Privacy Policy

The data controller is CuraVac Europe S.A., Avenue de Villefranche 80, 1330 Rixensart, Belgium — company number BE 0479.403.989. CuraVac has not appointed a data protection officer: for any question about your data, write to us at info@curavac.com.

We process your data on the basis of your consent (newsletter, guestbook, non-essential cookies), our legitimate interest (site security, replying to your messages) and, for donations, the performance of the transaction and our legal accounting obligations.

Your data is never sold. It may be processed by providers acting on our behalf: our hosting provider, our emailing tool (Brevo) for the newsletter, our payment provider (PayPal) for donations, and Google Ireland Ltd for audience measurement (Google Analytics 4), only if you have consented to it. In addition, some display resources are loaded from third-party servers when each page opens: the fonts (Google Fonts) and the icons (unpkg content delivery network). These services do not set cookies but do receive your IP address. These providers only use your data to deliver their service.

Some providers may process data outside the European Union. This is notably the case for Google (Google Analytics, Google Fonts), whose parent company is established in the United States, as well as the unpkg content delivery network that serves the site's icons. In that case, such transfers are governed by appropriate safeguards (the European Commission's standard contractual clauses or an adequacy decision). Audience measurement is only activated with your consent, which you can withdraw at any time.

We keep your data only for as long as necessary: contact messages for the duration of handling your request, your newsletter subscription until you unsubscribe, donation-related data for the period required by our legal accounting obligations, audience-measurement cookies for a maximum of 13 months, messages published in the guest book for as long as they remain online (you may request their removal at any time), and server connection logs for 12 months.

You have the right to access, rectify, erase, restrict and port your data, as well as the right to object and to withdraw your consent at any time. Your data is not subject to any automated decision-making or profiling. To exercise these rights, contact us at info@curavac.com. You may also lodge a complaint with the Belgian Data Protection Authority (Rue de la Press 35, 1000 Brussels — autoriteprotectiondonnees.be).

This site uses cookies that are strictly necessary for it to work. The only one an ordinary visitor receives is cc_cookie, set when you answer the banner: it remembers your choice for 6 months and contains the categories you accepted, the date of your choice, the language, the version of the texts and a random identifier that serves as proof of consent. It never leaves your browser. A session cookie is added only for people who log in to the administration area. The site also uses, with your consent only, Google Analytics 4 audience-measurement cookies (_ga and _ga_* cookies, kept for 13 months, IP address anonymised): none is set until you have accepted. You can change or withdraw your choice at any time via the “Manage cookies” link in the footer. Any embedded content (videos) may set its own cookies when you activate it.

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access or disclosure (encrypted HTTPS connection, restricted access, backups).

This policy may be updated; the date at the top indicates the latest version. For any question about this policy or your personal data, write to us at info@curavac.com.