1.  WHO WE ARE AND HOW YOU CAN CONTACT US

“UCB” or “we” means UCB S.A., a Belgian company with registered office at 60, Allée de la recherche, 1070 Anderlecht and its affiliates. For more information on the contact details of the UCB affiliate in your jurisdiction, please visit the ‘UCB Worldwide’ overview and select your country.

As controller, i.e. the legal entity that decides on the why and how information relating to you (“personal data”) is collected and processed by us in the context of your or your company/employer’s commercial relationship with UCB, we respect your right to privacy. We will only process your personal data as described in this UCB Data Protection Notice for Suppliers (the “Notice”) and in accordance with the relevant data protection legislation, including the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”).

At UCB we have a data protection officer (DPO), who can be contacted by any of the following means for any privacy-related questions, including regarding how we collect, store and use your personal data:

1. E-mail: dataprivacy@ucb.com; or
2. Regular mail:  To the attention of the (global) Data Protection Officer, Allée de la recherche 60, 1070 Anderlecht or to the attention of the local UCB Data Protection Officer at the postal address of the UCB affiliate in your jurisdiction. For more information, please visit 'UCB Worldwide' and select your country.

2.  THE REASON BEHIND THIS PRIVACY POLICY

The Notice governs the collection, use and retention by UCB of personal data relating to (i) employees, workers, agents, delegates, and representatives of any third party vendors or suppliers (legal entities) delivering services to UCB, and (ii) UCB suppliers and service providers that are natural persons, including self-employed individuals.

The Notice consists of five main components and informs you about:

1. Who we are and how you can contact us;
2. The reason behind this Notice;
3. The purposes for which we process your personal data and the related legal basis under the General Data Protection Regulation (GDPR);
4. What your rights are in relation to the personal data we hold about you and how you can exercise them; and
5. Further details on how we process (including share and retain) your personal data.
    

This Policy may be updated periodically to reflect changes in our personal data processing practices. In that case we will inform you of any significant changes through the same channel we normally communicate with you.

3.  THE PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA AND APPLICABLE LEGAL BASIS

UCB collects and processes your personal data for the purposes mentioned below. This information will either be obtained directly from you or provided by the company you work for. Above each set of purposes, you will also find the legal basis for processing required under GDPR.