Home

Your privacy and Us

Who are we?

UCB Biopharma SRL is our official business name, but we will refer to ourselves as ‘we,’ ‘our,’ ‘UCB’ or ‘us’ in this Notice. We are a Belgian company with a registered office at 60, Allée de la recherche, 1070 Anderlecht.

 

We care about your privacy

At UCB, our vision is to create valuable solutions that improve the lives of people living with neurological and autoimmune conditions. We are committed to building trust through responsible data use, ensuring privacy and respect for individual rights.

By fostering collaboration, we create legal frameworks that support innovation while safeguarding data. We believe technology has the potential to tackle major societal challenges and transform healthcare, making a meaningful difference in patients' lives.

What is this notice about?

To provide You with our services or maintain a relationship with you, we process some of your Personal Data. This privacy notice tells you all about what Personal Data we collect, why we use it, how long we will keep it and with whom we share it with.

Whether you are a Patient, a Healthcare provider, a safety information reporter or a user of our Website, you will find the information you need to make informed decisions about your Personal Data.

What is Personal Data?

All about your data and what we do with it

To find the information that applies to you, select your profile (Patient, HCP, Website visitor, or someone reporting a safety information) and you will have access to

  • The reason why we process your Personal Data and the legal ground on which we rely to do so (called “legal basis”)
  • Which data we collect for each reason
  • From what source
  • How long do we keep it and whether we share it with anyone else.

You will also find information about your privacy rights and how to exercise them.

I AM A PATIENT
Learn more

I'm a Patient:


If you interact with UCB—through UCBCares, patient support programs, market studies, testimonials, or other engagements—your data is processed under this Notice. Additional privacy notices can apply to specific programs.

You are the expert of your illness and we value your expertise 
without which we could not do our job!

General Patient Privacy Notice - Local versions | UCB 

Which data do we collect?

  • Your First and Last name
  • Demographic data: Your age, date of birth and gender.
  • Personal life situation: Details about your healthcare professional, your education, family status, and household income.
  • Professional information: Your job.
  • Your contact details: Your mailing address, phone number(s), and email address (based on how you prefer to be contacted)
  • Your preferences:
    • When you prefer being contacted (morning, afternoon, or evening) for calls, your choice on receiving emails from us, and your preferences regarding support services.
    • Records of when we contact you, when you receive and open emails, notes from our calls, and any confirmations or agreements you provide (e.g., consent for data processing or treatment acknowledgments).
    • Information about when you gave us your consent
  •  
    • Your signature (with date)
    • Any requests you make for information about our programs, products, or services.
    • Your opinions, testimonials (including photos/videos), and feedback about your experience with our programs, services, and products.
  • Connection or electronic communication data: Your IP Address.
  • Adverse Event Information: Details about any side effects you report, including patient details, seriousness, date, unique case ID, and legally required information.
  • Economic Information: Your banking details and transfer amounts for payments we may process.
  • Product Diagnostics: Data on product errors, usage, and other diagnostic details related to you.
  • Health Data: Information about your condition, diagnosis, when it was diagnosed, treatments received, medical images/videos, challenges you’ve faced, treatment outcomes, assigned unique IDs (for tracking), and any other health-related details you share with us. This includes the information you enter in the Parkinson’s Well-Being Map™.

To collect and use your Personal Data we need to have a precise reason and a legal ground on which we rely to do so (called a “legal basis”). You will find below the various reasons for which we can collect your Personal Data and how we use it.

If you are a Patient, we can collect and process your Personal Data to:

Help you sign up and use our programs, services, and products.

For example, we can add your data to our system to check if you're eligible, track treatment progress, measure how well our products work, and ensure you follow required policies.

For health data, we rely on your consent.

For your First and Last name, contact details, Demographic data, and Preferences, we rely on the contract we signed with you.

Stay in touch and offer personalized support (like UCBCares)

We may contact you to answer questions, clarify your information, send safety updates, or provide custom support, like treatment reminders, self-injection training, or nurse support.

For health data, we rely on your consent.

For other details like your First and Last name, Personal life situation, Demographic data, Contact Details and Preferences, we rely on the contract we signed with you.

