(GDPR) Privacy Policy – Regenesys BV,

1. Collection and use of personal data

1.1 What personal data do we collect?

We collect your personal data when you choose to provide it, for example, when you email us or sign up for certain services. In some cases, you have already provided personal data to us. We may use this personal data to build or supplement your company profile, possibly in combination with information we already have about your company. This allows us to offer you specific services. Your personal data will never be used for other purposes, unless we have received your permission to do so, if we have to comply with a legal obligation, or if further processing is permitted on the basis of privacy legislation. We also use your personal data to optimise your visit to our website as much as possible and to continuously improve our services. In some cases where you sign up for certain services, such as receiving our digital newsletter, we temporarily store your email address until we receive a confirmation from you via email.

1.2 On what legal basis do we process your personal data?

Regenesys only collects the necessary personal data to fulfil your request. When we collect additional, optional data, we will notify you when we are about to do so. We may process the following types of personal data when you visit our website:

• Name
• Email address
• Company name
• Job Title
• Phone number
• IP address
• Your interests and preferences
• Social media name
• Information about your browsing behaviour, and possibly location and other cookie information

Privacy legislation, including the General Data Protection Regulation (GDPR), allows us to process personal data for as long as we have a legal basis to do so. In addition, according to this legislation, we are obliged to tell you what this ground is. We only process your personal data on the basis of one of the following principles:

• Performance of a contract: where we need to process your personal data in order to perform our obligations under a contract
• Legal obligation: where we need to process your personal data to comply with a legal obligation, such as when submitting a grant application, maintaining grant project records, or providing information to a government or law enforcement agency
• Legitimate interest: we process your personal data if this is in our legitimate interest for business operations and their optimisation, as long as your interests do not outweigh them
• Your consent: In some cases, we will ask you for specific consent to process certain personal data. We will only process your personal data in this way if you agree. You can withdraw your consent at any time by contacting Regenesys at info@regenesys.nl.

Examples of the ‘legitimate interests’ listed above include:

• Provide information and/or services to individuals who visit our website
• Prevent fraud or criminal activity and protect our IT systems
• To provide the visitor with a tailored online experience and to improve the performance, usability and effectiveness of our online activities
• Conduct and analyse our marketing activities
• Comply with our corporate and social obligations responsible business conduct and the United Nations Sustainable Development Goals
• Exercising our fundamental rights in the EU under Articles 16 and 17 of the Charter of Fundamental Rights, including our freedom to conduct a business and our right to property

1.3 Automatic collection of personal data

Regenesys and its service provider sometimes use cookies, web beacons, and other technologies to automatically collect certain types of information during your online visit or through emails exchanged. By collecting this information, we can provide you with a tailored online experience, improve the performance, usability, and effectiveness of our online activities, and measure the effectiveness of our marketing activities.

1.3.1 IP addresses

An IP address is a unique numerical code that identifies your computer when you access the Internet. IP addresses allow computers and servers to recognise and communicate with each other. The IP addresses from which visitors appear to be sending their messages are recorded for IT security and system diagnostic purposes. This information will usually also be used in its entirety for analyses of the use and functioning of websites.

1.3.2 Cookies

When you visit us online, cookies are usually placed on your computer or other internet-enabled device. These cookies allow the website to remember your computer or device and serve multiple purposes. If you receive a notification in the form of a banner asking for your permission to place cookies, if you do not give permission, we will only place functional cookies (no permission is required for this because they do not infringe on your privacy) and analytical cookies that have been set up in a privacy-friendly way (no permission is required for this either). Cookies do not provide us with any information about your e-mail address or any other information that can be traced back to you. We use the information to determine the number of unique visitors to our websites and trends in the geographical origin of our visitors, not to identify individual visitors.

1.3.3 Google Analytics

We use Google Analytics. More information about the use of Google Analytics by Regenesys can be found on the official website of Google Analytics. To give website visitors more choices about how Google Analytics collects their data, Google has developed the Google Analytics Opt-out Browser Add-on. This add-on communicates with the Google Analytics JavaScript (ga.js) to indicate that no information about the visit to the website should be sent to Google Analytics. The Google Analytics Opt-out Browser Add-on does not prevent information from being sent to the website itself or to other web analysis services.

1.3.4 Web beacons

A web beacon is a small image on a web page that allows certain information to be collected from your computer, such as your IP address, the time the content was viewed, the type of browser, and the presence of cookies previously placed by the same server. Regenesys uses web beacons only in accordance with applicable law, for example, to collect aggregate visitor statistics and manage cookies. You can disable certain web beacons by refusing the cookies that need to be placed for this purpose. When you visit the website, the web beacon may still record your IP address, but you will be an anonymous visitor, and no information from cookies will be stored. In some of our newsletters and other communications, we track recipients’ actions through embedded links in the messages, such as email open rates. We collect this information to understand the interests of our users and to improve the user experience of future visitors.

1.3.5 Location-based tools

Regenesys collects and uses the geographic location of your computer or mobile device. This location data is collected in order to provide you with information about services that we think may be of interest to you based on your geographical location, such as location-based subsidy schemes.

1.4 Social Media Widgets and Applications

Regenesys websites typically include features to enable the sharing of information via third-party social media applications. These social media applications collect and use information that you provide them. The personal data you provide through such social media applications is often collected and used by other members of the social media application in question. Such interactions are governed by the privacy policies of the companies that provide this application. We have no control over, and have no responsibility for, those companies or the way they use your information. For more information, please see the third party’s privacy statement.

1.5 Children

We are aware of the importance of protecting children’s privacy, particularly when they access the Internet. Our websites are therefore not deliberately designed for or directed at visitors under the age of sixteen. Our policy is never to knowingly collect or retain information about anyone under the age of sixteen, except in connection with the performance of a business services contract.

8. Questions about and enforcement of our policies