Last Updated: 31 October 2025

Thank you for visiting our website. This Privacy Notice pertains to the following website: https://www.eurofinscentrallaboratory.com. This Privacy Notice sets out the basis on which Eurofins website user’s personal data (“you”) provided through Eurofins web forms will be processed (defined below under controller information).

Privacy Notice

1. Data Controller Information

The entity in charge of the control of any information obtained through this web form (referred to hereinafter as the “Controller” or “Eurofins” or “ECL”) is:

Eurofins Central Laboratory

Address details:
Eurofins Central Laboratory, LLC
2430 New Holland Pike
Lancaster, PA 17601
USA

Eurofins Central Laboratory respects the privacy of all users of its websites and ensures that the personal information received or provided by you through our web forms is treated as confidential.

This Privacy Notice sets out the basis on which all personal data that Eurofins collects from you or that you provide to Eurofins will be processed by Eurofins. Please read the following carefully to understand our views and practices regarding your personal data and how Eurofins will treat it. If you have any questions regarding this Privacy Notice or if you want to lodge a request in relation to your personal information, please contact us through our website or you can reach our DPO at the following email address:

Attn. ECL Data Privacy Officer
DG_ECL_DPO@bcl.eurofins.com

Joint-Controllers
The companies of the Eurofins Central Laboratory network, Eurofins Pharma Bioanalytics Services LLC, and Eurofins Clinical Trial Supplies LLC collaborate under the marketing brand of Eurofins Clinical Trial Solutions and utilize a centralized Customer Relationship Management [CRM] database. These entities are committed to respecting the privacy of all users of their websites and ensure that any personal information submitted via web forms is handled with strict confidentiality and in accordance with applicable data protection regulations.

For the joint controllers’ privacy notice, please refer to the following links:

• Eurofins Pharma Bioanalytics Services LLC
• Eurofins Clinical Trial Supplies LLC

Eurofins Central Laboratory (covered entity listed in our EU-US DPF, Swiss-US DPF and UK Extension to the EU-US DPF Self-Certification) complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Eurofins Central Laboratory has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom in reliance on the UK Extension to the EU-U.S. DPF. Eurofins Central Laboratory has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Statement and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/

As a result, we are subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. Please see the “Your rights to personal data” section below for information about dispute resolution options under the DPF.

2. Types of information that Eurofins collects

Eurofins Central Laboratory (ECL) supports sample testing, analytical, sample logistics, and data management activities in support of clinical trials on behalf of Drug Development companies or their representatives, referred hereinafter as the “Sponsor”.

Some of our web pages contain web forms requiring you to provide personal information in support of clinical trials conducted by ECL on behalf of the “Sponsor”. Only the personal information requested in the web forms should be given. Such personal information is categorized into 2 types and usually consists of:

Type 1 information: Client-facing websites

Study-specific details, Patient-specific details*, and Sponsor details.

*This information is protected under the ‘Right to be forgotten’ rule.

Type 2 information: Eurofins Central Laboratory website

DG_ECL_DPO@bcl.eurofins.com
First name, last name, email address, phone number, company name [not mandatory].

3. Use of such information by Eurofins

Type 1 information:

The information collected using the web forms will be used purely for the purpose of clinical trials conducted by ECL on behalf of the “Sponsor” and is restricted to that of a professional nature. Further, you should not give your personal address, email, or phone number to ECL voluntarily.

Type 2 information:

We may use the information we collect through web forms for the following purposes:

Contacting you by any means to:

• Process, evaluate and respond to your requests (including service and quote requests, documentation requests), inquiries and applications.
• Giving you the possibility to attend webinars, seminars, and training.
• Provide customer support services.
• Evaluate your interest in employment (including current or future job positions) and contact you regarding employment.
• Establishing a business relationship with you.
• Ensuring customer satisfaction through sending customers surveys.
• Comply with laws and obligations we are subject to.
• Maintain our software or Client Portals (e.g. software updates and bug fixes).
• Gathering statistics on your responsiveness towards our marketing emails.
• Be able to make your rights described below exercisable.

We also may use personal information for additional purposes. We will identify these additional purposes at the time of collection, if any.

From time to time, we would like to contact you about our products and services, as well as other content that may be of interest to you by marketing emails. You can always unsubscribe from our marketing communications by clicking the ‘unsubscribe’ link in such an email or by sending an email to clinicaltrials@bcl.eurofins.com. We will process your unsubscribe request within 72 hours upon receipt.

4. Privacy Controls for Study Data

Type 1 information:

We recommend to not use a general web form to submit study specific details, but rather contact your Project Manager. ECL operates under the understanding that the “Sponsor” or their representative obtains all appropriate stakeholder consent for the use of their data, personal or otherwise, solely for its intended purpose in the conduct of scientific research. Further, ECL will only utilize data for the intended purposes it was collected for, and only where consent has been given.

5. Data Processing

Type 2 information:

In order to process your personal data, we rely on:

• Legitimate interests (excluding sensitive data), including:
  – Establishing and maintaining a business relationship with you.
  – Recruiting candidates for current or future vacancies within Eurofins companies.
  – Preventing fraud and ensuring the integrity of our operations.
• Legal obligations, Eurofins may process your personal data where processing such data is necessary to comply with a legal obligation to which we are subject.
  – Contract performance, including continuous improvement of the services provided under such contracts.
  – Necessity for the establishment, exercise, or defense of legal claims.
  – Consent, provided voluntarily by you when submitting personal data through our web forms.

6. Right to be Forgotten or withdrawal Rights

Type 1 information:

Request to withdraw consent must be provided directly to “Sponsor” and it is the responsibility of “Sponsor” to inform ECL of this request.

Only when it comes to ECL attention through “Sponsor” that consent has been withdrawn (ex: – due to “Right to be Forgotten’’) or never given, ECL will follow the internal procedures to remove records from the dataset as may be appropriate for the given situation. In such cases, ECL also takes the responsibility to ensure that the records are removed where applicable from its subcontractors.

Under the auspices of a Clinical Trial, many records are exempt from the “Right to Be Forgotten” due to their nature as they form part of a study record, and are required to be maintained by regulatory authorities.

ECL maintains strict data integrity policies and will follow appropriate procedures where necessary and in accordance with the relevant request received from the data controller.

Type 2 information:

Withdrawal of marketing consent

You can unsubscribe from our marketing communications by clicking the ‘unsubscribe’ link in such an email, or by sending an email to clinicaltrials@bcl.eurofins.com  We will process your unsubscribe request within 72 hours upon receipt.

To exercise your Right to be Forgotten, if applicable, please send an email to clinicaltrials@bcl.eurofins.com

We will delete your records within 2 weeks upon receipt.

The aforementioned process for withdrawal of consent does not pertain to clinical trial subjects participating in a clinical study supported by Eurofins companies. The Sponsor is Data Controller for clinical trial subjects, and needs to be contacted accordingly.

7. Sharing of information

Your personal data may be transferred to any Eurofins affiliate in the network as necessary to fulfill your specific service requirements.  The full list of Eurofins legal entities with contact details is available under the following link: https://www.eurofins.com/contact-us/group-directory-pdf/

Further, irrespective of the type of information, ECL does not sell or otherwise disclose personal information about our website visitors to third parties except as described below.

• to trusted businesses or persons to process your personal information for us, based on our instructions and in compliance with the General Data Protection Regulation (EU) 2016/679.
• to service providers we have retained to perform services on our behalf. These service providers are contractually restricted from using or disclosing the information except as necessary to perform services on our behalf or to comply with legal requirements.
• to companies, organizations, or individuals outside of Eurofins if we have a good reason to believe that access, use, preservation, or disclosure of the information is reasonably necessary to:
  – enforce applicable terms of service, including investigation of potential violations.
  – meet any applicable law, regulation, legal process, or enforceable governmental request.
  – detect, prevent, or otherwise address fraud, security, or technical issues.
  – protect against harm to the rights, property or safety of Eurofins, our users or the public as required or permitted by law.
• to regulatory or law enforcement agencies if we believe in good faith that we are required by law to disclose it in connection with the detection of crime, the collection of taxes or duties, in order to comply with any applicable law or order of a court of competent jurisdiction, or in connection with legal proceedings.
• to third parties as part of a merger, acquisition, or bankruptcy, in the event we sell or transfer all or a portion of our business or assets (including through bankruptcy).

8. Information transfer outside the European Union

Your personal data might be transferred outside the EU in case one of the recipients stated above is located outside the EU and:

1. only in the countries for which the European Commission has issued an adequacy decision (which guarantees that an adequate level of protection of personal data is offered in that country);
2. have certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom in reliance on the UK Extension to the EU-U.S. DPF or have certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.

To learn more about the Data Privacy Framework (DPF) program, please visit https://www.dataprivacyframework.gov/;

• appropriate safeguards have been provided, such as standard data protection clauses;
• is required, and approved by the ”Sponsor” for the purposes of conducting the contracted activities in support of the clinical trial or project.

If we transfer personal data received under the DPF to a third party, the third party’s access, use, and disclosure of the personal data must also be consistent with our obligations under the DPF, and we will remain liable under the DPF for any failure to do so by the third party unless we prove we are not responsible for the event giving rise to the damage.

9. Your rights to personal data

a. General

You have the right to request the data controller for:

• access to your data;
• rectifying your data;
• the portability of the data you provided to us;
• objecting to the processing of your data;
• restricting the processing of your data; erasing your data.

If you have any concerns or complaints about our data processing activities, we urge you to first try to resolve such issues directly with us. We are committed to resolving complaints about your privacy and our collection, use, transfer or disclosure of your information. Any inquiries or complaints regarding this Privacy Statement or our data processing activities should be directed to DG_ECL_DPO@bcl.eurofins.com.

ECL commits to resolve complaints about your privacy and our collection or use of your personal information transferred to the United States pursuant to the DPF Principles. European Union, Swiss, and United Kingdom (and Gibraltar) individuals with DPF inquiries or complaints should first contact ECL at: DG_ECL_DPO@bcl.eurofins.com.

b. Availability of the Independent Recourse Mechanism for the individuals (data subjects)

Based on the EU-U.S. Data Privacy Framework Principles and its extensions, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF); ECL, has committed to refer unresolved privacy complaints under the DPF Principles to an independent dispute resolution mechanism, Data Privacy Framework Services, operated by the International Centre For Dispute Resolution-American Arbitration Association (ICDR-AAA). If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://www.icdr.org/dpf for more information and to file a complaint. This service is provided free of charge to you.

If your DPF complaint cannot be resolved through the channels mentioned in section 8 and this section, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. For more information, see https://www.dataprivacyframework.gov/s/article/G-Arbitration-Procedures-dpf?tabset-35584=2

c. Complaint to the local data protection authority (for residents of the EU, EEA, Switzerland, and UK)

You may also make a complaint to the data protection supervisory authority in the country where you are based, or seek a remedy through local courts if you believe your rights have been breached; the list of data protection authorities (“Supervisory Authorities”) in the EU is available here: Our Members | European Data Protection Board (europa.eu). This right to make a complaint to the local Supervisory Authority is also outlined in the EU-U.S. Data Privacy Framework Principles and its extensions, for more information please visit: https://www.dataprivacyframework.gov/.

If you are a UK resident, you have the right to lodge a complaint with the data protection authority in your jurisdiction available at the following link: https://ico.org.uk/make-a- complaint/uk-extension-to-the-eu-us-data-privacy-framework-complaints-tool/

If you are a Swiss resident, you have the right to lodge a complaint with the data protection authority in your jurisdiction at the following link: https://www.edoeb.admin.ch/edoeb/en/home/meldeportale.html

d. Type 1 information-related requests

For type 1 information, ECL shall act in accordance with applicable legislation, and with regard to the instructions of the ”Sponsor” should requests pertaining to section 8 be received.

10. Time limit for data storage

Your personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. You may opt out of receiving marketing communications at any time by clicking the ‘unsubscribe’ link included in such an email or by contacting us directly at clinicaltrials@bcl.eurofins.com. Unsubscribe requests will be processed within 72 hours of receipt.

