At European Sperm Bank ApS ("ESB" or "we") data protection and confidentiality is a high priority. This privacy notice sets out clear guidelines for how ESB processes your personal data as part of our services.
Data controller and contact information
Collection of personal data
For purchasers and recipients of donor sperm, the collected personal data will include: Your name, national registration number, contact information, chosen donors, purchase history, credit card information, treatment clinic, online identifiers, as well as information on your navigation on the website. In addition, information on partners and relevant contact persons may be collected. Physical matching with a sperm donor will require photos of you to be included. For genetic matching with a sperm donor, saliva (or blood) samples, ethnicity and health data will be included. Related to adverse reactions, information from your and your donor child’s medical files may be included, along with relevant blood samples and health data.
For customers choosing other products (e.g. sperm analysis, sperm deposit and known donor packages), the collected personal data may include: Your name national registration number, contact information, blood, semen and urine samples, as well as health data, treatment clinic, purchase history and credit card information, online identifiers and information on your navigation on the website. In addition, information on partners, recipients and relevant contact persons may be collected.
In connection with the submission of your data, it will always be stated whether the submission is voluntary or necessary for your purchase or donation.
Use of personal data
Personal data are collected and will be used in connection with:
For purchasers and recipients of donor sperm, the personal data collected will be used in connection with: Your selection of donors, management of membership, placement of orders, purchase history, management of adverse reactions, as well as management of other customer requests (e.g. genetic matching).
Personal data may also be processed in order for us to comply with the applicable strict regulatory requirements.
For customers choosing other products, the personal data collected will be used in connection with: Sperm analysis, sperm deposit and management of known donors.
Website information: Analysis and statistics about the use of our website. Such statistics will not contain personal data.
Please note, that we will only use your personal data to send marketing material if you prior have given your explicit consent, unless legislation allows us to contact you without your prior consent.
Our processing of your personal data has legal basis in your consent, the fulfilment of the agreement with you, and legal obligations. As regards sensitive health data, our processing has legal basis in your consent, the fulfilment of the agreement with you, our compliance with regulatory requirements, and the establishment, exercise or defence of legal claims. Furthermore, ESB may process personal data, including sensitive data, for archiving or statistical purposes.
Transfer to other data controllers
Due to the abovementioned regulatory requirements, we may disclose personal data to public authorities.
Furthermore, it may be necessary under specific circumstances to disclose personal data for the establishment, exercise or defence of legal claims.
Transfer to third countries
Your personal data may be transferred to your treating clinic (e.g. name, national registration number and health data) or a test laboratory (e.g. saliva/blood, health data) in countries within and without the EU/EEA for your identification, the management of adverse reactions and screening purposes to comply with national regulatory requirements. Unless the EU Commission has decided that the level of protection is sufficient, technical and organizational security measures have been taken.
Deletion of personal data
We will delete your personal data when we no longer need to process them in relation to one or more of the purposes set out above in section 4. Due to regulatory requirements and the establishments, etc. of legal claims, the minimum storage period will normally be:
30 years for purchasers and recipients of donor sperm, and 5 years for customers choosing other products (following end of service)
Information about the website use will be deleted within 3 months. However, the data may be processed and stored for a longer period for archiving or statistical purposes or in anonymised form.
We have implemented security measures to ensure that our internal procedures meet our high security policy standards. Accordingly, we strive to protect the quality and integrity of your personal data.
You are at any time entitled to be informed of the personal data about you that we process, but with certain legislative exceptions. You also have the right to object to the collection and further processing of your personal data including profiling/automated decision-making. Furthermore, you have the right to have your personal data rectified, erased or blocked. Moreover, you have the right to receive information about you that you have provided to us, and the right to have this information transmitted to another data controller (data portability).
Links to other websites etc.
Our website may contain links to other websites or to integrated sites. We are not responsible for the contents of the websites of other companies or for the practices of such companies regarding the collection of personal data. When you visit other websites, you should read the owners' policies on the protection of personal data and other relevant policies.
Amendment of data etc.
If you want us to update, amend or delete the personal data that we have recorded about you, wish to get access to the data being processed about you, or if you have any questions concerning the above guidelines, you may contact us at firstname.lastname@example.org.
If you wish to appeal against the processing of your personal data, please contact us by email, telephone or letter as indicated in section 14 above. You may also contact the Data Protection Agency, Borgergade 28, 5., 1300 Copenhagen K.