Privacy Policy

Last updated: 02/21/2025

Privacy Notice

1 Controller Information

The entity in charge of the control of any information obtained through this web form (referred hereinafter as the “Controller” or “Eurofins” or “BioA”) is:

Eurofins Pharma BioAnalytics Services US Inc.

Address details:
Eurofins Pharma BioAnalytics Services US Inc.
Attn: Client Services
15 Research Park Dr.

St. Charles, MO 64403

Eurofins Pharma BioAnalytics Services respects the privacy of all users of its websites and ensures that the personal information received or provided by you through our web forms is treated as confidential.

This Privacy Notice sets out the basis on which all personal data that Eurofins collects from you or that you provide to Eurofins will be processed by Eurofins. Please read the following carefully to understand our views and practices regarding your personal data and how Eurofins will treat it. If you have any questions regarding this Privacy Notice or if you want to lodge a request in relation to your personal information, please contact us through our website or you can reach our DPO at the following email address:

Attn. BioA Data Privacy Officer
DG_BioA_DPO@bcl.eurofins.com

Eurofins Pharma BioAnalytics Services (covered entity listed in our EU-US DPF, Swiss-US DPF and UK Extension to the EU-US DPF Self-Certification) complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Eurofins Pharma BioAnalytics Services has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom in reliance on the UK Extension to the EU-U.S. DPF. Eurofins Pharma BioAnalytics Services has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Statement and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

As a result, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. Please see the “Your rights to personal data” section below for information about dispute resolution options under the DPF.

2 Types of information that Eurofins collects

Eurofins Pharma BioAnalytics Services (BioA) supports sample testing, analytical, sample logistics, and data management activities in support of clinical trials on behalf of Drug Development companies or their representatives, referred hereinafter as the “Sponsor”.

Some of our web pages contain web forms requiring you to provide personal information in support of clinical trials conducted by BioA on behalf of “Sponsor.” Only the personal information requested in the web forms should be given. Such personal information is categorized into 2 types and usually consists of:

Type 1 information: Client facing websites

Study specific details, Patient specific details*, and Sponsor details.

*This information is protected under ‘Right to be forgotten’ rule.

Type 2 information: Eurofins Pharma BioAnalytical Services website

https://www.eurofins-viracorbiopharma.com/bioanalysis/

First name, last name, email address, phone number, company name [not mandatory].

3 Use of such information by Eurofins

Type 1 information:

The information collected using the web forms will be used purely for the purpose of clinical trials conducted by BioA on behalf of “Sponsor” and is restricted to that of a professional nature. Further, you should not give your personal address, email, or phone number to BioA voluntarily.

Type 2 information:

We may use the information we collect through the web forms for the following purposes: Contacting you in any means;

Provide, administer and communicate with you about products, services, events, surveys and promotions by Eurofins or our affiliates (including by sending you marketing communications);
Process, evaluate and respond to your requests (including quote requests, documentation requests, free tests requests), inquiries and applications (including for volunteer testings);
Create, administer and communicate with you about your account (including any purchases and payments);
Giving you the possibility to attend seminars and trainings;
Provide investor and customer services;
Evaluate your interest in employment (including current or future job positions) and contact you regarding possible employment;
Direct marketing (including newsletters);
Entering into a business relationship with you;
Following up enquiries;
Ensuring customers satisfaction through sending customers surveys;
Being able to make your rights described below exercisable.

We also may use personal information for additional purposes. We will identify these additional purposes at the time of collection, if any.

4 Privacy Controls

Type 1 information:

BioA operates under the understanding that the “Sponsor” or their representative obtains all appropriate stakeholder consent for the use of their data, personal or otherwise, solely for its intended purpose in the conduct of scientific research. Further, BioA will only utilize data for the intended purposes it was collected for, and only where consent has been given.

Type 2 information:

In order to process your personal data, we rely on:

our legitimate interests (not for sensitive data), being

the recruiting of candidates to fill in any of our present or future job vacancies within one of the companies of the Eurofins group;
prevention of fraud;
direct marketing;

legal obligations; (regarding sensitive data, only legal obligations in the field of employment and social security law)
contract performance, including the continuous improvement of the services provided under such contracts;
the necessity for the establishment, exercise or defense of legal claims.
your consent.

5 Right to be Forgotten or withdrawal Rights

Type 1 information:

Request to withdraw consent must be provided directly to “Sponsor” and it is the responsibility of “Sponsor” to inform BioA of this request.

Only when it comes to BioA attention through “Sponsor” that consent has been withdrawn (ex: – due to “Right to be Forgotten’’) or never given, BioA will follow the internal procedures to remove records from the dataset as may be appropriate for the given situation. In such cases, BioA also takes the responsibility to ensure that the records are removed where applicable from its sub-contractors.

Under the auspices of a Clinical Trial, many records are exempt from the “Right to Be Forgotten” due to their nature as they form part of a study record, and are required to be maintained by regulatory authorities.

BioA maintains strict data integrity policies, and will follow appropriate procedures where necessary and in accordance to the relevant request received from the data controller.

Type 2 information:

Yes, you can withdraw your consent in full or in parts at any time by sending an email to the DPO contact person designated above.

