This Privacy Policy explains how Biocartis Group NV handles personal data collected through this Website (this “Website”), or which is otherwise processed by us in our role of data controller. Biocartis Group NV values your trust and wants to make sure that you understand our policies and practices regarding data protection. Therefore, we encourage you to read this Privacy Policy. In addition to the privacy practices set out in this Privacy Policy, we have Terms of Use which incorporate the terms of this policy. Our Terms of Use can be read here.

1. WE COMMIT TO PROTECT YOUR PERSONAL DATA

We are committed to protect the security and confidentiality of your personal data. We use appropriate technical and organizational measures in such a manner to help us meet personal data processing requirements of the national and European Union laws, and will ensure the protection of your rights.

If you have any questions about how we handle or protect your personal data, please do not hesitate to contact Biocartis Group NV.

2. PROCESSING OF YOUR PERSONAL DATA

Personal data includes any information relating to an identified or identifiable natural person (also known as a “data subject”). This may include, but is not limited to: your name, address, email address, phone number, electronic identification number or business contact information. More information on the personal data we collect can be found below in specific sections of this Privacy Policy. Please see the section relevant to you.

3. USE OF YOUR PERSONAL DATA

We use your personal data only for the purposes of processing your requests, to conduct our business, to develop analytics and aggregated data that allow us and our partners to improve our websites and related processing activities, and for recruitment-relating purposes or business development purposes. More information on the use of personal data and channels used to collect this data can be found below in specific sections of this Privacy Policy. Please see the section relevant to you.

4. LEGAL GROUND FOR PROCESSING

We will only process your personal data if we have obtained your prior consent, if the processing is necessary to perform our contractual obligations or to take pre-contractual steps at your request, if the processing is necessary to comply with legal or regulatory obligations or if the processing is necessary for our legitimate interests such as for business development, while taking into consideration your interests, fundamental rights and freedoms.

5. USERS OF OUR WEBSITES

Contact Forms

We collect the personal data you provide in contact forms on our Website (e.g. ‘Contact’ Form, ‘IR email alert’ Form).

This personal data includes:

  • Name
  • E-mail address
  • Company
  • Country
  • Other information you choose to provide to us (e.g. phone number, content of your message)

We may use your personal data to get in touch with you to respond to your message. We also may use your personal data to send you direct marketing materials. You can always object to direct marketing, please see the Your rights section of this Privacy Policy.

Country of residence, securities legislation and subscription to investor news

When accessing the ‘Press Release’ section we initially collect your country of residency and capture your confirmation of residency to comply with applicable securities legislation. We also collect your personal data when you use the ‘IR email Alert’ service on our Investor Website. We process personal data you provide by filling in the form to subscribe to the “Biocartis Group NV News”. This personal data includes:

  • Title
  • Name
  • E-mail address
  • Company/Organization/Institute
  • Country
  • Category and Language of choice

Your personal data may be used to send relevant news releases you subscribed to. We may also use your personal data to send you direct marketing materials. You can always object to direct marketing, please see the Your rights section of this Privacy Policy.

Cookies

Our Sites also collect your personal data through the use of Cookies. Cookies are small data files generated by a website and saved by your web browser. Any information obtained consequently is used on an anonymous, aggregated basis. You cannot be identified from such information. You are not required to accept a Cookie that we send to you and you can modify your browser’s settings so that it will not accept Cookies. For more information about the Cookies used on our websites please consult our Cookie Policy.

6. SOCIAL MEDIA PAGES & PLUG-INS

We may use several social media platforms to communicate and monitor our social media presence and visibility. Biocartis Group NV is acting as a joint controller with these social-media platforms in relation to your personal data generated through the use of these pages. We may use aggregated, statistical data about people who visit our social media pages provided to us by the analytics systems integrated into these social media platforms. We are jointly but not equally accountable for your personal data used on our social media pages such as Facebook, LinkedIn, YouTube and Twitter.

In addition, through social plug-ins such as the ‘Like’ button, we send information to social media platforms about your device, which pages you visit and how you use our services. This happens regardless of whether or not you have a social media account or are signed in to it. This is done through the use of Cookies. For more information about the Cookies used on our websites please consult our Cookie Policy.

7. (POTENTIAL) INVESTORS AND FINANCIAL STAKEHOLDERS

We collect personal data of our (potential) investors and financial stakeholders for the following purposes:

  • (Potential) investor & financial stakeholder relationship  development
  • Direct marketing
  • Communications material usage analytics

The personal data that is being used may include but is not limited to: your name, e-mail address, telephone number, organization related details, signature and contact history with Biocartis Group NV. In relation to communications material analytics, your personal data will be retained for 13 months, after which it will be deleted.

8. (INVESTOR) Conference/Webinar participants

If you come in contact with Biocartis Group NV at an (investor) conference or a webinar, Biocartis Group NV may collect your personal data for the following purposes:

You can always object to being contacted, please see the Your rights section of this Privacy Policy.

