General Data Protection Regulation

The General Data Protection Regulation (EU) 2016/679 (GDPR) entered into force on 25 May 2018. The GDPR is now integrated into the legislation of each EU Member State. On certain topics, local legislation may derive from the GDPR and additional local legislation may require extra protective measures or offer additional rights and freedoms to individuals. The objective of the GDPR is to guarantee your privacy and protect you against any unwanted and illegal breach of your personal data worldwide.

Eurocept Pharmaceuticals

This Privacy Statement of Eurocept Pharmaceuticals applies to entities linked to Eurocept Pharmaceuticals, such as:

Eurocept B.V.

Eurocept International B.V.

Eurocept Xytron Medical B.V.

Lucane SA

Eurocept Pharmaceuticals is based at 5 Trapgans 1244 RL Ankeveen, Netherlands.

Cookies on our website

A cookie is a small text file that is saved on your computer, tablet or smartphone during your first visit to our websites. Eurocept Pharmaceuticals only uses technical and functional cookies that do not infringe on your privacy. The cookies we use are necessary for the technical operation of the website and for your ease of use. They ensure that the site works correctly and remember your preferred settings, for example. You can opt out of cookies by configuring your internet browser to no longer save cookies. You can also delete all previously stored information using your browser settings.

Origin of personal data

Eurocept Pharmaceuticals collects personal data directly from you when you choose to use our products and services, call us, send us an email or directly provide us with information in other ways. Your personal data may be provided to us through a healthcare professional, such as your doctor or pharmacist.

If your personal data, or any part of it, is not required for our processing orders of our products or services, this data will not be collected or the records received will be anonymised.

The Eurocept Pharmaceuticals websites do not intend to collect data on visitors under the age of 16 without the permission of a parent or guardian. However, Eurocept Pharmaceuticals does not maintain age control on its websites. We therefore advise parents to monitor their children's online activities in order to prevent data on children from being collected without parental consent. If you are convinced that we have collected personal data concerning a minor without this consent, please contact our Data Protection Officer.

Personal data collected

At Eurocept Pharmaceuticals, we may collect and process the following personal data, if and when necessary to process orders or complaints:

Full name

Initials

Gender

Date of birth or age

IP address (websites only)

Home address

Phone number

Email address

Signature (only on digital copies of forms)

Medical data

National Insurance number (if necessary for reports or insurance claims)

Other data provided by you during a telephone contact or in any correspondence

For commercial purposes, Eurocept Pharmaceuticals may also collect the following data on business contacts:

Profession or job title

Professional email address

Professional phone number

Place of business

Dates and content of professional contacts, such as a telephone meeting or a visit

Consent to contact

Other data provided by professional contacts

Purpose of the processing

Eurocept Pharmaceuticals processes personal data for the purposes of:

Offering our products and services at the request of your healthcare professional;

Contacting you, if necessary for the provision of our products or services;

Responding to your questions or complaints regarding our products or services;

Providing information to health insurers to support financial claims;

Reporting adverse events to the authorities;

Fulfilling legal obligations imposed on Eurocept Pharmaceuticals by the government or the courts.

Lawfulness of processing

Any processing of personal data by Eurocept Pharmaceuticals is carried out lawfully and fairly. The processing of personal data is only carried out if one of the following conditions applies:

the data subject has given their consent to the processing by Eurocept Pharmaceuticals;

the processing is necessary for the performance of a contract between an individual and Eurocept Pharmaceuticals;

the processing is necessary for compliance with a legal obligation of Eurocept Pharmaceuticals;

The processing is necessary in the vital interests of the data subject;

The processing is necessary for the legitimate interests of Eurocept Pharmaceuticals.

The processing of special categories of personal data, such as medical data, will only be carried out if one of the following conditions applies:

the data subject has given their explicit consent to the processing by Eurocept Pharmaceuticals;

the processing is necessary for compliance with a legal obligation of Eurocept Pharmaceuticals;

The processing is necessary in the vital interests of the data subject;

The processing is necessary for reasons of public interest in the area of public health.

