Privacy Notice

Privacy notice
This privacy notice applies to BioAgilytix, and its subsidiaries BioAgilytix Labs – Boston (collectively, BioAgilytix or “we” “our” or “us”). BioAgilytix cares about your privacy. This privacy notice describes how we collect, receive, use, store, share, transfer, and process your personal information, as well as your rights in determining what we do with the information that we collect or hold about you.

We may update this Privacy Notice from time to time. When we do update it, for your convenience, we will make the updated Privacy Statement available on this page. Changes and additions to the Privacy Notice are effective from the date on which they are posted. Please review the Privacy Notice from time to time to check whether We have made any changes to the way in which we use your Personal Information. Any changes we make to the Policy in the future will be posted on this page, and where we change this Policy in ways that also affect how we process personal information about you, where appropriate, we will notify you directly via email or other direct contact with you, and we also will post a notice on our home page that this Policy has changed.

If at any time you have questions about our practices or any of your rights described below, you may contact our Data Protection Officer at details below. This inbox is actively monitored and managed by personnel trained in our policies, processing, and handling of personal data.

Data We Collect
The data we process (collect, use, and share) about you depends on who you are and how we interact with you. We process personal information about you that we collect either directly, through forms or data entry fields on our website, or through passive collection by cookies and other data collection technologies. The types of personal data we process in each of these contexts is further explained below.

Website Visitor Data
We may process your information when you contact us via our website such as submitting a question or request via the contact form or requesting to speak to a scientist. This information typically includes name, title, company name, phone number, and e-mail address.

BioAgilytix may also record information about how individuals access the Site. This information may include Device information including as Internet Protocol (“IP”) addresses, log information, error messages, device type, and unique device identifiers, the websites the user visited immediately prior to and upon exiting this Site, the browser software the individual is using to access the Site, the pages viewed, the features used, details about any links with which the user interacted, device precise location information, or device motion information.

BioAgilytix may use cookies and other technologies on the Site to enhance or improve the user experience, including customization of content. A cookie is usually text data stored on the individual’s device that a website transfers to the individual’s browser. Cookies can be utilized to help us provide you with information targeted to your interests, based upon your prior browsing on our Site. We do not, however, permit third parties to track you from our Site across other sites to deliver advertising or other content.

BioAgilytix does not seek information from persons less than 16 years of age and no information should be submitted to BioAgilytix by anyone under 16 years of age.

Business Customer Data
If you are a customer or you request or indicate an interest in information about our services, we may process your name, email address, phone number, job title, information about the company where you work, including its website address, postal address, job title, job function, company name, company size, company financial information, IP address, device type, email view information including IP address and associated city, information about which of our services you use or which may be of interest to you, and any comments you provide. We maintain and update this information as we continue to engage with you and use it as described under the Legitimate Interests processing purposes described below.

Also, in its role as a laboratory, BioAgilytix may receive Personal Data related to biochemical analysis, research, diagnostics, consulting, and clinical trial support services from or on behalf of Controllers within the EU, Switzerland, or the US.

Job Applicant or Contractor Data
If you apply for a job in response to one of the career opportunities on our site, you will be submitting information to our service provider’s website. It will be subject to both the service provider’s privacy policy and BioAgilytix’s Privacy Notice/Policy. We may process personal information about you and your professional experience, education and training such as your application, your name (and any former names), postal address, email address, phone number, universities attended, academic degrees obtained, grades, professional certifications and licenses, employment history, and curriculum vitae or resume. Additionally, prior to hiring, we may engage service providers to conduct background checks that involve the necessary personal information processing as permitted by the laws in the location in which you reside and/or work. Supplemental privacy notices may be provided to BioAgilytix applicants, employees or contractors, and where applicable, consent will be obtained, to ensure compliance with local requirements.

When BioAgilytix acts as a Controller and is the recipient of Personal Data, it shall provide the appropriate notice in clear and conspicuous language when individuals are first asked to provide Personal Data to BioAgilytix, or as soon thereafter as is practicable. In addition, when BioAgilytix is a Controller it will seek consent prior to using Personal Data for a purpose other than that for which it was originally collected or Processed.

