Privacy Statement
Who we are
In this Notice, the words “20Med”, “We”, “Us” and “Our” refer to 20Med Therapeutics B.V. We determine the means and purposes for which your personal data is collected, used and/or disclosed and managed through our website (“the Site”) and other online means in line with this privacy statement.
20Med Therapeutics B.V. is registered at Drienerlolaan 57522NB, the Netherlands.
You can contact our Data Protection Officer (DPO) regarding any information, or concerns, related to 20Med’s processing of personal data, by sending an e-mail to: info@20medtherapeutics.com.
Scope
This privacy statement covers any information processed through our website (20Medtherapeutics.com or 20medtx.com) and including any information collected by us when, when you contact 20Med through any of the contact information provided on this website (including by e-mail or phone).
General
The purpose of this privacy statement is to inform you on what, for what purposes and how we process personal data.
Information collected and purposes for which we process data
We collect information in order to optimize our services offered to you and we do it in a manner that respects your privacy.
For the purpose of contacting us, applying for available vacancies, registering to receiving updates on the company or subscribing to our newsletter we collect the necessary information needed in order for these tasks to be performed. This includes your name, email, address, telephone number and any other relevant information required to fulfil the purpose for which we process this information. We also process automatically generated information as further described below. We process this data to provide us with commercial insight, and visitors’ privacy-impact is limited by setting Google Analytics in privacy-friendly mode, using the instructions issued by the Dutch Data Protection Authority.
Contact
To enable contact with us, so we can address your inquiries with us, we have provided options and contact details that enable you to contact us. You may need to provide your personal data that you seem fit, to allow 20Med to communicate with you and satisfy your query or request (e.g. e-mail addresses, telephone number and any other personal data included in your communication).
To enable 20Med to word effectively through a collaborative file sharing environment, we require you to authenticate your identity through your email address. When you authenticate your email address with us through our collaborative file sharing environment, your email address is stored for security and safety purposes.
Storage Duration: In order to fulfil the purpose of addressing your requests, we withhold your data for a limited period of time, and in any case not more than two years from the data received. Your data are kept by us out of necessity for the purpose of communication with you. Should there be no further communication, they will be removed and thus no longer stored on our systems.
Cookie policy
Cookies are small text-data files, automatically placed and stored on your computer when visiting our website. You are able to modify your web browser’s cookie default third party policy by going to settings at the privacy section.
We use non-intrusive/privacy-friendly cookies only to collect information on how visitors make use of our Site. It is important for us to analyse statistics provided by the cookies, in order to optimise our services to you and improve your online experience.
We use in particular the Google Analytics cookie, i.e. a third party cookie set by Google, which allows us to monitor how visitors interact with our website, how much time they spent on it and if errors or other issues were experienced. Its general purpose is to help us to improve the performance of our Site.
_ga
Google Analytics
Function/Purpose: It is included in each page request in a site and is used to calculate visitor, session and campaign data for the sites analytics reports.
Expiration: By default, it is set to expire after 2 years.
_gat
Google Analytics
Function/Purpose: It is used to throttle the request rate: limiting the collection of data on high traffic sites.
Expiration: It expires after 10 minutes/after the session.
_gid
Google Analytics
Function/Purpose: It tracks, stores and updates a unique value for each page that is visited.
Expiration: It expires after 24 hours.
JSESSIONID
New Relic
Function/Purpose: It is used to monitor session counts for an application.
Expiration: It is deleted after the session is completed.
NREUM
New Relic
Function/Purpose: It is only created in browsers that do not support the Navigation Timing API.
Expiration: It is deleted after the session is completed.
NRAGENT
New Relic
Function/Purpose: It is created when a token is handed out to an end user by the New Relic collector. It is set only if you use Browser agent version v443 or lower. Expiration: It is deleted after the session is completed.
Automatically collected information
Device information, IP addresses and other meta-data that are automatically processed by 20Med by visiting 20Medtherapeutics.com servers. Cookies are used to automatically process data in order to optimize our Site’s performance and measure analytics, as described above.
Data Subject Rights
The GDPR gives the possibility to data subjects to exercise certain rights. This process is free of charge and you may contact our Data Protection Officer at info@20Medtherapeutics.com. You may exercise the following rights:
Right to Access: You may request information on your Personal Data, why they are processed and to what end, as well as the period of processing and retention.
Right to rectification, erasure and restriction: In case of inaccurate personal data, you may ask it to be corrected, amended or supplemented; you have also the right, under certain circumstances, to demand that your personal data will be erased, or restricted, from being processed. Be aware though, that this could result in not providing our services to you.
Right to data portability: You have the right to receive your personal data, under certain circumstances, in a structured, commonly used and machine-readable format and you can transfer it to another controller.
Right to object: You have the right to object to the processing of your data for the purpose of direct marketing or profiling. We may refuse your objection when personal data are needed for execution of a certain contract or when processing is within the limits of initial purpose of processing.
Right to lodge a complaint: If, for any reasons, you think we have not treated your personal data in accordance with the GDPR, you have the right to lodge a complaint to the data supervision authority which is located in the country of your residence. Please click here to find information on all data supervisory authorities in Europe.
Third parties and international transfers
The main parts of our Site are hosted by a hosting provider in The Netherlands.
Our collaborative environments are hosted within Europe.
Finally, we use Google Analytics to provide us with basic analytic insight as described above. Visiting the Site while having cookies enabled, will transfer automatically generated information to Google in the USA. As mentioned above, we operate Google Analytics in privacy-friendly setting in accordance with the direction provided by the Dutch Data Protection Authority. To ensure an adequate level of protection for your rights and freedoms as a data subject for any personal data processed that might be transferred to the USA for the use of Google Analytics, it is protected by Google’s EU-US Privacy Shield self-certification.