About

Privacy Policy

This privacy policy (notice) addresses the processing of personal data by the ‘Stichting Oncode Accelerator’ (Oncode Accelerator Foundation, hereinafter: ‘Oncode Accelerator’, ‘we’ and ‘our’) in relation to its website visitors, newsletter readers, event and webinar attendees, project applicants and key stakeholders. Oncode Accelerator acts as a controller in relation to the processing of personal data described in this privacy notice.

Definitions

In this privacy notice, we will use the following terminology (regardless of whether the term is capitalized or not):

Personal Data: any information that can directly or indirectly identify you.

Controller: the natural or legal person that determines the means and purposes of the processing.

Process/Processing: any action with personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, erasure, or destruction.

Purpose: the reason(s) for which personal data is processed.

GDPR: the general data protection regulation; the legislation applicable to any processing of personal data by Oncode Accelerator.

Processing activities

Oncode Accelerator processes personal data for the purposes described hereinafter. In relation to these purposes, Oncode Accelerator determines means and purposes. This means that Oncode Accelerator determines why, how and for how long the personal data are processed. Because of this, Oncode Accelerator qualifies as the controller. The GDPR only allows Oncode Accelerator to process personal data for a specific purpose to which we can apply a legal basis, as specified in the GDPR. Hereinafter, we will explain this in more detail. 

Please be aware that we may process personal data for more than one purpose, e.g. your e-mail address. This means that if we have no formal legal basis to process your personal data anymore for a specific purpose (e.g. your subscription to our mailing list), we will no longer process your personal data for that purpose. However, if we also hold your personal data for that purpose, we will continue to process your personal data for that other processing purpose (e.g. to assess your application for participation in an Oncode Accelerator project) in accordance with the terms of this privacy notice. 

  • Chevron Down

    Running our business

    (legal basis: legitimate interest (Article 6(1)(f) GDPR))

    We process notification and communication data to respond to your inquiries via the contact form on our website, or your request to be contacted via social media and/or e-mail, as well as information you provide to us for any of the other purposes set forth in this privacy notice which we require to process your personal data in the context of running our business or to fulfil any accountability obligations.

    For the purpose of communicating with you, we process the following data:

    • First and last name
    • Job title
    • Professional contact details (e-mail address and telephone number)
    • Work address (including company name and country)
    • Any other information that you provide to us
    • Date and time of contact

    We will retain your personal data for this purpose until we have fulfilled your request, or until there is no further reason for follow-up on your e-mail. We will verify this regularly. If we have a standing partnership with you or with the company that you represent, we will retain your data until this relationship has lapsed or until retention thereof will no longer be necessary. 

    To conduct our business effectively, we process data for analysis and evaluation purposes, which helps us improve our services, the application process and to better understand user needs where it comes to our website. We may engage processors to conduct such analysis on our behalf and any data shared is subject to strict data protection agreements to ensure compliance with the GDPR and safeguard your information.

  • Chevron Down

    Demonstrator Project applications

    (legal basis: legitimate interest (Article 6(1)(f) GDPR))

    If you apply for a Demonstrator Project, we process the following personal data of the main and co-applicants needed to review and make a decision on the Demonstrator Project proposal and to manage Demonstrator Projects that were awarded co-funding:

    • First and last name
    • Work address (including company name and country)
    • Professional contact details (e-mail address and work telephone number)
    • Job title
    • Other relevant qualifications for a Demonstrator Project
    • Names of co-applicants or financiers

    Oncode Accelerator retains and deletes your personal data in accordance with the retention periods stipulated in the Dutch Public Records Act.

    1. For Demonstrator Project proposals that have been rejected, Oncode Accelerator is obliged to retain the relevant documentation (including the personal data contained therein) for five years from the date of the decision to reject the application.
    2. For Demonstrator Project proposals that have been awarded, the retention period is ten years from the date of the decision to award the grant.

    Oncode Accelerator is further obliged to permanently retain the key registration data of every proposal submitted to it for six years after the end of the Oncode Accelerator Program (14 July 2032). The key registration data include the names of the main applicant and co-applicants, the title of the proposal, the application and dossier number, the name and year of the funding and the decision on the proposal (awarded or rejected).

