PRIVACY AND COOKIE STATEMENT ANACURA*

* The Anacura Group comprises the following entities: Anabiotec NV (0466.037.587), Bonum NV (0447.433.680), Ergo Tua Rura Manebunt BV (0826.447.720), Laboratorium M. Nuytinck BV (0427.563.924), Labo voor Klinische Biologie BV (0451.023.967), and Post Verba Verbera NV (0463.762.641).

This Privacy Statement therefore applies to all of the aforementioned entities and their associated websites (www.nuytinck.be, www.anabiotec.com, www.ohmx.bio, and www.discoverystudio.be) (hereinafter referred to as the "Websites"). For the sake of simplicity, these entities are collectively referred to herein as "Anacura", without prejudice to their individual responsibilities with respect to the activities for which they act as "Controller".

 

Summary (2-minute read)

We are commited to protecting your privacy and ensuring that your personal data is handled with care and in accordance with applicable data protection laws. 

Accordingly, we provide you with this 2-minute summary outlining the essential information regarding the processing of your Personal Data.

What you need to know:

First: you always retain control over you Personal Data. 

 

Who does this Privacy Statement apply to?

This notice applies to all individuals whose Personal Data we may collect, use, disclose, or otherwise process, including in particular:

• Visitors and users of the following Websites: www.anacura.com ; www.nuytinck.be ; www.anabiotec.com ; www.ohmx.bio and www.discoverystudio.bio.
• Patients using Anacura's services;
• (Representatives of) healthcare professionals (such as physicians, healthcare providers, or medical practices) and healthcare institutions (such as hospitals, nursing homes, and residential care facilities) that collaborate with Anacura in connection with the business activities and services provided by Anacura or its entities in their capacity as a medical laboratory, medical or analytical service provider, or in any other role in which they operate;
• (Representatives of) suppliers of goods and services, IT providers, consultants, legal advisers, accountants, and other third parties that maintain a business relationship with Anacura;
• Individuals applying for a position with Anacura;
• Any other individuals whose Personal Data may be processed by Anacura

What personal Data do we collect about you?

• If you contact us through our Websites or via any other channel, we collect your contact details (such as your name, your employer’s/company’s name, email address, or telephone number) and information relating to your communications with Anacura, including both the content of those communications and technical information regarding your visit to our Websites.
• When you use Anacura’s services in your capacity as a patient or study participant, we also process your personal health information, which may either be provided directly by you as the patient or participant, or obtained through a healthcare professional or healthcare institution. We also process personal data such as your address, date of birth, national registration number, health insurance details, bank account number, email address, telephone number, and gender.
• When you enter into a contract with us as a customer, (prospective) business partner, or supplier, we may collect and process your contact details (such as your name, your employer’s/company’s name, email address, or telephone number), financial information (such as bank account details and transaction data), and contractual information (such as the date and nature of our agreement).
• When you enter our buildings or premises as a visitor, you may be required to register. For this purpose, we may ask you to provide certain identification details, including your first and last name and, where applicable, the name of your company.
• If you apply for a position with Anacura, we collect and process the information you provide to us, including identification details, your résumé (CV), and motivation letter.
• Finally, we use cookies to collect information about your use of our Websites.

Why do we collect your Personal Data?

• To respond to your requests.
• To establish and/or maintain our contractual relationship with you.
• To provide you with the requested information and perform our services.
• To ensure your safety when visiting our premises.
• To safeguard the confidentiality of our research, services, and products.
• For laboratory management purposes, including the performance of analyses and tests, the interpretation and communication of your results, and the administrative management of the laboratory.
• To further use your pseudonymised or anonymised data (where possible) for scientific research or quality control purposes, with a view to improving our services and the quality of our processes.
• To manage our database of healthcare professionals and healthcare institutions.
• To conduct satisfaction surveys.
• To assess your job application.
• Finally, to provide, maintain, and improve our Websites.

Who has access to your Personal Data?

