Links to Third Party Websites
Collection of Your Personal Information
- Personal Information You Provide
When you use our Sites, Amylyx collects information about you. This includes information that identifies you or can be used to identify you (“Personal Information”). You may voluntarily provide certain Personal Information to us in order to use certain features available on the Sites. These features may include: (a) applying for employment through our “Careers” page; (b) sending us a message through our “Contact Us” page or signing up for communications through our “Subscribe” page; and/or (c) registering for an Amylyx meeting or event through our event registration page. In connection with your use of our Sites, we may ask you to provide Personal Information, such as personal and business contact information and preferences (e.g., name, job title and employer name, email address, mailing address, and phone number); your identification, such as whether you are a patient, provider, family member or caregiver; professional credentials and educational and professional history; information of the type included on a resume or curriculum vitae; and username and password that you may select in connection with establishing an account on our website or mobile application.
2. Information We Collect Automatically
We also automatically collect certain information, including Personal Information, about you when you interact with our Sites. For example, we may use website analytics tools on our Sites to retrieve information from your browser, including the website you came from, the search engine and the keywords you used to find our Sites, the pages you view within our Sites, your browser add-ons, and your browser’s width and height. We may also use technologies, such as cookies, to collect information about the pages you view, the links you click and other actions you take on our Sites. Additionally, we collect certain standard information that your browser sends to every website you visit, such as your IP address, browser type and language, access times and referring website addresses.
Use of Your Personal Information
Amylyx collects and uses your Personal Information to operate and improve its Sites, its products and services. These uses may include providing you with more effective services; making the Sites or services easier to use; performing research and analysis aimed at improving our products, services, communications and technologies; and displaying content that is customized to your interests and preferences.
We also use your Personal Information to communicate with you. We may send certain service communications such as information on technical service issues, information about our investigational products, programs, and business and security announcements.
Amylyx may also use your Personal Information to inform you of other activities of Amylyx and its affiliates and partners, process employment applications, respond to your inquiries and requests including investment and strategic collaboration inquiries, investigate and respond to misuse of our Site, and comply with applicable regulatory and legal requirements, judicial process and Amylyx policies.
We may combine information you give us with other information from our sources, transactions and communications. This may include, but is not limited to, information from direct mail, events, products and applications, or other interactions you have with Amylyx (for example, by telephone or in person). We may also combine that information with data that is publicly available and data from third parties. In addition, we may aggregate and/or de-identify the Personal Information we collect to create information that does not identify any individual, and use that information for the above-listed purposes and other business purposes.
Sharing Your Personal Information
Amylyx does not rent, lease, sell or exchange Personal Information with other organizations.
Amylyx may, however, share Personal Information with service providers to help perform statistical analysis, send you email or postal mail, host our Sites, respond to communications you send to us, or provide customer support. We may also share Personal Information with other business partners with whom we collaborate regarding our investigational products and programs such as scientific advisors, joint venture partners, and strategic collaboration partners. All such third parties are prohibited from using your Personal Information except to provide these services to Amylyx, and they are required to maintain the confidentiality of your Personal Information.
Amylyx may disclose your Personal Information, without notice, if required to do so by law or in the good faith that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on Amylyx; (b) protect and defend the rights or property of Amylyx or a third party; (c) act under exigent circumstances to protect the personal safety of users of the Sites, or the public; and/or (d) assist in fraud protection or investigation.
We may also share Personal Information we collect or create in connection with a purchase, transfer, or sale of Amylyx or its assets, such as in a merger or corporate reorganization. If this occurs, the Personal Information will be subject to the policies of the receiving organization.
Security of Your Personal Information
Amylyx uses a variety of security technologies and procedures to help protect your Personal Information from unauthorized access, use, or disclosure. However, like other companies, Amylyx cannot guarantee the security or confidentiality of the Personal Information you provide to us. As a result, while we strive to protect your Personal Information, you acknowledge that: (a) there are security and privacy limitations inherent in the Internet which are beyond our control and (b) security, integrity, and privacy of any and all information and data exchanged between you and us through our Sites cannot be guaranteed.
