Privacy Policy

Administrator's Details

The controller of your personal data is 

Morphosis Capital Partners B.V. , with its registered office at Prinses Margrietplantsoen 33, 2595 AM The Hague in The Netherlands

 (hereinafter referred to as the “Controller”).

Contact Details

You can contact the Controller:

• by e-mail at: dragalina@morphosiscapital.com, or 
• in writing at the Controller’s registered office: Prinses Margrietplantsoen 33, 2595 AM The Hague.

The Controller has designated a Data Protection Officer (DPO) who can be contacted regarding all matters concerning the processing of personal data and the exercise of data subject rights via e-mail: dragalina@morphosiscapital.com

Purposes and Legal Basis of Data Processing

Your personal data will be processed for the purposes of receiving, verifying, and handling notifications, as well as for archiving information during the legally required retention period.

The legal basis for processing the data is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR). The Controller’s legitimate interest is to protect against abuse or breaches affecting the Controller and to ensure the safe operation of its activities.

Personal data may also be processed for the purposes of investigation and defense of legal claims, which also constitutes the Controller’s legitimate interest.

Period for Which Data Will Be Processed

Your personal data will be processed for a period of three years from the date of completion of the follow-up action related to the notification.

This period may be extended if the documents are subject to a request by competent authorities or form part of judicial or administrative proceedings.

Data Recipients

Your data may be processed by authorized persons responsible for receiving notifications and conducting follow-up actions, in accordance with the procedures applicable within the Controller’s organization.

Your data may also be processed by entities providing services to the Controller, including Linia Etyki Sp. z o.o., which provides the reporting platform, as well as entities providing document archiving and destruction services and other service providers. Such entities process personal data solely on the basis of agreements concluded with the Controller and only on the Controller’s instructions.

Rights of the Data Subject

You have the following rights:

• the right to access your personal data;
• the right to request rectification of personal data;
• the right to request erasure of personal data or restriction of processing;
• the right to object to the processing of personal data.

For more information regarding the exercise of these rights, please contact the Controller.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

Information on the Requirement to Provide Personal Data

Providing personal data is voluntary, however failure to provide certain information may limit the Controller’s ability to properly process the notification.