PRIVACY POLICY 
 

LAST  UPDATED:  January 1, 2026 

1.  About this Policy: Lancea PBC (“Lancea,” “we,” “us,” or “our”) processes personal information as part of conducting our business and delivering our products and services. When a Lancea entity determines the purposes and means of processing personal information and therefore acts as a data controller under applicable law, this Privacy Policy explains how we collect, use, and protect that information. It also outlines the privacy rights available to individuals and the methods for exercising those rights. 

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational needs. When we make changes, we will revise the “Last Updated” date at the top of this Policy and, where required by law, provide additional notice of material changes.

2.  Scope of this Policy:  This Policy describes how we collect, use, disclose, and protect personal information in connection with the Site, our SaaS Platform, and our related strategic communications Services. Depending on where you live or work, additional country, or region, specific information may apply. Where relevant, such jurisdiction-specific notices or addenda will supplement (and, where required, modify) this Policy in order to reflect local legal requirements. 

This Policy does not govern personal information we process solely on behalf of our customers. When we provide our SaaS platform and related Services to customers, we typically do so as a processor, “service provider,” or similar role under applicable law. In these situations, our customers, and not Lancea, decide which personal information is processed in the Services, for what purposes, and on what legal basis. Likewise, we process that information only in accordance with our customers’ instructions and our agreements with them, and in line with applicable law.

As a result, this Policy does not apply to our customers’ own use or input of personal information within the Lancea platform or other Lancea Services. If you want to understand how one of our customers uses personal information with the assistance of Lancea, or if you wish to exercise your rights in relation to information that a customer processes through the Services, you should refer to that customer’s own privacy notice.

In the course of using the Site or interacting with our communications, you may also encounter links or integrations that take you to websites, platforms, or services that are not operated or controlled by Lancea. Except where we expressly state otherwise, we are not responsible for the privacy practices, policies, or content of our customers or any third-party sites or services or their collection, use, or disclosure of personal information. If you wish to understand how those third parties process your personal information, we encourage you to review their privacy policies.

3.  Types of Information Lancea Collects:  Lancea collects personal information from a variety of sources: 

  • Personal information you provide to us;

  • Personal information we collect automatically (for example, Cookies and other Technical Data); and

  • Personal information we receive from other sources (for example, Service Providers or Partners).

Depending on how you interact with Lancea, we may collect and process the following categories of personal information:

  • Contact Data Information: Information that identifies or enables us to reach you, such as your full name, business or mailing address, email address, telephone number, mobile number, country or region, and public social media identifiers. We obtain this information when you provide it to us, when it is shared by your employer or business contacts, from public sources, and from partners.

  • Professional Data: Information about your professional background and business relationship with Lancea, including your employer or organization, job title or role, business contact details, work history, areas of specialization, and your interactions with our products and services. This information may come from you directly, from your organization, from publicly available business sources, or from commercial partners involved in shared marketing or events.

  • Transaction Data: Information or records relating to your transactions and engagement with Lancea, including the products or services you have purchased or considered, licensing details, and other information provided during a purchase or onboarding process, such as whether your organization maintains an active relationship with us.

  • Payment and Billing Data: Information necessary to process payments and manage billing, such as invoicing details and payment method information, or identify verification. We collect this information when you subscribe to, purchase, or renew Lancea products or services.

  • Technical Data: Information automatically generated when you access or use Lancea websites, platforms, or digital content, including IP address, operating system, browser type, user agent string, cookie identifiers (as described in our Cookies Statement), mobile device identifiers, network information such as Wi-Fi data, login and authentication data, and records of how you interact with our sites, emails, and online materials.

  • Communication Data: Content of communications you exchange with us, including emails, messages, form submissions, feedback, and other records created when you contact Lancea through our websites, social media channels, events, or customer support functions.

  • Audiovisual Data: Image, voice – including photographs, images and audio and video recordings – collected through security and monitoring systems or recorded during events, for example, when you participate in a Lancea or Lancea-affiliated event, visit a Lancea office or present at a seminar hosted by Lancea.

  • Inferred Data: Preferences, likelihood of interest in Lancea products and/or services. Data generated by combining data  collected by Lancea with information obtained from third parties, including partners and publicly available sources, which assist with the sale of products or services, compliance with laws, and that detect, prevent and otherwise address fraudulent, deceptive, or illegal activity.

  • Contact Preference: Consents or preferences that you give us, such as how you would like us to contact you or what Lancea products or services interest you.


NOTE: Sensitive Personal Information. Certain categories listed above may constitute “sensitive personal information” under the CCPA/CPRA. Lancea does not use or disclose sensitive personal information for purposes that trigger the Right to Limit under Cal. Civ. Code § 1798.121, and processes such information only for business purposes permitted under the CPRA

4. Basis for Processing:  Lancea relies on the following legal bases to process personal data:

  • Performance of a contract. We process personal data as necessary to enter into and perform our contracts with you or the organization you represent, including to provide and administer our SaaS Platform and related services, process payments, and communicate with you about your account or the services.

  • Compliance with legal obligations. We process personal data as necessary to comply with laws and regulations to which we are subject, such as tax, accounting, and regulatory reporting obligations, and to respond to lawful requests from public authorities.

  • Legitimate interests. We process personal data as necessary for our legitimate interests, which include: operating, securing, and improving our Site and services; detecting and preventing fraud and misuse; managing business relationships; and sending certain B2B marketing communications where permitted by law. We balance these interests against your rights and freedoms and implement appropriate safeguards.

  • Consent. We process personal data based on your consent where required by law, for example: to send you certain electronic marketing communications; and to use non-essential cookies and similar tracking technologies for analytics and advertising purposes. You may withdraw your consent at any time, as described in this Policy, without affecting the lawfulness of processing based on consent before its withdrawal.

5. How Lancea Uses the Data We Collect. The following explains why Lancea may use the personal data we collect:

A.  To Provide You With Products and Services and to Conduct Normal Business Operations:

  • We use personal information to establish and manage our relationship with you, including responding to inquiries, providing customer support, confirming your identity where appropriate, granting access to our platforms, and administering accounts, subscriptions, training, certifications, and related services.

  • Personal information is used to process orders, issue invoices, receive payments, and maintain accurate financial records in connection with the products and services you request.

  • We analyze how our websites, platforms, and communications are used in order to understand performance, troubleshoot issues, and enhance functionality, usability, and content. This helps us improve our digital services and the way we communicate with users.

  • We use personal information to maintain contact with you, including providing service-related notices, responding to questions, and communicating about products, services, events, and other business matters relevant to our relationship.

  • Personal information may be used to monitor for, investigate, and prevent unauthorized access, fraud, misuse of our services, and other activities that could compromise the integrity of our systems or harm Lancea or others.

  • We process personal information as necessary to comply with applicable laws and regulations, respond to lawful requests from courts or authorities, enforce our agreements and policies, and establish, exercise, or defend legal claims.

  • Where necessary, we process information to protect the rights, property, safety, and security of Lancea, our workforce, our customers, and the public.

  • We use information to evaluate and improve our products and services, develop new offerings, and assess business performance.

  • We may transform personal information into aggregated or de-identified form for analytics, reporting, and research purposes, where it can no longer reasonably be used to identify an individual.

B. To Comply With Legal Obligations And Maintain The Security Of Lancea’s Products And Services:

  • To comply with legal obligations: Where necessary, we use your personal data, including Contact Data, Technical Data, Communication Data and identity verification information, where necessary, to comply with legal obligations such as tax reporting, regulatory requirements or fulfilling your rights request.

  • To help you exercise your rights and control over your personal data: Where you contact us to exercise your rights as a data subject or to opt-out from certain forms of communication, we may need to further process your personal data such as Contact Data, Communication Data and any applicable personal data together with any identity verification information you may provide, to comply with your request (for example, if you request a copy of your personal data and you provide your ID to confirm your identity).

  • To protect our business, our affiliates, and others: We process your personal data which can include Contact Data, Professional Data, Payment Data, Transaction Data, Technical Data, Audiovisual and Communication Data to monitor for, or detect, fraudulent, harmful or illegal activity.

C. To Enable Marketing Functions Related To Lancea Products And Services:

  • We use personal information to send information about Lancea offerings, updates, events, and services that you have expressed interest in or that are relevant to your professional role and prior interactions with us.

  • We analyze information about how individuals interact with Lancea in order to tailor our communications, so that messages, content, and invitations are more relevant to professional interests and business needs.

  • We review engagement with our emails, websites, and digital content to understand which communications are effective and how our outreach strategies can be improved.

  • Where permitted by law, we use information about professional interests and online interactions to present advertising and promotional messages that may be more relevant to you. This may include working with third-party advertising and social networking platforms to display Lancea-related content.

6. When and Why Lancea May Disclose the Data We Collect. Lancea discloses personal information only where such disclosure is reasonably necessary to operate its business, provide its products and services, comply with legal obligations, or protect legitimate interests. Categories of recipients include the following:

A. Affiliates. Personal information may be shared within the Lancea corporate group, including with parent companies, subsidiaries, and affiliated entities, for purposes of internal administration, compliance, security, and service operations. All such entities are required to process personal information in accordance with applicable data protection and consumer privacy laws.

B. Vendors and Service Providers. Lancea engages third-party vendors and professional service providers to perform business functions on its behalf, including hosting and infrastructure services, analytics, marketing and sales support, customer communications, and payment processing. These providers receive personal information only as necessary to perform services for Lancea and are contractually obligated to maintain confidentiality and implement appropriate safeguards.

C. Commercial Partners and Corporate Transactions. Personal information may be disclosed in connection with legitimate business activities, including: identity verification and fraud prevention, payment processing and financial operations, joint marketing initiatives, co-branded offerings, and partner-hosted events, and corporate transactions such as mergers, acquisitions, restructurings, financings, or sales of assets, where personal information may be transferred as part of the transaction, subject to applicable legal requirements and appropriate protections.

D. Legal and Protective Purposes. Personal information may be disclosed where necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce Lancea’s agreements and policies; or to protect the rights, property, safety, and security of Lancea, its personnel, users, and others.

E. When You Instruct Us To Disclose It. Lancea may disclose personal information to third parties when you request or authorize such disclosure. In certain circumstances, you may interact directly with third parties, such as payment processors, who independently collect and process information in accordance with their own privacy policies.

F. Advertising and Analytics Partners. Where permitted by law, Lancea may share limited information, such as device and interaction data, with advertising and analytics partners to measure campaign performance and present Lancea-related content that may be relevant to professional interests. Under certain U.S. state privacy laws, this activity may constitute “sharing” or “targeted advertising.” Individuals may opt out through the preference mechanisms described in this Policy.

7. How Long Lancea Keeps Your Data: We collect and keep personal data only as needed or allowed for the purposes set out in this Statement, based on the reason we collected the personal data in the first instance and what is permitted under the laws that apply to the processing. We keep the personal data we collect in line with our internal data retention policies for as long as you use our services or as long as is necessary to: 

  • Fulfil the purpose(s) for which we collected the personal data; 

  • Provide and secure our products and services; 

  • Resolve disputes, establish legal defenses, enforce our agreements and comply with applicable laws; 

  • Conduct both internal and external audits and comply with our internal policy requirements.

8. International Transfers. Lancea is a U.S.-incorporated company; however, our platform and primary data hosting environment are located in the European Union (EU). This means that, to the extent feasible and consistent with our operational needs, personal data processed through the Lancea Platform is stored and processed in the EU. Certain personal information may be accessed from, transferred to, or otherwise processed in countries outside the European Union or the European Economic Area (“EEA”), including the United States. These jurisdictions may not provide the same level of data protection as your home country. When personal information is transferred outside the EU/EEA, Lancea implements appropriate safeguards to ensure that such transfers comply with applicable data-protection laws, including (as applicable):

  • Standard Contractual Clauses (SCCs) approved by the European Commission;

  • UK Addendum or UK International Data Transfer Agreement (IDTA) for transfers originating from the United Kingdom;

  • Transfer Impact Assessments (TIAs) and additional contractual, technical, and organizational measures (for example, encryption, access controls, data minimization);

  • Adequacy decisions, where the destination country has been recognized by the European Commission as providing an adequate level of protection

Where personnel or service providers located outside the EU require access to personal data hosted in the EU, such access is treated as a restricted transfer under applicable law. Lancea ensures that:

  • Access is limited to what is strictly necessary for support, security, troubleshooting, or operational needs;

  • Personnel are bound by confidentiality obligations and least-privilege access controls;

  • Any third-party service provider outside the EU is bound by a data processing agreement incorporating legally recognized transfer mechanisms.

You may contact us at any time to request: Information about the safeguards we rely upon; a copy of the applicable SCCs or other transfer mechanism (subject to redactions for security or confidentiality); or clarification about where your data is stored and who has access to it.

9. Children’s Data. Our website and SaaS Platform are not intended for children under 16 years of age. If you become aware that your child has provided us with personal data without your consent, please contact us at privacy@lancea.ai and we will work to delete it. We do not knowingly collect personal information (including as defined by the U.S. Children’s Privacy Protection Act, or “COPPA”) from children under 16.

10. Your Rights And Exercising Them. Individuals may have certain rights in relation to the personal data that Lancea processes, depending on the laws of the jurisdiction in which they reside or work. These rights are not absolute; in some circumstances they may be subject to statutory limitations or may need to be balanced against other legal obligations or the rights and freedoms of other individuals. The subsections below summarize the rights available to individuals in the United States and in the European Union, European Economic Area, the United Kingdom, and Switzerland.

A. Your Rights  - U.S. Residents Certain U.S. state privacy laws grant residents specific rights in relation to their personal data (often referred to as “personal information” under those laws). These include, without limitation, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA/CPRA”), as well as other comprehensive state privacy statutes such as the Colorado Privacy Act (“CPA”), Virginia Consumer Data Protection Act (“VCDPA”), Connecticut Data Privacy Act (“CTDPA”), Utah Consumer Privacy Act (“UCPA”), the Indiana Consumer Data Protection Act (“ICDPA”); the Kentucky Consumer Data Protection Act (“KCDPA”); and the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”) and similar laws in other U.S. states (collectively, the “U.S. State Privacy Laws”). The scope and availability of the rights described below may vary depending on the U.S. State Privacy Laws that apply in your state of residence. Lancea will honor such rights to the extent required under the laws of the resident’s jurisdiction. 

For the avoidance of doubt, Lancea does not sell personal data to third parties for monetary consideration. However, we may disclose certain personal data (such as pseudonymous identifiers, device data, and interaction data) to advertising partners to provide you with more relevant ads and to measure the effectiveness of our campaigns. Under some U.S. State Privacy Laws, this may be considered “sharing” or “targeted advertising.” Where required by applicable U.S. State Privacy Laws, Lancea will honor universal opt-out signals (also referred to as “universal opt-out mechanisms” or “opt-out preference signals”) as a method of opting out of targeted advertising and other covered processing.

Certain categories of information may be considered “sensitive” under U.S. State Privacy Laws (and definitions vary by state). Where required, Lancea will obtain consent before processing sensitive personal information and will provide a mechanism to withdraw consent. For California residents, Lancea does not use or disclose sensitive personal information for purposes that trigger a right to limit under the CPRA and processes such information only for purposes permitted by law

Subject to the requirements of the applicable U.S. State Privacy Laws and any necessary verification of identity, U.S. residents may have some or all of the following rights:

  • Right to Know / Access. You may have the right to request confirmation as to whether Lancea processes personal data about you and, where applicable, to request disclosure of: the categories of personal data collected; the categories of sources from which such personal data was obtained; the business or commercial purposes for which it is processed; the categories of third parties to whom it is disclosed; and, where required, the specific pieces of personal data we hold about you.

  • Right to Correction. You may have the right to request that Lancea correct inaccurate personal data we maintain about you, taking into account the nature of the personal data and the purposes for which it is processed.

  • Right to Deletion. Subject to statutory exceptions under the CCPA/CPRA and other U.S. State Privacy Laws (for example, where retention is required for security, compliance, or contractual purposes), you may have the right to request deletion of personal data that Lancea has collected from you.

  • Right to Data Portability. You may have the right to obtain a copy of certain personal data in a portable and, to the extent technically feasible, readily usable format that enables you to transmit the data to another entity without hindrance.

  • Rights to Opt Out of Certain Processing Activities. Depending on your state of residence and subject to the definitions and scope in the relevant statute, you may have the right to opt out of: the processing of personal data for targeted advertising; any sale or sharing of personal data, as those terms are defined under applicable U.S. State Privacy Laws; and certain forms of profiling or automated decision-making, including profiling that produces legal or similarly significant effects.

  • Right to Withdraw Consent. To the extent that any processing of your personal data by Lancea is based on your consent (including, where applicable, the processing of sensitive personal information), you may have the right to withdraw that consent at any time. Withdrawal will apply on a going-forward basis and does not affect the lawfulness of processing conducted prior to the withdrawal

  • Right to Appeal. Under certain U.S. State Privacy Laws (including, for example, the Colorado Privacy Act (“CPA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Connecticut Data Privacy Act (“CTDPA”), the Indiana Consumer Data Protection Act (“ICDPA”), and the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”)), if Lancea denies your rights request, you may have the right to appeal that decision. Where required by applicable law, Lancea will provide information about the appeal process and applicable timelines.

  • Right to Non-Discrimination. Lancea will not subject you to unlawful discriminatory treatment for exercising any privacy right granted to you under applicable law.

B. Your Rights  - EU Residents.  Residents of the European Union (“EU”), European Economic Area (“EEA”), the United Kingdom (“UK”), and Switzerland are entitled to certain rights under the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), and the Swiss Federal Act on Data Protection (“FADP”), respectively. These rights apply where Lancea acts as a “controller” of personal data within the meaning of the applicable legislation. Subject to the conditions and limitations set out in the GDPR, UK GDPR, and FADP, you may have the following rights:

  • Right of Access. You may have the right to request confirmation as to whether Lancea processes personal data relating to you and, where it does, to obtain access to that data along with information regarding, among other things, the purposes of processing, categories of data, recipients, and the applicable legal bases.

  • Right to Rectification. You may have the right to request correction of personal data that is inaccurate and completion of personal data that is incomplete.

  • Right to Erasure (“Right to Be Forgotten”). You may have the right to request deletion of your personal data where the statutory grounds for erasure are satisfied—for example, where the personal data is no longer necessary for the purposes for which it was collected, where you have withdrawn consent and there is no other legal basis for processing, or where the personal data has been unlawfully processed.

  • Right to Restrict Processing. You may, in certain circumstances, request that Lancea restrict the processing of your personal data. Where processing is restricted, Lancea may continue to store the data but, absent another lawful basis, may not otherwise process it except for the establishment, exercise, or defense of legal claims, for the protection of the rights of another person, for reasons of important public interest, or with your consent.

  • Right to Object. You may have the right to object, on grounds relating to your particular situation, to the processing of your personal data where such processing is based on Lancea’s legitimate interests. In such cases, Lancea will cease processing unless it demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims. You may also object at any time to the processing of personal data for direct marketing purposes, including profiling to the extent it is related to such direct marketing.

  • Right to Data Portability. You may have the right to receive certain personal data concerning you in a structured, commonly used, and machine-readable format and, where technically feasible, to have that data transmitted directly to another controller.

  • Right to Withdraw Consent. Where processing is based on your consent (e.g., Article 6(1)(a) or Article 9(2)(a) GDPR/UK GDPR), you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to such withdrawal.

  • Right to Lodge a Complaint. You have the right to lodge a complaint with the competent supervisory authority if you believe that Lancea’s processing of your personal data violates applicable data protection laws. A list of EU/EEA supervisory authorities is available from the European Data Protection Board; UK residents may contact the Information Commissioner’s Office (ICO); and Swiss residents may contact the Federal Data Protection and Information Commissioner (FDPIC).

11. How to Exercise Your Rights. Individuals seeking to exercise their rights under applicable data protection and consumer privacy laws—including, as relevant, the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), the UK General Data Protection Regulation (“UK GDPR”), the Swiss Federal Act on Data Protection (“FADP”), and the comprehensive U.S. state privacy laws (including California Privacy Rights Act (together, the “CCPA/CPRA”), as well as other comprehensive state privacy statutes such as the Colorado Privacy Act (“CPA”), Virginia Consumer Data Protection Act (“VCDPA”), Connecticut Data Privacy Act (“CTDPA”), Utah Consumer Privacy Act (“UCPA”), the Indiana Consumer Data Protection Act (“ICDPA”); the Kentucky Consumer Data Protection Act (“KCDPA”); and the Rhode Island Data Transparency and Privacy Protection Act (“RIDTPPA”) and similar laws), may do so in accordance with the procedures outlined below. Lancea will review and respond to such requests consistent with the timelines and obligations imposed by the laws applicable to the individual’s jurisdiction.

A. Exercising Your Rights – U.S. Residents. 

  • Submitting a Rights Request. U.S. residents may submit requests to exercise their rights under the CCPA/CPRA and other U.S. State Privacy Laws by contacting Lancea using one of the following methods:

    • Email: privacy@lancea.ai

    • Postal Mail:
      Lancea, PBC
      4753 Broadway, 2nd Floor, Chicago, IL 60640 
      United States

           Additional submission methods may be made available where required by applicable state law.

  • Verification of Identity (Required Under U.S. State Privacy Laws) To protect consumers and maintain compliance with the CCPA/CPRA and other U.S. State Privacy Laws, Lancea must verify your identity before responding to your request. Verification requirements vary by state statute but typically require matching information you provide with information already maintained by Lancea. If you authorize an agent to act on your behalf, Lancea may require: written authorization signed by you, proof of the agent’s identity, and direct confirmation from you authorizing the agent to submit the request. These requirements are consistent with the CCPA/CPRA and comparable identity-verification provisions under the CPA, VCDPA, CTDPA, and similar statutes.

  • Response Timelines. Lancea will respond to verifiable consumer requests within the timeframe required by applicable law. For example, for California Residents: Generally within 45 days, with a possible extension of an additional 45 days where reasonably necessary.

  • Grounds for Denial or Limitation (U.S.) Requests may be denied, in whole or in part, where permitted under state law. Examples include: where disclosure would reveal trade secrets or privileged information; where deletion would conflict with a legal obligation to retain data; or where the request concerns data processed by Lancea solely in its capacity as a service provider/processor on behalf of another business. Where denial is permitted, Lancea will provide the basis for its decision to the extent required by law.

  • Right to Appeal (Where Provided by State Law) Residents of states whose privacy laws include a formal appeal mechanism (such as, Colorado, Virginia, Connecticut, Indiana, Rhode Island, Delaware, New Jersey, Oregon, and Montana) may request that Lancea reconsider its decision. Lancea will review the appeal and provide a written response within the timeframe mandated by the applicable statute.

  • Universal opt-out signals. Where applicable, you may also exercise certain opt-out rights through a universal opt-out signal recognized by your browser or device settings (for example, where a state requires recognition of such signals for targeted advertising or related processing).

B. Exercising your Rights – EU/EEA, UK, and Swiss Residents. 

  • Submitting a Rights Request (EU/EEA, UK, Switzerland) Residents of the EU/EEA, the United Kingdom, or Switzerland may submit rights requests under the GDPR, UK GDPR, or FADP by contacting Lancea at:

  • Response Timelines (EU/EEA, UK, Switzerland). Unless otherwise inconsistent with applicable law, Lancea will respond within one month of receiving the request. This period may be extended by two additional months where the request is complex or numerous. Lancea will notify you if an extension is required.

  • Verification of Identity (EU/EEA, UK, Switzerland). Lancea may request additional information necessary to confirm your identity before responding, consistent with GDPR Art. 12(6), the UK GDPR, and the FADP.

  • Grounds for Denial or Limitation (EU/EEA, UK, Switzerland). Lancea may deny or limit a request where permitted by applicable law, including: where responding would adversely affect the rights and freedoms of others (GDPR Art. 15(4)); where processing is necessary for legal claims (GDPR Art. 17(3)(e)); where data must be retained for compliance with a legal obligation (GDPR Art. 17(3)(b)); or where processing is required for reasons of important public interest (GDPR Art. 17(3)(d)). Lancea will provide its justification where required.

  • Right to Lodge a Complaint. If you believe Lancea’s processing of your personal data infringes applicable law, you have the right to lodge a complaint with the competent supervisory authority:

    • EU/EEA: National supervisory authority. A list of supervisory authorities may be provided upon request.

    • United Kingdom: Information Commissioner’s Office (ICO) 

    • Switzerland: Federal Data Protection and Information Commissioner (FDPIC)