• Only those members of Anacura’s authorised personnel who require access to your Personal Data for the performance of their duties will have access to it.
• Your Personal Data may also be disclosed to the following trusted recipients:
  • The prescribing healthcare professional(s) or healthcare institution(s) at whose request the samples and analyses were performed, unless you object to such disclosure;
  • Healthcare professionals or healthcare institutions designated by you, upon your explicit request;
  • Reference medical biology laboratories to which your samples may be forwarded for analysis where necessary;
  • Government authorities and public administrations, where required by law or pursuant to our legal obligations.
  • Sponsors or scientific research institutions for the purposes of scientific or statistical research or quality control.
  • In addition, we engage a number of trusted suppliers and service providers, including, but not limited to, providers of IT services, digital solutions, and web hosting services. These parties are contractually and legally required to safeguard your privacy at all times and will process Personal Data only in accordance with our instructions and for the purposes described above.
• Finally, certain third parties may be engaged to process Personal Data on our behalf. Such processing may only take place for the purposes outlined above, under our instructions, and subject to the prior execution of a data processing agreement.

What control do you have over your Personal Data?

• You may request at any time that we correct or delete your Personal Data. You may also object to the sharing of your results or health information with a specific healthcare professional or healthcare institution.
• To exercise these rights, please send an email to dataprotection@anacura.com and follow the procedure described in Article 5.7 of our full Privacy Statement.
• Any request for erasure will be assessed on a case-by-case basis. Anacura may not be able to comply with every request, for example where the data must be retained for legal reasons (such as information forming part of your official patient record).
• You may also request a copy of all information we hold about you at any time by sending an email to the same address. 

What do we do to protect your Personal Data?

• We have implemented the required technical and organisational security measures.
• Your Personal Data is stored on highly secure servers located within the European Economic Area (EEA).
• To improve our services, Anacura may use the data you provide. However, Anacura will always process such data in a GDPR-compliant manner, using state-of-the-art software and solutions.
• We have implemented internal procedures to safeguard the confidentiality of our IT infrastructure and to ensure that it is managed responsibly and securely.

If you would like to learn more, we invite you to read our full Privacy Statement below, where these matters are explained in greater detail.

Full Privacy and Cookie Statement

Version 1.0 - 10 June 2026 

ARTICLE 1 - GENERAL

1. 1. Anacura (hereinafter referred to as "we", "us", "our", or "Anacura"), having its registered office at Noorwegenstraat 4, 9940 Evergem, Belgium, and registered with the Crossroads Bank for Enterprises under company number BE0463.762.641 (Post Verba Verbera NV), acts as the "Controller responsible" for the processing of your Personal Data, including in connection with your use of the Website (www.anacura.com) (hereinafter referred to as the "Website" or the "Websites").
   2. In this Privacy Statement, "Personal Data" means any information relating to an identified or identifiable natural person. We may collect, use, share, or otherwise process Personal Data of individuals belonging to the following categories:
      • Category A: Visitors to and users of the Websites (www.anacura.com, www.nuytinck.be, www.anabiotec.com, www.ohmx.bio and www.discoverystudio.bio) (hereinafter referred to as "Visitors");
      • Category B: (Representatives of) suppliers of goods or services, including IT service providers, consultants, lawyers, accountants, and other third parties who collaborate with Anacura or may potentially collaborate with Anacura (hereinafter referred to as "Suppliers");
      • Category C: Patients or study participants who have made use of Anacura’s services, either through a healthcare professional or healthcare institution or on their own initiative, and whose Personal Data have been processed in connection with the provision of our services (hereinafter referred to as "Patients");
      • Category D: (Representatives of) healthcare professionals who collaborate with Anacura in connection with its services and activities (hereinafter referred to as "Healthcare Professionals"), as well as healthcare institutions, such as nursing homes, residential care centres, and hospitals, that collaborate with Anacura in connection with its services and activities (hereinafter referred to as "Healthcare Institutions");
      • Category E: Individuals applying for a position with Anacura (hereinafter referred to as "Applicants");
      • Category F: Any other individuals whose Personal Data may be processed by Anacura, including visitors to the physical premises of Anacura or its affiliated entities (hereinafter referred to as "Other Individuals").
   3.  The collection and processing of Personal Data are subject to strict legal requirements. We process Personal Data in accordance with:
      • Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR"); and/or
      • Any applicable Belgian laws and regulations, whether current or future, relating to the implementation of the GDPR or otherwise governing the processing of Personal Data.
   4. By visiting or using our Websites (www.anacura.com, www.nuytinck.be, www.anabiotec.com, www.ohmx.bio, and www.discoverystudio.bio), you acknowledge that you have read and understood this Privacy Statement in its entirety and without reservation. This means that you are fully informed about the manner in which we collect, use, and process your Personal Data, in accordance with the provisions of this Privacy Statement and for the purposes described herein.
   5. This Privacy Statement applies solely to the pages hosted on our Websites and to the business activities carried out by Anacura. It does not apply to third-party websites or pages to which we may refer or provide links, and whose privacy practices may differ from our own. Accordingly, Anacura is not responsible for any data contained on, collected by, or processed through such third-party websites.