Use of Service Providers
We may transfer Personal Information to service providers (including our affiliates acting in this capacity) that perform services for this website and for our operations on our behalf. These service providers and affiliates may be located outside of the jurisdiction where you reside and your personal information may be transferred to, processed and stored outside of the jurisdiction where you reside. Your personal information will be subject to applicable foreign legal requirements, which may include lawful requirements to disclose personal information to government authorities in certain circumstances that differ from the laws of the jurisdiction where you reside.
If you have questions or would like more information about the handling of personal information by our service providers, please contact the Head of Global Compliance & Legal at Amylyx via firstname.lastname@example.org.
How Long We Keep Your Personal Information
We retain your Personal Information in accordance with our business needs and for legal, regulatory, audit and tax requirements for as long as allowed or required by applicable law. After this period the Personal Information relating to your use of our Sites will be deleted; however, any Personal Information which you have provided to us for receiving information, newsletters and event invitations will be kept until you notify us that you no longer wish to receive this information.
Cookies are small amounts of data which your web browser stores on your device at the request of certain websites. Cookies are then sent back to the originating web domain on your subsequent visits to that domain. Most pages contain elements from multiple web domains so when you visit the website, your browser may receive cookies from several sources.
Cookies are useful because they allow a website to recognize a user’s device. Cookies allow you to navigate between pages efficiently, remember preferences and generally improve the user experience.
They can also be used to tailor advertising to your interests through tracking your browsing across websites.
There are two primary types of cookies that are used: session cookies and persistent cookies. Session cookies are deleted automatically when you close your browser and persistent cookies remain on your device after the browser is closed (for example to remember your user preferences when you return to the site). Each cookie typically falls into one of several categories:
- Strictly Necessary Cookies – We make use of certain essential cookies in order to enable you to move around the Sites and use their features. Without these cookies, services you have asked for (such as navigating between pages) cannot be provided.
- Performance Cookies – We make use of analytics cookies to analyze how our visitors use the Sites to monitor the Sites’ performance. This allows us to provide a high quality experience by customizing our offering and quickly identifying and fixing any issues that arise. For example, we might use performance cookies to keep track of which pages are most popular and which method of linking between pages is most effective, and to determine why some pages are receiving error messages. We might also use these cookies to highlight articles or site services that we think will be of interest to you based on your usage of the website.
Furthermore, some of our service providers that set cookies via our Sites on our behalf may offer the ability to opt-out of cookies via the Network Advertising Initiative’s consumer opt-out tool, the European Interactive Digital Advertising Alliance’s consumer opt-out tool, or the Digital Advertising Alliance’s consumer choice page.
Please note that Amylyx is not responsible for the cookie practices of third-party websites which may be linked to on our Sites.
Children Under Thirteen
Our Sites are not directed to children under the age of 13. Amylyx does not knowingly collect Personal Information from children under the age of thirteen through our Sites. If we learn that we have collected Personal Information directly from a child under the age of 13 through the Sites, we will delete that information.
From time to time and in accordance with applicable law, Amylyx may contact you via email for the purposes of responding to your communications to us and/or providing announcements, updates, alerts, confirmations, surveys, and/or general communication, if you have given us your email address.
If you would like to stop receiving email from Amylyx, you may opt out of such communications by clicking “Unsubscribe” at the bottom of the email.
Your Privacy Choices and Rights with Respect to Personal Information
You may update the Personal Information you provide to us through the Sites, and your associated communications preferences, at any time by following the instructions on the relevant page of the Sites or by contacting us at email@example.com. If you have provided Personal Information to us through a third-party employment website, you should contact that website to update that Personal Information or your communication preferences related to that website.
Users in the European Economic Area and the United Kingdom
- Our legitimate interests, such as operating our business
- Performance of an employment or other contract with you or pre-contractual measures
- Compliance with our legal obligations
- With your consent, when applicable
By submitting an employment application to Amylyx through a third-party employment website (if applicable), you are consenting to Amylyx’s processing of your Personal Information (including special categories of data) in connection with Amylyx’s consideration of your application and for Amylyx’s compliance with applicable laws.
