Privacy Notice for Health Care Professionals & Employees or Representatives of Healthcare Organizations

Introduction - Controllership

argenx and its affiliates (“argenx” or “we”), each a Data Controller, is committed to protecting your privacy and will make all reasonable efforts to protect your personal data (“Personal Data”) in accordance with applicable data protection laws, including but not limited to the General Data Protection Regulation 2016/679 (“GDPR”), the UK and Swiss Data Protection Acts as amended and in force and this Privacy Notice (“Notice”). You can find more information on argenx affiliates in Europe and worldwide and their contact details here: https://www.argenx.com/contact-us  

Personal Data we Collect

Depending on the nature of our relationship and/or interaction(s), we may collect and process Personal Data about you, by electronic or other means, including:

  • personal details, such as name, age, gender, nationality; government issued licenses or documents (e.g. passport information and/or tax identification information);
  • business contact information, such as your business postal address, telephone, mobile and fax number, e-mail address;
  • financial details, such as banking information (for the purpose of making payment to you pursuant to a valid contractual relationship);
  • professional details such as employer, licenses, your place of medical practice, job title, educational history, your CV, the medical field in which you are active, professional qualifications and scientific activities (such as previous clinical study experience, and participation in past or pending research studies with argenx and other companies), employment status, publication of academic or scientific research and articles, memberships in associations and boards, speaking engagements, travel and expense information;
  • details of interactions with us and your interests, such as type of meetings we have held, your attendance to events/congresses, topics discussed, your knowledge of and questions you have had on our clinical study activities and products, your interest in argenx products and your general prescription habits and any other information you may provide to us in our interactions.
  • social media content and related social media online activity that is made publicly available by you.

We will usually collect this information directly from you, as well as from publicly available sources such as professional directories (e.g., Medical Societies, Medical Associations), social professional networks (LinkedIn, Twitter), online scientific publications, (e.g., Medical Journals) or professional subscription dataset/databank owned by third-party service providers (such as Veeva, IQVIA).

Purposes of Processing your Personal Data and Legal Basis

argenx will collect and process your Personal Data for one or more of the following purposes to:

  • contact you to arrange face to face or remote meetings;
  • enter into or renew a contract to which you are a party and administer our customer relationship;
  • publicly disclose any transfers of value made to you, as a healthcare professional (HCP), as required by law or in order to comply with applicable industry standards; further information on our privacy practices in the context of transparency disclosure is available on our corporate website on our Transparency & Disclosure section.
  • provide you with corporate news and updates on argenx;
  • carry out promotional activities directed at you, subject to other applicable regulatory provisions;
  • arrange (e.g., payment for travel & accommodation) your attendance or invite you to speak at scientific meetings, ad boards, congresses, and events organized by argenx;
  • review a grant, donation, or sponsorship request that you may have applied for – whether or not - on behalf of your employer/institution, and assess your professional history for our due diligence purposes (including the HCP’s compliance with anti-bribery and corruption laws) and to determine the eligibility to receive the requested grant, donation, or sponsorship;
  • provide to you, on your request, medical and scientific information as well as information & materials relating to our medicinal products and services; further information on our privacy practices in the context of handling medical enquiries can be found on our dedicated Medical Information, Adverse Events and Quality Complaints privacy notice.
  • collect and report to regulatory authorities any adverse events reports or quality complaints; further information on our privacy practices in the context of handling medical enquiries can be found on our dedicated Medical Information, Adverse Events and Quality Complaints privacy notice.
  • invite you to attend scientific events, e.g., webinars;
  • provide you with information related to argenx clinical trials and invite you to participate thereto; Further information on argenx privacy practices in the context of clinical research can be found within our Sponsor Privacy Notice.
  • invite you to share with argenx your professional insights, to participate in online or phone surveys and other market research activities; or
  • collect and analyze your interests, professional insights, and activities to build or improve your professional profile as an HCP to develop, maintain, and further enhance our existing or potential professional relationship with you and to provide you with personalized information.

argenx shall not use your Personal Data for purposes other than the ones specified herein without providing you with prior notification and obtaining your specific consent, where necessary.