Transfer to third parties

Eurocept Pharmaceuticals will not sell personal data to third parties and will only provide this data if necessary, within the framework of the concluded service agreement, to provide you with the service or to comply with a legal obligation. Where applicable, Eurocept Pharmaceuticals has a processing agreement with companies that process personal data in order to guarantee the same level of security and confidentiality. Eurocept Pharmaceuticals remains responsible for these processing activities.

International transfer of personal data

Eurocept Pharmaceuticals will not transfer personal data to organisations or governments outside the European Economic Area, unless:

The transfer is necessary for reasons of public interest in the area of public health and all data is anonymised and, for the recipient, untraceable to an identifiable physical person;

the data subject has given their explicit consent to the transfer by Eurocept Pharmaceuticals and Eurocept Pharmaceuticals guarantees before the transfer that the rights and freedoms arising from the GDPR are maintained by the recipient.

Access to personal data at Eurocept Pharmaceuticals

Eurocept Pharmaceuticals only provides employees with access to personal data according to the needs required to perform their daily tasks. The roles with access to personal data are included in the Processing Register. Our Data Protection Officer can provide additional information from the Processing Register.

Automated decision-making

Eurocept Pharmaceuticals may use automated processing of personal data in clinical trials or patient data analyses. The personal data used cannot be traced back to a physical person. Eurocept Pharmaceuticals does not use automated processing or decision-making for matters that may have (significant) consequences for individuals. The results of automated processing are only used in decision-making if they have been evaluated in advance by qualified experts. Eurocept Pharmaceuticals complies with the standards set out in the European Artificial Intelligence Act 2024/1689.

Retention period

Eurocept Pharmaceuticals retains and stores personal data for the duration necessary to achieve its objectives, unless a longer retention period is required or permitted by law.

Security measures for data protection

Eurocept Pharmaceuticals takes the protection of your data seriously and takes appropriate technical and organisational measures to prevent misuse, loss or unauthorised access, unwanted disclosures and unauthorised modifications. If you believe that personal data is not properly secured or that there are signs of misuse, contact our Data Protection Officer.

Processing Register

In accordance with Article 30 of the GDPR, the provisions of this Privacy Statement have been included in a processing register for each processing operation. Our Data Protection Officer can provide you with information from the Processing Register.

Your rights

If Eurocept Pharmaceuticals processes personal data on the basis of the explicit consent of an individual, that individual has the right to revoke consent at any time in a manner comparable to that in which it was given.

You have the right to:

have access to the processing of personal data;

rectification of personal data;

erasure of personal data;

restriction of processing;

data portability;

Objection to processing.

These rights may be restricted, measures or provisions as provided for in the GDPR and local legislation.

Data Protection Officer

Eurocept Pharmaceuticals has appointed a Data Protection Officer (DPO). The DPO monitors our compliance with the GDPR, the European Artificial Intelligence Act 2024/1689 and local privacy and AI legislation. The DPO is based in our head office and can be contacted by email at dataprotection@euroceptpharma.com or by regular mail to Eurocept Pharmaceuticals. For the attention of the Data Protection Officer, Trapgans 5, 1244 RL Ankeveen, Netherlands.

For any questions or queries regarding the processing of personal data or the application of artificial intelligence at Eurocept Pharmaceuticals, you can contact the DPO at the addresses mentioned above. Eurocept Pharmaceuticals wishes to point out that you have the possibility to lodge a complaint with the DPO. This complaint will be processed within 30 days of receipt. Any contact with the DPO is confidential.

The competent supervisory authority for data protection for Eurocept Pharmaceuticals is Autoriteit Persoonsgegevens. This supervisory authority can be contacted via the supervisory authority of your country or directly at Autoriteit Persoonsgegevens, PO Box 93374, 2509 AJ Den Haag, Netherlands.

Version: 3.2

Date: 24 November 2025