DENDROGENIX S.A. (hereinafter "DENDROGENIX") understands the importance of protecting Personal Data. This Privacy Notice (hereinafter "the Notice") contains important information about the processing of Personal Data of suppliers, third parties and visitors of the website.

In this Notice :
● "DENDROGENIX": DENDROGENIX S.A., Avenue de l’Hôpital, 11, SPS Bâtiment 34, 3e étage, 4000, Liège, Belgique.
● Personal Data" (hereinafter "Personal Data" or "data"): any information relating to a natural person who can be identified or who is identifiable directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data or an online identifier.
● "Controller": the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing operation.
● "Sub-processor": the natural or legal person who processes Personal Data on behalf of the Data Controller.
● "Processing of Personal Data" means any operation or set of operations which is performed upon Personal Data or sets of Personal Data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1. Scope

Objective

DENDROGENIX may process the Personal Data of contact persons of suppliers, customers or any other business contact in the context of its activities. In accordance with applicable data protection laws, such as the General Data Protection Regulation 2016/679 and national data protection laws, DENDROGENIX wishes to clarify what Personal Data we collect from you and how your data will be used in the context of the activities of DENDROGENIX. This Notice also sets out the rights of third parties and website visitors to the DENDROGENIX website in relation to their Personal Data.

Addressee of this Notice

This Notice applies to :

• Our suppliers and/or business partners;
• Members, staff, shareholders and beneficial owners of our contractors/suppliers;
• Third parties whose Personal Data is provided to us by our customers/suppliers;• Third parties whose data are collected or processed via any other business contact; and
• The users/visitors of our website https://www.dendrogenix.com. Insofar as we are likely to collect and process data from third parties that you have communicated to us, we kindly ask you to inform said third parties of the existence of this Notice so that they can be aware of the processing that we carry out on their data and of their rights.

2. Data controller and Data Protection Officer ('DPO')

2.1. Data controller

In the context of its activities, DENDROGENIX is required to process your data in its capacity as Data Controller, insofar as it determines the means and purposes of the processing operation(s).

Details of the Data controller :

● Name: DENDROGENIX
● E-mail: contact@dendrogenix.com
● Website: https://www.dendrogenix.com
● Postal address: Avenue de l’Hôpital, 11, SPS Bâtiment 34, 3e étage, 4000, Liège, Belgique.

2.2 Data Protection Officer

We have appointed an external Data Protection Officer ("DPO") for DENDROGENIX.

The mission of the DPO and the GDPR Officer is to inform all data subjects about the Data processed. They provide advice and ensure compliance with the regulations in force, in particular the GDPR.

You may contact the DPO if you have any questions regarding the processing of your Personal Data and the exercise of your rights.

Contact details :

E-mail: privacy@dendrogenix.com or dpo@bdo.be
Postal address:
BDO Advisory
The Corporate Village
Da Vincilaan 9 - Box E.6
1930 Zaventem
BELGIUM

3. Personal Data collected from our suppliers and third parties

In general, the following Personal Data is collected in the context of a commercial activity with our suppliers or third parties:

● Identification details (surname, first name, title, etc.)
● Contact information (professional e-mail address and telephone number) ;
● Financial data (bank accounts, etc.) ;
● Career data/Skills and training ;
● Any other additional/optional information you give us when we are in contact with you (by telephone, e-mail or at trade fairs or events);

In general, we process Personal Data that we receive from you or your employer/company that you represent in the course of our business relationship.

DENDROGENIX may also collect publicly available information in order to verify the information we have collected and to manage and develop our business.

4. Personal Data collected from website visitors

When you visit our website, we collect the following Personal Data:

• Identification details (surname, first name, title, etc.) ;
• Contact information (professional e-mail address and telephone number)
• IP address, and
• Personal Data collected via cookies.

We use "cookies" (and similar technologies) on our websites and applications. These small files that store information on your computer's browser enable us to remember certain information about you (for example, your choice of language).

We store the data collected via cookies on our website in order to adapt our site and applications to your needs and to save your preferences for future visits. In this way, we can quickly improve your user experience and offer you relevant services.

You may also choose to provide additional/optional information when you fill in a form on our website or when we contact you (by telephone, e-mail or eventually at events).

DENDROGENIX may also collect publicly available information in order to verify the information we have collected and to manage and develop our business.

