Privacy Statement Glycostem Therapeutics B.V.
Version July 2020
General
This privacy statement (hereinafter referred to as ‘Statement’) applies to customers, business partners and applicants of Glycostem Therapautics B.V. (hereinafter referred to as ‘us’, ‘we’ and ‘our’) and visitors of the website www.glycostem.com (hereinafter referred to as ‘Website’).
If you visit our Website, information of general nature is collected automatically. This information includes, for example, the type of web browser, the operating system which is used, or the domain names of your internet service providers, the date and the length of time of your visit and the pages you visited.
We obtain personal data if you actively provide it to us. For example, if you are or become a business partner or customer of ours or if you sign up for newsletters or apply for a job. We also obtain information from third parties, such as personal data available on public professional websites or from professional social media sources like LinkedIn.
Why do we use your personal data
We use the personal data you provide for marketing and other service-related purposes, such as sending materials that you request, sending you information about our company and our services, updating our website and service offerings, or meeting statutory or other legal requirements.
Newsletter
In order to be able to send newsletters to persons, who are interested and to our customers, we ask for your e-mail address and reason of interest in our company. If you receive our newsletters, we may use your online clicking behaviour to personalize our newsletter and Website for you. After you have registered, we consider processing of this data as consented by you. You have at any time to the possibility to withdraw your consent for receiving our newsletter.
Applicants
We only use applicants’ personal data for recruitment and selection purposes. Unless required by law, Glycostem will not provide these data to other persons or bodies, not belonging to Glycostem, without the applicant’s prior consent. Applicants’ data will be deleted no later than four weeks after the application procedure has ended, unless the personal data are retained, with the applicant’s consent, for one year after the end of the application procedure with a view to possible future vacancies.
Information Requests
In order to contact us via the online form, we store your full name and email address. By submitting this contact form, you provide us with your consent to either contact you via email. We will use this information only to respond to the question you have raised or provide you requested information.
Cookies
Our website uses “cookie” technology, and other similar technologies, to collect additional Website usage data and to improve our services to you. For more information, please be referred to our cookies statement.
Legal basis of the processing of your personal data
The processing of personal data by us is based on a legal basis as set out in the GDPR. We are only allowed to and shall only process your personal data in specific circumstances:
- with your consent;
- where there is a contractual obligation;
- to meet a legal obligation under EU or national legislation; If our processing is based on a legal obligation or necessary for the execution of an agreement we enter into with you and you do not provide the necessary personal information to us, we may not be able to provide our service or fulfil our obligations to you.
- for our organization’s legitimate interests, but only after having assessed that the fundamental rights and freedoms of you as an individual, whose data we are processing, are not seriously impacted (i.e. to inform customers about our similar (new) products or services or to perform the application process).
Transfer of personal data to third parties
We may share your data with third parties that provide database-, server-, maintenance-, security-, marketing-, IT- or other similar services to us, (hereinafter referred to as ‘processors’). If we provide access to your data, we will enter into a ‘data processor agreement’ that requires the third parties (amongst other terms) to keep your data confidential and instructs these parties to process the data only on our behalf. Some of these third parties are established abroad and we have concluded controller-to-processor EU Model Clauses with data processors outside the European Economic Area in order to ensure that your data is adequately protected.
Furthermore, we may disclose your personal data if such disclosure is required by law, or is in response to a legal request.
We will not sell or rent your personal data to any third party.
Transfer of data outside the EEA
In limited and necessary circumstances, your information may be transferred outside of the EEA. We only transfer your data to countries that are deemed to provide an adequate level of safeguards to ensure the security of your data.
Retention time of your personal data
We will only retain your personal data for as long as necessary to fulfil the purpose we collected it for, unless we are required by law to retain the data for a longer period and in such event, we will retain the data for as long as we are required to do so by law.
If you chose to opt-out from communications, we will delete the data, unless this data is required for another purpose set out in this policy or if we are required by law to retain the data.
With respect to the specific retention periods of cookies, please be referred to our cookie statement.
How we secure personal data
We implemented appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access and against all other forms of unlawful processing. Also, we require our data processors to implement such appropriate technical and organizational measures.
Your rights
You may contact us if you wish:
- to know whether or not we process your personal data and access your data;
- to rectify your data;
- to erase your data;
- to restrict your data;
- to object against the processing of your data; and/or
- us to transmit your data to another organization.
Where processing is based on your consent, the right to withdraw consent at any time, without affecting the lawfulness of the processing prior to such withdrawal
You may exercise your rights by sending a request to us via our contact details set out below.
We may request provision of additional information necessary to confirm your identity.
Please note that you have the right to lodge a complaint with the Dutch Supervisory Authority “Autoriteit Persoonsgegevens” at any time regarding the processing of your personal data by us.
Contact details of the Data Protection Officer
We have appointed a Data Protection Officer. You can reach our Data Protection Officer by email at Privacy@glycostem.com
Contact us
If you have any questions or concerns as to how your data is processed or you wish to exercise your rights, please do not hesitate to contact us:
Glycostem Therapeutics B.V at Office@Glycostem.com or you can write using the address of Glycostem Therapeutics B.V., Kloosterstraat 9, NL-5349 AB OSS, The Netherlands.