Legal Basis for Processing your Personal Data

The legal grounds for processing your Personal Data for the above-mentioned purposes are the following:

  • we may process your Personal Data after obtaining your consent, such as for direct marketing and promotional purposes. This consent may be withdrawn by you at any time without giving any reason. Please note that the withdrawal of consent will not affect processing by argenx which has already occurred up to the date of withdrawal.
  • we may process your Personal Data if necessary, to comply with a legal obligation to which argenx is subject to, such as our safety reporting and transparency obligations.
  • we may process your Personal Data if required for the performance of a contract with you (e.g. consulting; speaker agreement).
  • we may process your Personal Data, relying on argenx’s overriding legitimate interests and as permitted under applicable legislation, e.g., conducting professional relationships and operations including strategy and marketing activities; communicating with you about our products and services when you expect to do so; building your professional profile to develop and maintain a current or potential  collaboration with you.

Disclosure of your Personal Data

argenx may disclose your Personal Data to the extent legally required or permitted for the purposes mentioned above to the following categories of recipients which are bound contractually to comply with applicable data protection laws and regulations and argenx’s policies and procedures as applicable:

  • argenx's affiliates for purposes related to our centralized business operations;
  • selected third - party suppliers, vendors (acting as data processors) that provide supporting services to argenx related to argenx's business operations and to the purposes specified above (e.g. an event management company) as well as to our business partners (e.g. market research and fieldwork agencies, travel booking and accommodation agencies); and
  • regulatory authorities, public/governmental and supervisory bodies, having the power to execute checks and investigations towards argenx in fulfilment of legal obligations or regulations.

Some of argenx’s affiliates and/or third – party service providers, acting for and on behalf of argenx and its affiliates as data processors, may be located in countries, where the  data protection laws may not have the same level of data protection than those laws in your country of residence or place of work (“Third Countries”),  including to the United States. For those cases where your Personal Data are being transferred to such countries, argenx has implemented adequate safeguards to protect your Personal Data. In addition, argenx relies on the execution of the EU Commission approved Standard Contractual Clauses for the transfer of Personal  Data outside of the EU/EEA, the UK and/or Switzerland and the implementation of appropriate technical and   organizational security measures to ensure the security of the processing. In adopting the appropriate safeguards, and/or any supplementary measures as may be required by applicable laws or supervisory authorities, argenx shall ensure that an adequate or essentially equivalent level of data protection is afforded by the importing entity to the data being transferred, taking into account the factual circumstances  of the transfer in question.

A full list of argenx data processors and additional information regarding the cross-border safeguards argenx has in place, is available upon request to our Privacy Office by email at privacy@argenx.com.

Storage, Safeguards and Retention of your Personal Data

Your data will be securely stored in information assets owned by or managed on behalf of argenx by third party service providers (such as databank/dataset and IT providers) and may be hosted in Third Countries as noted above. Where this is the case, we take all necessary steps to ensure that adequate physical, administrative and technical safeguards are put in place to protect your Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction.

We retain your personal data for as long permitted by applicable laws and regulations and/or as deemed strictly necessary to achieve the intended purposes for which it has been collected. This time period may be extended for the establishment, exercise or defense of legal claims and/or as required by law.

At the end of this period, your Personal Data will be securely deleted or fully anonymized.

Your Rights

You may have the following legal rights: request access, revision, correction or deletion of your Personal Data; object to further processing; restrict processing or request portability of your Personal Data; withdraw your consent without having to provide any reasons; and/or submit a complaint to the competent data protection authority.

Please note that the exercise of these rights may be subject to limitations and/or restrictions set out in applicable laws; they may also be subject to variations or additional rights may be available to you in your country of residence or place of work.

A list of the  European Data Protection Authorities can be found here.

The UK Information Commissioner’s Office (ICO) may be contacted here: https://ico.org.uk/make-a-complaint/

The Swiss Federal Data Protection Information Commissioner (FDPIC) may be contacted here: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html

Additional disclosures for California residents

If you are a California resident, you may have separate rights regarding your Personal Data, in accordance with California law.

California Consumer Privacy Act of 2018

The California Consumer Privacy Act of 2018 (the “CCPA”) grants California residents certain rights with respect to their Personal Data, including, as described below, the right to know about, and delete, their Personal Data. These rights are subject to certain limitations, however, such as that they do not all apply to certain uses of Personal Data about employees, job applicants, and contractors, or information processed exclusively in the business-to-business context (e.g., information about an individual acting in his or her capacity as a representative of an entity). Where exceptions to the CCPA apply to a request you submit, we will provide you with an explanation.