ARTICLE 2 - CATEGORIES OF PERSONAL DATA PROCESSED

For the purposes described in Article 3, Anacura may process the following categories of your Personal Data::

2.1 Processing of Personal Data of visitors and suppliers:

Data category	Relevant data subjects	Details	Context
Category A.1 Category B.1 Category F.1 (Visitors, suppliers and other individuals)	(Professional) identification and contact details	First name, last name, telephone number, email address, address, and country; Any additional questions, comments, or remarks.	Your identification and contact details are provided to us when you contact us using the contact details made available by Anacura, through our contact form, or when registering your presence on our premises or in our buildings.
Category B.2 (Suppliers)	Contractual information (to the extent that it constitutes Personal Data)	Information relating to agreements that you have entered into, or may enter into, with Anacura.	We process these data where you are considering entering into, or have decided to enter into, an agreement with us.
Category A.2 Category B.3 Category F.1 (Visitors, suppliers and, where applicable, other Individuals)	Information about your visit to and use of our Websites.	See Article 9 - Cookies	Through the use of cookies (see Article 9 – Cookies)

2.2 Processing of Personal Data of patients, healthcare professionals and healthcare institutions.

Data category	Relevant data subjects	Details	Context
Category C.1 Category D.1 (Patients & healthcare professionals or healthcare Institutions)	(Professional) identification and contact details	First name, last name, telephone number, email address, address, and country; For Patients: date of birth, national registration number, health insurance details, and gender; For physicians: RIZIV number (Additional) questions or comments.	Your identification and contact details are provided to us when you contact us using the contact details made available by Anacura or through our contact form. These data are also processed for the purpose of providing and performing our services.
Category C.2 Category D.2 (Patients & healthcare professionals or healthcare institutions)	Patients’ health data	Health data collected by Anacura in the course of providing services to the Patient. For laboratory management purposes, including the performance of analyses and tests, the interpretation and communication of your results, and the administrative management of the laboratory. For the further use of your pseudonymised or anonymised data, where possible, for scientific research and quality control purposes, with a view to improving our services and the quality of our processes.	Anacura collects Patients’ health data in the course of providing its services, including for laboratory management purposes. This includes the examination and analysis of samples and specimens, the interpretation of the resulting findings, and the communication of such results to the Patient, Healthcare Professionals, or Healthcare Institutions, as well as the administrative management associated with these activities. In addition, the collected data may, following pseudonymisation or anonymisation, be used for scientific research or quality control purposes. Anacura processes these data only where strictly necessary and insofar as the Patient, Healthcare Professional(s), or Healthcare Institution(s) make use of Anacura’s services, for example in connection with the collection of samples.
Category C.3 Category D.3 (Patients & healthcare professionals or healthcare institutions)	Financial data	Financial information required by Anacura for billing purposes.	These data are processed by Anacura in its capacity as an independent Controller.

2.3 Processing of Personal Data of applicants

Data category	Relevant data subjects	Details	Context
Category E.1 (Applicants)	Your Personal Data as an applicant.	Your identification details Your contact details (such as telephone number, email address, etc.) Your résumé (CV), including work experience, education, hobbies, language skills, and information regarding your qualifications, competencies, and skills	We process these data for the purpose of evaluating and managing your application for a position with Anacura.

