Privacy Statement & Site Disclaimer

1. INTRODUCTION

This Privacy Notice explains how Sanos Group ApS (“Sanos”) collect, use, and protect your personal data when you interact with us – whether as a website visitor, science partner, board member, potential client (sponsor), representing a business. It also outlines your rights regarding your data and how you can exercise them.

2. SANOS IS THE DATA CONTROLLER – HOW CAN YOU CONTACT US?

The data controller responsible for the processing of your personal data is typically the legal entity within Sanos that you are in contact with, and that determines the purposes and means of the processing.

If you are unsure which legal entity this refers to, the information will typically be available in the agreement, correspondence, or other materials you have received. You are also welcome to contact us directly for clarification.

You can contact us here:

Sanos Group ApS
Telefonvej 8D, 2.,
DK-2860 Soborg
Denmark

CVR no. 41409029
VAT-no. 40314636

DPO e-mail: dataprotection@sanos.com

3. CATEGORIES OF PERSONAL DATA THAT WE PROCESS

We collect the following categories of personal data:

Website visitor: IP address, browser type
Science partner: Name, contact information and as needed, your qualifications (e.g. CV)
Board member: Name, contact information
Potential client: Name, contact information
Company representative: Name, contact information and as needed, your qualifications (e.g. CV)

4. STORAGE OF YOUR PERSONAL DATA

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to comply with legal, regulatory, contractual, and internal policy requirements. When your data is no longer needed, it will be securely deleted or anonymized in accordance with applicable laws and our data retention policies.

The specific retention period may vary depending on the nature of the data and the context in which it was collected. For more detailed information about applicable retention periods, you are welcome to contact us.

Please note that we per clinical trial regulations are required to keep Clinical Trial documentation for 25 years from end of study. This would be specifically relevant for clients and science partners.

5. LEGAL BASIS AND THE PURPOSE OF PROCESSING

We process personal data for different purposes depending on the category of data subject. The legal basis for processing also varies accordingly. Below is an overview of the typical purposes and legal bases for each group:

Website visitors:
Data is used to analyze website traffic and improve user experience.
Legal basis: GDPR art 6 (1) (a) consent (for cookies) and GDPR art 6 (1) (f) legitimate interests (for analytics and site performance).
Science partner:
Personal data is processed to enable us to conduct work together as partners or provide your information to a client for a particular clinical project.
Legal basis: GDPR art 6 (1) (f) legitimate interests
Board members:
Personal data is processed for governance purposes and for regulatory compliance.
Legal basis: GDPR art 6 (1) (f) legitimate interests
Potential clients:
Personal data is processed to enable us to give you the best customer experience, including contacting you again for the purpose of future collaborations.
Legal basis: GDPR art 6 (1) (f) legitimate interests
Company representatives:
Data is processed to manage our commercial relationship, invoicing and fulfilling contractual obligations.
Legal basis: GDPR art 6 (1) (f) legitimate interests

If you fall into more than one category, your data may be processed for multiple purposes under different legal bases.

6. SOURCES, DISCLOSURES AND RECIPIENTS

In most cases, Sanos collect personal data directly from you.

Other sources and/or disclosures that are independent data controllers, may be:

Sanos use data processors to process your personal data on behalf of Sanos, such as:

Such data processors will only process personal data about you on behalf of Sanos and in accordance with the instructions given by Sanos. Thus, these third-party recipients are not permitted to process your personal data for their own purposes.

7. SECURITY OF YOUR PERSONAL DATA

To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.

8. YOUR RIGHT TO WITHDRAW YOUR CONSENT

Where relevant, you have the right to withdraw your consent to the processing of your personal data at any time by contacting us, cf. above.

Withdrawal of your consent will not affect the legality of previous processing of your personal data based on the consent up until the time of withdrawal. If you withdraw your consent, such withdrawal will only have effect from the time of withdrawal.

9. YOUR RIGHTS

Applicable data protection regulation grants you a number of rights in relation to our processing of your personal data.

If you wish to exercise these rights, please contact us via the contact information above. We may require identification from you in order to identify your personal data and make it possible for you to exercise your rights.

Right of access
You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed, and, where this is the case, access to the personal data.
Right to rectification
You have the right to have inaccurate personal data concerning you rectified.
Right to erasure
In some cases, you have the right to have personal data erased earlier than what would normally apply to that data.
Right to restriction of processing
In some cases, you have the right to obtain a restriction of processing of your personal data.
Right to data portability
In some cases, you have the right receive your personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from us.
Right to object
In some cases, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1).

10. QUESTIONS AND COMPLAINTS

If you want to exercise any of your rights, if you have any questions regarding this privacy notice or the processing of your personal data, you may contact us.

If you have any complaints regarding the processing of your personal data, please do not hesitate to contact us.

Sanos DPO: dataprotection@sanos.com

You also have the right to file a complaint with your local data protection authority. For Denmark this is the Danish Data Protection Agency (Datatilsynet).

– July 2025