Privacy Policy

This Privacy Policy describes how we, Félix Dorn (the sole entrepreneurship incorporated in France), process personal data in our business as per the General Data Protection Regulation (GPDR) and other relevant data protection and privacy laws applicable to our business.

Last updated: September 6, 2024

Our commitment to privacy

We have no reason to sell, rent, or give away any of your data.

We hope to provide you with clear and transparent information on how we process your personal data (as a controller) and your data protection rights. If you feel that any information is unclear or missing, please do not hesitate to contact us at team @biosecurity.world.

Your data protection rights

Please get in touch with us if you have any questions about how we handle your data or want to exercise one of your rights. You are entitled to a reply within 30 days.

How we get your personal data

We typically process personal data on website visitors.

We may process personal data when you:

It is voluntary to provide us with personal data, but we cannot provide you with our services if you choose not to.

We do not rent, buy or sell personal data from or to others, use automated decisions or profiling in the processing of your personal data, or process any special category data as per the GDPR Article 9.

Purpose, lawful basis and retention periods

We only process your personal data when we have a purpose and a lawful basis for doing so. Under the GDPR Article 6-1, the lawful bases we rely on are:

  1. Your consent

  2. We have a contractual obligation (contract)

  3. We have a legal obligation

  4. We have a legitimate interest

As a rule, we do not process personal data for longer than necessary to fulfill the purpose for processing. To comply with this, we have regular internal GDPR audits where we formally assess our data protection and privacy work with the intention to amend, update and, if necessary, delete personal data.

We will only retain data for as long as we are required to as per applicable legal obligations.

Details on the processing of your personal data

This section describes when and how we process your data, for what purposes and our legal grounds to do so (lawful bases). We also specify the retention periods for the processing.

You use our website

When you use our website, we briefly process your IP address and data from your user agent, which are considered personal data under the GDPR.

The lawful basis is f), where our legitimate interests are to protect our business against cyberattacks and optimize and run our business effectively.

PS: We don't use cookies or similar technology on our website, and we don't collect any personal data that would trigger the consent requirement under the ePrivacy Directive ( Directive 2009/136/EC ).

You communicate with us

Regardless of your relationship with us, as a potential or existing customer, vendor or other, we process your personal data whenever you communicate with us. This could be when you contact us through email, phone (call, text message) or social media. Depending on where and how you contact us, this may include your name, contact details, IP address and other information you choose to send to us. We use a customer support system to manage personal data on potential and existing customers.

The purpose is to be able to respond to your inquiries and, on some occasions, to keep records in case of complaints or legal claims. The lawful basis is f), where our legitimate interest is to respond to your inquiries and, on some occasions, keep records in case of complaints or legal claims.

We typically keep this type of personal data for up to two years or six years if we have a legal obligation in accordance with accounting and bookkeeping rules.

Whom we share your personal data with

To run our business efficiently and securely, we sometimes will have to share your personal data with other (trusted) parties such as:

We require that all such recipients secure data in accordance with good information security and as per the requirements of this Privacy notice. We review and quality assure all vendors and data processors and enter into a data processing agreement/addendum whenever necessary.

We use data processors for:

Transfer of personal data outside the EU/EEA

In some cases, your personal data will be transferred to a "third country", i.e. outside the EU/EEA. For example, where we use data processors to manage email services. We only use data processors we trust that are well known, reputable, and have a data processing agreement/addendum.

We have ensured that every data processor in a third country has necessary safeguards in place like the EU adequacy decision, standard contractual clauses (SCC) or binding corporate rules (BCR).

Accessing and Correcting your Personal Data

You have a right to access your personal data and request a correction if you believe it is inaccurate. If you have submitted Personal Information and would like to have access to it, or if you would like to have it corrected, please get in touch with us using the contact information provided below.