Privacy Notice

Kling Biotherapeutics B.V.

1. Who are we and what do we do?

We are Kling Biotherapeutics B.V. (Kling, us and/or we). We are a biotherapeutics discovery and development company based in Amsterdam, the Netherlands.

2. Privacy Notice

This is our Privacy Notice. In this document we explain what kind of Personal Data we collect and use in the course of our business. We also explain what role we have in the collection and use of Personal Data, how long we retain Personal Data and what rights you have as a data subject.

3. Personal Data and Controller

Personal Data means all information by which a person can be directly or indirectly identified. Under the EU General Data Protection Regulation (GDPR) we qualify as the so-called Controller of the Personal Data described in this Privacy Notice. This means that we determine the purposes and the means of the processing of your Personal Data.

This Privacy Notice includes the information as we are required to mention to you under the GDPR. This is why you will sometimes see some legal language in this Privacy Notice. If you have questions about this Privacy Notice or the collection and use of your Personal Data, you can always contact us through the contact details included at the bottom of this Privacy Notice.

4. What Personal Data do we collect as Controller?

In this section, we describe what Personal Data we collect and use. We also describe why we do this and what our legal basis is under the GDPR.

Personal Data we may collect and use of website visitors:

(Personal) Data:

Purpose(s):

Legal basis:

Technical information:

information on your device type, browser type, session date and time, IP address and browser type.

We use these Personal Data to:

- communicate in the same language of the browser;
- adapt our website to the used device;
- enable you to use our website; and
- improve the usability of our website.

We may collect and use these Personal Data because we have a legitimate interest to do so, i.e. to provide you with a good functioning website and improve our website.

If you contact us:

your name, e-mail address and the content of the correspondence.

We use these Personal Data to:

answer your questions and/or handle any complaints.

We may collect and use these Personal Data because we have a legitimate interest to contact and assist you based on your comment or question.

If you work on one of our research projects, e.g. at a medical site or laboratory, we may collect and use the following Personal Data:

(Personal) Data:

Purpose(s):

Legal basis:

From the people we work with in a research project, we usually collect the following Personal Data:

Business contact Personal Data, including name, telephone number, email address, home or work address and professional details such as job title and expertise.

We use this Personal Data:

for communication purposes (e.g., about our scientific progress or about a specific clinical trial or pre-clinical research).
where we are required based on medical research regulations (e.g. to facilitate an investigation of a relevant regulatory authority).

We may collect and use these Personal Data to comply with the legal requirements applicable to us, or for our legitimate interest to perform a contract or to conduct and manage a research project.

Where we rely on legitimate interest, we will always seek to maintain a balance between our legitimate interest and your privacy. Our legitimate interests include keeping a relationship with you and keeping you up to date of our scientific progress.

If you work at our investors or other business relation, we may collect and use the following Personal Data:

(Personal) Data:

Purpose(s):

Legal basis:

From our business contacts, we usually collect the following Personal Data:

Business contact Personal Data, including name, telephone number, email address, home or work address and professional details such as job title and expertise.

We use these Personal Data:

for communication purposes (e.g., to communicate about our financial and business approach).

We may collect and use these Personal Data for our legitimate interest to perform a contract or to manage our relationship with you.

If you are a participant in one of our research projects, you will receive documentation, including an Informed Consent Form, which will inform you which Personal Data will be collected and used by Kling and other parties involved in the research, for which purposes such Personal Data is used, how long it is stored, etc. This Privacy Notice does not describe such processing. For questions around the processing of Personal Data in that scope, you should refer to the contact details included in the documentation you receive.

5. How long do we keep the Personal Data?

We will not collect or store any Personal Data that we do not need. We store Personal Data for as long as we need it for the purposes as described above, unless we are legally obliged to retain the Personal Data for a longer period.

Generally, we apply the following retention periods:

Personal Data of people who work with us on a research project | As required by medical research regulations, we retain the Personal Data collected and used in scope of each research project for a period of up to 25 years.

Personal Data of people who work at our investors | We usually keep such Personal Data for a period of 7 years after our relationship with the investor ended.

Personal Data of people who work at our business relations | We usually keep such Personal Data for a reasonable period after our business relationship ended.

After expiry of the retention period(s), we may use and retain certain Personal Data to comply with legal retention obligations and/or for fraud/misuse investigations or to substantiate a (judicial) claim. In such events, we will retain the Personal Data separately and only use such Personal Data for these purposes.

6. Do we share your Personal Data with others?

To support our purposes, Kling may need to disclose personal data to third parties, such as information technology service providers, contract research organizations or regulatory bodies. Where possible, Kling concludes agreements with such third parties to commit these parties to appropriately protect the Personal Data and only process Personal Data as instructed by Kling.

7. Export of Personal Data outside the European Union

We may transmit Personal Data to parties outside the European Union. The Personal Data will only be transferred to countries and/or parties that provide an adequate level of protection in accordance with the GDPR standards. You may contact us if you wish to receive more information or a copy of the safeguards we take in this scope.

8. Your rights as a data subject

Under the GDPR, you have certain rights related to your Personal Data as processed by or on behalf of Kling. Please note that for these rights we need to be able to identify you (for instance to make sure we perform the correct action on the correct personal data). When you are a participant in one of our medical research projects, we will usually only have coded Personal Data of you, and we will not be able to identify you. In those cases, we will refer you to your hospital or another party involved in the research.

Please note, due to our legal obligations or compelling reasons in light of scientific integrity we may not always be able to (fully) facilitate your rights. This will be assessed on a case-by-case basis.

You are always entitled to file a complaint with a data protection supervisory authority if you believe that we are not collecting and using your Personal Data in accordance with the GDPR. In the Netherlands, the supervisory authority for data protection is:

Autoriteit Persoonsgegevens
Website: https://www.autoriteitpersoonsgegevens.nl

9. Changes to the Privacy Notice

The Privacy Notice may be changed from time to time. Please check our Privacy Notice frequently. The new Privacy Notice will be effective immediately upon posting on our Website. If we change our Privacy Notice significantly, then we will state so on our Website together with the revised Privacy Notice.

Contact details

If you have questions or concerns about this Privacy Notice or your privacy or wish to exercise your rights, you can contact us via the details on the contact page of this website.