Follow legal and safety rules.

For example, we have to report safety issues, like side effects, related to our medications to health authorities, so they can monitor product safety. 
We may also need to confirm certain medical requirements before you use a medication, like making sure you've had a required vaccine or are taking a necessary additional medication. 
Other legal requirements include keeping official records, tracking how you use our medical devices, and handling your legal rights (including the ones explained in this Notice).

To process your First and Last name, Personal life situation, Demographic data, Contact Details, Adverse Event Information, Preferences, Product Diagnostics and Health Data, we rely on our legal obligations and public health reasons.

Send you personalized content and other information about our programmes, studies, products and services.

This includes starter kits, newsletters you subscribed to, and general health information.

To process your Name, Demographic data, Personal life situation and Contact Details, we rely on your consent.
You can always change your mind and opt-out of these communications:

  • via the unsubscribe link in commercial communication from us
  • or by contacting us at dataprotection@ucb.com
  • or by following the indications of the platform you are using.

See if our messages are useful to you.

We track how you interact with our communications, by email for example, to make sure they’re relevant.

To process your Name, Demographic data, Personal life situation, Contact Details and Preferences, we rely on our legitimate interest and your consent when needed.

Help your doctor monitor your treatment.

We may share milestone reports with your doctor.

To share health data and other data you request us to share with your healthcare professional, we rely on your consent.

We also rely on our legal obligations.

Ask for your feedback to improve our services.

We may invite you to share opinions or take surveys to make our programs and products better.

For health data, we rely on your consent.

To process your Name, Demographic data, Personal life situation, Contact Details and Preferences, we rely on our legitimate interest and your consent.

Advance medical knowledge and research.

We may share pseudonymized health data such as images and information about your condition or disease and treatment with the medical community to improve treatments.

What’s pseudonymized data? It is data that does not directly identify you and that needs to be combined with another Personal Data to do so. When we share your pseudonymized health data, the recipients usually can’t identify you just from that information. If the program requires it, we will take extra steps to reduce the chances of anyone recognizing you.

We rely on your consent to do this.

Handle payments.

If we need to pay you (for example, under a contract), we process your payment details.

To do this, we rely on the contract we signed with you.

Confirm your identity when needed.

To protect your information, we may ask for a reference code or ID before giving you access.

When we need to process your Name, Demographic data, Personal life situation, and Contact Details to confirm your identity, we rely on our legitimate interest.

We also rely on our legal obligations.

Run diagnostics.

We may check devices or applications you use to fix issues or improve performance.

When we need to process your Name, Demographic data, Personal life situation, and Contact Details to run diagnostics, we rely on our legitimate interest and your consent.

Anonymize your data where possible.

When we no longer need to identify you, we anonymize your data for research or analysis. We can also combine information that we receive from the different sources for all of the reasons we just explained.

For health data and information on the safety of our products, we rely on your consent.

For the rest, we rely on our legitimate interest.

For how long?

  • Patient Programmes: We usually keep your data for one year after you register. However, this may vary depending on the duration of the programme, follow-up analysis, or how long we offer a certain medication.
  • Patient Engagement Platforms: We keep your data as long as you have an open account or a contractual relationship with us.
  • Feedback & Input: We keep your feedback for as long as it helps us improve our programmes, services, or products. Typically, we anonymize it within a year, unless having identifiable feedback helps with long-term improvements.
  • Communication & Engagement Data: We keep this information for about one year or as long as we have an active relationship with you.
  • Newsletters & Health Information: We keep your data for as long as you are subscribed to receive these updates.
  • Payment & Contracts: We keep financial and contract-related data as required by accounting laws or until the statute of limitations expires.
  • Compliance & Reporting: If we must track or report your medication use for legal reasons, we keep these records as long as needed to prove compliance.
  • Parkinson’s Well-Being Map™: We only store your answers while you’re on the website to allow you to generate a PDF. Once you close your browser, we do not keep this information.
  • On our website: If you create an account, sign up for UCB Stories, or subscribe to press releases, we keep your information as long as you use these services. If you contact us through our Website contact form, take a quiz, or leave a comment, we keep your information for one year.