ARTICLE 3 - LEGAL BASIS FOR AND PURPOSES OF PROCESSING

We process your Personal Data only where we have a specific purpose and a valid legal basis for doing so. In addition, we process only the Personal Data that are relevant and necessary for each specific purpose, including in particular:

3.1 General purposes

3.1.1  Processing Purposes for visitors and suppliers

Data category	Legal basis	Purpose
(Professional) Identification and contact details	Necessary for the performance of a contract (Art. 6.1, b) GDPR) Or Our legimitate interests (Art. 6.1, f) GDPR) Or Your consent (Art. 6.1, a) GDPR)	We may process your (professional) identification and contact details for the following purposes: The management of members and users of the Websites; The processing of requests and communications submitted through contact forms; Responding to your requests; Establishing and maintaining contractual relationships; The management of our database of Healthcare Professionals and Healthcare Institutions. We will primarily process these data on the basis of Article 6(1)(b) GDPR, where such processing is necessary for the performance of a contract or for taking steps prior to entering into a contract. However, where the processing cannot be considered necessary for the performance or establishment of a contractual relationship, we will rely on our legitimate interests pursuant to Article 6(1)(f) GDPR, following a balancing test. Where we are unable to rely on our legitimate interests as a legal basis, we will seek your consent prior to processing the data.
Contractual data (where such data qualify as Personal Data)	Necessary for the performance of a contract (Art. 6.1, b) GDPR)	We may process your contractual data for the purpose of managing the commercial and contractual relationship that we have, or may enter into, with you.
Financial data	Necessary for the performance of a contract (Art. 6.1, b) GDPR)	We may process your financial data for payment and invoicing purposes in connection with the contractual relationship that we have with you.
Information about your visit to and use of our websites	Your consent (Art. 6.1, a) GDPR) Or Our legitimate interests (Art. 6.1, f) GDPR)	We may process information relating to your visit to and use of our Websites, as described in Category 4, in order to: Facilitate the availability and use of the Websites; Analyse, customise, and improve the content of the Websites; Personalise your experience on the Websites; etc. We rely on your consent as the legal basis for these processing activities. For those processing activities in respect of which we have carried out a balancing test and determined that our legitimate interests prevail, we rely on Article 6(1)(f) of the GDPR as the legal basis for processing. For more information, please refer to Article 9 – Cookies.

3.1.2  Processing purposes for Patients, Healthcare Professionals and Healthcare Institutions

Data Category	Legal basis	Purpose
(Professional) Identification and Contact Details	Necessary for the performance of a contract (Art. 6.1, b) GDPR) Or Our legitimate interests (Art. 6.1, f) GDPR) Or Your consent (Art. 6.1, a) GDPR)	We may process your (professional) identification and contact details for the following purposes: Managing members and users of the Websites; Processing requests and communications (including through contact forms); Responding to your inquiries and requests; Providing high-quality healthcare services, including: Performing analyses and examinations within the laboratory; Interpreting Patients’ results; Administrative management of the laboratory; Establishing and maintaining contractual relationships. We will primarily process these data on the basis of Article 6(1)(b) GDPR. However, where the processing cannot be considered necessary for the performance or conclusion of a contract, we will rely on our legitimate interests pursuant to Article 6(1)(f) GDPR, following a balancing test of the interests involved. If we are unable to rely on our legitimate interests as a legal basis, we will request your consent before processing the data.
Health Data	Necessary for the performance of a contract (Art. 6.1, b) GDPR) Or Your consent (Art. 6.1, a) GDPR) Or Our legitimate interests (Art. 6.1, f) GDPR) And Your consent (Art. 9.2, a) GDPR) Combined with your consent (Article 6(1)(a) GDPR) or where necessary for the performance of a contract Or Necessary for the purposes of preventive or occupational medicine (Art. 9.2, h) GDPR)  Combined with processing that is necessary for the performance of a contract under Article 6(1)(b) GDPR Or Necessary for scientific research purposes (Art. 9.2, j) GDPR) Combined with your consent or our legitimate interests, depending on the nature of the scientific research, pursuant to Article 6(1) GDPR.	We will primarily process health data in the context of providing healthcare services, at the request of a Healthcare Professional or Healthcare Institution. Such processing takes place on the basis of the performance of a contract and/or the Patient’s explicit consent. These data are processed within the framework of laboratory management, including the performance of analyses and tests, the interpretation of results, and related activities. However, Anacura may also process health data where necessary for the purposes of preventive or occupational medicine, or for scientific research carried out in the public interest, provided that such processing is proportionate to the objective pursued and that appropriate and specific safeguards are implemented to protect the fundamental rights and interests of the data subject. Where possible, the data will be pseudonymised or anonymised for further use in scientific research. If we are unable to rely on any of the aforementioned legal bases or purposes for processing, we will obtain your consent before processing the data. Anacura may further process your data for purposes other than those for which the data were originally collected ("secondary use"), such as method validation, provided that such further processing is permitted under applicable data protection laws and appropriate safeguards are in place.
Financial Data	Necessary for the performance of a contract (Art. 6.1, b) AVG)	We may process your financial information for payment and invoicing purposes in connection with the contractual relationship we maintain with you.