5. Why do we collect Personal Data from our suppliers and third parties ?

DENDROGENIX collects the above information for the following purposes:

● Manage commercial relations with the company you represent (administrative management, contracts and invoicing);
● Managing our own commercial arrangements ;
● Public relations and marketing

- We may use your Personal Information to inform you about our activities, services, which we think may be of interest to you.
- We will contact you if you explicitly ask us to do so, or if we think you might be interested in a service or that a particular service could benefit your company/organisation.
- If you do not yet have a commercial relationship with us, you will only receive our marketing communications if you have given us explicit prior permission to contact you.
- If you already have a commercial relationship with us or if you have already provided us with your contact details, you may receive advertising from us without having given us your prior consent. This is the case, for example, for anyone who has signed up for newsletters and/or for contact details provided during commercial exchanges. In this context, we base ourselves on our legitimate interest in maintaining and continuing our commercial relationship.

6. Why do we collect the Personal Data of visitors of our website ?

DENDROGENIX collects the above information for the following purposes:

6.1. Information and communication

We may use your Personal Data to inform you about our activities, our services, or to contact you if you have asked us a question.

We also collect your data to provide you with information about the company and to comply with legal, regulatory and compliance obligations and requirements.

6.2. Website security

As part of our legitimate interest in securing our website, we collect and process your IP address.

6.3. Use of cookies

When you browse our website, we install "cookies":

• which are necessary for the proper functioning of our website, based on our legitimate interest in providing you with a functional website, and
• For the purpose of analysing your browsing behaviour on our website, but only if you have given your prior consent.
If you would like more information on how we use cookies, how long they are kept, etc., please consult our Cookie notice on our website https://www.dendrogenix.com/cookies/

6.4. Use of social media

To increase our visibility on the Internet and ensure that we are close to our current and future customers, we also have a presence on social media such as LinkedIn.

By visiting these sites, you can choose to share some of your Personal Data with us directly by contacting us, commenting and/or sharing our articles.

In addition, we recommend that you read the Privacy Notice published by these third parties on their sites in order to find out how your Personal Data is processed by these third parties in their capacity as Data Controllers.

7. Legal basis for processing Personal Data

We are only authorised to use and process your Personal Data if one of the following conditions is met:

● The use of your Personal Data is necessary for the performance of a contract you have entered into with us or to take the steps necessary to conclude such a contract at your request.
● We have obtained your free and express consent to use your Personal Data for a specific purpose.
● Your Personal Data is used in accordance with our legitimate interests and in accordance with your interests and rights.
● We are legally obliged to process and communicate certain data to the relevant authorities and bodies, such as the Data Protection Authority ("DPA").

8. How will your information be used and shared?

Your Personal Data will only be transferred to staff members and workers on a need-to-know basis, i.e. the recipients who must carry out the various processing activities in relation to the aforementioned purposes.

We may share your Personal Information with group companies and/or our affiliates, for example, where another group company also provides goods or services to, or purchases goods or services from, the company you represent.

We may also share your Personal Data with third parties who perform functions on our behalf and provide us with services such as IT, legal, financial, accounting and other services. As these third parties have access to Personal Data in the course of performing the services requested, we have taken technical, organisational and contractual measures to ensure that your data is only processed and used for the purposes set out in articles 0 and 6 of this Declaration.

We may disclose your Personal Data to comply with our legal obligations or in the interests of safety, public interest or law enforcement. We may disclose data in connection with actual or proposed litigation, or to protect our property, safety, personnel and other rights or interests.

Your Personal Data will not be sold or rented to third parties.

9. Transfer of your Personal Data outside the EU/EEA

DENDROGENIX endeavours to process Personal Data only within the European Union (EU) or the European Economic Area (EEA). However, Personal Data may also be accessed by or transferred to our partners or service providers in countries outside the EU or EEA. If such a transfer takes place, DENDROGENIX ensures that a level of protection equivalent to that in force within the EEA/EU in accordance with the GDPR is guaranteed.

Should your Personal Data be transferred to a third party established in a country that is not deemed to offer a level of protection of the rights of natural persons with regard to their Personal Data equivalent to that of the EEA, the transfer of your Personal Data will be governed by one of the mechanisms provided for in Chapter V of the GDPR.

10. How long do we keep Personal Data?

Your Personal Data will be kept for as long as necessary to achieve the purposes mentioned in articles 5 and 6 of this Notice, or for as long as you do not withdraw your previously given consent.As the need to retain data depends on the type of data and the purpose of processing, retention periods may vary.

Below are the criteria we use to determine data retention periods:

● How long do we need the data to be able to provide the requested service?
● Have we defined and announced a specific retention period?
● Have we obtained authorisation to extend the retention period?
● Do we have a legal, contractual or comparable obligation?

