Karyopharm Therapeutics Inc. (“Karyopharm,” “we” and “our”) respects the privacy of visitors to our website, and recognizes your need for appropriate protection and management of the personally identifiable information (also referred to as personal data or personal information) you share with us.
Data Collection: Karyopharm only collects personally identifiable data (such as your name, address, telephone number, email address, title, and website visit information) when you voluntarily submit it to Karyopharm, or explicitly consent to its collection.
Purposes of Processing: Karyopharm processes personally identifiable information on the website in the following ways:
- We will process information voluntarily submitted to us, such as your name, contact information, interests, and role, in order to contact you to obtain more information, provide you with information that you have requested, or provide additional information which Karyopharm believes may be of interest to you.
- We may automatically collect information via cookies and related technologies, about your use of this website, in order to understand how the website is used and how you interact with our website in order to tailor and improve this website.
Data Sharing: Personally identifiable information about you, which is collected from this website, will not be transferred outside Karyopharm without your prior consent, except where permitted by applicable law, but may be used within Karyopharm, or by a third-party acting as an agent of Karyopharm, for processing and mailing purposes.
Third-party service providers may also act on our behalf to collect and use data that assists in the hosting, maintenance, and improvement of this website. This website is hosted and maintained within the United States.
Karyopharm maintains contracts with third-parties who process information on Karyopharm’s behalf, which are intended to provide adequate safeguards for your personally identifiable information (e.g., restriction of their access, use, retention and disclosure of personally identifiable information, solely to meet their contractual obligations in the performance of the specific functions described above). A copy of these safeguards may be made available by writing to us at the address provided in the Contact Us section below.
Karyopharm and its agents may exchange such information with each other or with you over the Internet or intranet systems for the purposes of carrying out the activities described above.
Retention: Karyopharm may maintain the data collected in an electronic database. Karyopharm will store and maintain your Personal Data for as long as necessary (i) for the purposes for which it was collected, (ii) to meet its current and future legal obligations, including in compliance with Karyopharm’s records retention policy, and (iii) as permitted to meet its legitimate interests. Please note that you may have the right to request the correction or deletion of your Personal Data as explained below and as required by applicable law.
Data Protection: While Karyopharm makes reasonable efforts to protect the information collected through this website, please be aware that there is always some risk involved when submitting data over the Internet. We cannot guarantee that our website is 100% safe from illegal tampering or “hacking.” Any data transmitted over the Internet may be at risk; however, once it is received at Karyopharm and entered into its database, it has the same protection that Karyopharm extends to its own confidential information.
Children’s Policy: We are committed to protecting the privacy of children. Our website is not intended for use by, or designed to attract, children under the age of 16. As noted above, we do not collect personally identifiable information unless you provide it to us – including an individual’s age. If at any time we are informed that a visitor under the age of 16 has submitted information to us through this website, we will endeavor to delete the information.
Cookies: Our website uses both “persistent” and “non-persistent” cookies and related technologies (“cookies”), which are small data files that a server sends or technology that is stored on your browser device, or the page you are viewing when you access a website. We use “non-persistent cookies” to provide you with the best presentation of our contents as you navigate our website. Some of these “non-persistent cookies” are considered essential to the functioning of the website and are automatically deleted when you close your web browser.
We use “persistent cookies” to track page visits and how you interact with our website, including pages visited and links clicked, in order to help us analyze our website usage more accurately and tailor your experience. Web browsers may offer users of our websites the ability to disable receiving certain types of cookies; however, if cookies are disabled, some features or functionality of our websites may not function correctly. The “help” menu on most internet browsers contains information on how to disable cookies, or you can visit http://aboutcookies.com/ .
Accuracy of Personally Identifiable Information: While we take various steps to ensure the accuracy and completeness of your Information, we rely upon you to provide accurate and complete Information when interacting with us.
Your California Privacy Rights: While Karyopharm does not provide your personally identifiable information to third parties for their use in marketing, under California law, California residents have the right to opt-out of such use of their personally identifiable information if it occurred.
