Careers at ATB Therapeutics

Date of last revision: 16 December 2024

ATB Therapeutics privacy policy

1. Who are we?

1.1. We are ATB THERAPEUTICS, NV a company incorporated under Belgian law, having its registered office at Rue de la Science 8, 6900 Aye, Belgium (“ATB Therapeutics”, “we”) and registered with the Crossroads Bank for Enterprises (Kruispuntbank van Ondernemingen or KBO) under enterprise number 0677.980.015.

1.2. We are committed to providing novel therapeutic solutions for patients with cancer and auto-immune disease.

1.3. We value your right to privacy and make every effort to protect your personal data in accordance with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and national implementing legislation. In this Privacy Policy, we explain what personal data we collect from you, for what purposes we will process this data, on what legal basis we base this processing, to whom your personal data may be transferred, how long we keep your data, how we protect your data and what rights you have in relation to the processing of your personal data.

1.4. ATB Therapeutics reserves the right to amend this privacy policy at any time. When updated, the date at the top of this policy will be amended. The applicable version will at any moment be available on this website and will apply.

2. from whom do we collect data?

2.1. In the course of our business, we may collect personal data from job applicants, customers, visitors to our website, persons who provide their business card or otherwise their contact details to us, and persons who contact us by e-mail or otherwise.

3. WHAT PERSONAL DATA DO WE REQUEST AND WHY?

3.1. By using our website, we collect and process your data. Some aspects of these data can be qualified as personal data. We process the following categories of personal data, for the following purposes, on the basis of the following legal grounds:

· To help you with questions via email or phone, we process data required to resolve these issues. This is necessary for the exercise of our legitimate interests (art. 6.1 f) GDPR), in particular to provide you with the necessary information.

· To inform you of new functionalities to our Website, we process your Name, email address, address. This is Necessary for the exercise of our legitimate interests (art. 6.1 f) GDPR, in particular communicate relevant information.

· To analyse statistics about visitors to our Website in order to improve the Website, we process Data on visitors' behaviour, IP address, browser type, internet service provider, referring/ exit pages, platform type, date/ time stamp, on the basis of prior, express, free, specific and informed consent of you (art. 9.2 a) GDPR and art. 5(3) ePrivacy Directive).

· To comply with legal obligations, we process data required by applicable law. This is necessary to comply with a legal obligation(art. 6.1 c) GDPR).

· For newsletters, we process your email address on the basis of prior, express, free, specific and informed consent of you. (art. 9.2 a) GDPR) This authorisation can be withdrawn by you at any time.

· To evaluate your job application, we process your name, email address, address, photo (where applicable), experience, previous jobs and other CV information, on the basis of the necessity for the performance of the contract we have concluded with you, in particular the employment contract (art. 6.1 b) GDPR).

· To pool talent and maintain candidate database, we process your name, email address, address, photo (where applicable), experience, previous jobs and other CV information, on the basis of prior, express, free, specific and informed consent of you. (art. 9.2 a) GDPR).

· To prevent, detect and combat fraud and other illegal or unauthorised activities, we process data required for detection of fraud and illegal activities. This is necessary for the exercise of our legitimate interests (art. 6.1 f) GDPR, in particular the prevention of fraud and other illegal activities.

4. WITH WHOM DO WE SHARE YOUR PERSONAL DATA?

4.1. We may disclose your personal data to the following parties:

- With our service providers and partners: We use third parties to help us operate and improve our website and recruitment process. These third parties assist us with various tasks, including data hosting and maintenance, analytics, customer care, marketing, advertising, and security operations. We also share information with partners who distribute and assist us in advertising. For instance, we may share limited information on you in hashed, non-human readable form to advertising partners.

- In the context of a merger, acquisition or the sale of assets: ATB Therapeutics will notify you hereof prior to sharing your personal data. In that event, you will be subject to a different privacy policy.

- Employees, representatives, shareholders, (sub)contractors, affiliated companies, external consultants of ATB Therapeutics.

- With law enforcement/when required by law: We may disclose your information if reasonably necessary: (i) to comply with a legal process, such as a court order, subpoena or search warrant, government / law enforcement investigation or other legal requirements; (ii) to assist in the prevention or detection of crime (subject in each case to applicable law); or (iii) to protect the safety of any person.

