Introduction - Controllership
Introduction - Controllership
argenx and its affiliates (“argenx” or “we”), each a Data Controller, is committed to protecting your privacy and will make all reasonable efforts to protect your personal data (“Personal Data”) in accordance with applicable data protection laws, including but not limited to the General Data Protection Regulation 2016/679 (“GDPR”), the UK and Swiss Data Protection Acts as amended and in force and this Privacy Notice (“Notice”). You can find more information on argenx affiliates in Europe and worldwide and their contact details here: https://www.argenx.com/contact-us
Personal Data we Collect
Depending on the nature of our relationship and/or interaction(s), we may collect and process Personal Data about you, by electronic or other means, including:
We will usually collect this information directly from you, as well as from publicly available sources such as professional directories (e.g., Medical Societies, Medical Associations), social professional networks (LinkedIn, Twitter), online scientific publications, (e.g., Medical Journals) or professional subscription dataset/databank owned by third-party service providers (such as Veeva, IQVIA).
Purposes of Processing your Personal Data and Legal Basis
argenx will collect and process your Personal Data for one or more of the following purposes to:
argenx shall not use your Personal Data for purposes other than the ones specified herein without providing you with prior notification and obtaining your specific consent, where necessary.
Legal Basis for Processing your Personal Data
The legal grounds for processing your Personal Data for the above-mentioned purposes are the following:
Disclosure of your Personal Data
argenx may disclose your Personal Data to the extent legally required or permitted for the purposes mentioned above to the following categories of recipients which are bound contractually to comply with applicable data protection laws and regulations and argenx’s policies and procedures as applicable:
Some of argenx’s affiliates and/or third – party service providers, acting for and on behalf of argenx and its affiliates as data processors, may be located in countries, where the data protection laws may not have the same level of data protection than those laws in your country of residence or place of work (“Third Countries”), including to the United States. For those cases where your Personal Data are being transferred to such countries, argenx has implemented adequate safeguards to protect your Personal Data. In addition, argenx relies on the execution of the EU Commission approved Standard Contractual Clauses for the transfer of Personal Data outside of the EU/EEA, the UK and/or Switzerland and the implementation of appropriate technical and organizational security measures to ensure the security of the processing. In adopting the appropriate safeguards, and/or any supplementary measures as may be required by applicable laws or supervisory authorities, argenx shall ensure that an adequate or essentially equivalent level of data protection is afforded by the importing entity to the data being transferred, taking into account the factual circumstances of the transfer in question.
A full list of argenx data processors and additional information regarding the cross-border safeguards argenx has in place, is available upon request to our Privacy Office by email at privacy@argenx.com.
Storage, Safeguards and Retention of your Personal Data
Your data will be securely stored in information assets owned by or managed on behalf of argenx by third party service providers (such as databank/dataset and IT providers) and may be hosted in Third Countries as noted above. Where this is the case, we take all necessary steps to ensure that adequate physical, administrative and technical safeguards are put in place to protect your Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction.
We retain your personal data for as long permitted by applicable laws and regulations and/or as deemed strictly necessary to achieve the intended purposes for which it has been collected. This time period may be extended for the establishment, exercise or defense of legal claims and/or as required by law.
At the end of this period, your Personal Data will be securely deleted or fully anonymized.
Your Rights
You may have the following legal rights: request access, revision, correction or deletion of your Personal Data; object to further processing; restrict processing or request portability of your Personal Data; withdraw your consent without having to provide any reasons; and/or submit a complaint to the competent data protection authority.
Please note that the exercise of these rights may be subject to limitations and/or restrictions set out in applicable laws; they may also be subject to variations or additional rights may be available to you in your country of residence or place of work.
A list of the European Data Protection Authorities can be found here.
The UK Information Commissioner’s Office (ICO) may be contacted here: https://ico.org.uk/make-a-complaint/
The Swiss Federal Data Protection Information Commissioner (FDPIC) may be contacted here: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html
Additional disclosures for California residents
If you are a California resident, you may have separate rights regarding your Personal Data, in accordance with California law.