From what sources?

  • Directly from You:
    • You provide information to us electronically, in writing, or verbally.
    • When you meet with our UCB team in person, exchange emails with you , or call you to discuss your information.
  • From Third Parties: Your healthcare professional or caregiver may share information about your condition or treatment with us.
  • From our own records: Sometimes, we may analyze the data we already have about you (like your condition, your treatment with our medication, or other types of information) to create additional insights.
  • From third-party service providers and business partners when you interact with our websites, apps and digital platforms.
I AM A HEALTHCARE PROVIDER
Learn more

I’m a Healthcare Professionals (HCPs) and Healthcare Organizations (HCOs):

If you are an HCP or represent an HCO in a business relationship with UCB, this Notice applies to you. If you participate in UCB programs, studies, or use our digital tools, additional privacy terms can apply. Review them before engaging with us.

 

Need the Privacy Policy for Healthcare Professionals in your language? Click here.

Which data do we collect?

  • Basic details: Your name, title, language, registration number (if applicable), and a unique ID in our system. (*)
  • How to reach you: Your address, phone number, and email. (*)
  • Professional information: Your job title, education, areas of expertise, hospital or organization, scientific interests, or publications. (*)
  • Your preferences: How and when you like to be contacted, and whether you want to receive certain emails or updates.
  • Interactions with us: Calls, meetings, events you joined, and topics discussed.
  • Feedback and insights: Your views in surveys, advisory boards, or market research.
  • Requests and support: Details you share when you ask questions, request support, or report a side effect.
  • Samples: What samples you received and your signature to confirm delivery.
  • Events: Your attendance, travel details, and dietary preferences when needed.
  • Marketing: Whether you open our emails, click on links, or visit our websites (through cookies or similar tools).
  • Contracts and finance: Bank details, tax information, and payments when relevant.
  • Legal and compliance: Any information we must keep for laws, audits, or disputes.
  • Online accounts: Your username, password, and details you provide when creating an HCP account. (*)

To collect and use your Personal Data we need to have a precise reason and a legal ground on which we rely to do so (called a “legal basis”). If you are a Healthcare provider, we can collect and process your Personal Data:

To manage our professional relationship with you

It includes: planning and tracking our interactions, optimizing our communications based on your preferences, segmenting stakeholders in your field and region, and improving the quality of our interactions while avoiding duplication.

We rely on our legitimate interest. It allows us to manage our resources efficiently, maintain strong professional relationships, and create value for people living with severe diseases.

If you don’t provide us with your information, we won’t be able to manage our professional relationship with you.

To coordinate our relationship with you when working with our collaboration partners.

We collect your Personal Data to coordinate our relationship with you and collaborate with our partners, like other pharmaceutical companies, while avoiding duplicate interactions.

We rely on our legitimate interest. It allow us to conduct research and development and manage our resources efficiently.

To gather your feedback and professional insights through advisory boards, market research, and surveys

We collect your Personal Data to gather your feedback and professional insights through advisory boards, market research, and surveys to understand what matters to you and your patients. We also use it to identify trends in patient care, assess how you perceive us and our products, and improve our services. We may also combine this data with other information we collected through different channels.

We rely on our legitimate interest. It allows us to advance research, refine our products, and strengthen our professional relationship with you. If you participate in an advisory board or market research under a contract, we rely on the contract we signed with you.

If you don't provide us with your information, we won't be able to meet our legitimate interests. Keep in mind that if the information is part of a contract with you, some data will be necessary to enter into the contract. Without this data, we will not be able to complete the contract with you.

To respond to your questions and provide you with the support you requested.

We collect your Personal Data to respond to your questions and provide you with the support you requested.

We rely on the contract we signed with you when we respond to service requests and our legal obligations when we address adverse event reporting.

To send you product samples and document the distribution process.

We collect your Personal Data to send you product samples and document the distribution process.

When it is a legal requirement, we rely on our legal obligations related to medical product distribution. Otherwise, we rely on our legitimate interest. It allow us to provide accurate product information and comply with industry standards.

