In the context of our activities (as an independent strategy and management consulting company operating in the Life Science industry, specialized in helping our clients to innovate and navigate through an increasingly complex health ecosystem) we collect, hold, disclose and/or otherwise process personal data. Pursuant to the applicable data protection and privacy legislation, we qualify as the controller with respect to the personal data that we process.
We value your right to privacy and strive to protect your personal data in accordance with applicable data protection legislation and more specifically with the General Data Protection Regulation (“GDPR”) and its national implementing legislation.
In the context of our business (as described above), we process personal data of our clients, of the visitors of our website, of visitors of our premises, of contact persons at administrative authorities, and of persons who otherwise come into contact with us, e.g. because their name and contact details as employee, agent, representative, subcontractor or director of our customers, suppliers, subcontractors and other commercial partners are provided to us.
We collect your personal data in various ways and in various situations:
When we request personal data from you, you have the right to refuse to provide this data. Such a refusal however could obstruct our ability to contract with you or provide the necessary services. Furthermore, it could change the nature and or management of our contractual relationship.
We may collect the following personal data about you (limitative list):
|Identification and contact information||Personal identification data: name, address, telephone/mobile number, email address|
|Electronic identification data: IP addresses, information collected via cookies (see point 10)|
|Personal characteristics||Personal characteristics: sex, birth date, nationality, language preference|
|Profession and employment||Profession and employment information (individual or company, where appropriate VAT number)|
We use personal data for the following purposes:
For your perfect information, you can find hereinafter the legal grounds applicable to these processing activities:
We will implement appropriate safeguards when transferring your personal data to third parties. If necessary, we will for example conclude a data transfer or a processing agreement specifying the limitations to the use of your personal data and the obligations with respect to the security of your personal data.
Your personal data and your profile will not be lent or sold to third parties for marketing purposes without your prior explicit consent.
Your personal data can be transferred to Switzerland, a country outside the European Economic Area, but offering adequate protection of your personal data according to an adequacy decision of the European Commission.
Your personal data will not be stored for longer than is necessary in relation to the purposes for which we process them (as listed above). Afterwards it is still possible that they can be found in our back-ups or archives, but they will no longer be actively processed in a file.
More specifically, the following retention guidelines are applied by us:
Only where we are legally obliged to, or where this is necessary for defending our interests in the context of judicial proceedings (e.g. in case of a dispute), we will store the personal data for longer periods.
We only allow access to your personal data to persons who require this information to perform their tasks. These persons are required to respect strict confidentiality and have to guarantee that they have taken all the necessary administrative, technical and organizational measures to ensure the confidentiality of your personal data.
We will implement the necessary administrative, technical and organizational measures for ensuring a level of security appropriate to the specific risks that we have identified.
We protect your personal data against destruction, loss, alteration, unauthorised disclosure of or access to personal data transmitted, stored or otherwise processed.
Further, we seek to ensure that we keep your personal data accurate and up to date. In view thereof, we kindly request you to inform us of any changes to your personal data (such as a change in your contact details).
In the current case, cookies placed by the website are measuring tools for Google audience Analytics to obtain information on the browsing of the visitors. They allow in particular to understand how the users access the site and to understand how they browse.
Other information depends on the browser of the user. The user can parametrize his/her browser so that (s)he accepts for example the reception of a cookie or offers the possibility of refusing the insertion of a cookie. (S)he can also delete the cookies that were placed.
You have (under certain conditions), the right to:
When your personal data are processed based on your consent, note that you have the right to withdraw that consent at any time, free of charge, and without this having any negative implications for you.
You can exercise your right by contacting us via post or e-mail:
Finally, you have the right to lodge a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels, www.dataprotectionauthority.be) relating to the processing of your personal data by us.
We aim to respond as quickly as possible to your requests or questions. We might request a proof of identity in advance in order to double-check your request.
Annex – More information about your rights as a data subject
|Right to information and right to access your personal data||You may at any time request more information on our processing activities and the personal data that we are keeping from you.|
|Right to rectification of inaccurate or incomplete personal data of||You have the right to require us to, without undue delay, rectify or complete any of your personal data that is inaccurate or incomplete.|
|Right to deletion of your personal data (‘right to be forgotten’)||
You may request us to delete (part of) your personal data in the following situations: - when the processing is no longer necessary for achieving the purposes for which they were collected or otherwise processed; or - when the processing was based on your consent and you have decided to withdraw that consent; or
We note that in some cases, we may refuse to delete your personal data: (i) for exercising the right of freedom of expression and information; (ii) for compliance with a legal obligation; or (iii) for the establishment, exercise or defence of legal claims.
|Right to restriction of processing||
You may request us to (temporarily) restrict the processing of your personal data in the following situations: - when you have contested the accuracy of your personal data, for a period enabling us to verify this accuracy; or - when the processing appears to be unlawful and you request us the restriction of use of your data instead of the deletion of this data; or
|Right to object to the processing of your personal data (free of charge)||You may under certain circumstances object to the processing of your personal data, when such processing is based on our “legitimate interests”. If we agree, we will no longer process your personal data, unless we have compelling legitimate grounds to do so, or because such a processing is necessary.|
|Right to data portability||In some cases, you have the right to receive all your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. This right applies: - in case the processing is based on consent or on the necessity for the performance of a contract; and - in case the processing is carried out by automated means.|