California Consumer Privacy Act of 2018
The California Consumer Privacy Act of 2018 (the “CCPA”) grants California residents certain rights with respect to their Personal Data, including, as described below, the right to know about, and delete, their Personal Data. These rights are subject to certain limitations, however, such as that they do not all apply to certain uses of Personal Data about employees, job applicants, and contractors, or information processed exclusively in the business-to-business context (e.g., information about an individual acting in his or her capacity as a representative of an entity). Where exceptions to the CCPA apply to a request you submit, we will provide you with an explanation.
Right to request disclosure of information we collect or share about you. You can submit a request to us for the following data regarding the Personal Data we have collected about you in the 12 months prior to our receipt of your request (a “request to know”):
The law also permits us to retain specific information for our exclusively internal use, but only in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with us.
How can you make a request to exercise your rights? To submit requests to know or delete, you may contact us by phone at 1-(833) ARGX 411 or via email at privacy@argenx.com.
How we will handle a request to exercise your rights. For requests to know or delete, we will first acknowledge receipt of the request within 10 business days of receipt of your request. We will provide a substantive response to your request within 45 days from receipt of your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we’ll let you know.
When you make a request to know or delete your Personal Data, we will take steps to verify your identity. These steps may include asking you for Personal
Data, such as your name, address, or other information we maintain about you. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.
You are also entitled to submit a request for Personal Data that could be associated with a household as defined in the CCPA. To submit a request to know or delete household Personal Data, such requests must be jointly made by each member of the household, and we will individually verify all of the members of the household using the verification criteria explained above, and separately verify that each household member making the request currently resides in the household. If we are unable to verify the identity of each household member with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of our denial.
You may also designate an authorized agent to submit requests on your behalf. If you do so, you will be required to verify your identity by providing us with certain Personal Data as described above. Additionally, we will also require that you provide the agent with written and signed permission to act on your behalf, and we will separately confirm with you that you provided the agent with permission to submit the request. We will deny the request if the agent is unable to meet submit proof to us that you have authorized them to act on your behalf or if any of the above verification criteria are not met.
We are committed to honoring your rights. If you exercise any of the CCPA rights explained in this Privacy Notice, we will continue to treat you fairly.
Shine the Light
California's "Shine the Light" law, Civil Code section 1798.83, requires certain businesses to respond to requests from California residents asking about the business' practices related to disclosing certain types of Personal Data to third parties for the third parties' direct marketing purposes. We do not disclose Personal Data to such entities, for such purposes.
Do Not Track
“Do Not Track” signals are options available on your browser to tell operators of websites that you do not wish to have your online activity tracked. We do not engage in the collection of personally identifiable information about your online activities over time and across third-party websites or online services, nor do we allow other parties to do so through our Site. Accordingly, we do not process or comply with automated browser signals regarding tracking mechanisms, which may include "do not track" instructions.
Other useful information Changes to Privacy Notice
If we make any material changes to this Privacy Notice we will notify you by means of a notice on the Site and will also post an updated version on the Site. Please check back periodically for updates.
Accessibility
We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers, please contact us by phone at 1 (833) ARGX-411 or via email at privacy@argenx.com.
Minors
The Site is not designed for or intentionally targeted at children 16 years of age or younger. Further, we do not knowingly sell the Personal Data of children under 16 years of age. If we become aware that a child under 16 has provided us with Personal Data, we will take reasonable steps to remove such information from our systems and terminate the applicable account
Contact Information
For questions, concerns or to exercise your rights in relation to the Processing of your Personal Data, please do not hesitate to contact the argenx Privacy Office at privacy@argenx.com.
For further details on how argenx generally collects and processes your Personal Data, please consult our Privacy Policy available on our corporate website at https://www.argenx.com/privacy-policy