If you don't provide us with your information, you will not be eligible to receive UCB product samples.

To invite you to attend and participate in academic, scientific, and promotional events relevant to your medical expertise.

We collect your Personal Data to invite you to attend and participate in academic, scientific, and promotional events relevant to your medical expertise. We also promote similar events based on your past attendance and interests, potentially combining this data with other information we collected through different channels.

We rely on your consent for communications about these events and the contract we signed with you when we process your event participation details.

If you don't provide us with your information, we cannot invite you to or arrange your participation in our sponsored events.

To send you personalized direct marketing communications about medical and scientific updates, corporate news, and our products and services

We collect your Personal Data to send you personalized direct marketing communications about medical and scientific updates, corporate news, and our products and services. We also analyze your interactions with these communications to better tailor our messages.

We rely on your consent. For tracking technologies, we also rely on your consent, except for when they are strictly necessary.

If you don't provide us with your information, we cannot send you the marketing communications you requested.

To execute contracts with you or your healthcare organization (HCO) and to manage tasks like billing and invoicing.

We collect your Personal Data to execute contracts with you or your healthcare organization (HCO) and to manage tasks like billing and invoicing.

If we must collect certain data by law, we rely on our legal obligations. For other data, we rely on our legitimate interest to manage contractual relationships with HCOs and the contract we signed with you for self-employed healthcare professionals.

To comply with EU and Member State legal and regulatory obligations, conduct regulatory audits, and respond to requests from authorities.

We collect your Personal Data to comply with EU and Member State legal and regulatory obligations, conduct regulatory audits, and respond to requests from authorities.

We rely on our legal obligations, including compliance with pharmacovigilance, transparency laws, and record-keeping requirements.

To comply with industry transparency guidelines that are not legally required but are considered best practices.

We collect your Personal Data to comply with industry transparency guidelines that are not legally required but are considered best practices.

We rely on your consent when we communicate about transfer-of-value disclosures and our legitimate interest. It allows us to conduct business transparently and align with industry standards.

To protect our business in legal matters, manage disputes, handle claims, and keep records of transactions.

We collect your Personal Data to protect our business in legal matters, manage disputes, handle claims, and keep records of transactions.

We rely on our legitimate interest. It allow us to defend our company against claims and ensure business continuity.

To conduct audits, comply with non-EU laws, and respond to requests from non-European regulatory or judicial authorities.

We collect your Personal Data to conduct audits, comply with non-EU laws, and respond to requests from non-European regulatory or judicial authorities.

We rely on our legitimate interest. It allows us to adhere to the legal and regulatory frameworks that apply to our business.

To create and manage your account on our Website and give you access to content made just for HCPs, like scientific webinars.

If you visit our Website, we collect your Personal data to create and manage your account, and give you access to content made just for HCPs, like scientific webinars.

We rely on the contract we signed with you.

If you don’t provide the Personal Data with a (*), we won’t be able to create your log-in.

For how long?

  • Professional relationship: While we work together, and up to 3 years (36 months) after you retire or stop practicing.
  • Events and interactions: Up to 5 years (60 months) after the activity.
  • Consent-based activities (like marketing): Up to 10 years (120 months) after you give consent.
  • Contracts and financial data: During the contract and 5 years after, unless the law requires more.
  • Samples: 10 years, as required by industry rules.
  • Legal and regulatory data: As long as the law requires (for example, adverse event reports are kept for at least 10 years after a product’s authorization ends).
  • Website and account use: As long as you keep your account; contact form or quiz inputs are kept for 1 year.
  • Feedback: Usually anonymized within 1 year, unless longer is needed to improve our services.

From what sources?

  • Directly from You: When you fill in forms, talk with us, email us, or join our events.
  • From service providers: For example, when they help us with IT systems, deliveries, or event logistics.
  • Through our IT tools and services: We monitor our IT systems, including emails we send to you (when requested or with your permission).
  • From the Healthcare organization (HCO) you work for: If you are affiliated with an HCO, we may receive relevant data from them.
  • From our partners: Like other pharmaceutical companies or healthcare organizations we work with.
  • From public sources: Such as PubMed, ClinicalTrials.gov, conference websites, or university pages.
  • From social media: When you interact with us there, in line with their terms.