HOW WE USE DATA AND PROCESSING PURPOSES

Website Visitor
BioAgilytix believes and supports Personal Data minimization and limiting use to those processing activities for which permission was given. BioAgilytix uses the personal information you provide as necessary:

• To deliver our products or services, or as required for legal compliance or other lawful purposes.

• To communicate with you via email, phone, or text messages and may send marketing materials if you chose to opt-in to marketing campaigns that you may also opt-out at any time.

• To respond to general inquiries, provide technical and customer support and training, verify your identity, and send important account and service information.

• For purposes of recruitment and employee administration.

• For advertising purposes, including display ads, retargeting, and social media promotion.

• Some of our service offerings may include lab diagnostics provided on behalf of our customers.

• Our marketing team or one of our scientists may also process your information to send communications to you

• BioAgilytix Processes laboratory data in the performance of services for and under the direction of its business customers who act as the Data Controllers.

This information is used to administer our systems and the Site, and to make improvements to and protect the Site. IP addresses are collected to obtain certain aggregate information concerning the use of our website such as average time spent on the site, pages viewed, etc.

Our legitimate interests – BioAgilytix may use your personal information for the following purposes which are in our legitimate business interests:

• Where processing enables us to enhance, modify, personalize or otherwise improve our websites, products and services.

• • Determining the effectiveness of promotional campaigns and advertising and ensuring communications are relevant to the choices you make.

If we process your personal information under consent provided by you, you have the right to withdraw that consent at any time. Your withdrawal of consent, however, will not affect the lawfulness of any processing we have undertaken before the withdrawal. We may process your personal information where necessary for our compliance with a legal obligation. Finally, in some cases we process your Personal Information as necessary to perform a contract with you, or to take steps that you request before we enter into that contract.

Business Customer Data
If you have a contract or other agreement in place with us, we process personal information about individuals in order to fulfill obligations under that contract or agreement.

BioAgilytix may process personal information about you based on our legitimate business interests for the following purposes, to which individuals may exercise their Right to object as described below:

• • • • To manage our relationship with you based on our legitimate business interest in retaining you as a customer or a sponsor;
    • • To provide additional services you request based on our legitimate business interest to respond to your reasonable requests and to retain you as a customer or sponsor;
    • • To better understand the needs of the research communities we aim to serve, we analyze our interactions with you online and offline and store that information in a quantitative way. This helps us continue to improve how we provide information and engage specifically with you, including to help us determine when you might be ready to make a purchase based on repeated interactions with BioAgilytix. We do not make any automated decisions about you that would result in legal or other similarly significant effects on you;
    • • To determine whether, when, and the IP address and associated city of, a marketing, sales, or business development email communication we sent was viewed based on our legitimate interest to effectively manage and improve upon such communications with you;
    • • To understand the organization that you work for and your prior experience based on our legitimate interest to tailor our communications with you to improve our engagement with you;
    • • To understand your business and research-related needs based on our legitimate interest to develop and enhance our services to address your needs and to make them more relevant to you; and
    • • To manage our legal, financial, policy and regulatory compliance responsibilities and to demonstrate our compliance upon request.

BioAgilytix may use personal data it receives from sponsors and business customers to provide clinical laboratory services for and under the direction of its business customers who act as the Data Controllers.

Job Applicant or Contractor Data
If you have a contract or other agreement in place with us, we process personal information about you in order to fulfill the following obligations to you under that contract or agreement to or other agreement with us, we process personal information about you to fulfill the specific obligations we have to you under the applicable contract or agreement such as:

• • • • Payment of project fees to contractors;
    • • Managing performance obligations under employment contracts, where applicable.

Our legitimate interests – We also process personal information about you based on our legitimate interests to establish and manage our relationship with and responsibilities to you and for effective operation of our business, such as to:

• • • • Recruit new talent to join BioAgilytix;

• • • • Onboard employees and contractors to BioAgilytix;

• • • • Grant and ensure appropriate access to BioAgilytix systems and facilities;

• • • • Ensure the security and safety of the workplace and the tangible and intangible assets for which we are responsible.

