Privacy Policy
Introduction and legal notice
In accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"):
The personal data we process may concern you as a client, but also as a business relationship of our clients (for example, if you are a supplier or a client of our client), or as a visitor to our website.
We are required to inform you, as a data subject whose personal data we process, of the following.
1. Data controller
The data controller is Martial Dollinger, for Pharma Technology and Pharma Flex S.A.
The controller's registered office is located at Rue Graham Bell 8, 1402 Thines, Belgium. Company numbers: 0443.803.803 and 0897.187.147.
For any matter relating to personal data protection, please contact us by post at the address above, or by email at GDPR@pharmatec.be.
2. Purposes of processing
We process personal data for the following purposes:
A. Legal and regulatory obligations. Compliance with Belgian, foreign, or international legal obligations (for example VAT filings, tax and social law requirements), or as part of the legitimate defense of our rights. This processing is a legal obligation. Without this data, we cannot enter into a business relationship with you.
B. Performance of contracts relating to deliveries or services, including data of clients, their staff and directors, and other parties involved in their activities (such as suppliers).
C. Operation of our website, including responding to contact form submissions and enquiries, managing account sign-in, and, where you have consented, sending newsletters or marketing communications.
D. Analytics and website improvement, using tools such as Google Analytics, to understand how visitors use our site and improve our services. Please see our Cookie Policy for full details of the cookies and trackers used on this site, including advertising cookies (Google Ads).
If required data under points A or B is not provided, we may be unable to enter into or perform our contractual and legal obligations with you.
3. What personal data, and from whom
Within the purposes described in point 2, we may process: first name, surname, email address, phone number, company name, country, job title, photo, address, company number, national number, and, for website visitors, IP address and browsing/interaction data collected via cookies (see our Cookie Policy).
We process personal data that you or your close relatives provide directly to us, including via our website's contact form, account registration, or newsletter sign-up.
We also process personal data not provided directly by the data subject, such as data passed on by a client concerning its employees, directors, clients, suppliers, or shareholders, or data from public sources such as the Banque-Carrefour des Entreprises, the Moniteur belge, and the National Bank of Belgium (Balance Sheet Centre).
Data is only processed where necessary for the purposes described in point 2.
4. International data transfers
Where possible, we process personal data within the European Economic Area (EEA). However, some of our service providers, including Google (for Google Analytics and Google Ads, as described in our Cookie Policy), are based outside the EEA, meaning personal data may be transferred internationally as part of their service. Where this occurs, we rely on the safeguards required under GDPR, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision, to ensure your data remains protected.
5. Recipients of the data
We do not sell or rent personal data, nor exchange it with third parties for their own marketing purposes, without your prior express consent.
We share personal data with the following categories of recipients, acting under our instructions and only as necessary for the purposes above:
- Our ERP, CRM, and accounting service providers
- Website hosting and analytics providers (including Odoo and Google)
- External staff or contractors carrying out specific tasks on our behalf
We may also disclose personal data where required by a legally competent authority, or where we consider in good faith that disclosure is necessary to comply with the law, or to defend the rights or assets of the company, its clients, its website, or yourself.
6. Security measures
We have implemented technical and organizational procedures to prevent unauthorized access to personal data, covering both its collection and its retention. These procedures also apply to any data processors we use.
7. Retention period
Personal data is retained only for the period required by applicable legislation (such as accounting, tax, and social law requirements), or as otherwise necessary for the purposes described in point 2. Website contact form and newsletter data is retained only as long as necessary to respond to your enquiry or maintain your subscription, unless a longer period is required by law.
Once the applicable retention period has expired, personal data is deleted, unless another legal provision requires a longer retention period.
8. Your rights
Subject to the conditions set out in GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erasure ("right to be forgotten"), where applicable
- Restrict processing in certain circumstances
- Object to processing based on legitimate interest, including direct marketing
- Data portability, where technically feasible
- Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal
To exercise any of these rights, please contact us at GDPR@pharmatec.be.
9. Complaints
You have the right to lodge a complaint concerning our processing of your personal data with the Belgian Data Protection Authority:
Autorité de protection des données (APD) / Gegevensbeschermingsautoriteit (GBA)
Rue de la Presse 35, 1000 Brussels, Belgium
Tel.: +32 (0)2 274 48 00
Email: contact@apd-gba.be