With whom do we share it with?

  • Always: With our company affiliates and third-party providers who support us (for IT, logistics, or event organization).
  • When required by law: With EU or non-EU authorities, regulators, or in transparency reports.
  • When working with partners: With other pharmaceutical companies or healthcare organizations we collaborate with.
  • For disputes or audits: With our advisors, outside counsel, auditors, or lawyers.
  • Sometimes with the public: When legally required (for example, publishing transparency disclosures).
I AM A WEBSITE VISITOR
Learn more

I'm just visiting this website:

If you visit our websites, this Notice applies to you. Specific terms may also apply depending on your user profile, such as healthcare professionals (HCPs) or patients. Be sure to read the relevant terms. 
Good to know: This Notice does not cover job applicants using Careers.ucb.com—please refer to this website’s privacy notice here Careers.ucb.com.

Which data do we collect?

If you visit our website we can collect:

  • Your First and Last name
  • Your contact details
  • Other identification data or Unique Identifier
  • Your preferences
  • Work-related information
  • Your connection or electronic communication data
  • Demographic data

 

  • Your IP address
  • Health data (that you gave us when you completed the Parkinson's Well-Being Map™)
  • For candidate suppliers only: your industry (*), country of interest(*), company name and contact details (*), short description of your products and services (*) and any other information you submit in the free text field.
    If you don’t provide the Personal Data with a (*), we won’t be able to process you application.

To collect and use your Personal Data we need to have a precise reason and a legal basis. You will find all of the reasons we can collect your Personal Data and everything you need to know about how we use it below.

If you are a user of our website, we collect and process your Personal Data to:

Respond to your requests. If you subscribe to press releases or UCB Stories, we process your data to provide these services.

We rely on the contract we have with you.

Handle your comments. If you submit comments on our content, we may process them as part of our services.

We rely on the contract we signed with you. If we publish them online, we rely on your consent.

Comply with legal obligations. We process data to meet regulatory requirements, such as pharmacovigilance laws for reporting adverse events.

We rely on our legal obligations.

Improve our website. We use tracking technologies to enhance your experience and understand how people use our website.

Cookies help us understand how people use the site and its features, so we can improve it. Some cookies are needed for the website to function, while others are used for analytics and tracking, based on your consent. We balance our need to process data with your privacy rights. For more details, see our Cookie Policy or contact us.

We rely on our legitimate interest and your consent. If you want more information, check our Cookies Policy.

Keep our website secure. We use log files to check who accesses our website to detect and prevent security threats.

We use log files to track website access and traffic, helping us detect and prevent harmful activity or invalid visits.

We rely on our legitimate interest. If you want more information, check our Cookies Policy.

Allow HCPs to create and manage a log-in on our Website.

We rely on the contract we signed with you and our legitimate interest for optional data.

Allow HCPs to access and receive content meant for HCPs only. For example: scientific webinars.

We rely on the contract we signed with you.

Respond to Patient's requests for further information on clinical studies featured on the Website.

We rely on the contract we signed with you.

Allow Patients to use some support tools on the Website.

For example, we collect your data to give you access to the Parkinson’s Well-Being Map™.

We rely on the contract we signed with you.

For how long?

If you create an account, sign up for UCB Stories, or subscribe to press releases, we keep your information as long as you use these services.

If you contact us through our Website contact form, take a quiz, or leave a comment, we keep your information for one year.

Parkinson’s Well-Being Map™: We only store your answers while you’re on the website to allow you to generate a PDF. Once you close your browser, we do not keep this information.

From what sources?

  • Directly from You: when you give us your Personal data.
  • From third-party service providers and business partners: when you interact with our websites, apps and digital platforms.
I AM A REPORTER OF SAFETY INFORMATION
Learn more

I'm a Reporter of Safety Information

If you report safety-related information about our products, such as adverse events or quality complaints, this Notice applies to you. This includes patients, caregivers, HCPs (e.g., doctors, nurses, pharmacists), UCB employees, service providers, or partners.

