Privacy Policy

1. Data Controller

StemX Bio B.V.
Biopartner 3, Galileiweg 8, 2333 BD Leiden, The Netherlands
KvK: 94705690
Email: info@stemxbio.com

2. What Data We Collect

When you use our contact form, we collect: your name, email address, company name, subject of inquiry, and message. This data is submitted voluntarily by you.

When you book a call via Microsoft 365 Bookings, Microsoft processes your name and email to schedule the appointment.

All fonts and styling are self-hosted on our servers. No font or CSS data is loaded from third-party CDNs.

3. How We Use Your Data

We use your contact form data to respond to your inquiry and to follow up on potential business opportunities. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in responding to business inquiries.

4. Data Processors

We use the following third-party services that process your data on our behalf:

• HubSpot (EU1 region) — stores contact form submissions in our CRM
• Microsoft 365 — powers our booking system and email
• Google Analytics — website usage analytics (anonymized)

5. Data Retention

Contact form submissions are retained in our CRM for as long as the business relationship is active, or for a maximum of 3 years after last contact. You can request deletion at any time.

6. Your Rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to object to processing and to withdraw consent at any time.

To exercise any of these rights, contact us at info@stemxbio.com.

7. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Bezuidenhoutseweg 30, 2594 AV Den Haag
+31 70 888 8500
autoriteitpersoonsgegevens.nl

8. Data Breach Notification

In the event of a personal data breach, we will notify the Autoriteit Persoonsgegevens within 72 hours and affected individuals without undue delay, in accordance with Articles 33 and 34 of the GDPR.

9. Cookies & Analytics

This website uses Google Analytics to measure site usage and improve our content. Google Analytics uses cookies to collect anonymous data about how visitors interact with the site (pages viewed, time on site, referral source). This data is processed by Google LLC. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

HubSpot may set functional cookies when you interact with the contact form. These are necessary for form functionality.

10. Changes to This Policy

We may update this privacy policy from time to time. The latest version is always available on this page with the effective date noted above.