3.1.3 Processing purposes for applicants and other individuals

Data Category	Legal basis	Purpose
Your Personal Data as an Applicant	Your consent (Art. 6.1, a) GDPR) Or Necessary for the performance of a contract (Art. 6.1, b) GDPR) Or Our legitimate interests (Art. 6.1, f) GDPR)	Applicant data are processed for the following purposes: To evaluate your application and conduct our recruitment and hiring processes; To improve our recruitment and candidate selection processes; If you submit your CV or application details to Anacura, you consent to the processing of such data for the purpose of assessing and handling your application, whether submitted in response to a specific vacancy or as a spontaneous application. Depending on the specific circumstances, certain processing activities carried out in the context of evaluating and handling your application may be necessary in order to take steps at your request prior to entering into an employment contract with you. Other processing activities may be based on our legitimate interests in evaluating and improving our recruitment policy and selection procedures.
(Professional) Identification and Contact Details of Other Individuals	Your consent (Art. 6.1, a) GDPR) Or Necessary for the performance of a contract (Art. 6.1, b) GDPR) Or Our legitimate interests (Art. 6.1, f) GDPR)	We may process your (professional) identification and contact details for the following purpose: To ensure your safety when visiting our premises; To safeguard the confidentiality of our research, services, and products.

3.2      Communication of Patient Data to and from healthcare professionals and healthcare institutions

We receive your data as a Patient (including as a participant in a study), including health data, from the Healthcare Professionals and/or Healthcare Institutions that engage our services. Following the analysis of such data and the interpretation of the results, the results may be communicated back to the relevant Healthcare Professionals and/or Healthcare Institutions where necessary for the continued treatment and care of the Patient.

You may object to such communication at any time, as further described in Article 5.3 of this Privacy Statement.

3.3      Transfer to third parties

We treat your Personal Data as confidential information and will not disclose or communicate them to third parties under any circumstances or for any purpose other than those specified in this Privacy Statement, except where we are required or permitted to do so by law.

We may disclose your Personal Data to third parties to the extent necessary for the conduct of our business activities, including, but not limited to, suppliers and service providers offering services related to IT support, hosting, cybersecurity, invoicing, or other specialised services. Under no circumstances shall such third parties disclose your Personal Data to other third parties, except in the following situations:

• The disclosure of your Personal Data by such third parties to their own suppliers or subcontractors is necessary for the performance of our business activities;
• Such third parties are required, pursuant to applicable laws or regulations, to provide certain information or documents to the competent authorities.

In the event of a full or partial reorganisation of Anacura, a transfer of Anacura’s activities, or the bankruptcy of Anacura, your Personal Data may be transferred to successor entities or third parties. In such circumstances, we will take reasonable steps to inform you in advance of such transfer.

Where Anacura transfers your Personal Data outside the European Economic Area (EEA) to a country that does not provide an adequate level of protection for Personal Data, appropriate safeguards will be put in place in accordance with applicable data protection laws to ensure that your rights and freedoms are adequately protected by the recipient of the data outside the EEA.

 

3.4      Legal requirements

In exceptional circumstances, we may be required to transfer your Personal Data pursuant to a court order or in order to comply with mandatory legal and/or regulatory obligations. Where reasonably possible, we will endeavour to inform you in advance of such disclosure, unless we are legally prohibited from doing so.