    Our legitimate interest in processing this personal data lies in our need to properly evaluate applications, assess your eligibility for participation in a Demonstrator Project, ensure appropriate use of funding, to fulfil our obligations with regard to justification of the spending of funding, and maintain the integrity of our Demonstrator Project program. We believe this processing is necessary as we cannot properly assess applications or manage projects without processing these personal details. We have carefully balanced our interests against your rights and believe the processing is proportionate given the limited personal data we collect, the reasonable expectation that this data would be processed as part of an application process, and the measures we take to protect your data.

  • Chevron Down

    Communication with stakeholders

    (legal basis: legitimate interest (Article 6(1)(f) GDPR))

    We process the communication data of our stakeholders to inform them about the progress made in Demonstrator Projects and Oncode Accelerator activities related towards achieving program goals and milestones. To this end, we process the following data:

    • First and last name
    • Job title
    • Professional contact details (e-mail address and telephone number)
    • Work address (including company name and country)


    We retain your personal data for this purpose for as long as you or your organisation remains involved in the Demonstrator Project and/or is a partner within our program, and you have not objected to receiving communications. We will process your personal data for this processing purpose until you inform us you no longer wish to receive communications, or your organization ends its involvement in the project(s) and/or program, unless another processing purposes also applies to the processing and the retention of your personal data is required for this purpose.

  • Chevron Down

    Mailing list subscription

    (legal basis: consent (Article 6(1)(a) GDPR))

    If you subscribe to our mailing list, we process notification and communication data to send you newsletters on a regular basis to keep you informed about our activities, invite you to events and webinars and relevant news about out program's progress.  

    For this purpose, we process the following data:

    • (professional) E-mail address
    • First and last name
    • Communication preferences
    • Subscription date and time

    We retain personal data relating to your mailing list subscription data for this purpose until you unsubscribe. 

  • Chevron Down

    Events and webinars registration form

    (legal basis: consent (Article 6(1)(a) GDPR), and legitimate interest (Article 6(1)(f) GDPR))

    We process personal data that you provide when registering for our events and webinars through the relevant registration form and information that you provide during our event(s) and/or webinar(s). The types of personal data that we process will vary per webinar or event (e.g. difference between physical and non-physical events, events with or without lunch, etc.). 

    We have determined that this processing is necessary for our legitimate interests in organizing and managing events, providing relevant content to our professional audience, and maintaining effective communications, while ensuring these interests are balanced against your rights and freedoms. This information concerns:

    • First and last name
    • Company name
    • Job title
    • Work sector
    • Country
    • Email address
    • Photo / Video consent
    • Telephone number (optional)
    • Dietary restrictions (optional, depending on the type of event)
    • Communication preferences (optional)

    Your personal data will be retained for this processing purpose until the event or webinar has taken place, after which it will be deleted unless you have explicitly consented to further processing or if we process your personal data for another purpose in addition to this one. If you have given Oncode Accelerator consent to keep your communication data, your contact preferences for future event communications are retained until you withdraw your consent or unsubscribe from our communications. 

    If you however agree to be informed about other events, we will retain your personal data for our mailing list until you withdraw that consent. 

  • Chevron Down

    Creation of media content

    (legal basis: legitimate interest (article 6(1)(f) GDPR) 

    If you agree to participate in the creation of media content (for instance, you are a speaker during an event, presenter of a webinar or you are interviewed/photographed for an article or podcast), we will Process Personal Data pertaining to you to hold on- and offline events, making available (internally and/or externally) podcasts and/or webinars and/or video recordings and/or interviews and/or presentation decks and to create marketing and communication materials for Oncode Accelerator as described in the Oncode Accelerator Media Release consent form that you are required to sign prior to the participation. For this purpose, we process the following data:

    • First and last name
    • Your job title
    • Your employer
    • Your professional contact details
    • Your voice in case of recordings
    • A resume if you provide us with a speaker biography
    • The content of your speaking event/webinar or interview, including your opinions
    • Your image, both in form of a photo and video

    (legal basis: Explicit consent (article 6(1)(a) GDPR and article 9(2)(a) GDPR)

    Any photo you provide to Oncode Accelerator as a speaker or allow us to take during an event/interview, as well as any recordings we make of any presentation you give on behalf of Oncode Accelerator, may contain personal data concerning health (e.g., if you wear glasses), religion (e.g., if you wear a hijab or any other outing of your religious beliefs) or your ethnicity. We process such personal data based on your explicit consent. 