DISCLOSURES TO THIRD PARTIES
Any diagnostic information stored on behalf a customer is made available only to such customer.

BioAgilytix’s website may contain links to other sites that operate independently of BioAgilytix and are not under our control. We provide links to other websites solely for your convenience and information. BioAgilytix is not responsible for the content, security, or privacy practices employed by other sites.

BioAgilytix may share information it collects from Site users with service providers who help us perform services such as managing communications and administering the Site. BioAgilytix engages a third-party service to collect and analyze data about your visit to our site to improve navigation and understand our website usage patterns. In addition, BioAgilytix contracts with an email service provider to send information you request on our site through the Contact Us forms and utilizes a customer relationship management system to store your contact information. BioAgilytix also contracts with a third-party to manage our website. Our service providers may use personal information as needed to deliver services on our behalf or comply with applicable laws and regulations. BioAgilytix enters into a contract with third-parties prior to sharing Personal Data to obtain assurances that the Agent will safeguard Personal Data consistent with BioAgilytix’s obligations. In limited cases, we may share information with other parties if appropriate to respond to your request or inquiry. We will share personal information in the event we sell or transfer all or a portion of our business assets, such as during a merger, acquisition, liquidation, or bankruptcy. We also may share personal information if we have a good faith belief that doing so is necessary to comply with applicable laws, respond to a legitimate request from law enforcement or other government body, to protect our interests or the health and safety of others, or to enforce our terms of use for this Site.

CHANGING YOUR PREFERENCES
If you have provided your consent, we may process personal information about you to send direct email marketing communications about our services. You may withdraw your consent at any time by clicking the “unsubscribe” link in the email footer. You may also withdraw consent by exercising Your Rights as described above.

If you would like to change any information you submitted to us or if you want to opt-out of receiving future communications from us or limit the use and disclosure of your information, please complete the form located here.

If you would like to manage cookies used by this site, the “help” section of the toolbar on most browsers will inform you on how to prevent your browser from accepting new cookies, how to have the browser notify you upon the receipt of a new cookie, or how to disable the use of cookies completely. However, if you configure your browser to decline cookies, certain features of our Site may not function correctly, and you may be required to reenter user IDs and passwords more frequently. Some browsers incorporate a “Do Not Track” feature that, when turned on, signals to websites and online services that you do not want to be tracked. Our site does not currently respond to Do Not Track signals.

We partner with third parties to either display advertising on our website or to manage our advertising on other sites. Our third-party partners may use cookies or similar technologies in order to provide you with advertising based upon your browsing activities and interests. If you wish to opt-out of interest-based advertising by third parties click here (or if located in the European Union click here). Please note, generic, non-personalized ads will continue to be displayed.

RIGHTS AVAILABLE TO INDIVIDUALS
You have the right to ask us about the processing of your personal information. Specifically, under applicable data privacy laws, and where contractual commitments require, BioAgilytix ensures that individuals can exercise all relevant informational rights with respect to their personal information collected by BioAgilytix, including, but not limited to, the right of access and correction, to withdraw consent at any time, object to data processing, request data deletion, restrict aspects of data processing. Where limitations apply, BioAgilytix will look at each circumstance and advise you of the reason we cannot comply with your request.

When BioAgilytix is a processor and not a Controller, it will take reasonable steps to help the appropriate Controller respond and will act on the reasonable direction of the Controller’s customers with respect to access.

If you are an EU resident and would like to exercise your rights provided under the GDPR, please refer to the contact information below and complete the form located here.

OTHER PRIVACY RELATED INFORMATION

Where We store and Process Personal Data
To facilitate our global operations, BioAgilytix may transfer, store and process your personal data within our corporate locations or with service providers based in the United States and Europe. Laws in these countries may differ from the laws applicable to your country of residence. We take appropriate steps to ensure that personal data is processed, secured and transferred according to applicable law. Where we transfer personal data from the European Economic Area to other countries in which applicable laws do not offer the same level of data privacy protection, we have ensured that appropriate safeguards are in place through the use of written agreements with recipients that require them to provide the same level of protection for the data.