9. BUSINESS CONTACTS

In case you are a business contact person for Biocartis Group NV, your personal data is used for business relationship management purposes such as maintaining the ongoing relationship with, e.g., our contractors, service providers, partners, consultants, health care professionals and holders of shares or other financial instruments issued by Biocartis Group NV. The personal data that is being used may include but is not limited to: your name, e-mail address, telephone number, organization related details, unique identification number, contact history, number of financial instruments held and signature. This information may either be directly provided by you or by the organization you are related to.

10. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

In accordance with the storage limitation principle, we will not retain your personal data for longer than it is necessary to fulfill the purposes outlined in each section of this Privacy Policy. More specific retention times are listed in relevant sections of this Privacy Policy.

In order to protect Biocartis Group NV against any legal claims or to respond to potential inquiries, files may be stored in back-ups, log files or in archives in compliance with the applicable statutes of limitation. These archived copies will only be used if strictly required for the establishment, exercise or defense of legal claims and can, in such situations, be shared with legal advisors.

11. THIRD PARTIES INVOLVED AND TRANSFER OF YOUR DATA

Your personal data will be disclosed to our media production vendors who are responsible for collecting personal data through the websites and storing it on our behalf.

Your personal data may be used by a parent, subsidiary, or affiliate entity to Biocartis Group NV, partner entities, and the vendors and service providers that we may engage to assist us.

We do not sell, trade, or otherwise transfer to third parties any personal data we collect from you without your consent, except in the cases described below:

  • We may release personal data to authorized agents or third-party contractors whom we employ to perform tasks on our behalf and to the extent we need to share information with them to conduct our business or to provide products, services and make offers to you. Unless we communicate with you differently, our authorized agents do not have the right to use any personal data we share with them beyond what is necessary to work with us. Below you can see a non-exhaustive list of third parties that may get in contact with your personal data on our behalf:
      • Website hosting service providers
      • Cloud service providers
      • Software solution service providers
      • Press release and mailing distribution service providers
      • Two factor authentication service providers
      • Telecommunication companies
      • Collaboration, online meeting, web conferencing and videoconferencing applications service providers
      • Conference organizers providing participant scanning solutions (if applicable)
      • Customer database hosting service providers
      • Communications material usage analytics services
      • Marketing agencies
      • Recruitment agencies through which the applicant applies for the position
      • Assessment service providers
      • Independent contractors
      • Consultancy firms
      • Scientific writers
      • Financial institutions
      • Document management technology service providers
      • Waste management companies (for possible paper files)
  • Your personal data may also be disclosed to third parties that do not act on our behalf but have their own purposes and means of processing of your personal data. Below you can see a non-exhaustive list of third parties that might receive your personal data:
      • (Financial) governmental authorities and bodies if required by law to share your data
      • Conference organizers
      • Our partners (in the context of collaborative work)
      • Social media and social networking service companies

12. International transfers

For users residing in the European Economic Area, (“EEA”), the data that we collect from you may be transferred to, and stored at, a destination outside the EEA. It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers.

If we do transfer data outside the EEA, we will ensure it is protected by employing one of the following safeguards:

  • Transfer the data to a non-EEA country which has received an adequacy decision by the European Commission;
  • Put in place a data transfer and data processing agreement with Biocartis Group NV’s affiliates or any third party to ensure that they protect the data with the same level of protection as required within the EEA;
  • Transfer it to organizations which are part of the Privacy Shield.

13. Your Rights

You, as a data subject whose personal data is being used by us, are entitled to certain rights:

  • Right to access your personal data
  • Right to rectification in case the data is incorrect or incomplete
  • Right to be forgotten
  • Right to data portability (meaning to request your data to be transferred to another organization in machine readable standard format)
  • Right to restriction of processing
  • Right to object to processing when you believe your rights and freedoms override our compelling ground for the processing
  • Right to withdraw your consent if the processing is based on consent

To exercise the above rights, you can contact Biocartis Group NV. After verifying your identity and data subject rights applicability criteria, we will do everything reasonably possible to comply with the request unless it will require completely unreasonable measures (e.g. technically or organizationally virtually impossible measures or extremely costly measures). We may refuse to process requests that are unreasonably repetitive or systematic. All requests are handled within one month (30 calendar days) after receiving them. You also have the right to lodge a complaint with the competent data protection supervisory authority (e.g., the Belgian Supervisory Authority: contact@apd-gba.be; +32 (0)2 274 48 00).

14. MINORS

We do not knowingly collect personal data from children under the age of 16. If we become aware that a child under 16 has provided us with personal data, we will take reasonable steps to remove such information from our systems.

15. CHANGES TO OUR PRIVACY POLICY

From time to time, this Privacy Policy may be revised. Any changes to this Privacy Policy will be indicated through the mention of effective date and version number. Continued use of our Website after changes made to our Privacy Policy indicates your acceptance to the use of newly submitted information.

16. OUR CONTACT DETAILS

Biocartis Group NV, Generaal de Wittelaan 11 B, 2800 Mechelen Belgium