Privacy Statement
Introduction
Welcome to our website, cryohexagon.com, that provides content and information about Cryohexagon’s digital tracking and management platform cryogenic storage and its proprietary cryostorage system (the “Website”). The Website is developed and operated by Cryohexagon Global LLC., a company incorporated under the laws of the State Maryland having its principal place of business at 9304 Kingsley Avenue Bethesda Maryland 20814, United States. (“Cryohexagon” or “we”, “us”, “our”).
This Privacy Policy (“Policy”) explains how information about you is collected and used by the us, such as when we market or promote our products, or administer the business or contractual relationship between Cryohexagon and its customers. Otherwise, when we are providing you with our Subscription Services, we will be considered as a Processor, and our Data Processing Addendum shall apply, not this Policy.
The Website is not directed at users under the age of 18. We do not knowingly collect information or data from children under the age of 18 or knowingly allow minors under the age of 18 to use the Website. You have the right to review the personal information we collect and use about you and the right to request correction of your personal information. To exercise these rights, please contact us at office@cryohexagon.com.
This Policy may be amended from time to time. We will post any change to this Policy on our Website at a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you by email of the changes if we have your email address.
Contact us
If you have any questions, comments or concerns regarding this Policy or our processing of your personal information, please contact us at office@cryohexagon.com. Please note that you have the right to review and request to correct the personal information we collect and use about you.
What we collect and why
You do not have a legal obligation to provide the information that we request. However, if you choose not to provide this information to us, we may not be able to process your website content or feedback, respond to your inquiry , and you may not be able to use some of our Website functionalities.
Methods and sources for collecting your personal information
We collect the personal information from several sources:
- When provided to us through our email or via our online contact form.
- From our service providers helping us to operate the Website.
- Through the device you use to access our Website, including through third party cookies, such as Cloudflare cookies and our Internal cookies.
Sharing your personal information
We will not share your information with third parties, except in the events listed below or when you provide us with your explicit and informed consent.
Data retention and security
We retain your information for as long as needed to operate the Website and our business, and thereafter as needed for record-keeping matters.
We will retain your information for as long as needed to operate the Website. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish, and defend legal claims and enforce our agreements. The overall period of retention is approximately 7 years.
We implement measures to secure your information
We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure your personal information, there is no guarantee that it will be immune from information security risks.
Additional information for individuals in the EU or UK
Cryohexagon is the data controller of the personal information collected via the Website
We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the United Kingdom (UK) region.
Name:
Cryohexagon Global LLC.
Address:
9304 Kingsley Avenue Bethesda Maryland 20814 U.S.A
UK Representative:
Prighter Ltd.
20 Mortlake Mortlake High Street,
London, SW14 8JN,
United Kingdom
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter, or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/19337015619
International data transfers
To facilitate the processing of your information through the Website and our service providers, we will transfer your information to countries outside the EU or the UK. We do so to countries which are recognized by the European commission as having adequate protection for personal data, or under the terms of a data transfer agreement which contains standard data protection contract clauses with adequate safeguards determined by the EU Commission and UK Information Commissioner’s Office.
Legal basis for processing your personal data
Data subject rights
If you are in the EU or the UK, you have the following rights under the GDPR:
Right to Access and receive a copy of your personal information that we process.
Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed.
Right to easily and at any time withdraw your consent to the use of non-essential cookies on our Website. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Data Portability, that is, to receive the personal information that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your personal information transmitted directly from us to the person or entity you designate.
Right to Object to our processing of your personal information based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such personal information for the establishment, exercise, or defense of legal claims.
Right to Restrict us from processing your personal information (except for storing it): (a) if you contest the accuracy of the personal information (in which case the restriction applies only for a period enabling us to determine the accuracy of the personal information); (b) if the processing is unlawful and you prefer to restrict the processing of the personal information rather than requiring the deletion of such data by us; (c) if we no longer need the personal information for the purposes outlined in this Policy, but you require the personal information to establish, exercise or defend legal claims; or (d) if you object to our processing based on our legitimate interest (in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours).
Right to be Forgotten. Under certain circumstances, such as when you object to our processing of your personal information based on our legitimate interest and there are no overriding legitimate grounds for the processing, you have the right to ask us to erase your personal information. However, notwithstanding such request, we may still process your personal information if it is necessary to comply with our legal obligations, or for the establishment, exercise, or defense of legal claims. If you wish to exercise any of these rights, please contact us through the channels listed in this Policy.
When you contact us, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason.
Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.
If you are in the UK, you can lodge a complaint to the Information Commissioner’s Office (ICO) pursuant to the instructions provided here.