PRIVACY TERMS
1. Anavo Therapeutics
Anavo Therapeutics is a company comprising of Anavo Therapeutics B.V. (Leiden) and Anavo Therapeutics GmbH (Heidelberg).
Group representative for data protection is:
Anavo Therapeutics BV
J.H. Oortweg 19
2333 CH Leiden
Netherlands
Anavo Therapeutics is committed to comply with all applicable data protection laws and regulations.
2. General
These Privacy Terms (“Privacy Terms”) summarize which personal data we process and how we process it.
We may change provisions of these Privacy Terms from time to time. We will inform you on our website of any changes made. Nevertheless, we encourage you to periodically review our Privacy Terms on our website: https://www.anavotx.com/.
3. Which Personal Information do we process?
If you visit our website, we may process your personal data. In the following paragraphs we will explain for which purposes we process your personal data and how long we store it.
I. Visiting our website
A. To improve our website. We process the following personal data up to 2 years after collecting it:
- Browser information
- Location data at country level
- The duration of your website visit and how you use our websites
- Demographic data
- Device information
Our legitimate interest (art. 6.1.f GDPR) to improve our website is our processing basis.
B. We will make use of cookies when you visit our Website. Cookies are small pieces of software that are installed on your device. More information about the cookies that we use can be found in our cookie statement at www.anavotx.com/cookies
C. When you ask questions or make requests, we will process the following personal data up to 2 years after we last had contact with you:
- Name
- E-mail address
- Phone number
- Content of your communications with us
- Organization
- Language
Our processing basis is our legitimate interest to be able to respond to your questions and requests and to be able to improve our services and the website.
D. If you register yourself for a newsletter on our website, we will process the data mentioned below until you unsubscribe from the newsletter.
- Name
- E-mail address
Our processing basis is consent (art. 6.1.a GDPR) because you voluntarily sign up for the newsletter. You can unsubscribe at any time from newsletters by following the unsubscribe instructions included with each newsletter.
II. Pursuing a career at Anavo Therapeutics
When applying for a job Anavo Therapeutics, we will process the following personal data up to 4 weeks after completing the application or up to 1 year if you request so;
- Name
- E-mail address
- Phone number
Our processing basis is our legitimate interest (art. 6.1.f GDPR) to process your application. When applying for a job will we further inform you about the processing of your personal data related.
4. Sharing of personal information
I. Our data processors
We may ask others to assist us in providing our services and website. These "processors" can therefore process your personal data on our behalf. We agree with these processors that they may only use your personal data to enable our services and the website.
We use the following types of processors:
- parties that host our websites, store data and manage and maintain our servers and databases.
II. Sharing your personal data with third parties
We only share your personal data with third parties if this:
1. is described in these Privacy Terms and we have a valid basis for doing so;
2. is reasonably necessary or appropriate to comply with our legal obligations;
3. is necessary to comply with legal requests from authorities;
4. is necessary to respond to any claims;
5. is necessary to protect the rights, property or safety of us, our visitors, our employees or the public;
6. is necessary to protect ourselves or our users from fraudulent, offensive, inappropriate, or unlawful use of our website.
We will notify you immediately if a government agency makes a request relating to your personal data, unless we are prohibited to do so by law.
Our websites may contain links to websites of others. If you provide your personal data on these third-party pages, the privacy terms of this third party applies. We are not responsible for the content of the privacy terms of these parties and the way in which these parties process your personal data.
We encourage you to review their privacy policy before providing any personal information to them.
Unless otherwise described elsewhere in these Privacy Terms, we do not disclose, sell or trade any personal information about our visitors to any third parties.
5. Protection of your personal data
We have taken appropriate technical and organizational security measures to protect your personal data. We have taken the following measures:
- We have physically and digitally secured our servers so your personal data cannot be viewed by non-authorized people without our consent.
- We use security to ensure that data is sent encrypted between the website and our servers.
- We make backups of your personal data.
- Vulnerabilities in the websites are addressed as soon as possible.
- We have implemented physical and electronic measures designed to prevent unauthorized access, loss or misuse of personal data as much as possible.
6. Your rights
You have certain rights regarding your personal data (Chapter III, art. 13 – 25 GDPR). The rights that we describe below are not absolute rights. We will always consider whether we can reasonably meet your request. If this is not possible, or if it would, for example, be at the expense of the privacy of others, we can refuse your request. If we refuse a request, we will inform you with reasons.
Right to access and data portability (art. 15 and 20 GDPR)
You have the right to request which personal data we process about you. You can also ask us:
- to provide information about the reasons why we process your personal data;
- what types of personal data we process about you;
- what types of parties we share your personal data with;
- how long we store your personal data;
- where the personal data comes from;
- whether we use automated decision-making.
You may also request a copy of your personal data processed by us. We can provide additional copies upon your request, but will charge a reasonable fee for doing so.
Right to rectification (art. 16 GDPR)
If the personal data processed by us is incorrect or incomplete, you can request us to adjust or supplement your personal data.
If we approve your request, we will, insofar as this is reasonably possible, inform the parties to whom we provide data.
Right to erasure of data (art. 17 GDPR)
If you do no not want us to further process certain personal data about you, you can request us to delete some or all your personal data.
If we have accidentally processed data unlawfully or a specific law prescribes that we must delete data, we will delete the data.
If certain personal data is necessary for the settlement of a legal procedure or a (legal) dispute, we will only delete said personal data after the procedure or after dispute has been finally settled.
If we approve your request, we will, as far as is reasonably possible, inform the parties to whom we provide data.
Restriction of processing (art. 18 GDPR)
If you think that we are processing incorrect personal data about you, or believe that we are processing your personal data unlawfully or no longer need to do so, you can request us to restrict the processing of said personal data.
If we restrict the processing of your personal data at your request, we may still use that data for the settlement of legal proceedings or a (legal) dispute.
Automated individual decision-making (Chapter III, Section 4 GDPR)
We do not make decisions based solely on automated processing.
Withdrawal of consent (art. 7 GDPR and art. 13.2(c) GDPR)
You may withdraw your consent at any time by clearing voluntarily completed fields or by contacting us. Our contact details are described below.
Complaints
Please contact us if you have any complaints about processing your personal data. We are happy to help you.
You also have the right to file a complaint with the supervisory authority of the country of your habitual residence:
- for Germany that is the Federal Commissioner for Data Protection and Freedom of Information, to be contacted at https://www.bfdi.bund.de/EN/Home/home_node.html.
- for the Netherlands that is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), to be contacted at https://autoriteitpersoonsgegevens.nl/.
Exercising your rights
You can send the above requests to info@anavotx.com.
Before responding to your request, we will first have to identify you, making sure it concerns your personal data. We will try to do so by contacting you by e-mail or telephone. If we cannot identify you sufficiently, we can ask you for a copy of a valid ID. In such case, you are asked to shield your social security number (BSN), MRZ (Machine Readable Zone) and passport photo.
We aim to deal with your request or complaint within one month after your notification. If it is not possible to decide within one month, we will notify you of the reasons for the delay and when the decision is expected to be provided. This can never be longer than three months after receipt of your request
7. Contact
If you have any questions, concerns, or comments about this privacy statement, please contact us by e-mail at info@anavotx.com.