PERSONAL DATA Statement

PERSONAL DATA Statement
PROGENUS S.A.

Contents of this document:

Who are we?
Why have we put this privacy policy in place?
What kinds of personal data do we collect?
How do we obtain your personal data?
What do we do with your personal data?
What is the legal framework for Progenus' use of your personal data?
How do we keep you informed?
How long do we retain your personal data?
Do we share your information with third parties?
How can you exercise your rights over your personal data?
How do we keep your personal data safe?
How do we use cookies?
Updates to the privacy policy

1. Who are we?

Our innovative, scientific business offers custom analysis for everything to do with DNA. Our business is divided into 3 areas: research, production of kits, and laboratory services (analyses for agri-food and animals).
PROGENUS takes your personal data and our relationship with our customers, prospective customers, candidates, visitors and partners very seriously, and aims to process your personal data in a transparent manner.

Our company - legal notices

Our company name is: PROGENUS SA
Our company is registered with the CBE under the no.: 0476.355.815
Our VAT number: BE0476.355.815
Our registered office address is: 7a rue Camille Hubert, 5032 Gembloux, Belgium
You can reach us on 081/61.69.01 or via email at info@progenus.be
We are ISO 17025 accredited.

2. How is this privacy policy useful to you?

This statement covers your rights and legal obligations in accordance with the provisions of EU Regulation n° 2016/679 of the European Parliament and the Council of 27 April 2016, for the purposes of the processing mentioned in article 2 of this statement. You can find the full text of the regulation here.

This statement also complies with the Act on the protection of natural persons with respect to the processing of personal data of 30 July 2018, hereinafter the "Act of 30 July 2018", the full text of which is also available here.

The purpose of this Statement on personal data is to explain to you:

What we do with the personal data entrusted to us;
The reasons for our collection and processing of this data;
The conditions under which we may share the data.

Principles

The following principles are addressed in the below statement of data processing:

Personal data: any information about an identified or identifiable natural person (e.g. : name, email address, postal address, mobile, etc.).
Processing: an action carried out on personal data (collection, recording, storage, destruction, erasure, etc.)
Data controller: a natural or legal person setting the means and purposes of the processing.
Processor: natural or legal persons who process the data on behalf of the data controller.
A "User": any natural or legal person visiting or interacting in any way with the Site.

3. What kinds of personal data do we collect?

In order to provide you with the service and/or products requested by you, we gather the personal data of our customers, candidates and visitors in various situations:

For the purposes of processing relating to the use of laboratory services, directly or via the online shop, a customer may be asked to share with PROGENUS the following categories of data:
o identity data (first name and last name) but also usernames and passwords
o contact data (postal address/ invoice address, delivery address, telephone number and email if available)
o company administrative data (if you are purchasing on behalf of a company)
o payment data (banking information, payment card number, expiry date, CVV)
o the name, date of birth, sex, breed, pedigree number, UELN number and chip number of the animal in question
o the identity data, professional registration number and contact details of the veterinarian taking the sample
o the PROGENUS number of the previous analysis

For the purposes of processing relating to the use of kits and research, a customer may be asked to share with PROGENUS the following categories of data:
o identity data (first name and last name)
o contact data (postal address, telephone number and email if available)
o administrative data (if you are purchasing on behalf of a company)
o banking details

For the purposes of processing relating to CVs received as part of applications for specific posts or speculative applications, a candidate may be asked to share with PROGENUS the following categories of data:
o identity data (first name and last name)
o contact data (postal address, telephone number and email if available)
o studies, training and work experience

For the purposes of processing relating to use of the PROGENUS website, a customer may be asked to share the following categories of data:
o Your IP address.

4. How do we obtain your personal data?

In order to provide you with the services and/or products requested by you, we need to use the personal information that we obtain in various ways:

The personal information that you provide directly via the order forms (pdf and online shop), business card or email: telephone, email, mobile, address, payment information, CV, etc. This information is generally obtained following the purchase of a product or service, following a request for information or following your subscription to a newsletter. This type of request may involve your sharing certain relevant personal data as part of your request.
The information generated by you when you create your usernames and passwords for your account on our online shop.
The personal information that we may receive from third parties.

5. How do we obtain your consent?

In accordance with article 4(11) of the regulation, by accessing our site and using it, you confirm that you have understood, and freely give your specific, informed and unambiguous agreement to, the processing of personal data relating to you. This agreement relates to the content of this Privacy Policy.

Consent is given by the User's affirmative action in checking the box where the Privacy Policy is made available via a web link. This consent is an essential condition to carry out certain activity on the Site or to enter into a contractual relationship with PROGENUS. Any contract between PROGENUS and a User in respect of the goods and services offered on the Site is subject to the User's acceptance of the Privacy Policy.

The User consents to the Data Controller processing and collecting, in accordance with the provisions and principles in this Privacy Policy, the personal data shared by him or her on the Site or as part of the services offered by PROGENUS S.A., for the purposes indicated below.