As soon as we no longer need your data and are no longer legally obliged to keep it, we will delete it permanently or, if this is not possible, make it anonymous in our systems. However, your Personal Data will be kept and used for as long as is necessary to fulfil our legal obligations, settle disputes or conclude contracts. Personal Data processed as part of newsletter subscriptions will be retained until you choose to
withdraw your consent to receive future newsletters from us (see below). Please note that this withdrawal will only have effect for the future.

11. Data security and procedure in the event of a breach

Your Data is considered strictly personal. To this end, DENDROGENIX has taken all appropriate technical and organisational measures to protect them against any destruction, loss, accidental alteration and any damage, accidental or unlawful access or other unjustified processing of the data.

12. Rights of data subjects

a. You have certain rights in relation to the Personal Data we hold about you

You have certain rights in relation to the Personal Data we hold about you:

i. Right to information

You have the right to be informed, at the latest at the time of collection of your data, about the processing that we carry out, your rights relating thereto and how to exercise these rights. To this end, we have drawn up this Privacy Notice.

ii. Right of access

You have the right to request access to your Personal Data that we process and you also have the right to consult it. At your request, we must provide you with a copy of your Personal Data. You may also obtain an answer to any question
concerning the processing of your Personal Data (purposes of the processing, recipients of the data, retention period, etc.).

iii. Right of rectification

You may ask us to rectify, complete or delete any obsolete, incorrect or incomplete Data that we hold about you.

Iv. Right to restrict processing

You have the right to request the restriction of the processing of your Personal Data. DENDROGENIX may thus temporarily and/or partially stop the processing that is being carried out. You may definitively stop a specific processing operation or all processing operations carried out by DENDROGENIX on your Personal Data by exercising your right to object.

v. Right to erasure/right to be forgotten

In certain circumstances, you have the right to obtain erasure of the Personal Data we hold about you, for example, where the Personal Data is no longer necessary
or the purposes for which it was collected or where you have withdrawn your consent and there is no other legal basis for the processing.

vi. Right to data portability

You also have the right to receive the Personal Data you have provided to DENDROGENIX and to pass them on to another Data Controller.

vii. Right to object to certain types of processing/Right to withdraw consent

Where processing is based on DENDROGENIX legitimate interests, you have the right to object, for the future, to the processing of your Personal Data. This right cannot be exercised when the processing is necessary for the fulfilment of legal obligations.

Where processing is based on consent, you have the right to withdraw your consent at any time and without giving reasons. Your withdrawal of consent will only be valid for the future.

b. Exercising your rights as a data subject with regard to your Personal Data

If you would like further information about the processing of your Personal Data or if you wish to exercise your rights, please contact us via one of the following channels:

By e-mail: privacy@dendrogenix.com
By post:
Avenue de l’Hôpital, 11
SPS Bâtiment 34, 3e étage
4000 Liège
Belgique

We ask you to indicate clearly which right you wish to invoke and which Data processing you wish to oppose or limit or which consent you wish to withdraw.

If there are reasonable doubts as to the identity of the person making the request, DENDROGENIX may request additional information necessary to confirm the identity of the person concerned.When you exercise your rights, you will not be charged unless we consider that the request is manifestly unfounded or excessive (this will be the case, for example, when it is a repeated request).

However, we may charge you a reasonable sum not exceeding our reproduction costs for any additional copies requested.

For all requests relating to your rights, we will respond to your request within one month.

However, this period may be extended to two months if the request is complex and/or because of the number of requests we have to process. If this period is extended, we will inform you of the extension and the reason for it.

DENDROGENIX will notify third parties to whom the Data has been communicated of any rectification, erasure or restriction carried out, unless this proves impossible and/or involves a disproportionate effort.
Please note that in certain circumstances provided for by law, we may refuse access to your information or not accept your request where we are authorised to do so by the applicable data protection legislation.

If you are not satisfied with the way we process your Personal Data or with the way we process your requests to exercise your rights, you have the right to lodge a complaint with
the Belgian Data Protection Authority, Rue de la Presse, 35, B-1000 Brussels, T: +32 (0)2 274 48 00; F : +35 (35)2 274 48 35; E : contact@apd-gba.be.

13 Modification of this Notice

We reserve the right to amend or supplement this Notice if necessary.

In the event of significant modifications, the modification date will be updated and a copy of the new Notice will be published on our website.

We encourage you to consult this Website periodically to find out how we process and protect your data.