Man & science S.A. Privacy Policy

This website is operated by Man & Science S.A., as the Data Controller¹, with its head office located Boulevard de Patience et Beaujonc 3 Box 24, 4000 Liège, Belgium (company number BE0837.403.770). You can contact us via email: privacy@manandscience.com for any question regarding your privacy.

The protection of your Personal Data² is of importance for Man & Science S.A. and its affiliates (together hereinafter “M&S”) and we treat your privacy with utmost care.

We have established this Privacy Notice to explain to you how M&S treats your Personal Data. The Privacy Notice applies to the Personal Data that you provide and that we Process³ about you as a natural person when you visit our website.

Topics :

• What data do we collect?
• How do we collect your data?
• Why do we collect your data ?
• How will we use your data?
• How do we store your data?
• What are your data protection rights?
• Privacy policies of other websites
• Changes to our privacy policy
• How to contact us
• How to contact the appropriate authorities

What data do we collect ?
M&S collects the following data :

• Personal identification information (Name, email address, phone number, etc.)
• Any other Personal Data that you may include in a contact or request form, which may include health data as requested in order to assess your eligibility for our products.
• If you are submitting a job application, additional information that you may provide about your academic and work history, qualifications, skills, references, your national

¹ “Data Controller” means Man & Science, to the extent that we determine the purposes and means of the processing of your Personal Data.
‍² “Personal Data” is information through which a natural person is identifiable or may be identified. M&S collects, uses and processes your Personal Data in order to provide you with services, products or information that you request.
‍³ “Processing” means everything we do with your Personal Data as further explained in this Privacy Notice. It may include actions such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
security number, your passport or other identity document details, and any other such similar information that you may provide to us.

How do we collect your data?
‍You directly provide M&S with most of the data we collect. We Process the Personal Data that you provide to us when you interact with us via this website by completing and sending us a contact or request form.

Why do we collect your data?
Depending on your relationship with us (e.g. website visitor, business contact, job applicant, etc.), we might process your Personal Data based on the purposes and legal bases described hereunder:

How will we use your data?
M&S collects your data so that we can:

• Conclude and execute an agreement with you;
• Collaborate in the broadest sense;
• Perform commercial, financial and legal due diligence;
• Manage its relationships with its representatives, management, key staff, agents, officers, employees, service providers, partners and other individuals;
• Improve our internal and administrative services;
• Comply with and enforcement of laws relating to the prevention of money laundering and terrorist financing;
• Comply with the regulations applicable to M&S in the broadest sense;

If you agree, M&S will share your data with our partner companies and employees, with its service providers, and your advisors, as the case may be:
‍
1. M&S group companies
Because M&S is a global company with locations in different countries, we may transfer your Personal Data from one legal entity to another or from one country to another within the M&S group in order to accomplish the purposes listed above.
These countries include, at a minimum, the member states of the European Union, the United States, and Norway.
We will transfer your Personal Data consistent with applicable legal requirements and only to the extent necessary for the purposes set out above.

2. Third parties
In addition, M&S will provide access to or share Personal Data on an as-needed basis with third parties, such as trusted service providers, consultants and contractors who are granted access to M&S’s facilities and systems or which provide services to M&S, and with government agencies and others as required by law or if it is necessary to fulfill your request.
M&S will only share your Personal Data with third parties whom M&S has contractually restricted from using or disclosing the Personal Data except as necessary to perform services on our behalf or to comply with legal requirements.

Man & Science S.A. may also disclose your personal data if required by law.

If your authorization is legally required or if we believe that your authorization is appropriate in the circumstances, we will always ask you to provide this before sharing your personal data.

In addition, we would like to inform you that your personal data are not transferred outside the European Union or in third countries that do not offer the same level of adequate protection.

How do we store your data ?
We use reasonable and appropriate technological and operational security measures to keep your Personal Data protected against any unauthorized access or unlawful use. Such measures include:

• Ensuring the physical and digital security of our equipment and devices by using appropriate password protection and encryption where necessary;
• Ensuring the physical security of our offices and other sites;
• Maintaining a data protection policy for, and delivering data protection training to, our employees; and
• Limiting access to your Personal Data to those at M&S who need to use it in the course of their work.

However, due to the nature of internet communications, we cannot guarantee or warrant that the transmission of your Personal Data to us is secure.

Since no mechanism offers absolute security, some risk is always present when using computer technologies.

In the event of a personal data breach that results in their destruction, tampering or unauthorized disclosure, our data controller will report the incident to the supervisory authority within 72 hours after becoming aware of it, if this breach is likely to create a risk for the rights and liberties of natural persons.

If the data breach involves a high risk for the rights or liberties of individuals, our data controller will inform the persons concerned as soon as possible.

The Personal Data you provide to M&S is only kept for as long as it is reasonably necessary for the purposes for which it is collected, taking into account our need to comply with contractual obligations, resolve customer service issues, comply with legal requirements and provide new or improved products and services to users. This means that we may retain your Personal Data for a reasonable period after you stopped using the manandscience.com website.

After this period, your Personal Data will be deleted from all systems of M&S without notice.

What are your data protection rights ?
Based on the applicable Belgian and European privacy legislation, and provided that you meet the requirements set by this legislation, you can contact us to exercise the following rights:

The right to access - You have the right to request M&S for copies of your personal data. We may charge you a small fee for this service.

The right to rectification - You have the right to request that M&S correct any information you believe is inaccurate. You also have the right to request M&S to complete information you believe is incomplete.

The right to erasure - You have the right to request that M&S erase your personal data, under certain conditions.

The right to restrict processing - You have the right to request that M&S restrict the processing of your personal data, under certain conditions.

The right to object to processing - You have the right to object to M&S’s processing of your personal data, under certain conditions.

The right to data portability⁴ - You have the right to request that M&S transfer the data that we have collected to another organization, or directly to you, under certain conditions.

You can send your requests to exercise your above mentioned rights, together with evidence of your identity:
By e-mail us at: admin@manandscience.com
‍Or write to us: Data Protection Officer, Boulevard de Patience et Beaujonc 3 Box 24, 4000 Liège, Belgium

Privacy policies of other websites
Our website may contain links to websites, applications, products or services of third parties and may allow you to post on or through third party websites. We cannot be responsible for the practices of third party websites, applications, products or services made available or referred to by our website, or their information or content. Note that when you use a link to another website, our Privacy Notice is no longer applicable.

Your browsing and your actions on any other website, including those to which we refer, are subject to the rules and policies specific to that website. In addition, you are solely responsible for any content that you decide to post on or via a third party website.

Changes to our privacy policy
M&S keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 23 June 2022.

How to contact us
If you have any questions about M&S's privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: privacy@manandscience.com

⁴ The right to data portability allows you to obtain data that a data controller holds on you and to reuse it for your own purposes. The data must be received “in a structured, commonly used and machine-readable format.

Or write to us at:
Data Protection Officer
Boulevard de Patience et Beaujonc 3 Box 24, 4000 Liège
Belgium

How to contact the appropriate authority
You also have the right to lodge a complaint with the supervisory authority in the European member state of your habitual residence, your place of work or the alleged infringement of applicable data protection legislation:

In Belgium, the Supervisory Authority is:
Belgian Data Protection Authority
Rue de la Presse 35 / Drukpersstraat 35
1000 Bruxelles / 1000 Brussel
Tel. +32 2 274 48 00 Fax +32 2 274 48 35

contact@apd-gba.be

www.dataprotectionauthority.be