Respecting your privacy, and taking into account the information obligation under the GDPR, we provide you with the following information so that you can find out to what extent your personal data is processed. Please read the appropriate clause (scrolling down the page).

The information clause for job applicants

INFORMATION ON THE PROCESSING OF PERSONAL DATA

In connection with the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’) and in view of the acquisition of your personal data for recruitment purposes we inform you that:

I. Personal data controller

The Controller of your personal data is Plich Advisory & Investments B.V. with its registered office in Amsterdam (hereinafter: Controller or Organisation).    

II. Purpose and basis for processing personal data

Your data will only be processed if the Controller has a legal basis to do so stemming from the GDPR and only for a purpose corresponding to such basis.

Your personal data may be processed by the Controller for the purpose of carrying out recruitment activities.

The processing of your data in this respect is necessary to take action before entering into an employment contract / a contract for services [Article 6(1)(b) GDPR].

If you agree to the processing of your data for the purpose of future recruitments, the Controller will also be able to process the data for that purpose. The processing of personal data in this case will be based on your consent [Article 6(1)(a) GDPR].

III. Information on recipients of personal data or categories of recipients

Your data may be transferred to entities processing the data on behalf of the Controller, e.g. subcontractors or service providers. Your data may also be made available to the Controller’s legal and advisory service providers and other contractors.

In each such case, the transfer of your data does not entitle the recipient to use the data in any other way except for the purpose expressly indicated by the Controller.

The recipients of your data may also be entities entitled to obtain your data on the basis of the provisions of the applicable law, such as courts or law enforcement authorities, if they request the data on an appropriate legal basis.

IV. Transfer of data to third countries or international organisations

As a rule, the Controller does not transfer your data to third countries or international organisations. The transfer of your personal data to a third country may take place if you participate in a project which is carried out with a contractor from a third country or if the place of performance is in a third country. The data thus transferred shall be adequately secured. If a transfer of data other than the one indicated in the previous sentence should take place, the Controller will inform you about it in accordance with the requirements of the applicable law.

V. Retention period of personal data

Personal data processed by the Controller for the purposes related to the recruitment process for will be kept for the duration of the recruitment process and up to 4 weeks from the moment the recruitment process has ended or expiry of a separate consent to participate in subsequent recruitment processes. The aforementioned applies unless it is necessary to retain the personal data for a longer period for the purposes of defending claims in (pending) legal proceedings.

If the processing is based on your consent, the processing will continue until your consent is revoked, limited or otherwise restricted and in any case no longer than necessary for the purposes for which the personal data are processed.

VI. Rights related to the processing of personal data

You have the right of access to your data and the right to demand their rectification, erasure or restriction of processing.

You have the right to data portability and the right to object to the processing of your personal data.

If you have given your consent to data processing, you can withdraw it at any time.

Withdrawal of the consent to the processing of your personal data shall not affect the validity of the Controller’s previous processing of such data on the basis of that consent.

You have the right to lodge a complaint with the supervisory authority if you believe that the Controller is violating the law during the processing of your personal data.

VII. Obligation to provide personal data

Your personal data are necessary for the actions to be taken before entering into an employment contract/a contract for services with you.

Making your data available for future recruitment processes with the Controller is voluntary.

VIII. Changes to the information clause

The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the changes introduced.

IX. Controller’s contact details

In order to exercise any of your rights or to find out more about how to exercise them, you can contact us by e-mail: office@plichadvisory.com or in writing to the Controller’s address.

CONSENT TO THE PROCESSING OF DATA FOR FUTURE RECRUITMENT

I consent to the processing of my personal data provided by me in the application documents by Plich Advisory & Investments B.V. during the recruitment process for the purposes of future recruitment activities for a period of one year.

The information clause for Employees or Associates

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Acting in conformance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’) and in connection with the collection of your personal data for the purpose of employment by/contract with Plich Advisory & Investments B.V. we inform you that:

I. Personal data controller

The Controller of your personal data is Plich Advisory & Investments B.V. with its registered office in Amsterdam (hereinafter: Controller or Organisation).

II. Purpose and basis for processing personal data

Your data will only be processed if the Controller has a legal basis stemming from the GDPR and only for a purpose corresponding to the legal basis to that basis.

Your personal data may be processed by the controller for employment-related purposes, which includes:

a) performance of an employment contract/a contract for services

We process your personal data for the purpose of managing the employment/contractor relationship between you and the Controller and for the purpose of performing the Controller’s duties resulting from the terms of the employment contract/contract for services documented in writing and the applicable internal regulations of the Organization.