Your Rights in Connection with Your Personally Identifiable Information: Under certain circumstances, and as required by law you may have the right to:
- Request access to your personally identifiable information. This enables you to receive a copy of the personally identifiable information we hold about you.
- Request correction of any incomplete or inaccurate personally identifiable information that we hold about you.
- Request erasure of your personally identifiable information when there is no need for us to continue processing it, or you have exercised your right to object to processing (see below).
- Object to processing of your personally identifiable information where we are relying on a legitimate interest (or those of a third party), and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personally identifiable information to suspend the processing, for example if you want us to verify its accuracy or the reason for processing it.
- Request the transfer of your personally identifiable information to another party.
You will not have to pay a fee to access your personally identifiable information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. In addition, there may be requests that we are unable to process because of other EU legal requirements. If a request is denied, we will notify you of the reason.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is an appropriate security measure to ensure that personally identifiable information is not disclosed to a person who doesn’t have the right to receive it.
Karyopharm Therapeutics Inc.,
Attn: Associate General Counsel,
85 Wells Ave., 2nd floor,
Newton, MA 02459 USA
For EU individuals, any inquiries or complaints may also be addressed to our subsidiary located in Germany, by regular mail sent to:
Karyopharm Europe GmbH,
Attn: Managing Director
If you are located in the EU, you have the right to lodge a complaint with an EU Supervisory Authority. However, if you have a complaint regarding the processing of your personally identifiable information, we request that you first contact us, and we will reply on timely basis.
Data Controller: As it pertains to users of our website located in the EU, the controller of your personally identifiable information is Karyopharm Therapeutics Inc.
Legal Basis of Processing: Some jurisdictions require we explain the legal basis for the collection and processing of personally identifiable information. We have several different legal grounds on which we collect and process personally identifiable information, including: (i) as necessary to perform a transaction (such as to provide the services you requested); (ii) as necessary to comply with a legal obligation; (iii) consent (where you have provided consent as appropriate under applicable law, such as for marketing or certain cookies); and (iv) necessary for legitimate interests (such as when we act to maintain our business generally, including maintaining the safety and security of the website).
EU-US PRIVACY SHIELD POLICY
With respect to transfers from the European Union (“EU”), while the European Court of Justice has held that the EU-U.S. Privacy Shield Framework (the “Privacy Shield”) is no longer “adequate” for the transfer of personally identifiable information (“Personal Data”) from the EU to the U.S., Karyopharm Therapeutics Inc. (“Karyopharm” or “Company”) continues to abide by the privacy principles and other requirements of Privacy Shield with respect to personal data we collect in the U.S. from data subjects in the EU. In addition, Karyopharm has implemented other appropriate cross-border transfer solutions, such as Standard Contractual Clauses, to provide adequate protection for transfers of certain Personal Data from the EU to the U.S.
Effective Date: May 18, 2018
Karyopharm complies with the Privacy Shield as set forth by the US Department of Commerce regarding the processing of Personal Data transferred from the EU to the US (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway). Karyopharm has certified that it adheres to the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability (“Privacy Shield Principles”). If there is any conflict between the policies in this EU-US Privacy Shield policy (“Policy”) and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view our certification page and a full list of self-certified companies, please visit https://www.privacyshield.gov.
Scope: This Policy applies to Personal Data other than human resources (“HR”) personal data, that is received by Karyopharm in the US from the EU (For further information about Personal Data covered by this Policy, please see section “Types of Personal Data Collected” below.). Karyopharm commits to comply with the Privacy Shield Principles in respect of such Personal Data.
Types of Personal Data Collected: “Personal Data” is any information that can be used to identify an individual that is received from the EU, and is recorded in any form. Personal Data includes Sensitive Data. “Sensitive Data” is Personal Data that specifies medical or health conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or information specifying the sex life of the individual.