Right to request disclosure of information we collect or share about you.  You can submit a request to us for the following data regarding the Personal Data we have collected about you in the 12 months prior to our receipt of your request (a “request to know”):

  • The categories of Personal Data we have collected.
  • The categories of sources from which we collected the Personal Data.
  • The business or commercial purposes for which we collected the Personal Data.
  • The categories of third parties with which we shared the Personal Data.
  • The categories of Personal Data we disclosed for a business purpose, and for each category identified, the categories of third parties to whom we disclosed that particular category of Personal Data.
  • The specific pieces of Personal Data we collected.
  • Right to request the deletion of Personal Data we have collected from you. Upon request, we will delete the Personal Data we have collected about you, except for situations where specific information is necessary for us to provide you with a product or service that you requested; perform a contract we entered into with you; maintain the functionality or security of our systems; or comply with or exercise rights provided by the law.

The law also permits us to retain specific information for our exclusively internal use, but only in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with us.

How can you make a request to exercise your rights? To submit requests to know or delete, you may contact us by phone at 1-(833) ARGX 411 or via email at privacy@argenx.com.

How we will handle a request to exercise your rights. For requests to know or delete, we will first acknowledge receipt of the request within 10 business days of receipt of your request. We will provide a substantive response to your request within 45 days from receipt of your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we’ll let you know.

When you make a request to know or delete your Personal Data, we will take steps to verify your identity. These steps may include asking you for Personal

Data, such as your name, address, or other information we maintain about you. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.

You are also entitled to submit a request for Personal Data that could be associated with a household as defined in the CCPA. To submit a request to know or delete household Personal Data, such requests must be jointly made by each member of the household, and we will individually verify all of the members of the household using the verification criteria explained above, and separately verify that each household member making the request currently resides in the household. If we are unable to verify the identity of each household member with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of our denial.

You may also designate an authorized agent to submit requests on your behalf. If you do so, you will be required to verify your identity by providing us with certain Personal Data as described above. Additionally, we will also require that you provide the agent with written and signed permission to act on your behalf, and we will separately confirm with you that you provided the agent with permission to submit the request. We will deny the request if the agent is unable to meet submit proof to us that you have authorized them to act on your behalf or if any of the above verification criteria are not met.

We are committed to honoring your rights. If you exercise any of the CCPA rights explained in this Privacy Notice, we will continue to treat you fairly.

Shine the Light

California's "Shine the Light" law, Civil Code section 1798.83, requires certain businesses to respond to requests from California residents asking about the business' practices related to disclosing certain types of Personal Data to third parties for the third parties' direct marketing purposes. We do not disclose Personal Data to such entities, for such purposes.

Do Not Track

“Do Not Track” signals are options available on your browser to tell operators of websites that you do not wish to have your online activity tracked. We do not engage in the collection of personally identifiable information about your online activities over time and across third-party websites or online services, nor do we allow other parties to do so through our Site. Accordingly, we do not process or comply with automated browser signals regarding tracking mechanisms, which may include "do not track" instructions.

Other useful information Changes to Privacy Notice

If we make any material changes to this Privacy Notice we will notify you by means of a notice on the Site and will also post an updated version on the Site. Please check back periodically for updates.

Accessibility

We are committed to ensuring that our communications are accessible to people with disabilities.  To make accessibility-related requests or report barriers, please contact us by phone at 1 (833) ARGX-411 or via email at privacy@argenx.com.

Minors

The Site is not designed for or intentionally targeted at children 16 years of age or younger. Further, we do not knowingly sell the Personal Data of children under 16 years of age. If we become aware that a child under 16 has provided us with Personal Data, we will take reasonable steps to remove such information from our systems and terminate the applicable account

Contact Information

For questions, concerns or to exercise your rights in relation to the Processing of your Personal Data, please do not hesitate to contact the argenx Privacy Office at privacy@argenx.com.

For further details on how argenx generally collects and processes your Personal Data, please consult our Privacy Policy available on our corporate website at https://www.argenx.com/privacy-policy