ARTICLE 4 - RETENTION PERIODS

Your Personal Data will be retained for no longer than is necessary to fulfil the purposes described in Article 3 of this Privacy Statement, including for the period required for the establishment, performance, and administration of the contractual relationship between you and Anacura.

We may also retain your Personal Data in order to comply with applicable laws and regulations or to meet legal obligations, including statutory retention requirements that continue after the termination of the contractual relationship between you and Anacura. Accordingly, the retention periods set out below shall not apply where we are legally required to retain your Personal Data for shorter or longer periods, including in connection with applicable limitation periods and statutory obligations relating to invoicing, payments, accounting, taxation, and regulatory compliance.

Retention periods:

Data	Retention period
(Professional) identification and contact details	These Personal Data are retained for as long as necessary to communicate with you, i.e. for no longer than ten (10) years following the initial request or contact. In the context of a contractual relationship, we will not retain your identification data for longer than necessary to fulfil the purposes set out in this Privacy Statement, which may be up to ten (10) years after the end of the contractual relationship. Where your Personal Data have been collected in the context of a clinical study, they will be retained for a period of twenty-five (25) years. Where your Personal Data have been collected in the context of a medical analysis, a minimum retention period of thirty (30) years and a maximum retention period of fifty (50) years following the last patient contact shall apply, in accordance with Article 35 of the Belgian Act of 22 April 2019 on the Quality Practice of Healthcare.
Contractual information and financial information (to the extent that they constitute Personal Data)	These Personal Data will be retained for as long as necessary to fulfil the purposes set out in this Privacy Statement, namely for the entire duration of the contractual relationship and for a period of ten (10) years following the termination of that contractual relationship.
Patients' health data	These Personal Data will be retained for as long as necessary to fulfil the purposes set out in this Privacy Statement and, where relevant, in accordance with the instructions of the referring physicians or other healthcare providers. For medical data, a minimum retention period of thirty (30) years and a maximum retention period of fifty (50) years following the last patient contact shall apply, in accordance with Article 35 of the Belgian Act of 22 April 2019 on the Quality Practice of Healthcare. For clinical studies, a retention period of twenty-five (25) years applies in accordance with Good Clinical Practice (GCP) requirements.
Your personal data as an applicant	These Personal Data will be retained for as long as necessary to communicate with you, i.e. for no longer than two (2) years following the initial request or contact. In the context of a contractual relationship, we will not retain your identification data for longer than necessary to fulfil the purposes set out in this Privacy Statement, which may be up to ten (10) years after the termination of the contractual relationship.
Information about your visit to and use of our Websites	With regard to cookies, please refer to Article 9 – Cookies.

ARTICLE 5 - YOUR RIGHTS

You are not legally or contractually obliged to provide your Personal Data. You retain the right to refuse the processing of your Personal Data at any time. Please note, however, that as a result, certain functionalities of the Websites may be impaired or unavailable.

5.1      Right of access and right to obtain a copy (art. 15 GDPR)

You have the right, at any time, to request access to your Personal Data and to be informed about the purposes for which your Personal Data are being processed.

Anacura is required to provide the data subject with a copy of the Personal Data being processed about him or her. Where the data subject requests additional copies, Anacura may charge a reasonable fee based on the administrative costs incurred. Where the request is submitted electronically, and unless the data subject requests otherwise, the information shall be provided in a commonly used electronic format, in accordance with the GDPR.

5.2      Right to rectification, erasure or restriction of processing (artt. 16, 17 and 18 GDPR)

Right to rectification: You have the right to have inaccurate Personal Data corrected. If your Personal Data are incomplete, you may request that they be completed.

Right to erasure: You may request that your Personal Data be erased. We will erase your Personal Data where, for example:

• the data are no longer necessary;
• you withdraw your consent and there is no other legal basis for the processing of your Personal Data;
• you object to the processing of your Personal Data;
• the Personal Data have been processed unlawfully.
  In certain circumstances, we may nevertheless retain your Personal Data, for example where we are legally required to do so or where retention is necessary for the establishment, exercise, or defence of legal claims.

