Bioxodes SA (hereinafter “Bioxodes”) collects data concerning former, existing and prospective vendors and customers (“Partners”), including limited personal data about the employees of such Partners (“Partner Employees”) at the beginning and throughout the course of its vendor/customer relationships. As the controller of Partner Employees’ personal data, Bioxodes will be responsible for what happens to those personal data.
2. The categories of data we process
The personal data we process concerning Partner Employees may include: (i) professional contact information (e.g., name, postal address, email address, fax number and phone number); (ii) professional information (e.g., profession and title, place of work, and relationship to our Partner); (iii) professional mobile phone number.
In some very limited cases, it may be a contractual requirement for us to collect such personal data from Partner Employees (for example, because the Partner Employee is a designated “point of contact”). If this information is not collected, this could result in a breach of contract by Bioxodes or the Partner.
3. Data controller
For the purposes of EU data protection laws, Bioxodes, whose registered Operating Headquarters are located Parc scientifique et technologique – Aéropole - Rue Santos-Dumont, 1, 6041 Gosselies – Belgium, is the Data Controller, i.e. the company responsible for, and which controls the processing of your Personal Data.
4. The legal bases we rely on to process data
We only process Partner Employees’ personal data to the extent it is necessary (i) to comply with Bioxodes’ legal obligations; or (ii) for the purpose of our legitimate interests, including preventing fraud, ensuring compliance with company policies, protecting the rights, property and safety of Bioxodes or others, and Bioxodes’ commercial interest in promoting its business relationships and the services that Bioxodes can offer to Partners. Partner Employees can obtain further information on our legitimate interests, and how we have balanced them against Partner Employees’ rights and freedoms, by contacting us using the details below.
We also rely upon Partner Employees’ consent in order to send marketing e-mails to Partners who are not existing Bioxodes’ customers.
5. What we use data for
In particular, we process the personal data of Partner Employees to: (i) manage our contractual relationship with Partners and exercise our rights under the contract and enforce contractual terms and conditions; (ii) communicate with Partners; (iii) protect against and prevent fraud, unauthorized transactions, claims and other liabilities; (iv) comply with applicable legal requirements, industry standards and our policies; and (v) promote Bioxodes’ relationship with Partners by sending marketing messages and greetings (including by sending marketing messages by e-mail to existing customers).
6. Who we share data with
Bioxodes shares personal data of Partner Employees with any and all of Bioxodes’ employees or consultants who need access to such data in order to carry out work or provide services on Bioxodes’ behalf, whether in the framework of any sort of agreement between Partner and Bioxodes or discussion related thereto.
Bioxodes may share personal data of Partner Employees with government authorities or other third parties if required by law or reasonably necessary to protect the rights, property and safety of Bioxodes and others.
If Bioxodes transfers your personal data to recipients outside of the European Economic Area (EEA), it will protect the data in accordance with applicable law. If the personal data are transferred to countries that have not been recognized by the European Commission as providing an adequate level of data protection, Bioxodes will put in place contractual safeguards to protect the data.
7. How long we keep data for
Bioxodes stores personal data relating to Partner Employees for as long as the Partners are in a contractual relationship with Bioxodes, and for a minimum period of 10 years after that relationship has ended.
8. Data Protection Rights
Partner Employees have a number of data protection rights available to them, which apply in certain circumstances. One key right is the right to object to us using their data, where we are processing the data for the purposes of our own legitimate interests or for the purposes of direct marketing.
The other rights are the right to access to the personal data we process about them, the right to have incorrect personal data corrected, to have data erased where it should no longer be used, and the right to restrict our processing activity to storage of the personal data. Partner Employees have the right to ask us to transfer their personal data to them or to another business (data portability). Finally, Partner Employees have the right to withdraw consent to our use of their personal data, where we rely upon consent as our legal basis for processing (see above).
To exercise these rights, a written request should be sent to us, using our contact details set out below. You will find the contact details of the different Data Protection Authorities at the following link: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
9. Comments, inquiries, requests and complaints
Any comments, inquiries, requests and complaints with respect to the processing of personal data described in this Privacy Notice can be addressed to the attention of Bioxodes’ CEO at Bioxodes SA, 1 rue Santos-Dumont, 6041 Gosselies, Belgium.
We encourage Partner Employees to contact us first if they have concerns about how Bioxodes has handled their data. However, Partner Employees have the right to lodge a complaint about Bioxodes’ processing of their personal data with a supervisory authority, in particular in the EU Member State of their residence, place of work or of an alleged infringement of data protection law.
According to Article 32 of the General Data Protection Regulation, Bioxodes takes appropriate technical and organizational measures to ensure a level of security appropriate to the risk for the rights and freedoms of natural persons, including measures to protect Personal Data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data.
If you have any questions about the security of your Personal Data, you can contact us at firstname.lastname@example.org with the following email subject: “Personal Data Privacy”.