Privacy policy
This Privacy Policy applies to the processing of data related to the use of the website https://nuagetx.com/ (hereinafter “the Website”).
Nuage Therapeutics as the Controller of the personal data, has committed to comply with:
- The General Data Protection Regulation N°EU 2016/679 (hereinafter, the “GDPR”);
- The General Data Protection Regulation as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 (hereinafter the “UK GDPR”) and the UK Data Protection Act 2018 (amended 2020) (hereinafter the “Data Protection Act”);
- And, to the extent applicable, all other laws and regulations regarding data privacy within the jurisdictions it operates.
Collectively referred as “Data Protection Laws”.
Nuage Therapeutics wants to make sure that you understand what personal information is collected about you, how your personal information is used and how it is kept safe.
General warning and use of social media
Access to the Website implies the User’s full and unreserved acceptance of this Website Privacy Policy (hereinafter the “Policy”), as well as its general terms of use and the Cookies Notice.
The User acknowledges having read the information below and authorizes Nuage Therapeutics to process, in accordance with the provisions of the Policy, the personal data that he/she communicates on the Website.
The Policy is valid for all pages hosted on the Website. It is not valid for the pages hosted by third parties to which Nuage Therapeutics may refer and whose privacy policies may differ. Nuage Therapeutics cannot therefore be held responsible for any data processed on these websites or by them. This Policy also applies to any other website that Nuage Therapeutics may operate, including our Company page on LinkedIn.
Please, note that for the use of social media, Nuage Therapeutics will be Joint-Controller with LinkedIn, only for the following activities: accessing and processing statistical aggregate data provided by LinkedIn. For any other processing on the platform, social media platform shall be considered as the sole Data Controller.
LinkedIn have created an “addendum” to their user agreements for company pages for the processing for which they are Joint-Controllers with us.
What personal data do we collect, why, how and for how long do we process your information?
| Purposes | Types of personal data | Legal basis | Retention period |
|---|---|---|---|
| Recruitment: We will only process the personal information that you provide us to the extent necessary to consider your application for employment and ensure the proper processing of your application. For government reporting purposes, if applicable per workplace’s national law, we may also process sensitive data. | We will process your identification data and physical address, CV, education, LinkedIn profile, employment visa status. If you agree, and if your national laws allow it, we may collect your race/ethnicity (Hispanic/Latino or not exclusively), gender, veteran status, disability. | We process your data in order to perform any necessary activity prior to enter into an employment agreement with you. We may process your sensitive information based on your explicit consent for the declared purposes exclusively. | We will process your data for the time necessary to manage your application. |
| Cookie Notice: You will find information related to cookies collection in our Cookie Notice | Technical data: e.g. cookies may store in certain circumstances personal data which may include: IP addresses, browser type, location, operating system… For more information, please consult our Cookies Notice. | See the Cookies Notice. | See the Cookies Notice. |
| Social media statistics: Some information related to follower’s visits are collected in an aggregate way by LinkedIn. We can access statistics provided by LinkedIn in order to have information on the ways our pages are accessed. | Aggregate data: aggregate statistical data (e.g. Company pages on LinkedIn) | We consider that we have legitimate interest to understand the way our pages are accessed (e.g. how many times our page is accessed, from which country…). | Statistical information is stored by LinkedIn and consequently subject to their retention policy. We may export statistical reports, but we guarantee that this is only in an anonymous form. |
| To answer to your queries either by email or through the contact form | Name, email address. Please note that other Personal Data may be processed by Nuage Therapeutics depending on your request and the information you provide us | This processing is based on our legitimate interest in answering the requests or queries raised by you through the existing different contact channels. We understand that the processing of these data is also beneficial to you to the extent that it enables us to assist you adequately and answer to the queries raised | We will process your data for the time necessary to meet your request |
Data sharing
We do not sell, trade, or otherwise transfer to outside parties your personal data. However, in order for us to provide our Services, we may share your personal information with the following categories of recipients:
- Service Providers, including those who work to enhance our Website or supporting services or protect the security of our systems;
- Business Transfers, including those where we may undergo any change in control, including by means of a merger, acquisition, or purchase of substantially all of our assets; and/or
- Legal/Regulatory Authorities, including when we must respond to a subpoena or court order, judicial process, or regulatory inquiry; when we must defend against fraud, lawsuits, claims or other liabilities; and when we must prevent physical harm or financial loss in connection with any suspected or actual illegal activity.