Right to restriction of processing: You may request a temporary restriction of the processing of your Personal Data, for example where:

• you contest the accuracy of your Personal Data;
• the processing is unlawful, but you do not wish your Personal Data to be erased;
• you require the Personal Data for the establishment, exercise, or defence of legal claims;
• you have objected to the processing of your Personal Data, pending verification of whether our legitimate grounds for processing override your interests, rights, and freedoms.
  During such restriction, we may only store your Personal Data or otherwise process them in specific circumstances, such as with your consent or where necessary for the establishment, exercise, or defence of legal claims, in accordance with applicable data protection laws.

Notification to third parties:  Where your Personal Data have been rectified, erased, or their processing has been restricted, we will, where feasible, inform any third parties to whom such Personal Data have previously been disclosed.

Anacura will assess each request for erasure on a case-by-case basis and may not always be able to comply with such a request, for example where the Personal Data form part of an official patient record or must be retained for other legal or regulatory reasons.
 

5.3      Right to object

You have the right to object to the processing of your Personal Data where such processing is based on our legitimate interests or on the performance of a task carried out in the public interest. In such cases, we will cease the processing unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

Where your Personal Data are processed for direct marketing purposes, you have the right to object at any time to such processing. In that event, your Personal Data will no longer be processed for direct marketing purposes.

You may exercise your right to object at any time by contacting us.

Without prejudice to your rights under the GDPR, healthcare legislation also grants you the right to expressly exclude a specific Healthcare Professional by name. This right enables you to object to the sharing of your data with one or more identified Healthcare Professionals, so that they can no longer access your health data.

 

5.4      Right to data portability

You have the right to receive your Personal Data in a structured, commonly used, and machine-readable format and/or to have those Personal Data transmitted to another controller.

This right applies where the processing is based on your consent or on a contract, and where the processing is carried out by automated means.

Where technically feasible, you have the right to have your Personal Data transmitted directly from one controller to another at your request.

This right does not apply in certain circumstances, for example where the processing is necessary for the performance of a task carried out in the public interest. Furthermore, the exercise of this right must not adversely affect the rights and freedoms of others.

 

5.5      Right to withdraw consent

Where the processing of your Personal Data is based on your prior (explicit) consent, you have the right to withdraw that consent at any time.

 

5.7      Exercising Your Rights

To exercise any of your rights, please contact us using the details provided below:

Either by email at: dataprotection@anacura.com

Or by post at: Noorwegenstraat 4, 9940 Evergem, Belgium
 

5.8      Right to Lodge a Complaint

You have the right to lodge a complaint with the data protection supervisory authority competent for Anacura:

Belgian Data Protection Authority (APD - GBA)

Address: Drukpersstraat 35, 1000 Brussels, Belgium

Tel: +32 (0)2 274 48 00

Fax: +32 (0)2 274 48 35

Email: contact@apd-gba.be

This is without prejudice to any remedy before the civil courts. If you reside in an EU Member State other than Belgium, you may also lodge a complaint with your national data protection authority (a list of the data protection authorities for each EU Member State is available at the following website: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en).

ARTICLE 6 - SECURITY AND CONFIDENTIALITY

We have implemented appropriate technical, organisational, and physical security measures to protect your Personal Data against destruction, loss, falsification, alteration, unauthorised access, accidental disclosure to third parties, and any other unauthorised processing.

Should any such incident nevertheless occur and affect your Personal Data, we will notify you without undue delay of the data breach, including a brief description of its potential consequences and recommendations on measures you can take to mitigate any possible adverse effects of the breach.

Anacura shall not be held liable for any direct or indirect loss or damage arising from the unlawful, unauthorised, or improper use of Personal Data by a third party.

 

 

ARTICLE 7 - CHANGES TO THE PRIVACY STATEMENT

We reserve the right to amend or modify this Privacy Statement at any time to reflect changes in our practices relating to the processing of your Personal Data or changes in applicable laws and regulations. Any such amendments or updates will be published on the Websites.

 

 

ARTICLE 8 - GOVERNING LAW AND JURISDICTION

This Privacy Statement shall be governed by and interpreted in accordance with the laws of Belgium. Any dispute relating to this Privacy Statement shall be subject exclusively to Belgian law.