The Controller’s duties include, e.g., payroll administration, management and servicing of employee benefits and making tax settlements.

The Controller is also obliged to retain and process information containing personal data such as official identification numbers, information on sick leaves and maternity or parental leaves, pensions and taxes.

The processing of your data in the above cases is carried out in accordance with your contract of employment /contract for services [Article 6(1)(b) GDPR] and the Controller’s obligations under generally applicable laws, such as the  labour, tax or social security law [Article 6(1)(c) GDPR].

b) essential objectives of the Organisation

The Controller may process your personal data for other relevant and necessary purposes related to the conduct of the business activity of the Organisation, which includes:

handling of personnel matters (both during and after employment),

providing the contractors with the data of employees involved in the performance of the contract concluded with them,

issuing certificates of employment, assessment of work performance, conducting investigations in case of allegations of breach of employment obligations,

conducting analyses of working time and attendance at work, resolving labour disputes, issues related to the protection of health and safety at work in the Organisation,

improvement of the professional qualifications of workers, service providers and contractors.

The processing of your data for the above purposes is carried out in connection with the performance of the Controller’s obligations under the generally applicable laws [Article 6(1)(c) GDPR], as well as the Controller’s legitimate interest in ensuring the proper functioning of the Organisation [Article 6(1)(f) GDPR].

c) other purposes of processing personal data

Should the need arise to process your data for purposes other than those listed above, you will be informed in advance, indicating the legal basis for such processing.

III. Information on recipients of personal data or categories of recipients

Your data may be transferred to entities processing it on behalf of the Controller, e.g. subcontractors or service providers. Your data may also be made available to legal and advisory service providers and the Controller’s contractors.

In each such case, the provision of your data does not entitle the recipient of the data to use it in any other way except for the purposes expressly indicated by the Controller.

The recipients of your data may also be entities entitled to collect your data on the basis of the provisions of generally applicable laws, such as courts or law enforcement authorities, if they request for the data on a valid legal basis.

IV. Transfer of data to third countries or international organisations

As a rule, the Controller does not transfer your data to third countries or international organisations. The transfer of your personal data to a third country may take place if you participate in a project which is carried out with a contractor from a third country or if the place of performance is in a third country. The data thus transferred shall be adequately secured. If a transfer of data other than the one indicated in the previous sentence should take place, the Controller will inform you about it in accordance with the requirements of the applicable law.

V. Retention period of personal data

The retention period of your personal data is dependent on the category of the personal data.

Identification data: 5 years after your employment has ended

Payroll tax statements: 5 years after your employment has ended

Payroll/payment records: 7 years after your employment has ended

Performance review information: 2 years after the employment agreement has ended (or sooner if the personal data is no longer needed)

Documents related to sick or maternity leave: 2 years after the employment agreement has ended.

Where no statutory (minimum) retention period is foreseen, your personal data will in principle be retained for a period of 2 years after your employment agreement / contract for services has ended. It is possible that personal data will be stored for a longer period if claims are being brought against Controller.

VI. Rights relating to the processing of personal data

You have the right of access to your data and the right to their rectification, erasure and restriction of processing.

You have the right to data portability and the right to object to the processing of your data.

You have the right to lodge a complaint with the supervisory authority if you believe that the controller is violating the law during the processing of your personal data.

VII. Obligation to provide personal data

In principle, the provision of personal data is voluntary.

In certain cases, however, it may be necessary to provide personal details in order to conclude a specific contract or to implement its provisions. Therefore, if the Controller is deprived of the basis for the processing of your data for the purpose of a certain contract, it may be difficult or impossible for the Controller to fulfil its obligations arising from the contract.

VIII. Changes to the information clause

The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the introduced changes.

IX. Controller’s contact details

In order to exercise any of your Rights or to find out more how you can exercise them you can contact us by e-mail: at office@plichadvisory.com or in writing to the Controller’s address.

The information clause for counterparties

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Acting pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’) and in connection with the collection of your personal data for the purpose of entering into a cooperation we inform you that:

I. Personal data Controller

The Controller of your personal data is Plich Advisory & Investments B.V.  with its registered office in Amsterdam (hereinafter: Controller or Organisation).

II. Purpose and basis for processing personal data

Your data will only be processed if the Controller or another processor has a legal basis stemming from the GDPR and only for the purpose corresponding with such basis.

