This privacy policy sets out how Precirix NV (“Precirix”, “we”) uses and protects your personal data.

Precirix is a privately-held, biopharmaceutical company with its corporate domicile and principal place of business at Burgemeester Etienne Demunterlaan 3, 1090 Brussels, Belgium and listed in the Commercial Register of the Belgian Chamber of Commerce under number BE 0564.736.473. This policy applies to the personal data for which Precirix acts as data controller; in other words, where we have control over what happens with your data and how this data is handled.

Precirix is committed to ensure that your privacy is protected and will only process your personal data in conformity with the General Data Protection Regulation or GDPR (in effect since May 25, 2018). Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy policy.

1. Profile data or customer relationship data

We may collect and store the following information on our customers and business partners (or their personnel) to create profiles in order to facilitate the administration of our services and to maintain contact:

• name, surname and job title
• contact information including telephone number or email address
• internet protocol (IP) address
• demographic information such as postcode
• social media tracking pixels that allow platforms such as Facebook and Twitter to interact with this website
• other information relevant to customer and/or job offers

The legal basis for this processing is your consent OR the performance of a contract between you and us and/or taking steps, at you request, to enter into such a contract OR our legitimate interests, namely the proper administration of our website and business, our relationships with customers, communicating with customers and keeping records of those communications.

When you voluntarily provide us this information through our websites or any other information channel, the personal data provided by you will be used only for the purpose of responding to your query or your request for information. The legal basis for such processing is your consent. We will not use this personal data for direct marketing purposes.

2. Job applicant data

If you post your personal data as a job applicant, the personal data provided by you will be used for recruitment and employment purposes or –if you agree to this- for informing you of future job opportunities. The legal basis for this processing is taking steps, at you request, to enter into a contract between you and us OR your consent.

3. Clinical trial data

If you are a patient you may participate in clinical trials of Precirix’ products in order to further research and develop these therapeutics drugs. By giving consent to participate in such clinical trials, the doctor or investigator conducting the clinical trial will collect personal data of the patient, including data relating to the patient's health and pharmaceutical needs. Precirix receives this information in a pseudonymized form, which means that we do not receive data such as the patient’s name or address (Or any other contact information) so that we cannot directly identify the patient. On occasions Precirix’ employees or contractors working on behalf of Precirix, may however access the patient’s personal data at the source of collection for the purpose of verifying data. The patient data will only be processed for scientific research purposes with appropriate safeguards in place.

Personal data about the doctors and investigators conducting clinical trials and people who assist them is collected by Precirix as well. In general, the type of this information includes the name, address, telephone details, field of expertise, position, role in study and qualifications and includes information provided on Curricula Vitae and Financial Disclosure Forms. Precirix is required to obtain such data on potential or actual investigators in order to maintain quality clinical trials (legitimate interests and the performance of contracts, or taking steps, at your request, to enter this contract) and consistently meet global regulatory and compliance guidelines (legal obligation).

4. About cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. We are not using cookies on our website.

1. Transfers to third parties

We may disclose your personal data to third parties in the following cases:

• insofar as reasonably necessary for our business or administration purposes. Under certain circumstances, these third parties provide technical, organisational or consultancy support services (e.g. IT-support or legal support) and may occasionally have access to your personal data in order to enable them to provide these services. All companies providing such support services are required to apply the same standards of protection as us and cannot use your personal data for their own purposes;
• when disclosure is necessary for compliance with a legal obligation to which we are subject; or
• when we have your consent to disclose your personal data.

Your personal data will not be transferred to third parties without taking appropriate protection (i.e. encryption, such as the Secure Socket Layer (SSL) protocol, password, secured connection…).

We will never sell or rent your personal data to third parties.

2. International transfers

We have offices and facilities in Brussels, Belgium and may collaborate with other partners outside the EU as well. Transfers of your data outside of EU countries will be protected by appropriate safeguards, namely the use of standard data protection clauses adopted and approved by the European Commission, a copy of which can be obtained from our Data Protection Officer. Your personal data are stored on the secure servers of Precirix or our IT partner (add name if necessary).

3. Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over these other websites. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites; and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the websites concerned.

Personal data that we process for any purpose or purposes shall not be kept for longer than is necessary for that purpose or those purposes.

The period of retention of job applicant data will be no longer than two (2) years.

The period of retention of clinical trial data will be at least twenty (20) years after the completion of the trial

In some cases, it is not possible for us to specify in advance the periods for which your personal data will be retained. In such cases, we will determine the period of retention based on the following criteria:

• the period of retention of profile data will be determined based on current relationship but will be no longer than two (2) years after our last contact.
• the period of retention of customer relationship data will be determined based on our contractual agreements but will be no longer than 10 years after conclusion of the contract.

Notwithstanding the other provisions of this section, we may retain your personal data where such retention is necessary for compliance with a legal obligation to which we are subject.

It is important to know that you can exercise different rights which give you a certain control over your personal data. You can always contact our Data Protection Officer at dataprivacy@Precirix.com to exercise your rights:

• Right to be informed about the purposes of the processing (see above) and the identity of the data controller.
• Right of access: The Data Subject may, at any time, have access to the data that Precirix has on him or check if he is included in the database of Precirix.
• Right to rectification: We take all reasonable steps to ensure that the data we hold is up to date. We encourage you from time to time to consult us to check that your data is up to date. If you find that your data is inaccurate or incomplete, you have the right to ask us to correct it.
• Right to object: The Data Subject may, at any time, object to the use of his data by Precirix and by its active partners (...). .
• Right to erasure: The Data Subject may, at any time, notify Precirix of corrections to the data concerning him and, where appropriate, request the deletion of his personal data.
• Right of limitation of processing: the Data Subject may, in particular, obtain a limitation of processing when he has objected to the processing, when he disputes the accuracy of the data, or when he considers that the processing is illegal.
• Right of portability: The Data Subject has the right to receive the personal data that he has communicated to Precirix and may also ask said company to send this data to another data controller

If you have any questions or complaints on how Precirix processes your personal data, you can always contact our Data Protection Officer via the following e-mail: dataprivacy@Precirix.com.

If you believe that our processing of your personal data infringes data protection laws, you also have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. We however kindly request that you also present your complaints to our Data Protection Officer first, so that we can quickly find a suitable solution to your problem.

For Belgium:
Data Protection Authority
Rue de la Presse, 35 - 1000 Brussels
+32 2 274 48 00
commission@privacycommission.be