F4Bio (“we”, “our”) is a consulting and talent platform dedicated to life sciences. We act as a data controller for the processing described in this notice. You can contact us at contact@f4bio.com.
- Identity and contact data — name, email, company, role, phone number, postal address (if provided).
- Professional background — CVs, LinkedIn profiles, career history (for Talent services).
- Assessment data — responses to personality, motivation, or psychometric questionnaires.
- Technical data — IP address, browser type, device information, server logs.
- Communication data — messages sent through contact forms or email.
- Training & event data — attendance records, feedback, learning progress.
- Cookies & trackers — as described in our Cookie Policy.
- To respond to your inquiries and provide Consulting services.
- To identify and present Talent profiles to potential recruiters and partners.
- To deliver and interpret assessments (psychometric tools, personality questionnaires).
- To organize training sessions, workshops, and events.
- To manage contracts, billing, and client relationships.
- To improve our Site and services (analytics, feedback loops).
- To comply with legal obligations and regulatory requests.
Legal bases for processing
We process personal data on the following legal grounds:
- Contractual necessity — when providing services you request.
- Legitimate interests — e.g., maintaining business operations, ensuring IT security, improving services.
- Consent — e.g., when you agree to participate in assessments or accept non-essential cookies.
- Legal obligations — e.g., tax and accounting requirements.
We do not sell your personal data. We may share data with:
- Service providers — hosting, IT, communication, and analytics providers bound by confidentiality and data processing agreements.
- Recruitment partners — only with your consent, for Talent services.
- Regulators or authorities — if required by law.
Where providers are outside the EEA, we rely on adequacy decisions or standard contractual clauses to safeguard transfers.
Cookies and third-party services
Our website may use cookies and third-party tools to improve user experience, ensure security, and measure performance.
These tools may collect limited technical information such as IP address, browser type, and interaction data for operational purposes.
For more details about cookies, see our Cookie Policy.
Google reCAPTCHA
We use Google reCAPTCHA to protect our forms from automated abuse and spam.
This service may collect and process information such as your IP address and browser user-agent for security verification.
These data are processed by Google in accordance with its
Privacy Policy
and
Terms of Service.
reCAPTCHA is considered a strictly necessary security measure and therefore does not require prior consent under GDPR.
It helps ensure the integrity of our communication channels and the protection of user-submitted data.
- Contact data: up to 24 months after last interaction.
- Consulting/Talent project data: retained as long as required for the engagement and legal obligations.
- Assessment results: typically 12–24 months, unless anonymized for research/statistics.
- Training records: up to 5 years for compliance and certification purposes.
- Cookies: per retention in the Cookie Policy.
Under GDPR, you have the following rights:
- Right of access — obtain a copy of your personal data.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — request deletion of your data in certain circumstances.
- Right to restriction — request limitation of processing.
- Right to portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent — for processing based on consent.
To exercise your rights, contact us at contact@f4bio.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD-GBA): dataprotectionauthority.be.
We apply appropriate technical and organizational measures to protect personal data, including access controls, encryption in transit, pseudonymization where possible, and regular audits. However, no method of transmission or storage is completely secure.
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If we discover that data from a child has been collected, we will take steps to delete it.
Data processing — Spectra
F4Bio SRL (controller). Contact: contact@f4bio.com.
- Identity & contact: business e-mail, first/last name (if provided), organisation.
- Access data: one-time access token, chosen language, timestamps, technical logs (IP addresses may be pseudonymised for security/anti-abuse).
- Questionnaire answers and generated reports (scores, profiles, derived comments).
- Administer the questionnaire & deliver the report — Contract (Art. 6(1)(b)) for individual requests, or Legitimate interests (Art. 6(1)(f)) where an employer administers Spectra for proportionate HR purposes (with proper notice and right to object where applicable).
- R&D/quality in aggregated form — Legitimate interests, with anonymisation/aggregation; no individual profiling for this purpose.
- Communication & support — Contract or Legitimate interests.
- Cookies & analytics — based on your consent via our cookie banner (see Cookie Policy).
- Access tokens: short security lifetime (e.g., 90 days), then deletion.
- Answers & reports: default 12 months after delivery unless otherwise agreed or legally required.
- Technical logs: up to 90 days for security/diagnostics.
- Aggregated/anonymous data: retained without identifiable elements.
- Authorised F4Bio staff (need-to-know basis).
- Processors (hosting, e-mail, security) bound by GDPR clauses.
- Client organisation (for professional use) per mandate, with participant notice.
- Extra-EEA transfers only with appropriate safeguards (SCCs, supplementary measures) or EU location.
Reasonable technical/organisational measures: token-based access control, encryption in transit (HTTPS), security logging, environment separation, data minimisation & retention controls.
Access, rectification, erasure, restriction, objection (esp. where based on legitimate interests), withdrawal of consent (where applicable), and portability.
Contact: contact@f4bio.com. You may also complain to your supervisory authority (Belgium: Data Protection Authority).
No decision producing legal or similarly significant effects is made solely by automated means. Spectra is an aid to human judgement.
Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. Updates will be posted on this page with a revised effective date.
If you have questions about this Privacy Policy, please contact us at contact@f4bio.com.
Effective date: 30 September 2025.
