Privacy Statement

We process personal data only where we have a lawful basis under the GDPR. Depending on the context, processing may be necessary to perform a contract or to take steps at your request prior to entering into a contract, to comply with a legal obligation, or for our legitimate interests, provided that such interests are not overridden by your interests or fundamental rights and freedoms. Where required, we rely on your consent, which can be withdrawn at any time. 

Where more than one lawful basis may apply, the applicable legal basis depends on the specific processing activity and the context of our relationship with you. Further information about the lawful basis applicable to a particular processing activity can be obtained by contacting us using the details below. 

Our legitimate interests typically include responding to enquiries, maintaining and managing business relationships, improving our services, ensuring information security, preventing misuse and protecting or exercising our legal rights. 

Via our website you can contact us or request that we contact you by filling out a form. Through this form we collect the information you provide, including your name, company, contact details (such as email address and phone number) and any additional information you choose to include.

You can also contact us by phone or email using the contact details listed on our website. In that case, we process your name, company and any information necessary to respond to your enquiry.

We use this data to answer your questions, comments or complaints, to follow up with you and to manage our business communications.

Legal basis: taking steps at your request and/or performance of a contract; and our legitimate interests in communication, service improvement and business administration.

If you are a customer or supplier, we process limited personal data in the context of our business relationship, such as contact details, role information and, where applicable, payment or billing details.

If you use our customer portal, we process the information you provide during registration, such as your name, company, email address, phone number, job title, username and password. We also log portal usage, support requests and interactions for functional, security and support purposes.

We may use your business contact details to keep you informed about our products and services and, where applicable, to send newsletters or other communications.

Legal basis: performance of a contract; compliance with legal obligations (such as accounting and tax law); and our legitimate interests in business operations, customer support, security and service improvement.

When you apply for a job or traineeship via our website you will be asked to provide certain personal information such as your CV, diplomas and your marks. If you provide us with a link to your LinkedIn profile, we will also add the profile information to your application. You may be asked to provide further information in follow-up correspondence with us.

In some cases we process data about you from other sources, for example information from the references you provide. We also process information about how you go through the application process, such as the interview partners you receive and their impressions and evaluations of you.

For some vacancies, we use third parties, such as head hunters and recruitment companies, to find suitable candidates. In that case, these third parties share your information with us.

We process this data to assess your suitability for the relevant positions with us and therefore for our legitimate interests of being able to administer and manage our recruitment process and to make sure the right people end up in the right positions.

Furthermore, we process your data to determine your employment terms, handle requests to reimburse your expenses and for internal control and security purposes..

If necessary, we can also process any of your information above for our legitimate interest of protecting our legal rights, for example in connection with legal claims, and when we have a legal obligation to process your information. We may also transfer your data in the event of a company reorganization, merger, or sale.

Legal basis: our legitimate interests in administering an effective recruitment process; and, where applicable, taking steps prior to entering into an employment contract or complying with legal obligations.

In addition to the processing activities described above, LOGEX processes personal data as a controller for medical and scientific research purposes. This includes conducting analyses, generating insights, producing aggregated reports and benchmarks, and performing retrospective database research aimed at improving healthcare, medical knowledge and public health outcomes. 

This processing applies exclusively to situations in which LOGEX determines the purposes and means of the processing. Where LOGEX processes personal data solely on behalf of healthcare providers acting as controllers, such processing falls outside the scope of this Privacy Statement. 

In the context of medical and scientific research, LOGEX may act as an independent controller or as a joint controller together with research partners, such as academic institutions, universities or (university) hospitals. Where LOGEX acts as a joint controller, the respective responsibilities of the parties are allocated in a joint controller arrangement in accordance with Article 26 GDPR, including responsibilities relating to transparency and the handling of data subject rights. 

For research purposes, LOGEX may process personal data such as demographic information (for example age or date of birth) and data concerning health, treatment, medication use and medical history. This may include special categories of personal data within the meaning of Article 9 GDPR. In principle, this concerns retrospective data that has already been collected in the context of medical treatment. 

LOGEX applies data minimisation and privacy‑by‑design principles and processes personal data in pseudonymised form where possible. 

Legal basis: processing for medical and scientific research purposes is based on one or more of the following legal bases, as applicable to the specific research project:

• legitimate interests (Article 6(1)(f) GDPR), with appropriate safeguards;

• processing necessary for scientific research purposes (Article 9(2)(j) GDPR);

• explicit informed consent (Articles 6(1)(a) and 9(2)(a) GDPR), where required by applicable law or by the research design.