Privacy Policy
Overview
Date of creation: September 2025
Date of last modification: September 2025
-
Introduction
SMB Pharma (“SMB”, “We,” “Us,” or “Our“) is committed to respecting the privacy of the individuals whose personal data We process (“You” or “Your”) and to treating such data in the strictest confidence and in accordance with applicable law, including:
-
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data;
-
The Belgian law of 30 July 2018 on the protection of individuals with regard to the processing of personal data.
This privacy policy (the “Privacy Policy”) is intended to inform You, in a transparent manner, about the data We collect, the purpose of its collection, how We use it, and the rights You have regarding the processing of Your personal data. This Privacy Policy applies to the processing of personal data in connection with visits to Our website (the “Website”).
Please read this Privacy Policy carefully.
Should You have further questions, please do not hesitate to contact Us at gdpr@smb.be.
-
Who is responsible for processing Your data
SMB is the data controller of Your personal data.
Laboratoires SMB
Rue de la Pastorale 26-28
1080 Brussels - Belgium
mailcontact@smb.be
BE 0418 956 361
-
What data do We collect?
When You use the Website as a simple visitor or user, We may collect:
-
Identification and contact details: name, email;
-
Demographic information: postcode;
-
Analytics data: IP address, connection data, browser type/version. Information about “Cookies” can be found in Our Cookies Policy.
When You use the Website to report a complaint or side effect, We may collect in addition:
-
Identification details: name, date of birth, age, sex;
-
Contact details: Address, email, phone number;
-
Qualification;
-
Medical history.
-
Why do We collect Your Data?
As a simple user of the Website, We collect Your data to:
-
Improve Our products and services;
-
Communicate with You when You contact Us;
-
Analyse Your use of the Website to improve user experience via cookies and analytics tools.
As a person reporting a complaint or side effect, We collect and process Your data to:
-
Assess, document and follow up Your complaint or report;
-
Comply with Our legal obligations regarding safety, vigilance and reporting requirements;
-
Communicate with You for any clarification, follow-up, or regulatory purposes.
We also use cookies and similar technologies to enhance Your navigation and track user interactions. Please refer to Our Cookies Policy for further information.
-
How do We justify the collection of Your data?
We process Your personal data based on the following legal grounds:
For Website visitors and users:
-
Your consent — for example, when You accept optional cookies or when You requested to be contacted through a specific channel. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
-
The performance of a contract or to take steps at Your request — e.g., when You use Our contact forms.
-
Our legitimate interests, balanced with Your rights and freedoms — e.g., to improve Our services, ensure Website security, respond to Your requests, detect and prevent fraud, or defend Our rights in case of disputes.
For persons reporting a complaint or side effect:
-
Legal obligation — We are required to collect and process certain information in order to comply with applicable laws and regulatory requirements (e.g., vigilance and safety monitoring).
-
Your consent — where it is required for specific processing beyond legal obligations.
-
Medical and public health purposes – Where relevant, we may ask for details about your medical history. This is processed only when necessary for assessing the side effect, ensuring patient safety, or fulfilling our healthcare and regulatory obligations.
-
What are Your rights?
We wish to inform You that, in the context of the processing of Your data, You have the right:
-
To obtain confirmation that We are processing Your data and to request a copy of that data at any time and free of charge. We may ask You for proof of identification before granting Your request.
-
To request that We update Your data or correct data that You consider to be inaccurate or incomplete.
-
To request that We delete Your data or restrict the way in which We use it if You consider that there is no or no longer any lawful basis for processing it.
-
To withdraw Your consent to the processing of Your data (to the extent that the processing is based on Your consent).
-
To receive a copy of the data You have provided to Us in a structured, commonly used and readable format and to pass that data on to another party (another data controller, to the extent that the processing is based on consent or contract).
-
To object to the processing of Your data for which We use legitimate interest as a legal basis. In such cases, We will stop processing unless We have compelling legitimate grounds for doing so.
-
How long do We keep Your data?
We keep Your data for as long as necessary to achieve the purposes for which it is collected. The retention periods may vary from one processing operation to another, depending on the purpose and the legal basis for the retention periods.
-
How do We protect Your data?
We are committed to ensuring that Your data is secure. In order to prevent unauthorised access or disclosure, We have put in place suitable physical, electronic and managerial procedures to safeguard and secure the data We collect online.
-
Are Your data shared with third parties?
Our employees have access to Your data on a strictly "need to know" basis and for the purposes described above. In addition, they are subject to a strict obligation of confidentiality.
To help Us deliver, improve, and support Our Services, We also work with carefully selected third-party service providers (“processors”) who process personal data on Our behalf. Each processor acts under a contract that ensures the protection and security of Your data and may only process it according to Our instructions.
-
Are Your data transferred outside the European Union?
We will transfer Your data to a country outside the European Union and European Economic Area only where that country provides a level of protection equivalent to that which You may enjoy in Your country of residence or to the extent permitted by applicable law, for example by ensuring the protection of data through appropriate contractual arrangements.
-
Updates and changes to the Privacy Policy
This Privacy Policy may be updated periodically to ensure compliance with applicable laws and to reflect changes in Our data processing practices or legal requirements. Updates will be published on this page, and where appropriate, We will notify you by email.
-
Contact Us and the Data Protection Authority
If You wish to exercise any of the rights set out above, report a problem with Our Website, require specific assistance or wish to send a comment, please contact Us by the means set out below:
-
By e-mail: gdpr@smb.be
-
By post: Rue de la Pastorale 26-28, 1080 Brussels – Belgium.
You can also contact the Data Protection Authority directly and/or lodge a complaint:
-
Rue de la Presse, 35, 1000 Brussels – Belgium.
-
+32 (0)2 274 48 00.