Effective Date 18th of October

1. Introduction: At Aphea.Bio NV ("We," "Us," or "Our"), We are committed to protecting your privacy and Personal Data in accordance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how We collect, use, and share Personal Data when you visit Our Website [Website URL] and your rights regarding your Personal Data.

By using Our site, you consent to the collection, use, and sharing of your data as described in this Privacy Policy. If you do not agree with these terms, please do not use our site.:

2. Definitions General Data Protection Regulation (GDPR): Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Personal Data: any information relating to an identified or identifiable natural person as defined in the GDPR. Website: means the website of Aphea.Bio NV.

3. Data Controller  The data controller responsible for your personal data is: Aphea.Bio NV: Address: Technologiepark 21, 9052 Gent, Belgium Registered at the Crossroad Bank for Enterprises under number BE0666.961.607 Email: [email protected]: Phone: +32 (0) 485 23 79 90  
4. Personal Data We Collect   We may collect Personal Data from you when you interact with our site, such as: Identity Data: Name, surname, username, or similar identifiers. Contact Data: Email address, phone number, postal address. Transaction Data: Details about payments and purchases you have made. Technical Data: IP address, browser type, and version, time zone settings, operating system, and platform. Usage Data: Information about how you use our website and services. Marketing Data: Your preferences in receiving marketing communications from us and your communication preferences.    
5. Sensitive Personal Data We do not process sensitive Personal Data unless explicitly consented to by you.  
6. Cookies: We use cookies and similar tracking technologies to track activity on Our site and hold certain information. For more details on cookies, please see our [Cookie Policy].  
7. How We Use Your Personal Data  We use your Personal Data for the following purposes only: To manage your account, including verifying your identity. To process and deliver your orders and services. To send you transactional communications (e.g., order confirmations, invoices). To manage our relationship with you, including notifications about changes to our policies or services. To respond to your inquiries or requests. To comply with legal and regulatory requirements. To improve our Site, products, and services through analytics. To send you marketing communications if you have opted in.  
8. Legal Basis for Processing: We process your Personal Data under the following legal bases: Consent: You have given clear consent for us to process your Personal Data for a specific purpose. You explicitly agree for Us to process your Personal Data for the purposes specified in this Privacy Policy selecting the “I agree” box [Tick the box] or any similar solution that is being implemented. Contractual necessity: Processing is necessary for the performance of a contract with you. The performance of a contract will in that respect qualify as the legal basis of the processing of your Personal Data (instead of consent). Legal obligation: Processing is necessary to comply with legal requirements. Legitimate interests: Processing is necessary for our legitimate business interests unless those interests are overridden by your rights and interests. The sending of commercial messages via e.g. e-mail or SMS, may be allowed without your consent, e.g. because such messages are linked to our previous contacts or your shown interest in Our products and/or services. You may at all times let Us know you no longer want to receive these messages by clicking the “unsubscribe” link included in these messages.  
9. Sharing Your Personal Data  We may share your Personal Data in the following circumstances: With service providers: We may share Personal Data with third-party providers who perform services on our behalf (e.g., payment processors, hosting services). With regulatory bodies or legal entities: When required by law or to protect Our legal rights. Business transfers: If our business undergoes a merger, acquisition, or sale, your Personal Data may be transferred to the new owner. We require all third parties who process your personal data to respect the security of your data and to treat it in accordance with the applicable legislation.  
10. International Data Transfers  Your Personal Data may be transferred and processed in countries outside the European Economic Area (EEA). We ensure that these transfers are conducted in compliance with GDPR by implementing appropriate safeguards, such as Standard Contractual Clauses (SCCs) or relying on adequacy decisions by the European Commission.  
11. Data Retention  We will retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Once retention is no longer necessary, we will securely delete or anonymize your Personal Data in accordance with the applicable legislation.   
12. Your GDPR Rights  Under GDPR, you have the following rights regarding your Personal Data: Right of Access: You can request a copy of the Personal Data we hold about you. Right to Rectification: You can request that we correct any inaccurate or incomplete data. Right to Erasure ("Right to be Forgotten"): You can request that we delete your Personal Data under certain conditions. Right to Restriction of Processing: You can request that we limit the processing of your Personal Data under certain conditions. Right to Data Portability: You can request to receive your Personal Data in a structured, commonly used format and transfer it to another controller. Right to Object: You can object to our processing of your Personal Data when it is based on our legitimate interests. Right to Withdraw Consent: You can withdraw your consent at any time if we are processing your Personal Data based on consent. To exercise any of these rights, please contact us at [email protected].  
13. Data Security  We have implemented appropriate security measures to protect your Personal Data from unauthorized access, disclosure, alteration, or destruction. These measures include encryption, firewalls, and secure servers. However, no system is completely secure, and we cannot guarantee the absolute security of your Personal Data.: 14. Minors In case you are younger than 16 years old, please ask your parents or someone holding parental responsibility to consent to the processing of your Personal Data in the context of the present Privacy Policy.:  
14. Complaints  If you have any concerns about how We process your Personal Data, please contact Us directly. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.  
15. Changes to This Privacy Policy  We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. The updated version will be posted on our site, and the date of the update will be indicated at the top of this policy.  
16. Contact Us If you have any questions or concerns about this Privacy Policy or how We handle your Personal Data, please contact us at:: Aphea.Bio NV: Technologiepark 21, 9052 Gent, Belgium: Registered at the Crossroad Bank for Enterprises under number BE0666.961.607: Email: [email protected]: Phone: +32 (0) 485 23 79 90