All data and consent information collected through web form submissions and stored in Eurofins systems will be reviewed every three years to ensure accuracy and compliance. This review includes verifying the relevance of the data, confirming that consent preferences remain valid, and updating outdated records. The process is conducted by the designated team in coordination with relevant data protection departments, following Eurofins’ internal data governance policies and applicable privacy regulations.

11. Revisions to privacy notice

We reserve the right to change the terms of this Notice and the right to make the new notice provisions effective for all personal data we maintain, regardless of when it was created or received. We will keep our current Notice posted on our website at https://eurofinscentrallaboratory.com/privacy-policy/ and are obligated to follow the terms of the notice currently in effect. If you would like a paper copy of a revised notice, contact our Privacy Officer at 913-787-4200; email DG_ECL_DPO@bcl.eurofins.com or send a request to Eurofins Central Laboratory, Attn: Privacy Officer; 2430 New Holland Pike, Lancaster, PA 17601 USA. This privacy notice was last updated on 31 October 2025.

12. Privacy notices of other websites

This website may contain hyperlinks to external websites. Please note that our Privacy Notice applies solely to this website. Accordingly, we advise you to consult the privacy statements of any third-party websites you visit via these links.

13. Conditions for Cookie Storage

Some of Eurofins websites store cookies on your computer. These cookies are used to collect information about how you interact with our websites and allow us to remember you and your preferences. We use this information to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media.

Every time you visit our websites that collect cookies, you will be requested to either accept or decline to collect cookies. If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.

Please refer to our Cookie Policy for detailed information on how we manage your cookies and your rights pertaining to our cookie practices.

Cookie Notice

1. Controller Information

The entity in charge of the control of any information obtained through this web form (referred to hereinafter as the “Controller” or “Eurofins” or “ECL”) is:

Eurofins Central Laboratory

Address:
Eurofins Central Laboratory Services, LLC
2430 New Holland Pike
Lancaster, PA  17601
USA

Eurofins respects the privacy of all users of its website and ensures that the personal information received or provided by you through our website(s) is treated as confidential.

This Cookie Notice sets out the basis on which all data that Eurofins collects on you through tracking technologies like cookies will be processed by Eurofins provides you with information about cookies and explains why they are used. This information is intended to give you a better understanding of what cookies are and the role they play in your visit to our website(s). European and California legislation requires all sites that use cookies to ensure that you are well informed about this and that you give your express permission to collect and store information collected through the use of cookies. If you have any questions regarding this Cookie Notice or if you want to lodge a request in relation to your personal information, please contact us through our website or you can reach our DPO at the following email address:

Attn. ECL Data Privacy Officer, DG_ECL_DPO@bcl.eurofins.com

2. What Information Does Eurofins Collect About Me?

Eurofins may obtain information about you when you use this website.

The information we collect about you includes:

• your identity (such as Internet Protocol Address);
• device event information such as browser type, browser language, the date and time of your request, and referral URL;
• your preferences (if applicable);
• your location;
• what content you view or pages you visit;
• search inquiries you make using our site search.

3. How Does Eurofins Collect Information About Me?

We collect information about you when you use our website or view content provided by Eurofins. Part of this information is automatically collected through cookies and stored in server logs. We also use various technologies to determine location, including IP addresses that may, for example, provide Eurofins with information on what country or city you are in.

4. What Are Cookies?

A cookie is a small text file that a website saves on your computer or mobile device when you visit the website. It enables the website to remember your actions and preferences (such as login, language, font size, and other display preferences) over a period of time, so you do not have to keep re-entering them whenever you come back to the site or browse from one page to another.

5. What Cookies Does ECL Website Use and For Which Purposes?

ECL sets and accesses our own cookies on the domains operated by ECL. We also use third- party cookies for certain purposes. Generally speaking, ECL uses cookies in the following categories:

5.1 Essential/Necessary Cookies

Essential/Necessary Cookies are required for us to provide our websites and services and ensure they work. These cookies enable core functionality such as network management and page navigation. The websites and services cannot function properly without these cookies. As such you cannot disable Essential/Necessary Cookies and still use the websites and services.

