This Privacy Policy explains how Astrivax Therapeutics N.V. (“Astrivax”, “we”, “us”) collects and uses personal data when you visit and use our website (www.astrivax.com).
This statement applies to personal data collected through this website and related online interactions. It does not cover information collected offline or via other channels. Our website may contain links to third-party websites or resources; Astrivax is not responsible for the privacy practices of those third parties.
Questions, requests, or complaints about this Privacy Policy or our processing of personal data can be sent to our Data Protection Officer at dpo@astrivax.com.
Who we are
Astrivax Therapeutics N.V.
Gaston Geenslaan 3, B-3001 Leuven
Belgium
Key definitions
Personal data means any information relating to an identified or identifiable person. A person may be identifiable directly (for example by name) or indirectly (for example through identifiers that can be linked to that person), such as contact details, email address, location data, login identifiers, health information, or financial details.
Processing is any operation performed on personal data, whether or not by automated means (for example collecting, storing, using, sharing, or deleting).
Who controls your personal data?
Astrivax acts as the controller for the personal data described in this statement. This means we decide why and how the data is processed and we are responsible for complying with applicable data protection law. You can reach us at dpo@astrivax.com
What personal data we collect
When we ask you to provide personal data, we explain what we need and why at that moment (for example through forms or notices on the website).
• If you contact us (e.g., by email), we may process your name, contact details, the content of your message, any files you send, and any other information you choose to include.
• When you browse our website, certain information about your device and usage may be collected via cookies or similar technologies. Please see our cookie policy for details.
Clinical trials. If you participate in an Astrivax clinical trial, we process additional categories of personal data, which may include health and medical information for scientific research. In that case, you will receive specific information about the data collected, the purposes, and who is involved, through the Informed Consent Form and related study documentation.
Purposes and legal bases
Under the General Data Protection Regulation (GDPR), we only process personal data when we have a valid legal basis. Depending on the situation, Astrivax relies on one or more of the following:
• your consent;
• performance of a contract or steps taken at your request before entering into a contract;
• compliance with a legal obligation; and/or
• our legitimate interests, where we balance those interests against your rights and freedoms.
We typically process personal data for purposes such as:
• responding to requests and inquiries;
• creating, managing, and performing agreements or business relationships;
• meeting legal and regulatory requirements (including accounting and tax obligations, or complying with binding orders); and
• maintaining a contact database of customers and other people we interact with.
How long we keep personal data
We keep personal data only for as long as needed for the purposes described above, and longer where required by applicable law or regulatory obligations.
How we obtain personal data
We obtain personal data when you choose to interact with us—for example by using the website, sending us an email, calling us, or meeting us in person. We may also receive personal data in the context of recruitment when you apply for a position with us or otherwise express interest in an open role.
Your rights and how to exercise them
Subject to the conditions set out in the GDPR, you can exercise the following rights in relation to your personal data:
• Access – to ask whether we process your personal data and, if we do, to receive information about that processing.
• Rectification – to have inaccurate personal data corrected and incomplete data completed.
• Erasure – to request deletion of your personal data in certain situations (sometimes called the “right to be forgotten”).
• Restriction – to limit how we use your personal data in certain cases; the data is kept but normal processing is paused.
• Data portability – where processing is based on consent or a contract, to receive your data in a commonly used, machine-readable format and (where technically feasible) to transmit it to another controller.
• Objection – to object to processing based on our legitimate interests, depending on your particular situation.
• No solely automated decisions – not to be subject to decisions based solely on automated processing (including profiling) where the law applies. Astrivax does not currently use solely automated decision-making for this website.
More information about these rights is available from the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit, GBA).
GBA: please click here (available in Dutch or French).
Withdrawing consent. Where we rely on your consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before you withdrew your consent.
To exercise your rights or ask privacy-related questions, email us at dpo@astrivax.com. We may ask you to confirm your identity before we respond. We aim to respond within 30 days.
You also have the right to lodge a complaint with the GBA if you believe our processing of your personal data infringes data protection law.
GBA – submit a complaint.