We may collect the following types of Personal Data: Personal Data pertaining to our vendors, contractors and consultants as well as clinical research participants, study investigators and their staff, medical and healthcare professionals and pharmaceutical industry experts and opinion leaders. Personal Data may include full name, address, telephone or mobile number, business and home contact details including e-mail addresses, health information and demographic information, as well as other Personal Data that you voluntarily provide to us, such as when you contact us with inquiries. Personal Data may further include any information that identifies an individual, but does not include information that has been anonymized.
Purposes of Data Processing: Personal Data that may be collected will be used for the purpose of supporting Karyopharm’s business activities related to the development of drug candidates for the treatment of diseases, including performing clinical research or programs and for maintaining and improving company internal systems.
PRIVACY SHIELD PRINCIPLES
Notice: This Policy provides notice of the Personal Data collected and transferred under the Privacy Shield, including its use, and handling, and how you may exercise your Privacy Shield rights. This Policy also provides information about other Privacy Shield principles that are set forth below.
Choice: You may tell us not to disclose (“opt out”) your Personal Data: You may contact Karyopharm’s Associate General Counsel at firstname.lastname@example.org to exercise your opt out preferences. We will not collect or use your Sensitive Data unless you provide your affirmative express consent (opt in).
Accountability for Onward Transfers: Karyopharm may occasionally transfer Personal Data to a limited number of third-party contractors, service providers and other businesses involved in the normal operations of our business, for example, contract research organizations (CROs) or other businesses that are involved in clinical study management and drug development as is commonly done in our industry to assist us in meeting business operation needs and to perform certain services and functions on our behalf and under our instructions. These parties may access, process or store Personal Data in the course of performing their duties to Karyopharm. We maintain contracts with these providers, which restricts their access, use and disclosure of Personal Data, solely to meet their contractual obligations in the performance of the specific functions described above.
Karyopharm may be required to disclose Personal Data to the extent required to meet a legal obligation, including national security or law enforcement obligations and applicable law, rule, order, or regulation.
We may also disclose Personal Data to other corporate entities in case of corporate sale, merger, reorganization, financing due diligence, dissolution or similar event.
Security: Karyopharm maintains reasonable and appropriate security measures to protect Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction in light of the risks inherent in processing this information.
Data Integrity and Purpose Limitation: We will take reasonable steps to ensure that Personal Data is reliable for its intended use, accurate, complete and current. We will adhere to the Privacy Shield principles for as long as we retain Personal Data about you.
Recourse, Enforcement, Liability: In compliance with the Privacy Shield Principles, Karyopharm commits to resolve complaints about our processing of your Personal Data. Individuals in the EU with inquiries or complaints regarding this Policy should first contact Karyopharm at: email@example.com or by regular mail addressed to:
Karyopharm Therapeutics Inc.
Attn: Associate General Counsel
85 Wells Ave., 2nd floor
Newton, MA 02459
Any inquiries or complaints can also be addressed to our subsidiary located in Germany, by regular mail sent to:
Karyopharm Europe GmbH
Attn: Managing Director
Karyopharm has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to the International Centre for Dispute Resolution®, the international division of the American Arbitration Association, a not-for-profit alternative dispute resolutions organization located in the United States. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit http://go.adr.org/privacyshield for more information and to file a complaint.
Please note that if your complaint is not resolved through these channels, under limited circumstances, a binding arbitration option may be available before a Privacy Shield Panel. For additional information, please visit: https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
With respect to Personal Data received or transferred pursuant to the Privacy Shield, Karyopharm is subject to the investigatory and enforcement powers of the Federal Trade Commission.
Karyopharm remains responsible and liable under the Privacy Shield Principles if third-party agents that it may engage to process Personal Data on its behalf do so in a manner inconsistent with the Privacy Shield Principles, unless Karyopharm proves that it is not responsible for the event giving rise to the damage.
Changes to the Policy: We reserve the right to amend this Policy from time to time consistent with the Privacy Shield’s requirements.