PHAREA LAB EXTERNAL PRIVACY NOTICE

1. Website

1.1 General information

Protection of the privacy of the users of Pharea Lab website is important to us. In this section we wish to advise you of the types of information collected by Pharea Lab, concerning the users of the www.pharealab.nl website (the “Website”) and explain how the information is used.

Please note that there are certain links to third-party websites available on the Website

to which this Privacy Notice does not apply. This means that a link on our Website may

redirect you to a third-party website that Pharea Lab does not control – in particular it does not control the terms and policies of collecting and processing information concerning users of such third-party websites.

By using the Website, you agree to the terms and conditions set out in this Privacy Notice.

1.2 Collection and processing of personal data of website visitors

As in the case of most websites, the following data is routinely collected when you visit

our Website: name of your internet service provider (IP address, anonymous), the website from which you accessed our Website, the Website subpages you visited, browser type, and date and duration of the visit. Such information is evaluated on an anonymous basis and may not be used to identify the persons visiting the Website. The collected information is used exclusively for the purpose of improving the attractiveness and functionality of the Website.

In addition, Pharea Lab may collect and process user information such as e-mail address and other data (e.g. name, surname, telephone number) provided voluntarily by the user when sending a query, giving comments about operation of the Website or contacting us using a contact form. In any such case, the personal data is provided by the user voluntarily but is indispensable if the question is to be responded to. By providing his or her personal data, a user agrees to the processing of the data only for the purposes of responding to the question. Any personal data that we receive for the purpose of answering a question is stored safely. Any personal data provided to us by a user may only be accessed by persons holding special authorization to access such personal data.

Each user has the right to access their personal data, to demand its rectification or

removal, to have its processing restricted, to have the data transferred and to object

against the processing of the data, as well as the right to withdraw their consent to the

processing of the data, lodge a complaint with the supervisory authority in each case subject to conformity with the rules that follow from the personal data protection laws and regulations. Any personal data we obtain from a user will be processed only for such time as is necessary to respond to the question asked. No data provided to us for the aforementioned purposes will be made available to any third parties. When the data no longer needs to be stored, it will be safely and permanently removed or anonymised, or access to it will be blocked to the extent required by the applicable personal data retention regulations.

2. Collection and processing of personal data of contractors

Pharea Lab may also collect and process personal data of the contractors and contractors’ authorised representatives (e.g. name, surname, e – mail address, company data). Pharea Lab collect and process these personal data for the purposes of performance of contract between the Parties, communication for the purposes of performing a contract with a person other than the other party to the contract, for instance communication with employees authorised to act as points of contact, and communication to maintain business relationships. Processing aforementioned personal data is legally based on necessity for the performance of a contract

to which the data subject is party or necessity for the purposes of the legitimate interests pursued by the controller.

Each contractor or contractor’s authorised representative has the right to request access to his/her personal data and obtain copies of the data, to rectification of the data, to erasure of his/her data (in specified circumstances), to lodge a complaint with a supervisory authority competent for personal data protection, to restriction of processing to object against the processing of the data, as well as the right to withdraw their consent to the processing of the data. Pharea Lab use the services of entities

providing day-to-day business support. Pharea Lab may transfer contractor or contractor’s authorised representative personal data to those entities. However, Pharea Lab will only disclose your data to them under relevant outsourcing agreements. In case these parties are located outside the European Economic Area (“EEA”), adequate measures will be taken to ensure adequate protection of your personal data. Contractor or contractor’s authorised representative data may also be transferred to entities who have the right to request such data in accordance with applicable laws, for instance to law enforcement authorities, based on a valid legal basis (e.g. for the purposes of pending criminal proceedings). Pharea Lab is processing contractor or contractor’s authorised representative personal data until a contract expires (thereafter the data may only be retained if this is required or permitted by law, for instance for the purposes of enforcing legal claims) or until the business relationship is terminated or a valid

objection is made by the data subject.

3. Cookies

When you visit our Website, we may send cookies to your computer or other device you use. We use cookies to track user’s preferences and to know how you use the Website.

Cookies are used for user identification and proper assignment of historical user data

collected during previous visits to the Website.

We use both temporary cookie files (session cookies) and persistent cookies. You may delete cookies from your browser at any time or block cookies from being installed on your device.

However, this may affect the operation of our Website or even result in its blocking.

4. Miscellaneous

This Privacy Notice may be updated from time to time to reflect any changes, amendments to applicable laws or improvements of data processing by Pharea Lab.

If you have any problems, queries or suggestions concerning the information presented on the Website or its subpages, or any questions concerning personal data protection, please contact us at the following email address: contact@pharealab.nl We will make every effort to clear your doubts.

Update of August 2024

Information obligation

May 25th 2018 was the day of coming into force of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of April 27th 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”). Below we provide key information you should know about our processing of personal data as required under applicable laws and in order to afford appropriate personal data protection to data subjects.

Who is the data controller?

The data controller of your personal data is Pharea Lab B.V., with its registered office at Amsterdam, Strawinskylaan 709, Towar A, 7tj floor, 1077 XX Amsterdam.

You may contact us contact@pharealab.nl

What data do we process?

We process the data you provide in connection with you or your employer or principal having entered into a contract with us. The data may include, without limitation, your name, surname, email address, phone number, position and employer data. If you are an independent entrepreneur, we will also process your tax identification number (NIP), industry identification number (REGON), registered address and bank account number.

What is the purpose and legal basis of processing? How long do we process personal data?

The legal basis and retention period for your personal data used for the individual purposes are provided in the table below.

Who do we transfer personal data to?

We use the services of entities providing and maintaining our IT systems and entities providing dayto-day business support. We may transfer your personal data to those entities. However, we will only disclose your data to them under relevant outsourcing agreements, and we will ensure that they have implemented appropriate technical and organisational data protection measures. These entities will only process your data on our instruction and in line with the agreed purpose.

Your data may also be transferred to entities who have the right to request such data in accordance with applicable laws, for instance to law enforcement authorities, based on a valid legal basis (e.g. for the purposes of pending criminal proceedings).

Do you have to provide your personal data?

Your decision to provide your personal data to us is always voluntary. However, if you decide not to provide your personal data, we may be unable to work with you.

What are your rights?

You have the following rights in relation to the processing of your personal data by us:

  • the right to request access to your personal data and obtain copies of the data,
  • the right to rectification of your data,
  • the right to erasure of your data (in specified circumstances),
  • the right to lodge a complaint with a supervisory authority competent for personal data protection,
  • the right to restriction of processing.

If you have consented to the processing of your personal data by us, you also have the right to:

  • withdraw the consent to the extent it provides the basis for its processing. The withdrawal of consent will not have an impact on the lawfulness of processing based on consent before its withdrawal.
  • receive your personal data in a structured, commonly used, machine-readable and interoperable format and transmit it to another controller.

In order to enforce these rights, you should contact the data controller or the Data Protection Officer.

Contact details of the Data Protection Officer

In order to protect your personal data, facilitate contact regarding all aspects of personal data processing and enable you to enforce your rights related to data processing, we have appointed a Data Protection Officer. The details of the Data Protection Officer are given below.

Mailing address: contact@pharealab.nl