4.2. When transferring personal data to third parties, we always ensure that we implement appropriate technical and organisational protection measures. Where necessary, we will, for example, conclude a transfer agreement or a processor agreement, which sets out restrictions on the use of your personal data and obligations in respect of the security of your personal data.

4.3. To the extent that your data is transferred in the context of this article to countries outside the European Union which do not provide an adequate level of protection for your data, ATB Therapeutics will ensure that the companies to which your data is transferred do provide an adequate level of protection. In particular, we have concluded Standard Contractual Clauses (SCC) with them. ATB Therapeutics guarantees to always verify, on a case-by-case basis, whether an adequate level of protection is in place for transfers to third countries.

5. HOW LONG DO WE STORE YOUR PERSONAL DATA?

5.1. We do not keep your personal data longer than necessary for the purposes for which it is collected and processed (as described above), unless a longer retention period is (i) necessary to cover our liability or (ii) required or permitted by law.

5.2. For talent pooling and candidate pipelining we don’t retain CVs longer than one (1) year from the moment we received the CV. When the candidate is hired, we process this information as part of the employment agreement for the duration of the employment.

5.3. All personal data purely for the purpose of scientific research or statistical purposes may be stored for longer periods.

5.4. Regarding the data of visitors to our website, we refer to our Cookie Policy.

6. HOW DO WE SECURE YOUR PERSONAL DATA?

6.1. We take appropriate technical and organisational measures to ensure a level of security appropriate to the specific risks we have identified.

6.2. We thus protect your personal data as best as we can against the destruction, loss, alteration or unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed. More information on our security measures is available upon request.

7. WHICH RIGHTS DO YOU HAVE AS A DATA SUBJECT?

7.1. Withdraw your consent at any time: you have the right to withdraw consent where you have previously given your consent to the processing of your personal data.

7.2. Object to processing of your personal data: you have the right to object to the processing of your personal data if the processing is carried out on the legal basis of a legitimate interest. You also have the right to object to the processing of your personal data for direct marketing purposes. This right is absolute - we will always comply with it.

7.3. Right to access: You have the right to obtain confirmation from us as to whether or not we are processing your personal data, to obtain access to that personal data and how and why it is being processed, as well as to receive a copy of that data.

7.4. Right to rectification: You have the right to obtain a correction of your personal data or to request that we complete your personal data if you notice that we are processing incorrect or incomplete data about you.

7.5. Right to erasure: You have the right to obtain data erasure in certain specific cases.

7.6. Right to restriction: You have the right to have the processing of your personal data restricted in certain specific cases.

7.7. Right to data portability: You have the right to obtain the personal data you have provided us with in a structured, commonly used and machine-readable form, and to transfer that personal data (or have it transferred) to another controller.

7.8. You may exercise the above rights by sending an e-mail to info@atbtherapeutics.com or in the case of the right to object to direct marketing also via the opt-out link included in our marketing e-mails. The exercise of these rights is in principle free of charge. Only in case of unreasonable or repeated requests may we charge a reasonable administrative fee. We always try to answer your requests or questions as quickly as possible. For further information and advice on the above rights, please visit the website of the Data Protection Authority: www.gegevensbeschermingsautoriteit.be. In addition to the above rights, you also have the right at any time to file a complaint with the Data Protection Authority in connection with the processing of your personal data by us. You can contact the authority at contact@apd-gba.be or by mail at the following address:

Gegevensbeschermingsautoriteit
Drukpersstraat 35
1000 Brussels, Belgium

8. References to other websites

8.1. Our website may contain links to other sites that are not operated by us. If you click on a third-party link, you will be redirected to that third-party site. We strongly recommend that you review the Privacy Policy of each site you visit.

8.2. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party websites.

9. CHANGES TO THE PRIVACY POLICY

9.1. From time to time it may be necessary to amend this Privacy Policy. When we post changes to the policy, we will change the "last updated" date at the top of the document. The most recent version of this Privacy Policy will be available on our website at all times.

10. CONTACT

10.1. If you have any questions or concerns regarding this Privacy Policy or our processing of your personal data, you may contact us at info@atbtherapeutics.com or Novalis Science Park, Rue de la Science 8, 6900 Aye, Belgium.