, the right to be forgotten) by applying for them.
To claim your right to access, and other rights stated in GDPR. You can apply for them by sending in a request to firstname.lastname@example.org
You will be informed and guided through the entire process.
This policy document is owned by Bariums DPO (data Protection Officer). The policy is reviewed at least once/year by an external party during Bariums ISO 27001 certificate audits.