The User has the right to withdraw his or her consent at any time. The withdrawal of consent does not prejudice the legality of processing based on previously given consent.

6. What do we do with your personal data?

In accordance with article 13 of the Regulation, the purposes of the personal data processing are communicated to the User and are restricted to the following activities:

Sales: For the purposes of processing relating to the use of laboratory services, directly or via the online shop. Our sales department may need to use your personal data to seek feedback on your experience with our services, as part of a satisfaction questionnaire aimed at improving the service provided to our customers.
Administrative and account management for all new prospective customers or suppliers from the inception of a potential professional relationship through to the execution and/or termination of the contract/ request.
Marketing: To inform you of promotions, new services and products, or events offered by us or in which we participate.
Recruitment: we use your personal data as part of the process of recruiting our qualified, expert staff.
Legal claims: We may need to use your personal data in responding to a complaint from you and in order to defend ourselves in legal proceedings.
Legal requirements: in order to comply with a request from legal authorities (investigations, etc.) and/or administrative bodies (tax authorities etc.)

7. What is the legal framework for Progenus' use of your personal data?

Your personal data will be processed by Progenus in full compliance with the requirements of existing European and domestic legislation.

As part of sales, we use your personal data to carry out the work requested (analysis, projects, etc.) starting when you validate our sales terms and conditions, when you make the request for analysis (by email, purchase order, online shop), or when you sign a contract.
We have a legitimate interest in using your personal data for

o Providing you with support and assistance where necessary
o Account, administrative and legal management for our customers and suppliers
o Improving our services and products by asking you to tell us about your experience with our company by filling out satisfaction questionnaires. Based on the results, we ensure that our customers receive the best possible service.
o Keeping you informed of various events in which we are participating or current promotions, if you have given your consent to this
o Identifying the best candidates for open positions with our company

If you would prefer not to receive these emails you can unsubscribe at any time, either by replying to the email or by sending an email to the following address: gdpr@progenus.be

8. How do we keep you informed?

When we collect your information, we will always inform you of:

How we are going to process them, and why
The legal basis for any processing that we will carry out
The retention period for your personal data
How you can exercise your rights

9. How long do we retain your personal data?

Data relating to laboratory analysis is kept for 30 years.
Data relating to online shop customers is kept for 10 years after the most recent order.
Data relating to speculative applications is kept for 1 year.
Data relating to logins to the website is kept for 1 year.

10. Do we share your information with third parties?

PROGENUS does not share personal data with processors/subcontractors outside the European Union not located in GDPR-authorised countries.
Under certain circumstances, PROGENUS may be required to share your data for legal or judicial reasons in compliance with the legal provisions applicable in various contexts.

Terms and conditions relating to processors/subcontractors

PROGENUS has the right to enlist processors/subcontractors to carry out duties entrusted to it by its customers. These processors/subcontractors shall only receive the data necessary for the execution of the duties entrusted to them by PROGENUS and may only use this data to complete the said duties.

PROGENUS is responsible for the processor's/ subcontractor's compliance with PROGENUS' obligations in relation to the GDPR and shall conclude with each of them an agreement securing the rights and obligations provided for by the GDPR.

The customer may, at any time upon request, be shown the list of the processors/ subcontractors involved in the processing of the personal data that he or she has provided.

Broadly speaking, the different categories of processor/ subcontractor are:

Subcontracting of certain types of analysis for animals (pedigree, illness, trait testing)
Subcontracting of certain types of analysis on food and for traceability
Subcontracting of certain types of DNA identification analysis
Subcontracting of payment systems (paypay, ogone, etc.)

11. How do we keep your personal data safe?

PROGENUS undertakes to take the appropriate technical and organisational measures to protect data from accidental or deliberate destruction, from loss, dissemination or unauthorised access and other forms of illegal processing. PROGENUS guarantees a level of security adapted to the risks in relation to the processing and to the nature of the data being protected, taking into account the technology available and the costs involved.

12. How can you exercise your rights over your personal data?

You have rights in relation to the processing of your personal data:

1. The right of access to your data (art.15 of the Regulation)
If you wish to consult your data being processed by us, you may exercise your right of access, and we will provide you with as comprehensive an overview as possible of your data.

2. The right to rectification of your data (art.16 of the Regulation)
It may arise that some data we hold about you is not correct, or no longer correct. You can always request that this data is rectified or completed, unless we are not sure of the authentic source of the data.

3. The right to request erasure of your data (art.17 of the Regulation)
If you think that the processing of certain data is inappropriate, you may ask that this data is deleted, under certain circumstances, since some legislation applicable to our legal mission imposes the use of certain personal data without which we would be unable to accomplish our mission.

4. The right to object to a specific use of your data (art.21 of the regulation)
If you do not agree with a specific use of certain data as part of processing based on legitimate interests you have the right to object to this. We shall accept this objection, unless there is an important reason not to.

