Privacy Statement

This privacy statement (the “Privacy Statement”) describes how your personal information is collected, processed, used and shared by Confo Therapeutics NV (“we”, “us”, “our” or “Confo Therapeutics”).

Confo Therapeutics strives to process your personal data in accordance with applicable personal data protection legislation, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation (GDPR)) and the Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.

1.          Processing operations

In the context of its activities, Confo Therapeutics processes personal data for various purposes:

1.1.       Personnel administration

1.1.1.    Personnel
  • Category of personal data: personal identification data, contact data, education and training, professional experience, financial identification data, family data;
  • Purpose of processing: administration of staff and intermediaries;
  • Basis for processing: contractual necessity, except for:
    • employee satisfaction survey: legitimate interest;
    • employee stock option plan: consent;
    • employee wellbeing: legal obligation;
    • evaluation: legitimate interest;
    • health surveillance of laboratory staff: legal obligation;
    • payroll: legal obligation;
    • workplace accident insurance: legal obligation.
1.1.2.    Consultants
  • Category of personal data: personal identification data, contact data, education and training, professional experience, financial identification data, family data;
  • Purpose of processing: administration of staff and intermediaries;
  • Basis for processing: contractual necessity.
1.1.3.    Directors
  • Category of personal data: personal identification data, contact data, education and training, professional experience, financial identification data, family data;
  • Purpose of processing: administration of staff and intermediaries;
  • Basis for processing: legal obligation.

1.2.       Job applicants

Recruiting Privacy Statement

1.3.       Suppliers

  • Category of personal data: personal identification data (also of some of the supplier’s employees), contact data, financial identification data;
  • Purpose of processing: supplier management;
  • Basis for processing: contractual necessity.

 1.4.       Partnerships

  • Category of personal data: personal identification data (also of some of the partner’s employees), contact data, financial identification data;
  • Purpose of processing: management of partners;
  • Basis for processing: contractual necessity.

1.5.       Security holders

  • Category of personal data: personal identification data, contact data, financial data (class, price and number of securities);
  • Purpose of processing: management of security holders;
  • Basis for processing: legal obligation.

1.6.       Accounting

  • Category of personal data: personal identification data, contact data, financial identification data;
  • Purpose of processing: accounting;
  • Basis for processing: legal obligation.

1.7.       PR/marketing

1.7.1.    Press releases
  • Category of personal data: personal identification data, contact data;
  • Purpose of processing: public relations;
  • Basis for processing: consent.
1.7.2.    Pictures taken in our facilities, for our Website
  • Category of personal data: personal identification data, picture;
  • Purpose of processing: public relations;
  • Basis for processing: consent; legitimate interest.

1.8.       Website tracking (cookies)

Cookie policy

1.9.       Scientific research

1.9.1.    Clinical trial or medical research study
  • Category of personal data: a separate privacy statement will be sent as part of the informed consent form;
  • Purpose of processing: scientific research;
  • Basis for processing: consent.
1.9.2.    In vitro studies on human samples which were purchased pseudonymized from an accredited biobank and destroyed after their use
  • Category of personal data: health data, lifestyle data, genetic data;
  • Purpose of processing: scientific research;
  • Basis for processing: consent.

1.10.   Processing of notifications regarding breaches of Union or national law (“Whistleblowing Regime”)

  • Category of personal data: personal identification data, professional experience (current position), contact data, data about the (alleged) breach of law;
  • Purpose of processing: legal obligation;
  • Basis for processing: legal obligation.

2.          Retention periods

Retention periods depend purposes for limited to what’s necessary for the purposes of processing set out above and may therefore vary. The applicable regulations and any (legally determined) limitation or retention periods are always taken into account. For questions in this respect, you can always contact Confo Therapeutics in the manner shown under “Contact us” at the bottom of this page.

3.          External links

Links to third-party websites are provided on our website (the “Website”): the Open Positions page contains a link to job openings (“Apply now”) that reroutes the user to the Recruitee website.

The Contact us page contains a link (“Google Maps”) rerouting the user to Google Maps.

On the bottom of our Website, the LinkedIn icon appears, rerouting to the LinkedIn website. The same goes for the link to Marsmedia (“Webdesign” and “Mars”).

By clicking on these, you will leave our Website and enter the aforementioned websites. The activation of these links is the responsibility of you as the user. Confo Therapeutics recommends consulting both the privacy statement and the cookie policy of these websites.

4.          Transfer of personal data

4.1.       Sharing personal data with third parties – Additional information regarding the recipients of your personal data

In certain circumstances, Confo Therapeutics shares your personal data with:

  • a potential buyer and their legal advisers, in the context of mergers and/or acquisitions (due diligence): several types of documents containing personal data (contracts, security registers, org charts and lists of employees) can be shared with the potential buyer, in order to allow them to investigate the desirability of the transaction; therefore, this transfer is based on the legitimate interests of Confo Therapeutics and of the potential buyer.
  • ICT service providers: to operate this Website;
  • Cloud based service provider for supplier management;
  • human resources service providers in the context of payroll and personnel administration: for recruitment and aspects related to personnel management and payroll processing;
  • an external law firm in the context of due diligence and our corporate housekeeping: several types of documents containing personal data (contracts, security registers, org charts and lists of employees) can be shared with an external law firm in order to obtain their support and services for negotiating mergers and/or acquisitions or for corporate housekeeping;
  • an external law firm in the context of the whistleblower regime: the complaint, including the personal data of the person reporting the complaint and the person concerned, will be processed by the law firm as an external channel handling the complaints under this legislation;
  • insurance companies in the context of personnel administration (group insurance; work place accident insurance; hospitalization insurance).

4.2.       International transfers

For the organisation of ICT services, Confo Therapeutics uses external service providers who store personal data in the United States of America for a limited part of the processing. This transfer relies on the EU/US Data Protection Framework and standard contractual clauses approved by the European Commission. If you would like further information on this, please contact us.

In the event of due diligence, transfer of data to third countries might be required depending on the country of residence of the potential buyer. If a due diligence would give rise to international transfers, the rules on international transfers (art. 45-49 GDPR) will be taken into account.

In the event of a clinical trial or medical research study, Confo Therapeutics collaborates with a clinical research organisation. Such organisation may be located in a third country, so the processing gives rise to international transfers. Here too, the rules on international transfers (art. 45-49 GDPR) will be taken into account.

5.          Your rights

Under the General Data Protection Regulation, you are granted a number of rights in relation to your personal data. The exercise of these rights is subject to certain conditions by the GDPR and can be found in the relevant articles as referred below.

Where in receiving your complaint or questions, Confo Therapeutics has reasonable doubts about your identity, we may ask you for additional proof of your identity.

  • The right to withdraw your consent at any time (art. 7 GDPR);
  • The right to access and your personal data (art. 15 GDPR) and to have it rectified (art. 16 GDPR);
  • The right to data erasure, the right to be forgotten (art. 17 GDPR) and the right to restriction of processing (art. 18 GDPR);
  • The right to data portability (art. 20 GDPR);
  • The right to object to the processing of your personal data for direct marketing purposes and the general right to object based on circumstances specific to your particular situation (art. 21 GDPR);
  • The right to lodge a complaint with the supervisory authority (art. 77 GDPR).

In Belgium, this supervisory authority is the Gegevensbeschermingsautoriteit (for more information: https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen (Dutch version)).

Before filing a complaint, we encourage you to contact us to find a quick solution to your complaint.

6.          Contact us

For more information about Confo Therapeutics’s privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at [email protected] or by mail using the details provided below:

Confo Therapeutics NV

Technologiepark-Zwijnaarde 30

9052 Zwijnaarde

Belgium

7.          Changes

Confo Therapeutics may update this Privacy Statement from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

Version history:

  • 9 June 2020 – launch
  • 24 February 2025 – last update