6 Sharing of information

Your personal data might be transferred to any Eurofins affiliate, as applicable, based on the services provided by that affiliate (which can be found at https://www.eurofins.com/our-services/)

Further, irrespective of type of information, BioA do not sell or otherwise disclose personal information about our website visitors to third parties except as described below.

to trusted businesses or persons to process your personal information for us, based on our instructions and in compliance with the General Data Protection Regulation (EU) 2016/679;
to service providers we have retained to perform services on our behalf. These service providers are contractually restricted from using or disclosing the information except as necessary to perform services on our behalf or to comply with legal requirements.
to companies, organizations or individuals outside of Eurofins if we have a good reason to believe that access, use, preservation or disclosure of the information is reasonably necessary to:

enforce applicable terms of service, including investigation of potential violations;
meet any applicable law, regulation, legal process or enforceable governmental request;
detect, prevent, or otherwise address fraud, security or technical issues;
protect against harm to the rights, property or safety of Eurofins, our users or the public as required or permitted by law;
to regulatory or law enforcement agencies if we believe in good faith that we are required by law to disclose it in connection with the detection of crime, the collection of taxes or duties, in order to comply with any applicable law or order of a court of competent jurisdiction, or in connection with legal proceedings;
to third parties as part of a merger, acquisition or bankruptcy, in the event we sell or transfer all or a portion of our business or assets (including through bankruptcy).

7 Information transfer outside the European Union

Your personal data might be transferred outside the EU in case one of the recipients stated above is located outside the EU and:

only in the countries for which the European Commission has issued an adequacy decision (which guarantees that an adequate level of protection of personal data is offered in that country);

have certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom in reliance on the UK Extension to the EU-U.S. DPF or have certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.

To learn more about the Data Privacy Framework (DPF) program, please visit https://www.dataprivacyframework.gov/;

appropriate safeguards have been provided, such as standard data protection clauses;
is required, and approved by the “Sponsor” for the purposes of conducting the contracted activities in support of the clinical trial or project.

If we transfer personal data received under the DPF to a third party, the third party’s access, use, and disclosure of the personal data must also be consistent with our obligations under the DPF, and we will remain liable under the DPF for any failure to do so by the third party unless we prove we are not responsible for the event giving rise to the damage.

8 Your rights to personal data

General

You have the right to request the data controller for:

access to your data;
rectifying your data;
the portability of the data you provided to us;
objecting to the processing of your data;
restricting the processing of your data; erasing your data.

If you have any concerns or complaints about our data processing activities, we urge you to first try to resolve such issues directly with us. We are committed to resolving complaints about your privacy and our collection, use, transfer or disclosure of your information. Any inquiries or complaints regarding this Privacy Statement or our data processing activities should be directed to DG_BioA_DPO@bcl.eurofins.com.

BioA commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF Principles. European Union, Swiss and United Kingdom (and Gibraltar) individuals with DPF inquiries or complaints should first contact EVB at: dpo@vbp.eurofinsus.com.

Availability of the Independent Recourse Mechanism for the individuals (data subjects)

Based on the EU-U.S. DPF, UK Extension, and the Swiss-U.S. DPF Principles and its extensions EVB has committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by the International Centre For Dispute Resolution-American Arbitration Association (ICDR-AAA). If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.icdr.org/dpf for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the channels mentioned in the section 8 and this section, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. For more information, see https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction

Complaint to the local data protection authority (for residents of the EU, EEA, Switzerland and UK)

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, BioA commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to the International Centre For Dispute Resolution-American Arbitration Association (ICDR-AAA), an alternative dispute resolution provider based in the United States, the European Union, the United Kingdom, and/or Switzerland (as applicable). If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://go.adr.org/dpf_irm.html for more information or to file a complaint. The services of the International Centre For Dispute Resolution-American Arbitration Association (ICDR-AAA), are provided at no cost to you.

You may also make a complaint to the data protection supervisory authority in the country where you are based, or seek a remedy through local courts if you believe your rights have been breached; the list of data protection authorities (“Supervisory Authorities”) in the EU is available here: Our Members | European Data Protection Board (europa.eu). This right to make a complaint to the local Supervisory Authority is also outlined in the EU-U.S. Data Privacy Framework Principles and its extensions, for more information please visit: https://www.dataprivacyframework.gov/.

If you are a UK resident, you have the right to lodge a complaint with the data protection authority in your jurisdiction available at the following link: https://ico.org.uk/make-a-complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/

If you are a Swiss resident, you have the right to lodge a complaint with the data protection authority in your jurisdiction at the following link: https://www.edoeb.admin.ch/edoeb/en/home/meldeportale.html

Type 1 information related requests

For type 1 information, BioA shall act in accordance with applicable legislation, and with regard to the instructions of the ”Sponsor” should requests pertaining to section 8 be received.

9 Time limit for data storage

Your personal data will be stored for a limited period of time, determined with regards to the necessity to keep them in order to serve the purposes for which they have been collected and processed, as listed above. All data and consent information collected from web form submissions stored in Eurofins Systems will be reviewed every three years to keep the data and consent information up to date.

10 Conditions for Cookies storage

Some of Eurofins websites store cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media.

Every time you visit our websites that collect cookies, you will be requested to either accept or decline to collect cookies. If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.

Please refer to our Cookie Policy for detailed information on how we manage your cookies and your rights pertaining to our cookie practices.

11 Revisions to Privacy Notice

We reserve the right to change the terms of this Notice and the right to make the new notice provisions effective for all personal data we maintain, regardless of when it was created or received. We will keep our current Notice posted on our website at https://www.eurofins-viracor.com/bioanalysis/privacy-policy/ and are obligated to follow the terms of the notice currently in effect. If you would like a paper copy of a revised notice, contact our Privacy Officer at 913-408-6161 Ext: 6161; email:DG_BioA_DPO@bcl.eurofins.com; or send a request to Eurofins Pharma BioAnalytics Services, Attn: Privacy Officer; 15 Research Park Drive St. Charles, MO 64403