Privacy Policy
Last revised: December 2023
At One2Treat, we value the trust of those who have entrusted us with their personal data. We periodically review our data processing practices to ensure compliance with internationally recognized personal data protection standards, such as the EU General Data Protection Regulation (GDPR).
1. Scope
What you will find in this Privacy Statement:
- To whom this Privacy Statement is addressed
- Who is responsible for protecting your data
- Purposes and legal grounds for data processing
- Categories of personal data we may collect
- Parties to whom we may disclose your personal data
- Transfers of personal data outside the EEA
- Automated decision-making
- Data retention and protection measures
- Your rights regarding your personal data
- Information about our website usage
- How to contact us
- Changes to this Privacy Statement
2. To Whom Is This Privacy Statement Addressed?
This Privacy Statement applies to One2Treat clients and partners, detailing how we collect, use, and disclose their data and personal information.
3. Who Is Responsible for Protecting Your Data?
When processing personal data for its purposes, One2Treat SA, located at 1 Rue Emile Francqui, 1435 Mont-Saint-Guibert, Belgium, is the “data controller.” One2Treat and its affiliates may act as “data processors” when processing data for clients in trial design, analysis, and biostatistical services.
4. Purposes and Legal Grounds for Processing Your Data
One2Treat processes personal data:
- Based on our legitimate interest in managing client and stakeholder relationships, including data collected indirectly through data broker services.
- To communicate with you regarding services and events, in accordance with your consent and marketing preferences.
- To provide specific services like data management and analysis as part of contractual agreements.
5. Categories of Personal Data We May Collect
- Identification and Contact Data: Name, gender, job title, phone number, email, company, ZIP code, city.
- Relationship Information: Service interests, contact and marketing preferences, languages.
- Transaction Information: Client interactions, billing, financial details, tax information, correspondence history.
- Voluntary Information: Feedback, opinions, or other information shared via helplines.
- Website Interaction Data: Device details, IP address, pages visited, visit timestamps.
- Vendor Screening Information: Qualifications, licenses, work permits, ID documents, conflict of interest details.
- User Data on One2Treat Systems: Usernames, (hashed) passwords, security logs.
6. To Whom May We Disclose Your Personal Data?
Personal data may be accessible to One2Treat staff and third-party service providers for development, hosting, and maintenance services. We ensure these providers maintain data confidentiality and only share what is necessary. We may disclose data if required by law or to protect One2Treat’s rights, users, or for legal processes.
7. Transfers of Personal Data Outside the EEA
Some data recipients may be located in countries outside the EU. We implement safeguards, like standard contractual clauses approved by the European Commission, to ensure data protection. For more details, contact us.
8. Automated Decision-Making
We do not use personal data for automated decision-making that has legal or significant effects on individuals.
9. Data Retention and Protection Measures
We retain your personal data only as long as needed for requested services or as required by law. In case of litigation, data is retained until the end of the investigation. We implement security measures to protect against unauthorized access or misuse.
10. Your Rights Regarding Personal Data
You may contact us to:
- Confirm data processing and request data copies.
- Update or correct inaccurate data.
- Request data deletion or restrict usage if not lawfully processed.
- Withdraw consent for data processing (where consent is the basis).
- Receive your data in a machine-readable format or transfer it to another party.
- Object to data processing based on legitimate interests or for direct marketing.
To exercise your rights, email us at dataprivacy@one2treat.com. You may also file a complaint with your local Data Protection Authority (DPA).
11. About the Use of Our Website
Our website interfaces with social media platforms. Before sharing information on these platforms, review their privacy policies. One2Treat does not knowingly allow third parties to track your online activities across different websites.
Our website may link to third-party sites, which we do not control. We recommend reviewing each site’s privacy policy. Our website is not designed to collect data from children under 16.
12. How to Contact Us
Email: dataprivacy@one2treat.com
Mail:
One2Treat s.a.
Boulevard Baudouin 1er, 25, 1348 Ottignies-Louvain-la-Neuve
Belgium
13. Changes to This Privacy Statement
We may update this Privacy Statement as privacy laws evolve. Changes will be reflected in the revision date. Check back periodically for updates.