For EEA, UK and, sharing your personal data as explained above may involve a transfer of personal data to a country outside the European Economic Area (EEA), UK. Nuage Therapeutics is therefore committed to complying with the transfer rules under applicable Data Protection Laws and therefore ensure to:
- Transfer your data to countries where the data recipient is located that has been recognized as adequate by the European Commission; or
- Where a country has not received an adequacy decision from the European Commission, to implement appropriate safeguards, such as the EU Standard Contractual Clauses.
How do we protect your information?
Nuage Therapeutics treats your personal data in a confidential manner and provides for a sufficient and adequate level of protection of your personal data.
Your personal data is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.
For aggregate data, data are hosted on LinkedIn servers and are subject to their Privacy Policies. The statistics reports are stored on our systems and the same security measures apply.
Your rights
According to the GDPR, UK GDPR, you have the following rights:
- Access. You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, information related to the processing of data and a copy of the data being processed.
- Rectification. You have the right to require rectification of inaccurate data about you.
- Restrict processing. You have the right to restrict processing of data under certain specified circumstances.
- Data portability. You have the right to request for the receipt or the transfer to another organization, in a machine-readable form, of your personal data.
- Object to processing. You have the right to object, on grounds relating to your particular situation, at any time to the processing of your data.
- Right to be forgotten. To obtain the deletion of your personal data in the situations set forth by applicable data protection law.
- Right to withdraw consent. When you have given your explicit consent for the processing of your data, you can withdraw it at any time without justification.
If you would like to exercise your rights, please let us know by contacting us via email at dataprotection@nuagetx.com
You also have the right to lodge a complaint with the Data Protection Authority in the Member State of the European Union of your habitual residence, place of work or place of the alleged infringement or with the Information Commissioner’s Office for UK residents if you consider that your personal data is not processed in accordance with the GDPR/UK GDPR. Please find their information in the “Contacts” section.
Please note that the above rights are not absolute, and we may be entitled to refuse requests, wholly or partly, where exceptions under applicable law apply. We will not discriminate against you for exercising such rights.
Except as described in this Policy or provided for under applicable privacy laws, there is no charge to exercise of your legal rights. However, if your requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge a reasonable fee taking in account the administrative costs of providing the information or taking the action requested; or refuse to act on the request and notify you of the reason for refusing the request.
Exercising your Rights
If you have any question or request about this Privacy Policy, the ways in which Nuage Therapeutics collects and uses your Personal Information described above, your choices and rights regarding such processing, or wish to exercise your rights under applicable data protection laws, you may do so by sending us an email to dataprotection@nuagetx.com
Children’s Online Data
It is not our intention to collect personal information from children under the age of 13 through our Website. If you are under 13, please do not give us any personal information through our Website. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce our Policy by instructing their children never to provide us personal information. If you have reason to believe that a child under age 13 has provided personal information to us through our Website, please contact us and we will endeavor to delete that personal information from our records, unless other applicable law requires us to retain that information.
Third-Party Links
We may provide links to other websites or resources provided by third parties. These links are provided for your convenience only. Please note that these websites have their own privacy policies. As a result, our Policy does not apply to third-party websites. We have no control over the content of those sites or resources and accept no responsibility for them or for any loss or damage that may arise from your use of them. If you decide to access any of the third-party links on the Site, you do so entirely at your own risk and subject to the terms and conditions of those sites. Please read those terms and conditions or privacy policy before you submit any personal information to these websites.
Changes to this Privacy Policy
This Policy is effective as of the date stated at the top of this page. We may change this Policy from time to time. By providing your personal information via this Website or our systems after we notify you of such changes to this Policy, you are deemed to have accepted such changes. Please refer back to this Policy on a regular basis.
Contacts
Nuage Therapeutics – Controller
Parc Científic de Barcelona
c/ Baldiri Reixac 10-12 (Torre I)
08028 Barcelona
dataprotection@nuagetx.com
934041370
EU Data Protection Authorities
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm