Beams (“Beams”, “we”, “our”) is committed to protecting the privacy and personal data of users (“you”) of its website (the “Website”).

This Privacy Policy explains how we collect, use, store, and protect personal data when you access or use the Website, in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

The data controller responsible for processing personal data is:

Beams

• Legal entity: SAS, société par actions simplifiée

• Registered office: RCS Paris

• Email (data protection contact): contact@beams.bio

2. Personal Data We Collect

We collect only personal data that is necessary for the purposes described below.

2.1 Data provided directly by users

When you use the contact form or communicate with us, we may collect:

• First name and last name
• Email address
• Organization / company (if provided)
• Message content and any information you choose to share

2.2 Data collected automatically

When you browse the Website, certain technical data may be collected automatically:

• IP address (in anonymized or truncated form where applicable)
• Browser type and version
• Operating system
• Date and time of access
• Pages visited

This data is collected through cookies or similar technologies (see Section 8).

3. Purposes of Processing

We process personal data solely for the following purposes:

• Responding to contact requests and inquiries
• Managing communications with users
• Ensuring the security and proper functioning of the Website
• Improving Website performance and user experience
• Complying with legal and regulatory obligations

Personal data is never used for automated decision-making or profiling.

4. Legal Bases for Processing

Personal data is processed on the following legal grounds:

• Consent: when you submit a contact form or accept cookies
• Legitimate interest: to ensure Website security and proper operation
• Legal obligation: where processing is required by applicable law

Where processing is based on consent, you may withdraw your consent at any time.

5. Data Recipients

Personal data is accessible only to:

• Authorized Beams personnel
• Technical service providers involved in Website hosting, maintenance, or security, acting as data processors under contractual obligations

Beams does not sell, rent, or trade personal data to third parties.

6. International Data Transfers

Personal data may be processed by service providers located outside the European Union.

Where such transfers occur, Beams ensures appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission, or
• Other legally recognized transfer mechanisms

7. Data Retention Periods

Personal data is retained only for the duration necessary to fulfill the purposes described above:

• Contact form data: retained for up to 2 years after last contact
• Technical and log data: retained for a limited duration consistent with security and legal requirements

Data may be retained longer where required by law.

8. Cookies and Tracking Technologies

The Website uses cookies and similar technologies.

8.1 Types of cookies

• Strictly necessary cookies: required for Website operation and security
• Optional cookies: used for analytics or performance measurement, subject to consent

8.2 Cookie consent

Where required by law, optional cookies are used only after you have given explicit consent via the cookie consent interface.

You may modify or withdraw your consent at any time via [COOKIE MANAGEMENT LINK].

Detailed information is available in the Cookie Policy.

9. Newsletter

If you subscribe to our newsletter:

• Your email address is collected solely for sending the newsletter
• Subscription is based on explicit consent (opt-in)
• You may unsubscribe at any time via the link included in each email

Newsletter data is not shared with third parties for marketing purposes.

10. Data Security

Beams implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

However, no system can guarantee absolute security, and users acknowledge the inherent risks associated with internet use.

11. Your Rights

Under applicable data protection laws, you have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time

You may exercise these rights by contacting: contact@beams.bio

You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence.

12. Children’s Data

The Website is not intended for children under the age of 15.
Beams does not knowingly collect personal data from minors.

13. Changes to This Privacy Policy

Beams reserves the right to update this Privacy Policy at any time to reflect legal, technical, or operational changes.

The updated version will be published on the Website with the revised date.

14. Contact

For any questions regarding this Privacy Policy or the processing of personal data, please contact:

Beams
Email: contact@beams.bio

‍