This Privacy Statement describes how your personal information is collected, processed, used and shared by Confo Therapeutics NV (registered seat Technologiepark-Zwijnaarde 30, B-9052 Ghent).
Privacy Statement
Confo Therapeutics strives to process your personal data in accordance with applicable personal data protection legislation, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) and the Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
- PROCESSING OPERATIONS
In the context of its activities, Confo Therapeutics processes personal data for various purposes:
| Category of personal data | Purpose of processing | Basis for processing |
| Personnel administration | ||
| Personnel
Personal identification data, contact data, education and training, professional experience, financial identification data, family data |
Administration of staff and intermediaries |
Contractual necessity, except for:
– payroll: legal obligation, – evaluation: legitimate interest, – employee satisfaction survey: legitimate interest; – employee stock option plan: consent; – workplace accident insurance: legal obligation, |
| Consultants
Personal identification data, contact data, education and training, professional experience, financial identification data, family data |
Contractual necessity | |
| Directors
Personal identification data, contact data, education and training, professional experience, financial identification data, family data |
Contractual necessity
Legal obligation |
|
| Job applicants | ||
| Suppliers | ||
| Personal identification data (also of some of the supplier’s employees), contact data, financial identification data | Supplier management | Contractual necessity |
| Partnerships | ||
| Personal identification data (also of some of the partner’s employees), contact data, financial identification data | Management of partners | Contractual necessity |
| Security holders | ||
| Personal identification data, contact data, financial data (class, price and number of securities) | Management of security holders | Legal obligation |
| Accounting | ||
| Personal identification data, contact data, financial identification data | Accounting | Legal obligation |
| PR/marketing | ||
| Personal identification data, contact data | Public relations | Consent
Legitimate interest (direct marketing) |
| Website tracking (cookies): cookie policy | ||
| Scientific research | ||
| Clinical trial or medical research study
a separate privacy notice will be sent as part of the informed consent form |
Scientific research | Consent |
| In vitro studies on human samples which were purchased pseudonymized from an accredited biobank and destroyed after their use
Health data, lifestyle data, genetic data |
Scientific research | Consent |
| Processing of notifications regarding breaches of Union or national law (“Whistleblowing Regime”) | ||
| Personal identification data, professional experience (current position), contact data, data about the (alleged) breach of law | Legal obligation | Legal obligation |
RETENTION PERIODS
Retention periods
Depending on the processing, retention periods vary. The applicable regulations and any (legally determined) limitation or retention periods are always taken into account. For questions in this respect, you can always contact us in the manner shown under “Contact us” at the bottom of this page.
TRANSFER OF PERSONAL DATA
Sharing personal data with third parties – Additional information regarding the recipients of your personal data
In certain circumstances, Confo Therapeutics shares your personal data with:
- a potential buyer in the context of mergers and/or acquisitions (due diligence): several types of documents containing personal data (contracts, security registers, org charts and lists of employees) can be shared with the potential buyer, in order to allow them to investigate the desirability of the transaction.
- ICT service providers: to operate this website;
- Cloud based service provider for supplier management;
- human resources service providers in the context of payroll and personnel administration: for recruitment and aspects related to personnel management and payroll processing;
- an external law firm in the context of the whistleblower regime: the complaint, including the personal data of the person reporting the complaint and the person concerned, will be processed by the law firm as an external channel handling the complaints under this legislation;
- insurance companies in the context of personnel administration (group insurance; work place accident insurance; hospitalization insurance).
International transfers
- For the organisation of our ICT services, Confo Therapeutics uses external service providers who store personal data in the United States of America for a limited part of the processing.
This transfer relies on the EU/US Data Protection Framework and standard contractual clauses approved by the European Commission. If you would like further information on this, please contact us.
- In the event of due diligence, transfer of data to third countries might be required depending on the country of residence of the potential buyer.
If a due diligence would give rise to international transfers, the rules on international transfers (art. 45-49 GDPR) will be taken into account.
- In the event of a clinical trial or medical research study, Confo Therapeutics collaborates with a clinical research organisation. Such organisation may be located in a third country, so the processing gives rise to international transfers. Here too, the rules on international transfers (art. 45-49 GDPR) will be taken into account.
YOUR RIGHTS
Under the General Data Protection Regulation, you are granted a number of rights in relation to your personal data. The exercise of these rights is subject to certain conditions by the GDPR and can be found in the relevant articles as referred below.
Where in receiving your complaint or questions, we have reasonable doubts about your identity, we may ask you for additional proof of your identity.
– The right to withdraw your consent at any time (art. 7 GDPR);
– The right to access and your personal data (art. 15 GDPR) and to have it rectified (art. 16 GDPR);
– The right to data erasure, the right to be forgotten (art. 17 GDPR) and the right to restriction of processing (art. 18 GDPR);
– The right to data portability (art. 20 GDPR);
– The right to object to the processing of your personal data for direct marketing purposes and the general right to object based on circumstances specific to your particular situation (art. 21 GDPR);
– The right to lodge a complaint with the supervisory authority (art. 77 GDPR).
In Belgium, this supervisory authority is the Gegevensbeschermingsautoriteit (for more information: https://www.gegevensbeschermingsautoriteit.be/burger/acties/klacht-indienen (Dutch version)).
Before filing a complaint, we encourage you to contact us to find a quick solution to your complaint.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at gdpr@confotherapeutics.com or by mail using the details provided below:
Confo Therapeutics NV
Technologiepark 30
9052 Zwijnaarde
Belgium
CHANGES
We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
Version history:
- 09/06/2020 – launch
- 16/04/2024 – last update
