Privacy Policy – Global Serum Alliance

Effective Date: 31-05-2025
Last Updated: 31-05-2025

Global Serum Alliance (“we”, “us”, “our”) is committed to protecting personal data in accordance with
Regulation (EU) 2016/679 (the General Data Protection Regulation – “GDPR”) and applicable Belgian data
protection legislation.

1. Identification & Data Controller

The data controller responsible for processing your personal data is:

Organization Name: Global Serum Alliance
Registered Office / Headquarters:
Boulevard Baudouin 18, 4th floor
B–1000 Brussels
Belgium
Legal Form: [To be completed]
Enterprise Number (BCE/KBO): [To be completed]
Website Publication / Editorial Responsible:
Andreas Nielsen – andreas.nielsen@serascandia.com

Privacy contact:

Email: info@globalserumalliance.org

Postal address:
Global Serum Alliance, Boulevard Baudouin 18, 4th floor, B–1000 Brussels, Belgium

We have not appointed a Data Protection Officer (DPO). For any questions relating to personal data,
please use the contact details above.

2. Personal Data We Collect

We collect only personal data that you voluntarily provide to us via our website or by email.

a) Membership Application Form

Mandatory fields:

Name
Email address
Company / organization name
Message

b) Contact Form

Mandatory fields:

First name
Last name
Company name
Phone number
Email address
Message

c) Technical Data

IP address
Browser and device information
Access logs and security-related data

3. Purposes of Processing

Your personal data is processed exclusively for the following purposes:

Handling membership applications and related communications
Responding to contact requests and enquiries
Maintaining professional and stakeholder communications related to our association’s mission
Ensuring the security, stability, and proper functioning of our website
Complying with applicable legal and regulatory obligations

4. Legal Basis for Processing

We process personal data based on the following legal grounds:

Legitimate interests (Art. 6(1)(f) GDPR) – responding to enquiries, processing membership requests, and maintaining stakeholder communications
Consent (Art. 6(1)(a) GDPR) – where required, for example when you voluntarily submit information via our forms
Legal obligation (Art. 6(1)(c) GDPR) – where processing is required by Belgian or EU law

5. Recipients & Data Sharing

We do not sell, rent, or trade your personal data.

Your data may be shared only with:

Authorized representatives of Global Serum Alliance on a strict need-to-know basis
Technical service providers acting as processors (e.g. website hosting and IT infrastructure)
Public authorities or courts where required by law

6. International Data Transfers

Our website is hosted by Kinsta. Personal data may be processed on servers located within or outside
the European Economic Area (EEA). Where data is transferred outside the EEA, appropriate safeguards,
such as Standard Contractual Clauses (SCCs), are in place to ensure an adequate level of data protection.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described above.

Data Category	Retention Period
Enquiries / contact requests	Standard business retention period
Membership / stakeholder records	For the duration of the relationship and a reasonable period thereafter
Website security logs	In accordance with Kinsta’s standard hosting and security retention policies
Accounting and invoices (if applicable)	As required by Belgian accounting and tax legislation

8. Your Rights

Under the GDPR, you have the right to:

Access your personal data
Request rectification of inaccurate or incomplete data
Request erasure of your data in certain circumstances
Request restriction of processing
Object to processing based on legitimate interests
Withdraw consent at any time where processing is based on consent

To exercise your rights, please contact us at
info@bureaudevries.eu.

You also have the right to lodge a complaint with the Belgian Data Protection Authority:
Autorité de protection des données / Gegevensbeschermingsautoriteit
https://www.dataprotectionauthority.be

9. Cookies & Tracking

We use cookies and similar technologies strictly as necessary for website functionality and, where applicable,
analytics based on your consent. You can manage your preferences at any time via the “Cookie Settings”
link on our website. Further details are available in our Cookie Policy.

10. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

SSL/TLS encryption
Secure hosting infrastructure provided by Kinsta
Access controls and limited administrative permissions
Regular system updates and monitoring

11. External Links

Our website may contain links to third-party websites. We are not responsible for their content or
privacy practices and encourage you to review their respective privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an
updated revision date.

13. Applicable Law & Jurisdiction

This Privacy Policy is governed by Belgian law. Any disputes relating to the processing of personal data
shall fall under the jurisdiction of the competent Belgian courts, unless mandatory law provides otherwise.