skip to main content


Stichting Mibiton believes your privacy to be very important. We will therefore also process and use your information in a safe manner, in accordance with the General Data Protection Regulation (GDPR). In this privacy statement we explain to you which data we collect from you and why we do so. In addition, you can read in this statement what your rights are pertaining to this processing and what you can do if you disagree with the processing. For questions about your privacy you can contact our data protection officer Vera Blom,

The Stichting Publieke Private Samenwerking Versterking van de Materiele Infrastructuur Biotechnologisch Onderzoek in Nederland (“Mibiton”) is the controller as referred to in the GDPR for the processings which are covered in this privacy statement. Mibiton is located at Loire 150, 2491 AK in The Hague and registered in the commercial register of the Dutch Chamber of Commerce under number 41158780.

What data do we use and for what do we use this data?

We process personal information which you provide to us or which we receive through our website.

Stichting Mibiton processes the following personal information:

  • Name and surname
  • Address details
  • Telephone number
  • Email address
  • Other personal information which you actively provide, for example by creating a profile on this website, in correspondence and by telephone
  • Bank account number

We process this data to:

  • process an investment application
  • be able to provide our service provision during the duration of our agreement
  • process payments and keep track of our financial administration
  • send our newsletter and/or advertising brochure
  • inform you about changes of our services and products
  • improve our service provision and secure and improve our website
  • comply with our statutory obligation, such as data which we require for our tax return.

We do not store your personal information for longer than necessary for the purposes for which we use your personal information. We are required to store some information for a specified period pursuant to the law. After the termination of our agreement we are, for example, obligated to store certain information for our administration pursuant to the law. Wherever possible, we will pseudonymise or anonymise your personal information as much as possible. We may also still contact you with our newsletter or advertising, up to the time you indicate to no longer appreciate this.

We make use of a portfolio on our website to show previous financings to potential applicants. We process designs and screenshots here of the work activities performed for you with your company name along with it, if you have not objected to it with a request from us. We store this content for an unlimited time in our archive, unless you make a request for removal.

How do we receive data?

We have received abovementioned data from you, because you make use of our services and/or have provided this data to us.

What special and/or sensitive personal information do we process?

Our website and/or service does not have the intention to collect data about website visitors who are younger than 16 years old, unless they have permission from parents or guardian. However, we cannot verify if a visitor is older than 16 years. If you are convinced that we have collected personal information about a minor without that permission, please contact us at, then we will delete this information.

What is the basis of the processing?

Stichting Mibiton processes personal information on the basis of an agreement with you, a statutory obligation, a legitimate interest or with your permission.

What rights do you have pertaining to the data?

The General Data Protection Regulation has given you a number of rights pertaining to the personal information which you have allowed us to process.

  1. Inspection – You can make a request with us to inspect your information at all times.
  2. Change – If you want to adjust, improve, supplement, block or delete your information, you may submit a request to this end.
  3. Object – You can object against the processing of your information, if we process your information on the basis of a legitimate interest and you have a specific reason against us doing so. You can always object (without reason) against receiving newsletters or advertisement.
  4. Data transfer – If you want to house your information with another provider, we will provide your information in a structured and common form accessible by common digital systems.
  5. Withdrawal – If we have processed data on the basis of your explicit permission, you have the right to withdraw this permission.

To make use of your rights, you can send a request to To ensure that you have made the request of inspection, we request that you send a copy of your proof of identification along with the request. Blacken your passport photo, MRZ (machine readable zone, the strip with numbers at the bottom of the passport), passport number and Citizen service number (BSN) in this copy. This is to protect your privacy. We respond as soon as possible, but within four weeks, to your request.

Who receives your information?

We will not provide your information to third parties, unless this is necessary for the execution of the agreement or required from a statutory obligation. With companies who process your information by our order, we conclude a processing agreement to ensure the same level of security and confidentiality of your information. Stichting Mibiton remains responsible for these processings. We will not resell your information to third parties.

How do we secure personal information?

Stichting Mibiton takes the protection of your data serious and takes suitable measures to fight abuse, loss, unauthorised access, undesired disclosure and unauthorised modification. If you have the impression that your data is not properly secured or if there are signs of abuse, please contact us at

Stichting Mibiton only attempts to process your information within the European Union by storing your information on a server in the EU as much as possible. We also request this to the processors we hire. To the extent that this is not possible, we take possible measures to offer a suitable level of protection for the protection of your personal information.

Cookies, or similar technology, which we use

Stichting Mibiton only uses technical and functional cookies, and analytical cookies which do not violate your privacy. A cookie is a small text file which is saved on your computer, tablet or telephone with the first visit to this website. The cookies we use are necessary for the technical functioning of the website and your ease of use. These ensure that the website works adequately and that, for example, your preferred settings are remembered. These also allow us to optimise our website. You can unsubscribe for cookies by setting your internet browser so it no longer saves cookies, but it may be possible that our website no longer functions properly. In addition, through the settings of your browser you can also delete all information which has been saved before.

Stichting Mibiton makes use of Google Analytics, a web analysis service which is offered by Google Inc. (“Google”). Google Analytics is used for analysis purposes and to improve the use of the website. We have taken the measures which the Dutch Data Protection Authority has recommended in the Manual privacy-friendly setup of Google Analytics: we have concluded a processing agreement with Google, masked the last octet of the IP address, switched off ‘share data’ and we do not make use of other Google services in combination with the Google Analytics cookies. We have no influence in the manner that Google processes (personal) information. You can find more information in the privacy policy of Google

Final provisions

This privacy statement may be amended. In that case we will publish the amended privacy statement on our website, after which this privacy statement is immediately in effect. Last update:
2 November 2021.

If you have questions about this statement or the way in which we use your data, you can send an email to Vera Blom, If you have a complaint about the manner in which we handle your data, you can also let us know. In addition, you can contact the Dutch Data Protection Authority, using this link: