Privacy Policy

Last updated: 28 September 2026

This Privacy Policy explains how Immunochem SRL ("Immunochem", "we", "us") collects and uses personal data when you visit www.immunochem.be (the "Website") or contact us through it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Belgian law.

1. Who is responsible for your data

The data controller is:

Immunochem SRL
Rue de Chastre 11, 1325 Corroy-le-Grand, Belgium
Company number: 0896.472.416 (VAT BE 0896.472.416)
Email: pherman@immunochem.be

For any question about this policy or your personal data, write to the address above.

2. What data we collect and why

2.1 When you request a strategic call or a feasibility study

The call-to-action buttons on the Website open a form hosted by Tally. Through this form we collect:

  • your name, email address and phone number;
  • your role;
  • a description of your project;
  • the value you expect from our EVOBodies™ platform;
  • how you discovered Immunochem.

After submitting the form, you are invited to choose a date for the call through Calendly, which also records your name, email address and the chosen time slot.

Purpose: to prepare and hold the call, answer your request, and, where relevant, discuss a feasibility study or a collaboration with you.

Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Article 6(1)(f) GDPR).

Please do not include confidential scientific information (such as unpublished antigen sequences) in the form. Such information is exchanged separately, under a confidentiality agreement, once we have spoken.

2.2 When you browse the Website

We use Google Analytics 4 to understand how visitors use the Website (pages viewed, time spent, approximate location at country or city level, device and browser type, referring website). Google Analytics uses cookies and similar technologies. IP addresses are not stored by Google Analytics 4.

Purpose: to measure the audience of the Website and improve its content.

Legal basis: your consent (Article 6(1)(a) GDPR), given through the cookie banner displayed on your first visit. Google Analytics does not set any cookie until you accept.

2.3 Advertising

We advertise our services through Google Ads. When you arrive on the Website from one of our ads, or later submit our contact form, Google Ads tags record this so we can measure which ads are effective (conversion tracking). With your consent, we may also show our ads to people who have previously visited the Website when they browse other sites (remarketing). We do not share your name, email address or form answers with Google.

Purpose: to measure the effectiveness of our advertising and reach people interested in our services.

Legal basis: your consent (Article 6(1)(a) GDPR). These tags only use cookies if you accept them in the cookie banner. If you refuse, Google only receives anonymous, cookieless signals under its Consent Mode.

2.4 Technical data

When you visit the Website, our hosting provider and the third-party services it relies on automatically receive technical data such as your IP address, browser type and the date and time of your visit. This is necessary to deliver the pages to you and keep the Website secure.

Legal basis: our legitimate interest in operating a secure and functional website (Article 6(1)(f) GDPR).

3. Who we share your data with

We do not sell your personal data. We share it only with the service providers that help us run the Website and handle your requests, acting on our behalf:

  • Webflow, Inc. (United States): website hosting;
  • Tally BV (Belgium): contact form;
  • Calendly LLC (United States): call scheduling;
  • Google Ireland Ltd / Google LLC (Ireland / United States): website analytics (Google Analytics), advertising (Google Ads) and web fonts (Google Fonts);
  • CookieYes Limited (United Kingdom): cookie consent management;
  • Vimeo.com, Inc. (United States): embedded video player on the home page.

We may also disclose personal data where required by law.

4. Transfers outside the European Union

Some of these providers are based in the United Kingdom or the United States, or use sub-processors there. Transfers to the United Kingdom rely on the adequacy decision of the European Commission. Transfers to the United States rely on the EU-US Data Privacy Framework where the provider is certified, or on the Standard Contractual Clauses adopted by the European Commission.

5. How long we keep your data

  • Form submissions and related correspondence: for as long as needed to handle your request, and at most 3 years after our last contact, unless a business relationship follows.
  • Google Analytics data: 14 months, after which it is automatically deleted.

6. Cookies

The Website uses:

  • Analytics cookies set by Google Analytics (for example _ga and _ga_X0WL4ZTC62), which remain for up to 2 years. They are placed only if you accept them.
  • Advertising cookies set by Google Ads (for example _gcl_au), which remain for up to 90 days, used for conversion tracking and remarketing. They are placed only if you accept them.
  • A consent cookie (cookieyes-consent) set by our cookie banner provider, CookieYes, which remembers your choice for up to 1 year. This cookie is strictly necessary and does not require consent.
  • No cookies from the video player: the Vimeo video on the home page is embedded in "do not track" mode, which does not set tracking cookies. Vimeo still receives technical data such as your IP address when the video loads.

You can change or withdraw your consent at any time by clicking the round cookie icon at the bottom left of every page. You can also delete cookies in your browser settings.

7. Your rights

Under the GDPR, you have the right to:

  • access the personal data we hold about you;
  • have it corrected or deleted;
  • restrict or object to its processing;
  • receive it in a portable format;
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, email pherman@immunochem.be. We will answer within one month.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

8. Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last revised.