Any disputes arising out of or relating to the interpretation or implementation of this Privacy Statement shall be subject to the exclusive jurisdiction of the courts of Ghent, Belgium.

ARTICLE 9 - COOKIES

9.1 What are cookies and why do we use them?

A "cookie" is a small text file that is stored on your device by Anacura’s server when you visit the Websites. The information stored in these cookies can only be accessed by Anacura and is used solely for the duration of your visit to the Websites.

Our Websites use cookies and similar technologies to distinguish your preferences from those of other users. The cookies we use are secure and enable us to enhance your browsing experience and improve the functionality of our Websites.

9.2 Type of cookies

There are many different types of cookies, which can be distinguished based on their functionality, origin, or retention period. Below, we provide a general description of the types of cookies that are relevant in the context of a website. A detailed overview of the specific cookies used on our Websites is provided in Article 9.3.

Type	Function
Essential/ strictly necessary cookies	These cookies are necessary for the operation of a website and cannot be disabled. They are usually set only in response to actions you have taken, such as setting your privacy preferences, logging in, or completing forms. They are essential for proper communication and facilitate navigation throughout the website (for example, returning to a previous page).
Functional cookies	These cookies enhance the usability of a website by remembering your choices (for example language preferences) and providing improved functionality and personalisation. They ensure that certain settings are tailored to your preferences upon request. If you do not accept these cookies, this may affect the performance and functionality of the website and may limit access to certain content or features. These cookies may be set either by the website provider or by third-party providers whose services have been integrated into the website by the website provider.
Prestation/Analytical cookies	These cookies collect information about how a website is used, such as the number of visitors, the amount of time visitors spend on a webpage, and any error messages encountered. They help the website provider monitor and improve the performance of the website. These cookies do not identify you as an individual.
Targeting/advertising cookies	These cookies are used to deliver content that is more relevant to you. They may be used to provide targeted advertising or to limit the number of times you see a particular advertisement. They also help measure the effectiveness of advertising campaigns conducted through a website. These cookies may be used to remember the websites you have visited and may share this information with other parties, including advertisers. They may also be set by advertising partners through the website. Such companies may use these cookies to build a profile of your interests and display relevant advertisements to you on other websites.
First & third cookies	First-party cookies are cookies that are set by servers or domains of the website provider from which the requested service is delivered. Third-party cookies are cookies that are sent to your browser from a server or domain that is not managed by the website provider, but by a collaborating third party. Only these third parties have access to such cookies and to the information collected through them. If you would like to learn more about these cookies, we refer you to the cookie policies made available by these parties on their respective websites. Please note that we have no control over the content of those policies or over the cookies used by such third parties.

9.3      Overview of Cookies

Domain: https://www.anacura.com/en

Cookie name	Type of Cookie	Description	Retention period
local	Strictly Necessary Cookies.	This cookie stores your preferred language setting, ensuring that the Website is displayed in your chosen language when you return, rather than redirecting you to the default language version	1 year
Cookie_options	Functional cookies	This cookie stores your cookie preferences, so that you are not asked to make the same choice again on subsequent visits to the Website	1 year
Anacura_session	Functional cookies	Used to recognise and manage the user's session while browsing the Website	Session cookie (expires when the browser is closed)
XSRF-TOKEN	Functional cookies	Deze cookie is deel van een systeem om te vermijden dat jij als websitegebruiker aangevallen wordt door hackers	Session cookie (expires when the browser is closed)
_ga	Performance and Analytics Cookies	Google Analytics is one of the most widely used and trusted analytics solutions on the internet. It helps us understand how visitors use our Website and identify ways to improve the user experience. Through this cookie, we may collect information such as how long you spend on the Website, which pages you visit, and how you found our Website. This enables us to better understand what interests our visitors and to continuously improve the Website and its content.	2 years
_gat
_gid

9.4      Your consent

Upon your first visit to our Websites, you will be asked whether you consent to the use of non-essential cookies. You may change your cookie preferences at any time via the hyperlink available at the bottom of our Websites, thereby withdrawing your consent.

You may refuse or block cookies by changing the settings of your browser. However, disabling cookies may result in certain functionalities of the Websites becoming unavailable or not functioning properly.