5. The right to refuse that your data be processed by an automated process (art.21 of the Regulation)
Some processing of data and some processes are entirely automated, without human intervention. If you do not agree with the result of this fully automated process, you can contact us. You can then request that one of our staff intervene or explain the reason for your objection to the response.
6. The right to have your data transferred to a third party - Right to portability of data (art.20 of the Regulation)
You have the right to ask for the personal data shared with us to be directly transferred to a third party, within the limits set out in the contract. In accordance with article 20 of the Regulation, this transfer shall be carried out in a structured format in common usage, readable by the machine.

Where the User exercises his or her right to portability of data pursuant to the foregoing paragraph, the User has the right to have the personal data directly transferred from one data controller to another, where technically possible.

The exercise of the right to portability of data is understood to be without prejudice to the right to erasure. This right does not apply to the processing necessary to the execution of a public interest mission or having to do with the exercise of public authority vested in the data controller.

7. Exercising your rights (art.12.6 of the Regulation)
When you exercise a right, we may ask you to prove your identity in order to avoid the possibility of someone else exercising your rights in your stead. A copy of your identity card may therefore be requested.

For any question or complaint relating to this privacy policy, the User may contact the Data Controller via the following address:
Data Controller for PROGENUS and his or her representative
• The designated data controller is Mr Robert Renaville, managing director of PROGENUS S.A.
Address: 7a rue Camille Hubert, 5032 Gembloux, Belgium
• The designated data controller's representative is the quality coordinator
Address: 7a rue Camille Hubert, 5032 Gembloux, Belgium
Email: gdpr@progenus.be

8. Right to make a complaint

If you disagree with the response given by PROGENUS S.A., you may consult the site of the Belgian Data Protection Authority and, in that event, exercise your rights by applying to that body, which is the competent authority for Belgium. Further information may be found on the website: https://autoriteprotectiondonnees.be/citoyen

A complaint should be made to the following addresses: A complaint should be made to the following addresses:

Belgian Data Protection Authority,
Rue de la Presse 35, 1000 Brussels
+32 (0)2 274 48 00
+32 (0)2 274 48 35
contact@apd-gba.be

The User may also make a complaint through the court of first instance for his or her residence.

13. How do we use cookies?

A cookie cannot identify you. It records information such as the way in which you visit our site (browsing) to better understand user behaviour and optimise the interface and the display of information needed by our customers. This type of information may not be used for unsolicited correspondence. There are several types of cookies, please consult the following website for a full overview:www.allaboutcookies.org. The Progenus website records 3 types of cookies:

Functional: to allow our website to function properly, make it more user-friendly and offer a more customised browsing experience. These cookies save your preferences.
Performance: we use Google Analytics to record the performance of our website and where applicable to improve the content in accordance with the needs of our customers.
Marketing: Our site also includes links to and from our media and social networks and also links with marketing campaigns organised by us.

Once a cookie has been installed you will receive a message allowing you to accept, customise or refuse it. However, please note for an optimal visit of our site, functionality may be reduced if certain essential cookies are not authorised. The deactivation of non-essential cookies may have a minor impact on your visit to our website. We suggest that you consult the HELP menu of your web browser.

The following websites allow you to select the websites of companies for which you no longer wish to receive cookies: www.aboutads.info/choices/#completed and www.youronlinechoices.com

14. Limit of liability of Data Controller

The website may include links to other websites held by third parties unrelated to PROGENUS SA. PROGENUS SA is not responsible for the content of these sites and their compliance with the Act and the Regulation.

The legal guardian must give his or her express consent for a minor under 13 years old to disclose personal information or data on the website, in accordance with article 7 of the Act of 30 July 2018. PROGENUS SA strongly advises legal guardians of minors to promote responsible, safe use of the internet. The Data Controller may not be held liable for collecting and processing personal information and data from minors under 16 years old whose consent is not covered by that of their legal guardians, nor for incorrect data - including relating to age - given by minors. Under no circumstances will personal data be processed by the Data Controller if the User states that he or she is less than 16 years old.

15. Updates to the privacy policy

Progenus may update this privacy policy at any time. However, any change will be reported on the site along with the revision date. We invite you to regularly keep yourself informed of our handling of your personal data.

16. Competent jurisdiction

In the event of a dispute of any kind, only the courts of Liège (Belgium) shall have jurisdiction. Belgian law shall apply to any dispute relating to a PROGENUS service.

17. Contact

For any question or complaint relating to this privacy policy, the User may contact the Data Controller via the following address:

Data Controller for PROGENUS and his or her representative

The designated data controller is Mr Robert Renaville, managing director of PROGENUS S.A.
Address: 7a rue Camille Hubert, 5032 Gembloux, Belgium

The designated data controller's representative is the quality coordinator
Address: 7a rue Camille Hubert, 5032 Gembloux, Belgium

Email: gdpr@progenus.be