Disruptive Pharma AB (publ) is the data controller for the processing of personal data described in this Privacy Policy. It explains what personal data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR).
1. How we collect data
We collect your personal data:
- Through forms, cookies and other interactions on our website.
- In our day-to-day business operations.
- When we engage in a business relationship
- Through email correspondence.
- When you provide us with data through meetings, social media or events.
- From publicly available sources, professional networks, business databases and third-party business intelligence providers.
2. What personal data we may collect
We may collect and process personal data such as names, job titles, company affiliations, professional contact details, correspondence, and information shared in connection with business relationships, meetings or events. For job applicants, we may also process CVs and other application materials.
We may also collect technical information about website visits, such as IP addresses, browser information and website usage data.
3. Cookies
We use cookies and similar technologies to support website functionality, remember language preferences, analyse website traffic and measure the effectiveness of our marketing activities.
Non-essential cookies and tracking technologies are only used with your consent. You can manage or withdraw your consent at any time through our cookie settings.
4. Why we process personal data
The purposes, legal bases and retention periods for processing personal data are outlined below.
Purpose: To market our products and services through, for example, newsletters, publications and events.
Legal basis: Our legitimate interest in marketing our products and services.
Retention period: We retain personal data for as long as it is relevant for our marketing activities, subject to regular review. If you object to direct marketing, we will stop processing your data for this purpose.
Purpose: To operate and secure our website, respond to enquiries submitted through our contact form, and analyse website usage to improve our website and communications.
Legal basis: Our legitimate interest in operating and securing our website and responding to business enquiries. Consent for non-essential analytics and marketing tracking technologies.
Retention period: Personal data is retained only for as long as necessary for these purposes, subject to regular review.
Purpose: To identify, establish, maintain and develop business relationships with existing and potential partners.
Legal basis: Our legitimate interest in developing and maintaining business relationships.
Retention period: We retain personal data for as long as the business relationship remains active, or for up to five years following the last relevant business interaction. For potential contacts with whom no business interaction has taken place, we generally retain data for up to two years from the date of collection.
Purpose: To manage subscriptions to our press releases, financial communications and company news through our external distribution provider.
Legal basis: Your consent.
Retention period: We retain subscription data until you unsubscribe or withdraw your consent.
Purpose: To administer general meetings, shareholder-related communications and comply with applicable corporate and securities regulations.
Legal basis: Compliance with legal obligations and, where applicable, our legitimate interest in managing shareholder relations.
Retention period: We retain personal data for as long as required by applicable law or necessary for the relevant purpose.
Purpose: To manage recruitment and evaluate job applications.
Legal basis: Our legitimate interest in recruiting employees.
Retention period: Until the recruitment process is completed, unless longer retention is necessary and legally justified.
Purpose: To comply with legal obligations.
Legal basis: To comply with legal obligations, e.g. our legal obligations due to applicable accounting and taxation legislation.
Retention period: As long as prescribed by law.
Purpose: To establish, exercise or defend legal claims.
Legal basis: Our legitimate interest in establishing, exercising or defending any legal claims.
Retention period: Information that is relevant for any legal claim is kept for as long as such claim can be made in accordance with applicable legislation.
5. How we share personal data
We may share personal data with service providers, including providers of IT, website hosting, CRM and communication services, professional advisors and other third parties where necessary for our business operations or to comply with legal obligations.
Where personal data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws.
6. Your rights
Under GDPR, you have the right to request access to, correction or deletion of your personal data, and in certain circumstances, to restrict processing or request data portability. You also have the right to object to processing based on legitimate interests and at any time to processing for direct marketing. Where processing is based on consent, you may withdraw your consent at any time.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority.
7. How to contact us
For questions about this Privacy Policy, how we process personal data or to exercise your rights, please contact:
Disruptive Pharma AB (publ)
Box 5216
102 45 Stockholm
Sweden
Email: info@disruptivepharma.com
Last updated: October 16, 2026.