5.2 Performance Cookies

Performance Cookies collect information about users such as page load speeds, internet connection speeds, browser type, device type, screen size, etc. for the purpose of assessing the performance of a website and allowing its improvement. Once collected, the information is directly anonymized. They are set by a third-party service called Google Analytics. It collects information in an aggregated (i.e., anonymous) form, including the number of visitors to the site, where visitors come from, and the pages they visited. These cookies are divided into session cookies, which are erased when the user closes the browser, and persistent cookies, which remain on the user’s computer/device for a pre-defined period of time (usually two years).

5.3 Functionality Cookies

Functional Cookies automatically remember choices that users have previously made in order to improve their experience the next time they visit the website (where users select their preferred language or remember settings such as whether or not they have logged in already for example). These cookies are also used to prevent a user from being offered a service that had previously been offered and rejected. These cookies are persistent ones and are generally kept for one year. These cookies are first-party cookies, which are set by the web server of the visited page and share the same domain.

5.4 Targeting or Advertising Cookies

Targeting or Advertising Cookies track users’ browsing activities on websites and collect information about user’s browsing habits. These cookies are used to deliver advertisements more relevant to website users and their interests; to limit the number of times users see an advertisement and to help measure the effectiveness of advertising campaigns. These cookies contain a unique key that is able to distinguish individual users’ browsing habits or store code that can be translated into a set of browsing habits or preferences using information stored elsewhere. They remember that a user has visited a website, and this information is shared with other organizations such as advertisers.

Thanks to these cookies, we collect information about you when you interact with the ads located on our website. We do so through, amongst others, Google Analytics. We use Google Analytics to better understand the behavior of our visitors, and their activities on our website, identify important content so we can structure our website according to visitors' needs, and properly plan for and meet performance expectations based on aggregated visitor data. These cookies are set by third parties such as Google Analytics when visiting third-party websites that are part of advertising networks such as Google AdWords. The data contained in these cookies is set and controlled by these third parties and only anonymized demographic data about visitors is collected from their contents such as gender, age, and general aggregated internet content preference categories when you visit our website.

All cookies will only be used for the purposes stated above and to provide better services to all our website visitors so we can present our website, services, and products to you in the most appropriate manner.

6. How to Control Cookies?

We allow you to opt in or opt out of certain types of cookies by following the instructions on the cookie banner when you first visit our websites.

In addition, you can delete all cookies that are already on your computer, and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site, and some services and functionalities may not work.

For more general information about cookies and how to disable them through your browser, visit http://www.allaboutcookies.org/.

7. We Collect Information About You via Third Parties

We use Google Analytics 3rd-party audience data such as age, gender, and interests to work with companies that collect information about your online activities to provide advertising targeted to suit your interests and preferences. For example, you may see certain ads on this website or other websites because we contract with Google and other similar companies to target our ads based on information we or they have collected, including information that was collected through automated means (such as cookies and web beacons). These companies also use automated technologies to collect information when you click on our ads, which helps track and manage the effectiveness of our marketing efforts.

You may opt out of the automated collection of information by third-party ad networks for the purpose of delivering advertisements tailored to your interests, by visiting the consumer opt-out page for the Self-Regulatory Principles for Online Behavioral Advertising at http://www.aboutads.info/choices/ and edit or opt-out your Google Display Network ads’ preferences at http://www.google.com/ads/preferences/. Because those opt-out and preference control pages are specific to the individual browser used to visit it, and because that page is not operated by Eurofins, we are unable to perform the opt-outs on your behalf.

8. Revisions to Privacy Notice

We reserve the right to change the terms of this Cookie Notice and the right to make the new notice provisions effective for all personal data we maintain, regardless of when it was created or received.  We will keep our current Notice posted on our website at https://eurofinscentrallaboratory.com/privacy-policy/ and are obligated to follow the terms of the notice currently in effect.  If you would like a paper copy of a revised notice, contact our Privacy Officer at email DG_ECL_DPO@bcl.eurofins.com; or send a request to Eurofins Central Laboratory, Attn: Privacy Officer; 2430 New Holland Pike, Lancaster, PA 17601, USA