Data Retention
We will keep personal information about you for as long as we provide services, as long as you work for or with us, or as long as we are addressing a concern, question, complaint, or request you have made to us, as applicable to our interactions with you. If we have a contract or other agreement with a customer, we will follow the retention obligations of that agreement.

We may keep data longer if we have a legal obligation to keep it or to maintain necessary records for legal, financial, compliance, or other reporting obligations, and to enforce our rights and agreements. When we no longer need personal data, we securely delete or destroy it.

Security
BioAgilytix takes reasonable and appropriate measures to protect personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction, considering the risks involved and the nature of the personal information. We also have implemented measures to maintain the ongoing confidentiality, integrity and availability of the systems and services that process personal information, and will restore the availability and access to data in a timely manner in the event of a physical or technical incident. Still, no system can be guaranteed to be 100% secure. If you have questions about the security of your personal information, or if you have reason to believe that the personal information that we hold about you is no longer secure, please contact us immediately as described in this Privacy Notice.

Privacy Shield
BioAgilytix complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Data transferred from the European Union and Switzerland to the United States, respectively. BioAgilytix has certified to the Department of Commerce that it adheres to the Privacy Shield Principles. If there is any conflict between the terms in this Privacy Notice and the Privacy Shield Principles, the Privacy Shield Principles shall govern. Individuals can learn more about the Privacy Shield program, individual rights, and our participation in the program by visiting: https://www.privacyshield.gov/Individuals-in-Europe

BioAgilytix acknowledges that it is subject to the jurisdiction of the U.S. Federal Trade Commission for compliance and enforcement of the Privacy Shield and Swiss Privacy Shield.

BioAgilytix may share Personal Data with contracted third-parties who act as a Controller or other processors at the direction of those Controllers. BioAgilytix shall enter into a contract with third-party Controllers prior to sharing Personal Data requiring that data may only be processed for limited and specified purpose consistent with the consent provided by the individual, that third-party Controller provides the same level of protection and notify BioAgilytix if it can no longer meet this obligation.

Under the Privacy Shield Principles, individuals have the right to opt out of (i) disclosures of their personal information to third parties; or (ii) uses of their personal information for a purpose that is materially different from the purpose(s) for which it was originally collected or subsequently authorized by the individual. BioAgilytix may share Personal Data with contracted third-parties who act as an Agent and provide services to BioAgilytix in furtherance of data Processing. BioAgilytix shall enter into a contract with third-party Agents prior to sharing Personal Data to obtain assurances that the Agent will safeguard Personal Data consistent with this Privacy Policy and BioAgilytix’s obligations under the Principles.

BioAgilytix shall remain liable under the Principles if its Agent Processes such Personal Data in a manner inconsistent with the Principles, unless BioAgilytix proves that it is not responsible for the event giving rise to the damage.

Recourse, Enforcement, and Liability
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request

This independent dispute resolution process is provided at no cost to the individual. Under certain conditions an individual may choose to invoke binding arbitration to resolve any residual complaints not resolved by BioAgilytix or its third party dispute resolution provider. If an individual formally invokes binding arbitration, BioAgilytix will follow the terms set forth in Annex 1 of the Privacy Shield Framework. For more information on binding arbitration visit: https://www.privacyshield.gov/article?id=ANNEX-I-introduction

To contact BioAgilytix for Privacy Shield-related issues, please use one of the contact methods below:
Complete the form here
Call BioAgilytix at +1.919.381.6097

HOW TO CONTACT US

If you have any questions about this Privacy Notice, you may contact us at:

Data Protection Officer
BioAgilytix Labs, LLC
2300 Englert Drive

Durham, NC 27713
Telephone number: 919.381.6097
[email protected]

European Data Protection Officer
[email protected]