The Controller may process your personal data for the purposes related to:

• actions taken at your request prior to the execution of the contract, in connection with the conclusion of the contract, performance of the contract and the settlement of the contract performance – to the extent necessary to carry out the contract to which you are or can be a party [Article 6(1)(b) GDPR].
• pursuit of claims and as evidence of the performance of the contract, which constitutes a legitimate interest of the Controller [Article 6(1)(f) GDPR].
• fulfilment of legal obligations under the laws in force, in particular the tax and accounting laws [Article 6(1)(c) GDPR].
• direct marketing of the Controller’s products and services, including, but not limited to, submitting tenders electronically, which constitutes a legitimate interest of the Controller [Article 6(1)(f) GDPR].
• handling your requests submitted to the Controller (e.g. via the contact form), answering your questions and processing your complaints or requests, which is based on your consent [Article 6(1)(a) GDPR] and the Controller’s legitimate interest to carry out activities aimed at improving customer contact and to adapting the Controller’s activities to their needs [Article 6(1)(f) GDPR].

The Controller may process your data on the basis of your separate consent. In this case, the basis for the processing of personal data shall be the consent [Article 6(1)(a) GDPR].

Should the need arise to process your data for purposes other than those mentioned above, you will be informed about it in advance by the Controller, indicating the legal basis for such processing.

III. Information on recipients of personal data or categories of recipients

Your data may be transferred to entities processing it on behalf of the Controller, e.g. subcontractors or service providers. The Controller may also make your data available to its legal and advisory service providers.

In each such case, the transfer of your data does not entitle the recipient to any other use of the data except for the purposes expressly indicated by the Controller.

Recipients of your data may also be subjects entitled to obtain your data on the basis of the provisions of the applicable laws, such as courts or law enforcement authorities, if they request access on a valid legal basis.

IV. Transfer of data to third countries or international organisations

As a rule, the Controller does not transfer your data to third countries or international organisations. The transfer of your personal data to a third country may take place if you participate in a project which is carried out with a contractor from a third country or if the place of performance is in a third country. The data thus transferred shall be adequately secured. If a transfer of data other than the one indicated in the previous sentence should take place, the Controller will inform you about it in accordance with the requirements of the applicable law.

V. Retention period of personal data

Your data will be processed for the duration of your cooperation with the Controller. As regards the necessity of the data to perform the contract, this will normally be the time needed to perform the contract and to secure any claims arising from it.

If the processing is based on your consent, the processing will continue until your consent is revoked, limited or otherwise restricted and in any case no longer than necessary for the purposes for which the personal data are processed.

In situations where the processing of data is carried out in compliance with a legally prescribed obligation, the retention period will be determined on the basis of the relevant legal regulations. The retention period in relation to a legal administration regulation is 5-10 years (depending on the relevant administration obligation).

Where the basis for the processing of the data is a legitimate interest of the Controller, the Controller shall keep your data as long as such legitimate interest exists. In case of legal claims, the personal data may be processed for as long as necessary to defend the Controller’s interests. In all other cases your personal data will be kept for a duration of 2 years after business relationship has ended or any meaningful contact took place with the Controller.

VI. Rights relating to the processing of personal data

You have the right of access to your data and the right to request their rectification, erasure and restriction of processing.

You have the right to transfer data and the right to object to their processing.

If you have given your consent to data processing, you can withdraw it at any time.

Withdrawal of consent to the processing of your personal data shall not affect the validity of the Controller’s earlier processing of such data on the basis of this consent.

You have the right to lodge a complaint with the supervisory authority if you believe that the controller is violating the law during the processing of your personal data.

VII. Obligation to provide personal data

In principle, the provision of personal data is voluntary.

In certain cases, however, it may be necessary to provide personal details in order to conclude a specific contract or to implement its provisions. Therefore, if the Controller is deprived of the basis for the processing of your data for the purpose of a certain contract, it may be difficult or impossible for the Controller to fulfil its obligations arising from the contract.

VIII. Changes to the information clause

The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the introduced changes.

IX. Controller’s contact details

In order to exercise any of your Rights or to find out more how you can exercise them you can contact us by e-mail: at office@plichadvisory.com or in writing to the Controller’s address.

The information clause for individuals whose data are processed in social media

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Acting pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’) and in connection with the collection of your personal data in connection with profile management in social media, we inform you that:

I. Personal data Controller

The Controller of your personal data is Plich Advisory & Investments B.V. with its registered office in Amsterdam (hereinafter: Controller or Organisation).