At UCB, we prioritize patient safety through our pharmacovigilance obligations.

The European Medicines Agency defines pharmacovigilance as “the science and activities relating to the detection, assessment, understanding and prevention of adverse effects or any other medicine-related problem.”

We continuously monitor the safety of our medications, collect and analyze reports of side effects, and take necessary actions to protect patients.

Which data do we collect?

If you are reporting safety information (SI Reporters)

If you report a safety issue about one of our products, we collect:

  • Your First and Last name, initials, title
  • Your government issued ID code
  • Your contact details: address, email, and phone number.
  • Adverse event information:
    • Your country of residence or, if unavailable, where the report was received or reviewed.
    • Whether you’re a healthcare professional (HCP), caregiver, or part of the general public.
    • How you are related to the person affected.
    • Additional details we must collect based on national regulations.

For product complaints & questions

  • If you contact us about a product issue or question, we collect the details you share so we can help you.

If you are a patient reporting safety information about your own treatment

If you experience a side effect or other safety issue with one of our products, we collect:

  • Demographic data:Your date of birth (or age), gender, weight, and height.
  • Other unique identification data: A patient ID code, your initials, and possibly your medical record number from your doctor or hospital.
  • Personal life information: Information about the doctor treating you.
  • Adverse event information: what happened, when it started, how serious it was, and if it was linked to pregnancy, medication errors, overdose, misuse, lack of effect, drug interactions, or other safety concerns.
  • Health Data we need to understand the issue, including:
    • A description of the side effects, treatments you received, and how your medications were used.
    • Test results, medical history, risk factors, and any related lab reports.
    • If relevant, pregnancy details (such as last menstrual period or gestation period).
    • Information on any other medications you were taking, even if unrelated.
    • In some cases, we may also ask about your job history or lifestyle habits (such as smoking, exercise, or diet) if they help us understand the issue better.
    • Anything required by law: additional safety details we must report.

If you are a safety information reporter, we collect and process Personal Data to:

Monitor the safety of our medicines and medical devices by detecting and reporting adverse events to health authorities in the EU and its Member States. We also comply with EU laws and regulations related to medicine and medical device safety.

We rely on our legal obligation to ensure pharmacovigilance (adverse event reporting)

We also rely on our public interest duty to protect public health by monitoring medicine safety.

When we handle health-related or sensitive data, we rely on public health reasons, like preventing serious health threats and ensuring high safety standards for medicines and medical devices.

Respond to complaints about the quality, effectiveness, or safety of our medicines and medical devices. We also answer medical queries, prevent misuse of our products and services, and improve the quality of our offerings.

We rely on our legal obligation when we handle complaints about products

We rely on the contract we signed with you when we respond to medical information requests

We rely on our legitimate interest. It allows us to prevent misuse of our product and enhance their quality.

When we handle health-related or sensitive data, we also process it for public health reasons to ensure we comply with safety standards.

Comply with safety reporting laws and regulations outside the EU, when it is required by health authorities in those regions.

We rely on our legitimate interest. It allows us to meet regulatory obligations worldwide and ensure our product is of good quality and safe.

When we handle health-related or sensitive data, we also process it for public health reasons to ensure compliance with relevant laws that safeguard individual rights and privacy.

Conduct audits to make sure we comply with regulations, industry standards, and internal policies.

We rely on our legal obligation to meet regulatory requirements and our legitimate interest. It allows us to maintain accountability and high-quality standards.

Handle complaints, disputes, and legal claims to protect our interests in ongoing or potential legal cases.

We rely on our legal obligation to comply with legal procedures and our legitimate interest. It allows us to defend our business.

For how long?

  • To monitor the safety of our medicines and medical devices, we keep your data for: 10 years after the marketing authorisation in any country where the relevant UCB medication was placed on the market ends and for quality assurance: we keep your information for 10 years.
  • To respond to complaints about the quality, effectiveness, or safety of our medicines and medical devices: for quality insurance, we keep your information for 10 years.
  • To comply with safety reporting laws and regulations outside the EU and conduct audits: we keep your information for as long as the law requires us to keep it.
  • To handle complaints, disputes, and legal claims: we keep your information for as long as needed to handle legal cases, disputes, or business deals.

