Further information is set out in the relevant Privacy Notice.
This Privacy Policy addresses how argenx SE, and its Affiliates* (“argenx”, “we”, “our”) handle and protect “Personal Data”** collected via the argenx website (www.argenx.com) or any other websites operated or controlled by argenx (collectively, the “Site”) and offline.
The Site is owned by argenx SE, Willemstraat 5, 4811 AH Breda, The Netherlands and operated by argenx BV, Industriepark-Zwijnaarde 7, Belgium, and its Affiliates* who process the Personal Data of a person visiting and providing Personal Data via this Site (“Person”, “your” or “you”). argenx SE (in the Netherlands) and argenx BV (in Belgium) (collectively “argenx EU”) are the controllers of your Personal Data collected via the Site.
* “Affiliates” means any company controlled by, controlling or under common control of argenx SE, whereby control shall mean the ownership of at least 50% of the shares, holding the majority of voting rights at shareholder or board level or the ability to materially influence the policy of a company. Affiliates of argenx are argenx US Inc., argenx BV, and argenx Japan K.K.
** “Personal Data” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person or household. This may include, but is not limited to: your name, address, email address, phone number, identification number, CV , or health data provided by healthcare professionals or by you.
In certain cases, additional privacy notices and/or consent forms (“Privacy Notices”) will be provided to you, which will provide additional information as to the processing of your Personal Data. This includes (without limitation) the following cases:
By accessing the Site, you agree to our collection and use of Personal Data as described in this Privacy Policy, our Cookie Policy and Disclaimer. However, this does not equate to consent for the processing of your Personal Data for purposes of European data protection laws.
Contents of this Privacy Policy
We strongly recommend that you read this Privacy Policy and, if you have any questions, contact our Global Privacy Office via email at privacy@argenx.com.
The purpose of this Privacy Policy is to help you understand:
Sources of Personal Data
Directly from you: We may collect and may have collected Personal Data from you when you, for example:
Further information is set out in the relevant Privacy Notice.
From third parties: We may collect and may have collected your Personal Data from third parties that determined you, or the entity you represent, might be interested in, for example, collaborating, partnering, or investing with us, or licensing or purchasing our products. These third parties may include, for example, healthcare professionals, healthcare organisations, clinical trial sites, public databases, and references and referral sources. Further information is set out in the relevant Privacy Notice.
Automatically: As is now common with most websites, our Site uses cookies and may use other online tracking tools (e.g., web beacons) to collect information about your IP address or your use of the Site. Cookies are small data files generated by a website and saved by your web browser. They are used to help users navigate websites efficiently as well as to provide information to the owner of the websites. To find out more about what cookies we use and how we use them, please see our Cookie Policy here.
Types of Personal Data
The Personal Data we may collect and may have collected varies depending on the purpose for which we are collecting your Personal Data and further information is available in the relevant Privacy Notice. This will include the following categories of Personal Data:
Use of Personal Data
We may have used, and may continue to use, your Personal Data for the purposes and in reliance on the legal bases set out below. Further information is set out in the relevant Privacy Notice.
As necessary for our legitimate interests to:
Pursuant to a contract, to:
Where we require your Personal Data to comply with our contractual obligations, failure to provide this Personal Data could make it impossible for us to engage with you.
With your consent (or the consent of your legal guardian), to:
As required by law, to:
Respond to legal requests, for example, from administrative or judicial authorities and complying with subpoenas.
Where we require your Personal Data to comply with our legal requirements, failure to provide this Personal Data could make it impossible for us comply with our legal obligations.
Sharing of Personal Data
We may have disclosed, and may continue to disclose, each of the categories of Personal Data identified above to:
We may disclose deidentified patient information. We deidentify data in accordance with the legal standards applicable to the relevant data which, in the United States is the (Health Insurance Portability and Accountability Act (HIPAA) safe harbor methodology, pseudonymization under the European General Data Protection Regulation (GDPR) for the EU/EEA and pseudonymization under the Act on the Protection of Personal Information (APPI) for Japan.
Further information as to the potential recipients of your Personal Data is set out in the relevant Privacy Notice.
Transfer of Personal Data to third countries
Your Personal Data can be transferred to countries outside the EU/EEA, including outside the United Kingdom (UK) and Switzerland, to countries that may not offer the same level of data protection as in the EU/EEA or in the relevant country of origin (such as the US). We have put in place appropriate safeguards so that your Personal Data are and remain protected. These include implementing the EU Standard Contractual Clauses which may require the recipient to put in place supplementary measures to ensure an essentially equivalent level of protection is provided, as in the EU/EEA, the UK or Switzerland. We will ensure that your rights and an adequate level of protection essentially equivalent to that ensured within the EU/EEA, UK and Switzerland are guaranteed. You may obtain further information and a copy of the relevant data transfer mechanisms that we have in place by contacting our Global Privacy Office via email at privacy@argenx.com.
Further information as to the international transfer of your Personal Data is set out in the relevant Privacy Notice.
Protection of your Personal Data
We are committed to protecting the security and privacy of your Personal Data. We maintain appropriate security procedures and practices designed to protect the security, confidentiality, and integrity of Personal Data. These include the use of appropriate technical and organizational measures to restrict access to Personal Data to those of our employees, agents, contractors, or representatives who require access to such information to perform tasks assigned to them by us. These measures shall take into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons. For instance, we store your Personal Data on servers that have various types of technical and physical access controls, which may include, for instance, if appropriate, encryption. We may also aggregate, pseudonymize or anonymize Personal Data. While we are committed to safeguarding your Personal Data through our information security program, even the most stringent security program may not always not be able to prevent all security breaches.
How long we keep your Personal Data
We keep your Personal Data for the duration that is needed to achieve the purpose for which it was collected. The criteria used to determine the retention periods include: (i) how long the Personal Data is needed to provide / receive the services and operate the business; (ii) the type of Personal Data collected; and (iii) whether we are subject to a legal, contractual or similar obligations to retain the Personal Data (e.g., mandatory data retention laws, government orders to preserve data relevant to an investigation or data that must be retained for the purposes of litigation or disputes). Further information is set out in the relevant Privacy Notice and/or can be obtained by contacting our Global Privacy Office via email at privacy@argenx.com.
Your data privacy rights
You may, where required by applicable law, have the following data privacy rights which may be subject to limitations / restrictions:
Please contact our Global Privacy Office via email at privacy@argenx.com in case you wish to exercise any of these above rights or you wish to complain about the handling of your Personal Data.
You also have, where provided by applicable law, the right to launch a complaint with the competent data protection authority if you believe we did not properly handle your Personal Data or did not respect your rights.
A list of the competent data protection authorities in the EU and their contact details can be found here.
UK residents can contact the UK Information Commissioner’s Office (ICO) here.
Additional disclosures for California residents
If you are a California resident, you may have separate rights regarding your Personal Data, in accordance with California law.
California Consumer Privacy Act of 2018
The California Consumer Privacy Act of 2018 (the “CCPA”) grants California residents certain rights with respect to their Personal Data, including, as described below, the right to know about, and delete, their Personal Data. These rights are subject to certain limitations, however, such as that they do not all apply to certain uses of Personal Data about employees, job applicants, and contractors, or information processed exclusively in the business-to-business context (e.g., information about an individual acting in his or her capacity as a representative of an entity). Where exceptions to the CCPA apply to a request you submit, we will provide you with an explanation.
Right to request disclosure of information we collect or share about you. You can submit a request to us for the following data regarding the Personal Data we have collected about you in the 12 months prior to our receipt of your request (a “request to know”):
Right to request the deletion of Personal Data we have collected from you. Upon request, we will delete the Personal Data we have collected about you, except for situations where specific information is necessary for us to provide you with a product or service that you requested; perform a contract we entered into with you; maintain the functionality or security of our systems; or comply with or exercise rights provided by the law.
The law also permits us to retain specific information for our exclusively internal use, but only in ways that are compatible with the context in which you provided the information to us or that are reasonably aligned with your expectations based on your relationship with us.
