Contact us

Global Privacy Policy

1. About the Privacy Policy

This Privacy Policy, established by WinQure Medicine ApS (hereinafter referred to as “WinQure Medicine”, “we”, or “us”), includes information on how we process your personal data and your data protection rights.

We process your personal data in accordance with the EU General Data Protection Regulation (“GDPR”) and other applicable data protection legislation. This Privacy Policy governs our processing of personal data in respect of visitors to our website winqure.com, and in connection with data subjects’ contact with us. We are committed to complying with applicable data protection legislation for all processing activities conducted by us as a controller and will treat your personal data with the greatest of care.

In this privacy policy, we use several terms from the GDPR, for example “processing”, “controller” and “data processor”. The terms have the same meaning here as in the GDPR.

2. Who is responsible for processing your personal data

We are the controller of the personal data processed for the purposes described in this Privacy Policy. This means that we are responsible for ensuring that the processing is compliant with applicable data protection legislation.

Our contact information is:

3. What personal data do we process and for which purposes?

In any instance where we store and/or process your data, we must have a legal basis for doing so. Which personal data we collect, the purpose, and the legal basis for such processing depend on our relationship with you and your contact with us. Below is an overview of the personal data we process.

3.1 We process personal data to respond to you

When you contact us, we will process personal data about you. The personal data we collect may include contact information such as your name, email address, telephone number, and any other information you provide to us, which is necessary for us in order to respond to you.

We store this information so that we can provide you with the best service possible. We draw your attention to the fact that enquiries that you send via e-mail are not encrypted. For this reason, we ask you to refrain from sending us confidential, sensitive, or other restricted information by e-mail.

Our legal basis for this processing is our legitimate interest. The legitimate interest is our need to be able to respond to you.

3.2 We process data via the WinQure Medicine website

We use cookies on our website, and these cookies will process personal data about you. Cookies are small text files that are placed on your computer when you visit our website. For example, we collect geolocation data and IP addresses via cookies for the purpose of compiling and analysing statistics for website improvement. For all cookies that are not strictly necessary for the function of our website, we will ask for your consent before these are placed. You may withdraw your consent at any time by updating your cookie preferences in our Cookie Policy.

For more information about cookies, what cookies we use, for what purposes and our legal basis for this processing, please refer to our Cookie Policy.

3.3 We process personal data in connection with our scientific and clinical activities

In connection with our development of personalised ASO therapies and our work for patients, we may process special categories of personal data, such as health data and genetic data.

Where this processing applies to you, more detailed information, such as our legal basis and the retention time for the processing, will be provided at the point of engagement.

3.4 We process personal data to fulfil agreements

We process personal data such as contact information, name, telephone number, address, email address, CVs of contractors and declarations of conflicts of interest etc., from our vendors and contract partners to the extent necessary to fulfil agreements with such parties.

Depending on the nature of the agreement, we might also process other personal data required to fulfil the agreement’s purpose. The agreement will specify the purpose and outline the personal data that will be collected and stored in relation to it.

Depending on whether you are a party to the agreement, our legal basis for processing is either the contract entered into with you or our legitimate interest in fulfilling our agreements with the contracting party.

3.5 We process data with the purpose of hiring personnel

We process personal data about applicants, such as CVs, names, education, experience, telephone numbers and email addresses. The legal basis for this processing is our legitimate interest in hiring new personnel. These personal data are necessary to process in order to evaluate which applicants are suitable for the specific position.

3.6 When you participate in our events

If you sign up for any of our events, we may register personal data such as your name, contact information and, if you so desire, preferences related to practical arrangements and dietary requirements.

The legal basis for processing this information is your consent, which we will request at the point of registration.

The information will be deleted after the event is completed unless we have some other legal basis for retaining the information longer.

3.7 When you register to receive newsletters

When you register to receive newsletters, we will register your email address so that we can send you the information you wish to subscribe for.

The purpose of this process is so that we can send you the newsletters, or other information you have requested/signed up to receive. The basis for this processing is the consent you give when you sign up to receive the newsletters.

You can revoke your consent at any time by following the procedure described at the bottom of all our newsletters. When you revoke your consent, we will remove you from the list of recipients.

3.8 We process data from customers, suppliers, partner companies and other business partners

We process personal data for customer management purposes, such as contact information for persons acting on behalf of our partner companies, vendors and service providers. This will typically include names, email addresses, roles and relevant events to which they may be invited.

The legal basis for this processing is our legitimate interest in providing the best possible service, keeping our partners updated and furthering our scientific and clinical mission. We will only process this data where the individual’s interests or fundamental rights and freedoms do not override our legitimate business interests.

4. What is the source for the personal data we process?

When you visit our website, contact us and provide us with information, the personal data we process is collected directly from you. Contact information on our partner companies, public authorities, organizations, vendors, and service providers may also be collected from public websites where this information has been published or from your employer.

In some cases, personal data may be provided to us by third parties, such as relevant health personnel or other professional collaborators, where this is necessary for the purposes described in this Privacy Policy or in other information forms and policies provided to you in connection with our scientific and clinical activities.

5. What are your rights when we process your personal data?

If you have consented to the processing, you can change your mind at any point and withdraw your consent. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Furthermore, you have a right to:

To exercise your rights, please contact us at [email protected]. You can find out more about your rights on the website of the Danish Data Protection Authority (www.datatilsynet.dk).

WinQure Medicine does not conduct automated decision-making, including profiling.

6. How long will your personal data be stored?

6.1 Visitors on the webpage and submitted requests

For data submitted via contact forms, email or other means of communication, the data will be retained for the period needed in order to follow up on your request and, if applicable, for further communication related to your request.

For data collected through cookies, please see our cookie policy available here: Cookie Policy.

You may at any given time ask us to delete your information by sending an e-mail to [email protected]. We are obliged to respond to your request to exercise your rights as quickly as possible, and no later than one (1) calendar month after receiving your inquiry.

6.2 Customers, suppliers and vendors

For customers, suppliers and vendors, we retain the contact person’s personal data for as long as it is necessary to meet the purpose for which the data were first acquired. For example, we may store your personal data to fulfil our legitimate business purposes, to fulfil our contractual obligations or if required by law or regulation.

If you want us to delete information about you, we will of course comply, provided that we are not obliged to continue to store said information, e.g. in order to adhere to local accounting or bookkeeping requirements. This means that we may retain certain personal data for a longer period after your relationship with us has ended.

Any personal data collected with consent as legal basis, will be deleted if you withdraw your consent, unless statutory retention obligations apply. We will delete your personal data at the latest when there are no longer any legal or regulatory requirements or legitimate business purposes that require us to retain them.

6.3 Clinical and scientific data

Personal data processed in connection with our scientific and clinical activities, including special categories of personal data, will be retained for as long as is necessary for the purposes for which it was collected.

The retention period might also be determined by the retention periods required by applicable law, including requirements imposed by relevant regulatory authorities. We will inform you of what retention period applies to your data at the point of engagement.

Where processing is based on your consent, data will be deleted upon withdrawal of consent, unless a statutory retention obligation requires us to retain it for a longer period. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

7. Do we share your data with anyone, or transfer your data to other countries outside the EU/EEA?

7.1 Data processors

Your personal data will be available to those of our suppliers who process personal data on our behalf. To safeguard your rights, we have entered into data processing agreements with these suppliers which, amongst other things, ensure that your personal data cannot be used for any other purpose. Our suppliers have a corresponding duty to enter into data processing agreements with their sub-processors that impose the same obligations as those imposed on our suppliers. Some of our suppliers are located in countries outside the EU/EEA. To ensure your privacy, such transfers will take place in accordance with Chapter V of the GDPR. For all transfers to countries or third parties outside the EU/EEA not subject to an adequacy decision by the EU Commission, we will enter into the EU Commission’s Standard Contractual Clauses and conduct all required assessments. The EU Standard Contractual Clauses are available on the EU Commission’s website.

7.2 Other third parties

We do not pass on your personal data to others unless there is a lawful basis for such disclosure of data. Examples of such a basis will typically be your consent or a legal basis that gives us the right to, or obligates us, to disclose the information.

Where sharing is necessary, it occurs only in limited and controlled circumstances, including:

Pseudonymised data will be submitted to regulatory authorities when required by law and may feature in scientific publications or presentations in accordance with accepted research practice.

Disclosure of personal data may entail that your personal data is transferred to third parties located in countries outside the EU/EEA. To ensure your privacy, such transfers will take place in accordance with the applicable data protection legislation, as further outlined above.

8. Security

We are committed to the security of personal data. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access. These measures are regularly reviewed and updated.

Access to personal data, in particular special categories of personal data, is strictly limited to authorised personnel who require access for the purposes described in this Privacy Policy.

9. What should you do if we do not respond to your requests, or if you want to file a complaint about our processing and handling of your rights?

If you believe that our processing of your personal data fails to comply with the policy set out here, or that we have in any other way contravened privacy legislation, you may submit a complaint to the applicable data protection authority.

Information on how to submit a complaint to the Danish Data Protection Agency, can be found here: https://www.datatilsynet.dk/borger/klage/saadan-klager-du

10. How we respond to Do Not Track signals & Global Privacy Control

Our website does not respond to and does not support the Do Not Track (DNT) header request field.

11. Children

Our website is not designed to attract children and it is not our intent to collect personal data from children under the age of consent in their country of residence. We therefore request that children under the age of consent do not submit any personal data to us.

Last updated: June, 2026