From what sources?

Directly from you, the safety information reporter, whether you are directly experiencing a safety issue with one of our products or if you are reporting for someone else.

We can also get in the information from our distributors, our partners or third party suppliers

With whom do we share it with?

For all 5 reasons we share your data with:

  • Our affiliates, partners, third-party processors, and
  • EU or EU Member State government and regulatory agencies

In addition, to handle complaints, disputes, and legal claims, we share your data with our legal advisors and auditors

I AM A SUPPLIER
Learn more

I'm a Supplier:

If you are an employee, contractor, agent, or representative of a vendor or supplier providing services to UCB—including self-employed individuals—this Notice applies to you.

Which data do we collect?

To establish and maintain a business relationship with you, we can collect:

  • Your First and Last name (*)
  • Your Contact Details
    • Your company email address (*)
    • Your company postal address
    • Your business phone number
  • Your Professional Information
    • The name of your company and your job title or position
  • Your National ID or passport
  • Your nationality
  • Demographic Data: Your gender and date of birth
  • Other unique identification Data:
    • Your license plate number
    • Your badge number
  • Your Economic situation (for individual suppliers only): Your bank account details
  • Connection and electronic communication data (if we need it for your work with us)
    • Login details and passwords
    • Access level and rights
    • IP address, cookies, logs, and metadata
  • Images, videos, voice recordings:
    • Photographs (e.g., for company badge)
    • CCTV or image recordings

To collect and use your Personal Data we need to have a precise reason and a legal ground on which we rely to do so (called a “legal basis”). You will find below the various reasons for which we can collect your Personal Data and how we use it.

If you are a Supplier, we can collect and process your Personal Data to:

Comply with EU and Member State laws and regulations

We collect your data to help us follow European and Member State laws, including those on drug safety (pharmacovigilance), taxes, accounting, and health and safety. We also use it to carry out regulatory audits required by these laws. In addition, we collect your data to respond to official requests from public or judicial authorities in line with the legal requirements of those States.

We rely on our legal obligations

Comply with our non-EU legal and regulatory obligations

We collect your data to help UCB follow non-European laws and regulations. We also use it to carry out regulatory audits required by these laws. In addition, we collect your data to respond to official requests from public or judicial authorities in line with the legal requirements of those States.

We rely on our legitimate interest.

Conduct our business and maintain a professional relationship with you, while complying with our company's policies.

We collect your data to manage and maintain our commercial or professional relationships with you. We also use it to organize requests for proposals (RFPs) and prepare contracts. In addition, we collect your data to fulfill our obligations and exercise our rights under existing contracts, including invoicing, record-keeping, and contract management. We use it to monitor compliance with UCB policies, such as IT assets, IT security, and health and safety policies. Finally, we collect your data to allow you to participate in UCB trainings.

We rely on our legitimate interest and the contract we signed with you.

Protect our property, assets, and systems, and prevent theft, fraud, or misuse of our products, services, and IT network.

We collect your data to monitor the use of our IT systems and network for security purposes, following the rules that apply. We also use it to protect our business interests, including handling reports of misconduct or fraud and defend ourselves against legal claims.

We rely on our legitimate interest.

Handle mergers and acquisitions that involve UCB companies.

We collect your data to allow a third party to acquire all or part of our business and assets.

We rely on our legitimate interest.

For how long?

We keep your information for as long as you or your employer work with us, and 2 more years after that.

From what sources?

  • Directly from you or your employer.
  • When you interact with us and/or visit our buildings.
I AM A SHAREHOLDER
Learn more

I'm a Shareholder and Investor:

If you are a past, present, or future shareholder, securities holder, investor, or their representative, this      
Notice applies to you.

Which data do we collect?

To establish and maintain a business relationship with you, we can collect:

  • Your First and Last name (*)
  • our Contact Details
  • Your Economic situation
  • Your National identification/government issued ID number
  • Your Economic situation
  • Your nationality

 

To collect and use your Personal Data we need to have a precise reason and a legal ground on which we rely to do so (called a “legal basis”). You will find below the various reasons for which we can collect your Personal Data and how we use it.

