PRIVACY NOTICE INNOCORE

This privacy notice addresses the processing of personal data by Innocore Technologies B.V., located at L.J. Zielstraweg 1, 9713 GX Groningen, the Netherlands (hereinafter: “Innocore”) in relation to its (potential) business partners, clients, website visitors, newsletter subscribers, and other individuals whose personal data we process.

Innocore acts as a controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR“) and the Dutch GDPR Implementation Act (Uitvoeringswet AVG, “UAVG“) in relation to the processing of personal data described in this privacy notice.

DEFINITIONS

The following terms are used throughout this privacy notice and shall have the meaning set out below, whether capitalised or not:

Controller:                    The natural or legal person that determines the means and purposes of the processing.

Personal Data:             Any information that can directly or indirectly identify you.

Process/Processing:   Any action with personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, erasure, or destruction.

Purpose:                      The reason(s) for which personal data is processed.

 

PROCESSING ACTIVITIES

Innocore processes personal data for the purposes set out below. For each processing purpose, Innocore acts as the Controller, meaning that it determines why and how your personal data is processed. Under the GDPR, we may only process personal data where we can rely on a valid legal basis. The applicable legal basis for each processing purpose is specified below.

Please note that your personal data may be processed for more than one purpose simultaneously. If the legal basis for a particular processing purpose ceases to apply, we will stop processing your personal data for that purpose. This does not affect any processing of the same personal data that is carried out on the basis of a separate purpose and legal basis in accordance with this privacy notice.

 

Business relationships and communication with (potential) clients and partners

Legal basis: legitimate interest (Article 6(1)(f) GDPR)

We process personal data of our (potential) clients, business partners and other professional contacts in the context of establishing, maintaining and extending our business relationships. This includes communicating with you about our products and services, responding to your inquiries, following up on requests for information, and managing our ongoing collaborations.

For this purpose, we process the following personal data:

  • first and last name;
  • company name and job title;
  • business address;
  • telephone number;
  • e-mail address;
  • any other information that you actively provide to us, for example in correspondence, by telephone, or in the context of a collaboration.

We consider the processing of this personal data to be necessary for the effective management of our business relationships and the provision of our products and services. We have carefully balanced our interests against your rights and believe the processing is proportionate given the professional context in which the data is collected and the limited nature of the personal data we process.

We retain your personal data for this purpose for the duration of our business relationship or for as long as we reasonably expect to enter into or extend a business relationship with you. In any event, we will retain your personal data until two (2) years after our last meaningful contact with you, after which your data will be deleted unless another processing purpose applies. If you wish to end the processing of your personal data for this purpose at any time, you may submit a request to that effect as described in the ‘Data Subject Rights’ section below.

 

Newsletter and marketing communications

Legal basis: consent (Article 6(1)(a) GDPR)

If you subscribe to our newsletter and/or marketing communications, we process your personal data to send you our newsletter and keep you informed about our products, services and activities.

For this purpose, we process the following personal data:

  • e-mail address;
  • first and last name (if provided);
  • communication preferences;
  • subscription date and time.

We retain your personal data for this purpose until you unsubscribe or withdraw your consent. You may unsubscribe from our newsletter at any time by using the unsubscribe link included in each communication or by contacting us as described in the ‘Contact Us’ section below.

 

Website and cookies

Legal basis: consent (Article 6(1)(a) GDPR) for non-essential cookies; legitimate interest (Article 6(1)(f) GDPR) for essential cookies and basic website functionality.

When you visit our website, certain technical data is processed to ensure that the website operates correctly and to provide you with a functional user experience. Our website uses both essential and non-essential cookies. Essential cookies are necessary for the basic operation and security of the website and are placed without your consent on the basis of our legitimate interest in maintaining a secure and functional website. Non-essential cookies are placed only with your prior consent, in accordance with the Dutch Telecommunications Act (Telecommunicatiewet) and applicable EU legislation.

We will only place non-essential cookies, such as analytical and marketing cookies, after obtaining your prior consent. Analytical cookies allow us to evaluate how visitors interact with our website, enabling us to optimise its content and performance. You are free to adjust your cookie preferences at any time through your browser settings, and you may remove any stored cookies by clearing your browser data.

In the context of your use of our website, we may process the following data:

  • information about your activities on our website;
  • internet browser and device type;
  • IP address;
  • data about your surfing behaviour (if you consent to non-essential cookies).

The retention period for cookies varies depending on the type of cookie. Essential cookies are stored for the duration of your browsing session or as long as necessary for the website to function properly. Non-essential cookies are stored in accordance with the retention periods specified in our cookie settings, and you may delete them at any time via your browser settings.

 

Automated decision-making and profiling

Innocore does not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

 

Legal obligations

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR)

We may process your personal data where this is necessary to comply with applicable legal and regulatory obligations, including but not limited to obligations under tax law, commercial law, and anti-money laundering legislation. In such cases, the retention period will be determined by the applicable statutory retention obligation.

 

WHO WILL PROCESS OR RECEIVE YOUR DATA?

Innocore may engage third-party service providers to process personal data on our behalf. We enter into data processing agreements with such service providers to ensure that your personal data is handled in accordance with the GDPR and treated confidentially. Personal data is only disclosed to third parties where this is necessary for the performance of our agreement with you, to comply with a legal obligation, or on the basis of our legitimate interest. In addition to service providers, we may share personal data with professional advisors (such as legal counsel and auditors) and with competent authorities, regulators, or other governmental bodies, where required by applicable law. We do not sell your personal data to third parties.

These processors may concern the following categories of service providers:

  • website hosting and management;
  • IT support and infrastructure;
  • CRM and communication tools;
  • analytics services (if you consent to non-essential cookies).

 

INTERNATIONAL TRANSFERS

We endeavour to process your personal data within the European Economic Area (EEA). In the event that personal data is transferred to recipients outside the EEA, we will ensure that appropriate safeguards are in place in accordance with the GDPR, such as Standard Contractual Clauses approved by the European Commission or an adequacy decision. If you would like more information about the safeguards we have in place, please contact us using the details provided in the ‘Contact Us’ section below.

 

CHILDREN’S DATA

Our website and services are not directed at individuals under the age of sixteen (16) years. We do not intentionally collect personal data from children under the age of sixteen (16) without the consent of a parent or guardian. If you believe that we have collected personal data about a minor without appropriate consent, please contact us immediately and we will take steps to delete such information.

 

SECURITY

Innocore takes the protection of your personal data seriously and has implemented appropriate technical and organisational measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised modification of your personal data. If you have the impression that your data is not properly secured or if there are indications of misuse, please contact us immediately using the details provided in the ‘Contact Us’ section below.

 

DATA SUBJECT RIGHTS

Under the GDPR, you are entitled to exercise certain rights in relation to the personal data we process about you. Innocore is committed to respecting and facilitating the exercise of these rights. To submit a request in relation to your rights under the GDPR, please contact us at [email protected]. We will process your request without undue delay and in any event within one (1) month of receipt. Where the complexity or volume of requests so requires, this period may be extended by up to two (2) additional months.

You have the following rights under the GDPR:

  • The right of access. You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, to obtain access to the personal data and receive a copy thereof.
  • The right to rectification. You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
  • The right to erasure. You have the right to request the deletion of personal data concerning you if, among other things, the personal data are no longer necessary in relation to the purposes for which they were collected, you withdraw your consent, or the personal data have been unlawfully processed.
  • The right to restriction of processing. You have the right to request restriction of processing of your personal data in certain circumstances, including where you contest the accuracy of the personal data or where the processing is unlawful but you do not wish the data to be deleted.
  • The right to data portability. You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller. This only applies to data that we process on the basis of your consent or on a contract, and by automated means.
  • The right to object. You have the right to object to the processing of your personal data where such processing is based on our legitimate interest. Where you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
  • The right to withdraw consent. Where the processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • Where we have reasonable doubt about your identity, we may ask you to provide a copy of a valid identity document in order to verify your identity when submitting a request. In such case, we ask you to obscure your passport photo, the machine-readable zone (MRZ), passport number and citizen service number (BSN) in the copy, in order to protect your privacy.

 

COMPLAINT

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the competent supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority). Further information is available at: https://www.autoriteitpersoonsgegevens.nl. We would, however, appreciate the chance to address any concerns you may have before you approach the supervisory authority.

 

AMENDMENTS

Innocore may amend this privacy notice at any time to reflect changes in our processing activities or in applicable legislation. The most recent version of this privacy notice will be made available on our website. If any amendment materially affects a processing activity for which we rely on your consent, we will request your renewed consent before continuing that processing activity. We recommend that you review this privacy notice periodically.

 

CONTACT US

For any questions or concerns about our privacy practices, please contact us at:

Innocore Technologies B.V.

L.J. Zielstraweg 1

9713 GX Groningen

The Netherlands

Telephone: +31 (0) 50 575 3100

E-mail: [email protected]

Website: www.innocorepharma.com

This privacy notice was last updated on April 21, 2026.