This draft must be aligned with EMQA's actual website infrastructure, data processing practices and legal controller information before publication. Sections requiring confirmation are identified below.
Who We Are
EMQA Enzyme Molecular Quality Analytics is a scientific website featuring information about molecular biology, enzymology, bioanalytical methods and analytical quality principles.
For questions about personal data processing associated with this website, you may use the contact information below.
EMQA Contact Information
Voortstraat 49
1910 Kampenhout
Belgium
Email: [email protected]
Telephone: +32 16 58 90 45
Personal Data We May Process
Depending on how you interact with the website, personal information may be processed in the following categories:
- Communication data: your name, email address and information you choose to include when contacting EMQA.
- Technical data: information associated with website requests, such as IP addresses, browser or device characteristics and security logs.
- Website preferences: settings that may be stored to support website functionality.
- Additional data: any other categories processed through features or third-party technologies actually deployed on the website.
Purposes and Legal Bases
Under the General Data Protection Regulation (GDPR), processing of personal data must have a valid legal basis and a defined purpose.
The following table identifies possible processing activities relevant to a scientific website. The final published table must correspond to the actual processing performed by EMQA.
| Activity | Purpose | Potential GDPR Basis |
|---|---|---|
| Responding to inquiries | Managing communications and requests | Legitimate interests or pre-contractual steps, as appropriate |
| Website operation and security | Maintaining availability and investigating misuse | Legitimate interests or a legal obligation, where applicable |
| Optional analytics | Understanding use of website content | GDPR basis to be confirmed; non-essential analytics cookies require prior consent |
| Legal compliance | Meeting applicable legal obligations | Legal obligation, where applicable |
Cookies and Similar Technologies
Cookies and similar technologies may store or access information on a user's device. Some are technically necessary for website functionality, while others may support analytics or additional features.
Under applicable Belgian rules, non-essential cookies generally require prior, informed and valid consent. Visitors should be able to refuse such cookies and withdraw consent as easily as it was given.
The final version of this policy should identify the cookies or tracking technologies used, their providers, purposes, storage durations and applicable consent choices.
Audit the live site's cookies, analytics scripts, embedded media and third-party content. Add a working consent management mechanism if non-essential cookies or comparable trackers are used. This HTML policy does not implement cookie consent.Learn more from the Belgian Data Protection Authority .
Recipients and Service Providers
Website operation can involve external service providers such as hosting companies, email services, security providers and content delivery infrastructure.
Where personal data is processed on behalf of the website operator, appropriate data protection arrangements may be required.
Add the actual recipients, relevant service provider categories, and any other disclosures, including legally required disclosures. Do not assume a provider is used without verifying the live website.International Data Transfers
Some technology providers may process or access personal information outside the European Economic Area.
Where such transfers occur, their legality must be assessed under the applicable GDPR transfer rules and safeguards.
Identify any non-EEA transfers, countries involved and actual transfer mechanisms or safeguards. If no such transfers occur, replace this conditional wording with an accurate statement.How Long Data Is Retained
Personal data should not be retained longer than necessary for the relevant purposes, subject to applicable legal requirements.
Retention may differ by data category, such as correspondence, technical security logs or records required under law.
Insert actual retention periods or objective retention criteria for every relevant data category. Generic statements alone are not sufficient when specific retention information is available.Data Security
Personal data processing should be protected through technical and organizational measures appropriate to the risks, nature and context of the processing.
Relevant safeguards may include controlled access, secure communication channels, system maintenance and protection against unauthorized activity.
Confirm which security measures are actually implemented before describing them as established EMQA practices.Your Rights Under the GDPR
Subject to the relevant legal conditions and limitations, individuals may have rights relating to their personal data.
- Access: request information and access to personal data.
- Rectification: request correction of inaccurate information.
- Erasure: request deletion of data in applicable circumstances.
- Restriction: request restricted processing under certain conditions.
- Portability: obtain and transfer eligible personal data.
- Objection: object to certain processing activities.
- Withdrawal of consent: withdraw consent where processing relies on it.
- Automated decisions: exercise relevant rights in relation to qualifying automated decision-making.
You may send a request to [email protected] . The controller may ask for reasonable information needed to verify identity.
GDPR requests must generally be answered without undue delay and within one month, subject to permitted extensions in qualifying circumstances.
Complaints and Privacy Inquiries
If you have questions about the handling of personal data associated with the EMQA website, please contact us directly.
You also have the right to lodge a complaint with a competent supervisory authority, subject to applicable rules. In Belgium, the relevant authority is the Belgian Data Protection Authority .
Changes to This Privacy Policy
This policy should be reviewed when material changes occur to website functionality, personal data processing or relevant legal requirements.
The publication date and version information should be updated when a new policy is adopted.
Replace the draft update label with the actual approval and publication date once the policy has been finalized.