If you are a Shareholder, we can collect and process your Personal Data to:

Manage the shareholders' register

We collect your data to comply with legal obligations under Belgium local law.

We rely on our legal obligations.

Manage our shareholders

We collect your name, contract and economic situation data to prepare for and manage shareholders’ meetings, including attendance and voting. We also use it to analyze UCB’s shareholding and investor database. In addition, we collect your data to pay dividends and other distributions to shareholders or holders of UCB securities, and to communicate with them.

We rely on our legitimate interest.

For how long?

We keep your data for as long as necessary, following the laws that apply.

From what sources?

Directly from You: when you give us your Personal data.

  • How long do we keep your Personal Data?
    vector

    We keep your Personal Data only for as long as needed, following our data retention policies.

    How long we keep it depends on:


    • Legal requirements
    • Industry standards
    • Other factors, like proving a transaction or contract, or enforcing our policies

    When we no longer need your data for the original reason we collected it, we either delete it or make it anonymous. However, we won't delete your Personal Data if we still need to process it for a few specific reasons. For example: Protecting freedom of expression or comply with the law.

    You still have the possibility to exercise your rights, as explained in Your rights and how to exercise them section.

    For more details on how long we keep your Personal Data, 
please click on your profile at the top of this page.

    mask group
  • With whom do we share your Personal Data?

     

    We share your data only when necessary and always follow the law. Before working with a vendor, we make sure that they meet our security and privacy standards. We also put safeguards in place to keep your information protected.

  • Your rights and how to exercise them
    You have control over Your Personal Data. We can use it as explained in this Notice, but you are still in control and have the rights mentioned below:
     
    I want to exercise my rights
    Good to know:
    We won’t delete your Personal Data if we still need to process it for the following reasons:
    • To protect freedom of expression and information
    • To comply with European or national laws
    • For public health interests, as explained in the articles 9(2)(h) and (i), and 9(3) of the GDPR
    • For archiving, research, or statistical purposes in the public interest
    • To establish, exercise, or defend legal claims

    Under certain conditions, you may have other rights over your Personal Data:

    If...
    1. You believe the information we have about you is incorrect, and we need time to verify if it is accurate
    2. The processing is unlawful, but you prefer to restrict its use rather than have it deleted
    3. We no longer need your data, but you need it to establish, exercise, or defend legal claims
    4. You have objected to our use of your data, and we need time to determine if our reasons outweigh yours

    …then you have the right to limit how we use your Personal Data.

    If...
    1. The situation you are in justifies it, and
    2. Our processing is based on our legitimate interests

    …then you have the right to object to the processing of your Personal Data.

    We will stop using your data unless we can prove strong reasons to continue or need the data for legal claims.

    You also have the right to object to your data being used for direct marketing, including profiling.

    If...
    1. You gave us permission to use your data or we need it to fulfill a contract with you, and
    2. We process your data using automated systems

    …then you have the right to data portability.

    This means you have the right to get a copy of your Personal Data in a simple, digital format and send it to another organization

    If doing what you ask for gets in the way of another person’s rights we won't be able to do it.

    If...
    1. We process your Personal Data based on your consent

    …then you have the right to withdraw your consent.

    You can withdraw it at any time. However, this won’t affect any processing we did before you withdrew your consent.

    If...
    1. You believe that we are not handling your Personal Data correctly

    …then you have the right to file a complaint with a regulator or supervisory authority.

    This could be in the country where you live, work, or where the problem happened.

    email icon

    Visit the authority’s website for details on 
    how to submit a complaint.

We may update this Notice if our data practices change because of new laws,
regulations, technology, or business needs. This version was last updated on November 24, 2025.

If you have a question about privacy and how we handle your Personal Data, like how we collect, store and use your Personal Data, you can contact our data protection officer (DPO):
UCB Biopharma SRL 
To the attention of the Data Protection Officer Allée de la Recherche 60
BE - 1070 Brussels