    Retention period

    We retain your personal data for this purpose until the media content you provided to us is no longer relevant. We will assess regularly whether the content is still relevant. If you grant your consent, you can withdraw it at any time without having to say why and without any adverse consequences. You can contact marcom@oncodeaccelerator.nl in this regard. If, by that time, your data and media content have already been published in the public domain, Oncode Accelerator will cease using the media content, including your data, and will delete it from our own channels.
     

  • Chevron Down

    Website technical data and cookies

    (legal basis: consent (Article 6(1)(a) GDPR) for non-essential cookies; legitimate interest (Article 6(1)(f) GDPR) for essential cookies))

    For a complete and up-to-date list of cookies we use on our website, including their purpose, the data that they collect and duration that they are stored on your device, please click here. We use both essential and non-essential cookies on our website. We use essential cookies to make our website function and to provide user-friendliness. Because of this, we do not need to obtain your consent for the use of these cookies. We have carried out a legitimate interest assessment for essential cookies. Our legitimate interest lies in ensuring basic website functionality and security. This processing is necessary as the website cannot function properly without these cookies. 

    Non-essential cookies, which help us improve your experience or provide personalized content, are always optional will only be placed with your explicit consent. We also use cookies to perform an analysis of the use of our website (web statistics and analytics) in order to fine-tune our website further to the need of our users. For the placing of these cookies, we similarly ask your consent.  

    You can manage your cookie preferences at any time through our cookie settings or withdraw your consent for the use of non-essential cookies by cleaning your browser via the browser settings. 

  • Chevron Down

    Job applications

    (legal basis: consent (article 6(1)(a) GDPR))

    If you apply for a job at Oncode Accelerator, you agree to the processing of your personal data for the application process. We process personal data as provided by you to evaluate your application and to recruit new staff.

    For this purpose, we will process the following personal data:

    • First and last name
    • Your (personal) contact details 
    • Your personal address 
    • Your date of birth 
    • Your resume, which will contain – in general – at least your educational background and information on previous employment 
    • The names and contact details of any persons you list as references
    • Any other information you include in either your resume or your application cover letter or in other contact with Oncode Accelerator

    We will never ask you to share any special categories of personal data with us in the light of an application process. We however recognize that such data may be part of your CV, accompanying letter or other information that you submit to us, such as data revealing racial or ethnic origin (e.g. via a picture), religious or philosophical beliefs, personal data concerning health, political opinions or trade union membership. In such case, we process your sensitive personal data based on your consent by making available such to us. 

    If you provide us with a link to any online profile, including but not limited to LinkedIn, you consent to us reviewing that profile. If you do not agree to such processing of the information on your online profile, please do not include a reference thereto in your application. 


    We will retain your personal data for a period of four weeks after the end of the application procedure. If we believe that will have a job opportunity coming up in the near future for which you will be a good fit, we may ask your consent to retain your personal data for a longer period of time. 

    If you apply for a job with us via LinkedIn, we process your personal data as available on your LinkedIn profile. This may include the processing of special categories of personal data such as those listed above. We process such personal data based on your consent by making available your LinkedIn profile to us. We always offer you the possibility to apply for a job with us in another way, such as by e-mail. Your choice for the way of filing your job application will not adversely affect you. 

  • Chevron Down

    Legal purposes

    (legal basis: legitimate interest (Article 6(1)(f) GDPR))

    Where necessary, we shall also process any personal data related to Oncode Accelerator project applications where these personal data are relevant with respect to objection procedures, appeals and complaints against decisions by Oncode Accelerator pertaining to applications or other actions or decisions by Oncode Accelerator. We may also process other personal data pertaining to you that we hold for any of the other processing purposes as set forth in this privacy notices for legal purposes. 

    We process this personal data for the purpose of protecting our interest during legal procedures and to handle legal disputes, exercise and defend our rights. In this case, we will retain your personal data until the dispute has been finalized (which means that the decision of any court or administrative body that has decided the case in highest instance has become final and is no longer open for appeal or objection) or until we do not require retention thereof anymore under the terms of our liability insurance or to honour any agreement we have with you pertaining to closure of the dispute between us, whatever is longer.

Who will Process / receive your Data?