Data protection laws in the EEA and UK may provide you the following legal rights with respect to your Personal Information used and shared by Amylyx:
- To withdraw consent at any time, if we are using and sharing your Personal Information on the basis of consent
- To access the Personal Information that Amylyx has about you
- To request that Amylyx rectify or erase your Personal Information
- To request that Amylyx restrict the way it uses or shares your Personal Information
- To object to the way Amylyx uses or shares your Personal Information
- To ask Amylyx to transfer your Personal Information to someone else
- To lodge a complaint with a data protection authority in the EEA or UK
Amylyx’s ability or obligation to comply with your requests may be limited by applicable law.
To request to exercise one of these rights, please contact us at firstname.lastname@example.org.
Users in Select U.S. States
Amylyx does not sell “Covered Information” as defined under Nevada law. If you would like to make a further inquiry regarding the selling of your Covered Information, as defined under Nevada law, please contact us at email@example.com. Be sure to include your name, address, and email address if you want to receive a response by email. Otherwise, we will respond by postal mail within the time required by applicable law.
a. Your Privacy Rights Regarding Direct Marketing
California Civil Code Section 1798.83 permits individual California residents to request certain information regarding Amylyx’s disclosure of Personal Information to third parties for the third parties’ direct marketing purposes. Amylyx does not provide your Personal Information to third parties for their use in marketing.
b. California Consumer Privacy Act – Notice for California Residents
If you are a California resident, this section supplements the information above regarding the collection, use, and disclosure of your Personal Information.
The California Consumer Privacy Act of 2018 (“CCPA”) gives California consumers the right to know what Personal Information is collected about them, how it will be used and to whom it is disclosed. The CCPA gives California consumers the right to request access to and deletion of their Personal Information, and the right to request that their Personal Information not be sold to the extent applicable under the CCPA.
The purpose of this notice is to describe our practices regarding the collection, use, disclosure, and sale of Personal Information and instructions for submitting CCPA data privacy requests. Some of the Personal Information that we collect, use, and disclose may be exempt from the CCPA because it is regulated by other federal and state laws that apply to us.
i. Your Rights
The CCPA provides you (as a California resident) with specific rights, subject to certain exceptions.
- Right to Know. You have the right under the CCPA to request that we disclose what Personal Information we collect, use, disclose, and sell. The process for exercising this right is describe below in the “How to Submit a Data Privacy Request” section. Please note that we may not be required to provide you access to the specific pieces of information we have collected about you or delete information if we are unable to verify your identity.
- Right to Deletion. You have the right under the CCPA to request deletion of any Personal Information about you that we have collected from you. The process for exercising this right is describe below under the “How to Submit a Data Privacy Request” section. We may not be required to delete Personal Information under certain circumstances. Specifically, the CCPA includes exemptions that provide that we do not have to delete information that, for example, is necessary to comply with legal obligations including those pertaining to the quality, safety or effectiveness of a product or activity regulated by the Food and Drug Administration (FDA), complete a transaction, detect security incidents, or for certain other internal purposes.
- Right to Opt-Out. You have the right under the CCPA to opt-out of the sale of your Personal Information. The CCPA defines “sale” broadly to include sharing, transferring, disclosing or otherwise communicating Personal Information with a third party for monetary or other valuable consideration. We do not sell your Personal Information.
- Right to Non-Discrimination. You have the right under the CCPA not to be discriminated against for exercising your rights.
ii. How to Submit a Data Privacy Request
You may exercise your Right to Know and Right to Deletion by emailing us at firstname.lastname@example.org or by calling us at (857) 320-6200. To process your request to exercise your Right to Know and Right to Deletion, we must be able to verify your identity to a reasonable degree of certainty. To verify your identity, we will ask you to provide your contact information and additional identifiers based on your relationship with us. Before we process your request, we will match these data points with data points we currently maintain to verify your identity and your relationship with us.
You may designate an authorized agent to make a request to exercise your Right to Know or Right to Deletion on your behalf. When you use an authorized agent to submit such a request, you must provide the authorized agent with written permission to do so, and, in certain circumstances, we may ask you to verify your own identity directly with us. We may deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.
Changes to This Statement
Amylyx Pharmaceuticals, Inc.
43 Thorndike St.
Cambridge MA 02141
© 2020 Amylyx Pharmaceuticals, Inc. All rights reserved.