How can you make a request to exercise your rights? To submit requests to know or delete, you may contact us by phone at 1-(833) ARGX 411 or via email at privacy@argenx.com.
How we will handle a request to exercise your rights. For requests to know or delete, we will first acknowledge receipt of the request within 10 business days of receipt of your request. We will provide a substantive response to your request within 45 days from receipt of your request, although we may be allowed to take longer to process your request under certain circumstances. If we expect your request is going to take us longer than normal to fulfill, we’ll let you know.
When you make a request to know or delete your Personal Data, we will take steps to verify your identity. These steps may include asking you for Personal
Data, such as your name, address, or other information we maintain about you. If we are unable to verify your identity with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of the denial.
You are also entitled to submit a request for Personal Data that could be associated with a household as defined in the CCPA. To submit a request to know or delete household Personal Data, such requests must be jointly made by each member of the household, and we will individually verify all of the members of the household using the verification criteria explained above, and separately verify that each household member making the request currently resides in the household. If we are unable to verify the identity of each household member with the degree of certainty required, we will not be able to respond to the request. We will notify you to explain the basis of our denial.
You may also designate an authorized agent to submit requests on your behalf. If you do so, you will be required to verify your identity by providing us with certain Personal Data as described above. Additionally, we will also require that you provide the agent with written and signed permission to act on your behalf, and we will separately confirm with you that you provided the agent with permission to submit the request. We will deny the request if the agent is unable to meet submit proof to us that you have authorized them to act on your behalf or if any of the above verification criteria are not met.
We are committed to honoring your rights. If you exercise any of the CCPA rights explained in this Privacy Policy, we will continue to treat you fairly.
Shine the Light
California's "Shine the Light" law, Civil Code section 1798.83, requires certain businesses to respond to requests from California residents asking about the business' practices related to disclosing certain types of Personal Data to third parties for the third parties' direct marketing purposes. We do not disclose Personal Data to such entities, for such purposes.
Do Not Track
“Do Not Track” signals are options available on your browser to tell operators of websites that you do not wish to have your online activity tracked. We do not engage in the collection of personally identifiable information about your online activities over time and across third-party websites or online services, nor do we allow other parties to do so through our Site. Accordingly, we do not process or comply with automated browser signals regarding tracking mechanisms, which may include "do not track" instructions.
Other useful information Changes to Privacy Policy
If we make any material changes to this Privacy Policy we will notify you by means of a notice on the Site and will also post an updated version on the Site. Please check back periodically for updates.
Accessibility
We are committed to ensuring that our communications are accessible to people with disabilities. To make accessibility-related requests or report barriers, please contact us by phone at 1 (833) ARGX-411 or via email at privacy@argenx.com.
Minors
The Site is not designed for or intentionally targeted at children 16 years of age or younger. Further, we do not knowingly sell the Personal Data of children under 16 years of age. If we become aware that a child under 16 has provided us with Personal Data, we will take reasonable steps to remove such information from our systems and terminate the applicable account.
Links to other websites and social media buttons
This Site contains links to other websites that are not operated by argenx, for which argenx is not responsible and to which this Privacy Policy does not apply. We encourage you to read the privacy policies of all of the destination websites you visit.
We also display social media buttons and a WhatsApp button on our the Site. When you click on any of those buttons, your Personal Data may be transferred to these companies and they may also set cookies or other tracking technologies on your browser. The privacy policies and terms of use of each of those companies govern the collection and use of your Personal data when you click on their buttons on our Site. Prior to installing such third party cookies or enabling you to click through to a third party website, we will have requested your consent to do so. Where consent was not given, the cookies will not be installed and the click through to third party websites will only occur after a pop-up notifying you that you are leaving the argenx space and requesting whether you wish to continue.
Contact details
If you have questions, feedback, or concerns regarding this Privacy Policy and data protection laws, or if you wish to exercise your privacy rights please contact our Global Privacy Office via email at privacy@argenx.com.
Last updated: 11 July 2023