II. Purpose and basis for processing personal data

Your data will only be processed if the Controller has a legal basis stemming from the GDPR and only for the purpose corresponding to that basis.

Your personal data may be processed by the Controller for the purposes of running a fan page on Facebook or a profile on LinkedIn, including:

informing you about our activities, promoting events that we organise or participate in, promoting our products and services, and communicating with you using the available functionalities (due to the fact that you have subscribed to our fan page or profile by clicking the “Like” or “Follow” icons [Facebook] “Recommend”, “Follow” or “Like” [LinkedIn], adding comments on our profile, clicking on reactions under posts, share posts, chatting, messaging). We process your personal data on the basis of our legitimate interest in promoting our brand and products and services, building and maintaining a community associated with us and communicating with you and on the basis of your consent expressed by liking our fan page or profile [Article 6(1)(f) of the GDPR and Article 6(1)(a) of the GDPR].

archiving information to secure its availability in case of a legal need to prove events or facts which is our legitimate interest [Article 6(1)(f) GDPR].

potential formulation, pursuit or defence of claims, which is our legitimate interest [Article 6(1)(f) GDPR].

data analysis, which is our legitimate interest [Article 6(1)(f) GDPR].

III. Information on recipients of personal data or categories of recipients

The Controller shall make personal data available to the owner of the social network Facebook, i.e. Facebook Inc. or LinkedIn, i.e. LinkedIn Ireland Unlimited Company, and to the extent necessary to ensure the operation of the fan page on Facebook or LinkedIn to other users of that network.

Your data may be transferred to entities processing it on the Controller’s request, e.g. subcontractors or service providers and entities associated with the Controller. Your data may also be made available to the Controller’s legal advisors, service providers and contractors

In each such case, the provision of your data does not entitle the recipient of the data to use it in any way except for the purpose expressly stated by the Controller.

The recipients of your data may also be entities entitled to obtain your data on the basis of the provisions of the applicable law, such as courts or law enforcement authorities, if they request the data on an appropriate legal basis.

IV. Transfer of data to third countries or international organisations

The Controller using Facebook may transfer your data to the United States or other countries outside your country of residence. Such data transfers are necessary to provide the services specified in the regulations of the websites. Facebook Inc. uses standard contractual clauses approved by the European Commission and complies with the decisions of the European Commission stating an adequate level of data protection in relation to specific countries, where applicable, for the transfer of data from the EEA to the United States and other countries. In other cases, the Controller shall not transfer your data to third countries or international organisations.

V. Retention period of personal data

Where the basis for processing the data is the legitimate interest of the Controller, the Controller shall retain your data as long as such legitimate interest exists. In case of legal claims, the personal data may be processed for as long as necessary to defend the Controller’s interests.

In situations where the processing of data is carried out in compliance with a legally prescribed obligation, the retention period will be determined on the basis of the relevant legal provisions.

If you withdraw your consent to the processing of data (unliking/ceasing to follow a profile on the website), the Controller will from that moment cease to process your data based on the list of people who like/follow the profile).

VI. Rights relating to the processing of personal data

You have the right of access to your data and the right to rectification, erasure or restriction of processing of the data.

You have the right to data portability and the right to object to processing.

You have the right to withdraw your consent to the processing of your data by unliking/ceasing to follow the Facebook or LinkedIn profile. The withdrawal of your consent to the processing of your personal data does not affect the validity of the Controller’s earlier processing of such data on the basis of your consent.

You have the right to lodge a complaint with the supervisory authority if you believe that the Controller is violating the law during the processing of your personal data.

VII. Obligation to provide personal data

The provision of personal data is voluntary.

VIII. Changes to this information clause

The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the introduced changes.

IX. Controller’s contact details

In order to exercise any of your rights or to find out more on how to exercise them, you can contact us via e-mail: office@plichadvisory.com or in writing to the Controller’s office address.

X. Additional information

Please note that if you have a Facebook or LinkedIn account, Facebook Inc. or LinkedIn Ireland Unlimited Company is also the Controller of your data, and depending on the terms and conditions and approvals you have given, they may act otherwise.

The information clause for natural persons active
in the medical and pharmaceutical industry with whom the Controller
enters into a relationship

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Acting pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (referred to as ‘GDPR’, ‘General Data Protection Regulation’), and in view of the collection of your personal data in connection with entry into cooperation, we inform you that:

I. Personal data Controller

The Controller of your personal data is Plich Advisory & Investments B.V.  with its registered office in Amsterdam (hereinafter: Controller or Organisation).

II. Purpose and basis for processing personal data

Your data will only be processed if the Controller or another processor has a legal basis stemming from the GDPR and only for a purpose corresponding to that basis.

The Controller may process your personal data for the purposes related to:

• carrying out activities in the medical and pharmaceutical sector, including in cooperation with clients, which is a legitimate interest of the controller [Article 6(1)(f) GDPR].
• direct marketing of the Controller’s products and services, including, but not limited to, by submitting tenders electronically, which in a business to business context is based on your consent [Article 6(1)(a) GDPR]
• actions taken at your request prior to the execution of the contract, in connection with the conclusion of the contract, performance of the contract and the settlement of the contract – to the extent necessary to carry out the contract to which you are or can be a party [Article 6(1)(b) GDPR].
• pursuit of claims and as evidence related to the performance of the contract, which is a legitimate interest of the controller [Article 6(1)(f) GDPR].
• fulfilling legal obligations under the laws in force, in particular tax and accounting laws [Article 6(1)(c) GDPR].
• handling your requests addressed to the Controller (e.g. via the contact form), answering your questions and processing your complaints or requests, which is based on your consent [Article 6(1)(a) GDPR] and the Controller’s legitimate interest to carry out activities aimed at improving contacts with customers and adapting the Controller’s activities to their needs [Article 6(1)(f) GDPR].

The Controller may process your data on the basis of your separate consent. In this case, the basis for the processing of personal data shall be the consent [Article 6(1)(a) GDPR].

Should the need arise to process your data for purposes other than those mentioned above, you will be informed about it in advance by the Controller, indicating the legal basis for such processing.

III. Information on recipients of personal data or categories of recipients

Your data may be entrusted by the Controller for processing or made available to other entities, e.g. customers, subcontractors or service providers. The Controller may also make your data available to its legal advisors and service providers.

In case of entrusting the processing of your data, it does not entitle the recipient of the data to use them in any other way except for the purposes expressly indicated by the Controller.

Recipients of your data may also be subjects entitled to collect your data on the basis of the provisions of the applicable laws, such as courts or law enforcement authorities, if they request access on a valid legal basis.

IV. Transfer of data to third countries or international organisations

As a rule, the Controller does not transfer your data to third countries or international organisations. The transfer of your personal data to a third country may take place if you participate in a project which is carried out with a contractor from a third country or if the place of performance is in a third country. The data thus transferred shall be adequately secured. If a transfer of data other than the one indicated in the previous sentence should take place, the Controller will inform you about it in accordance with the requirements of the applicable law.

V. Retention period of personal data

In situations where the processing of data will be carried out in compliance with a legally prescribed obligation, the retention period will be determined on the basis of the relevant legal provisions.

Where the basis for the processing of the data is a legitimate interest of the Controller, the Controller shall keep your data as long as such legitimate interest exists. In case of legal claims, the personal data may be processed for as long as necessary to defend the Controller’s interests. In all other cases your personal data will be kept for a duration of 2 years after business relationship has ended or any meaningful contact took place with the Controller.

As regards the necessity of the data to perform the contract, this will normally be the time needed to perform the contract and to secure any claims arising from it.

If the processing is based on your consent, the processing will continue until your consent is revoked, limited or otherwise restricted and in any case no longer than necessary for the purposes for which the personal data are processed.

VI. Rights relating to the processing of personal data

You have the right of access to your data and the right to request their rectification, erasure and restriction of processing.

You have the right to transfer data and the right to object to their processing.

If you have given your consent to data processing, you can withdraw it at any time.

Withdrawal of consent to the processing of your personal data shall not affect the validity of the Controller’s earlier processing of such data on the basis of this consent.

You have the right to lodge a complaint with the supervisory authority if you believe that the controller is violating the law during the processing of your personal data..

VII. Obligation to provide personal data

In principle, the provision of your data is voluntary.

In certain cases, however, it may be necessary to provide personal details in order to conclude a specific contract or to implement its provisions. Therefore, if the Controller is deprived of the basis for the processing of your data for the purpose of a certain contract, it may be difficult or impossible for the Controller to fulfil its obligations arising from the contract.

VIII. Changes to the information clause

The content of this information may be periodically modified by the Controller. In such a case, the Controller will inform you about the introduced changes.

IX. Controller’s contact details

In order to exercise any of your Rights or to find out more how you can exercise them you can contact us by e-mail: at office@plichadvisory.com or in writing to the Controller’s address.