Oncode Accelerator engages service providers (processors) for the processing of personal data, with whom we conclude appropriate processing agreements to ensure that they handle your data confidentially and in compliance with the GDPR. These processors concern the following categories of service providers: 

  • Website hosting
  • Website management
  • IT support
  • CRM hosting
  • CRM management
  • Employee management
  • Parties that perform analyses

If you accept the use of non-essential cookies, certain data will also be with YouTube, Matomo and Pardot (Salesforce.com) for the purpose of web statistics and analytics. If you would like to receive a list of all service providers engaged by Oncode Accelerator to process your personal data on our behalf, please let us know and we will provide you with an up-to-date list.

In addition to service providers, Oncode Accelerator collaborates with various partners on projects. A list of our collaboration partners can be found here. Who will receive your data will depend on the type of research that is conducted. We will inform you of the collaboration and the further processing of your personal data in relation to an Accelerator project separately if your application is approved. 

Transfers

We do not transfer your personal data to recipients outside the European Economic Area (EEA). All data processing activities take place within the EEA, ensuring compliance with European data protection standards.


Data Subject Rights

The GDPR grants data subject certain rights. We fully support this and will hereinafter briefly discuss these rights. If you have more detailed questions, please do not hesitate to contact us via privacy@oncodeaccelerator.nl.

Please send any requests you may have in relation to your rights under the GDPR to privacy@oncodeaccelerator.nl. Oncode Accelerator will verify your identity before processing your request.

You have the following rights under the GDPR:

The right to be informed.

Under the GDPR you have the right to be informed. We fulfil this obligation primarily via this privacy notice but would be happy to inform you in an additional manner would you request us to do so. 

The right of access

You have the right to obtain information about personal data that we hold concerning you and to receive a copy thereof. 

The right to rectify any incorrections of Data 

You have the right to amend information if we hold incorrect or incomplete personal data concerning you. This includes the right to provide us with an updated curriculum vitae.

The right to withdraw consent

Where the processing is based on your consent, you have the right to withdraw your consent at any time. Withdrawing your consent will not impact the lawfulness of any processing based on that consent prior to the withdrawal. 

Please note that if we also process your personal data for another purpose subject to another legal basis, we are permitted to continue the processing of the personal data for that other purpose. 

The right of erasure

You have the right to request that we delete personal data concerning you if:

  1. you feel that the processing is no longer necessary in relation to the processing purposes described in the foregoing, 
  2. you withdraw your consent, 
  3. the personal data have been unlawfully processed, or 
  4. deletion is required in light of a legal obligation that Oncode Accelerator is subject to. 

The right to restrict the Processing.

You have the right to request restricting of personal data concerning you when:

  1. You contest the accuracy of the personal data; 
  2. The processing is unlawful, but you do not wish us to delete the personal data; 
  3. You require the personal data for the establishment, exercise, or defence of a legal claim in a situation where Oncode Accelerator has no further purpose for the processing; 
  4. Or we are verifying whether we can comply with your objection to the processing.

The right to object 

You have the right to object against processing where such processing is based on our legitimate interest. Where you object to such processing, we will no longer process the personal data subject to that legal basis, except if we can demonstrate compelling legal grounds for the processing which override your interests and rights and freedoms or where the processing is necessary for the establishment, exercise or defence of legal claims. 

The right to data portability 

You have the right to have personal data that you have provided to us transferred to another party at your request.

Profiling

We do not use your personal data for automated decision making nor for profiling. 

Necessity of Provision of Personal Data

The processing of personal data is necessary for applications, applying for positions, or receiving our communications. We limit data processing to what is minimally needed for the stated purposes. You are however not legally or contractually required to provide any personal data to us. However, if you wish to be considered for participation in a project based on an application, the provision of your data will be required. 

Complaint

You have the right to lodge a complaint with a supervisory authority if you have concerns about our handling of personal data concerning you. For the Netherlands, the ‘Autoriteit Persoonsgegevens’ acts as the supervisory authority. We would appreciate the opportunity to address your concerns directly before you contact the supervisory authority.

Amendments

We reserve the right to update this privacy notice at any time. Where we make changes that affect processing activities for which we rely on your consent, we will seek your renewed consent for continuation of the processing activity. Any changes to this privacy notice will be visible on our website, where you can always find the current version. We encourage you to periodically review our privacy notice on our website to stay informed about how we process your personal data.

Contact Us

For any questions or concerns about our privacy practices, please contact us at:

Oncode Accelerator Foundation
Jaarbeursplein 6
3521 AL Utrecht
The Netherlands
Chamber of Commerce: KVK 86992708

e-mail: privacy@oncodeaccelerator.nl