Privacy Policy
We take the topic of data protection very seriously. Here you will find important information regarding your personal data protection.
This Privacy Policy is designed to meet the requirements of the EU General Data Protection Regulation (“GDPR”) and the Swiss Federal Data Protection Act (“FDPA”). However, whether and to what extent these laws are applicable depends on the individual case.
Application area and controller
This Privacy Policy informs you about the nature, scope and purpose of the collection and use of personal data when we provide our services or when you visit our website. The responsible controller of your personal data is:
Memo Therapeutics AG
Wagistrasse 27
8952 Schlieren / Zurich
Switzerland
Tel: +31 6 1265 8790
E-Mail: lisanne.vankouterik@memo-therapeutics.com
You can contact our data protection officer in accordance with Art. 37 GDPR under the email address above.
Access data and server log files
We automatically collect and store information in so-called server log files, which your browser automatically transmits to us. Access data include:
- Name of accessed website
- Data and time of access
- Transmitted data quantity
- Report about successful access
- Browser type and version, user operating system
- Referrer URL (URL referring to our website, e.g. Google search)
- IP address and requesting provider
We use the log data only for statistical analyses for the purpose of the operation, the security and optimization of the service. However, we reserve the right to check the log data retroactively if there is a justified suspicion of unlawful use on the basis of concrete evidence.
Handling of personal data
Personal information is information that helps a person to be identified, i.e. information that can be traced back to a person. This includes name, email address or phone number. But also data about preferences, hobbies, memberships or which websites somebody has accessed are among personal data.
The personal data we process about you may include:
- Your name and contact details (such as name, postal address, phone number or email address), and other basic information
- Identification and background information provided by you or collected as part of our on-boarding process
- Contractual data (e.g. initiation, conclusion, development and management of contracts, payment information, official documents such as identification details, extract from the commercial register)
- Communication data, such as the content of written correspondence
- Technical data (e.g. your IP address)
- Behavioral and preference data
- Pseudonymized health data, genetic data and data on your ethnicity if you participate in a clinical research studies
- Any other information relating to you which you may provide to us
Basis of data processing
Personal data are only collected, used and passed on by us if permissible by law, if it is necessary for the performance of a contract, if we have legitimate interests or if users consent to the collection of data.
We have a legitimate interest in particular in the processing for the purposes described below (“earmarked data usage”) and in the disclosure of data described below (“data transfer abroad”).
Earmarked data usage
We process your personal data:
- To communicate with you
- To provide and improve our services to you
- To inform you about our services and activities
- To process any contract we have with you
- To provide and improve our websites
- To ensure the security of this website
- To analyze user behavior on this website
- To comply with legal requirements
- To review application materials received with a view to a potential employment
- For administrative purposes
- To conduct clinical research studies, in which case we will provide you with more detailed information on the use of your personal data through an informed consent form (“Informed Consent Form”)
We respect the principle of earmarked data usage and collect, process and store your personal information only for the purposes for which you have provided us with it.
For research and development purposes, we process anonymized patient data, which – due to their anonymization – do not constitute personal data.
Who we share your personal data with
A transfer of your personal data to third parties will not take place without your explicit consent, unless this is necessary for providing the service or for implementing the contract or we have a legitimate interest.
Therefore, we may share your personal data with trusted third parties (“Trusted Third Parties”). These third parties involved are contractually obligated to process the personal data exclusively on our behalf and in accordance with our instructions and to ensure the security of the personal data by means of appropriate and organizational measures (Art. 9 FADP and Art. 28 GDPR). Such third parties include but are not limited to:
- Suppliers to whom we outsource certain support services
- IT service providers
- Accountants
- Third parties engaged in the course of the services we provide to clients
Besides the above mentioned recipients, we will share your personal data within our company only to those persons who need this data to fulfill contractual and legal obligations or for the implementation of our legitimate interest. Furthermore, we will pass on your personal data to our affiliated company in the USA for the purposes of our management or provision of services.
In compliance with legal obligations and where necessary, we may share your personal information with public authorities, courts, regulators, government agencies and law enforcement agencies.
Data transfer abroad
If relevant and necessary or if permitted based on your consent, we may transfer your personal data to some of our partners in the EU, which provide us with different services. We may also share your personal data with our affiliated company as well as with partners in the USA, where there is no adequate level of data protection as in Switzerland. If we transfer data to a country without adequate legal data protection, we ensure that there are appropriate safeguards to protect your personal data (namely based on the standard contractual clauses of the European Commission or on the legal basis of consent).
We will usually transfer your personal data to recipients abroad on the basis that such a transfer is necessary for the performance of an agreement with the data subject, for an agreement or performance of an agreement concluded in the interest of the data subject or for the establishment, exercise or defense of legal claims or based on the consent of the data subject.
Protection of personal data
We have taken technical and organizational security measures to protect your personal data from loss, destruction, manipulation and unauthorized access. Our security measures are being continuously reviewed and optimized in line with technological developments.
We also take company-internal privacy very seriously. We have bound our employees and our commissioned service companies to secrecy and to complying with all data protection regulations. When using a service on our website, your personal data will be transmitted to us. In order for those not to fall into the wrong hands, we encrypt them using the SSL method (Secure Socket Layer). The SSL method is currently the most common and secure data transmission method on the Internet.
How does the SSL method work?
The Secure Socket Layer (SSL) method protects data that a customer sends over the Internet to a company’s server. SSL provides triple protection:
- It ensures that a form is returned only to the server from which it was opened
- It checks whether data reach their respective recipient in full and unaltered
- SSL is used every time you see a small (usually green) lock on the bottom left of your browser’s status bar
Handling contact requests
When contacting us via our contact form, user details will be stored for the purpose of processing the request as well as in the event that follow-up questions arise. We will not share these data without your consent, except with the service provider of the contact form, who is a Trusted Third Party and obliged to process the personal data received exclusively on our behalf and in accordance with our instructions, and to ensure the security of your personal data by means of appropriate technical and organizational measures.
Handling newsletter data
If you would like to receive the newsletter provided on the website, we will need an email address from you, as well as information allowing us to verify that you are indeed the owner of the specified email address and that you agree to receive the newsletter (double opt-in). No further data are collected. We use these data exclusively for the transmission of the requested information and do not pass them on to third parties, except to the service provider of the contact form, who is a Trusted Third Party and obliged to process the personal data received exclusively on our behalf and in accordance with our instructions, and to ensure the security of your personal data by means of appropriate technical and organizational measures. You can revoke at any time your consent to storing your data and your email address as well as their use for sending the newsletter.
Retaining your personal data
We retain your personal data for as long as it is necessary for the purposes for which the data is collected, and as long as we have a legitimate interest in keeping personal data, for example to enforce or defend claims or for archiving purposes and IT security. We also retain your personal data as long as it is subject to a legal retention obligation. If there are no legal or contractual obligations to the contrary, we will delete or anonymize your personal data after the storage or processing period has expired as part of our usual processes.
Use of services and contents by third parties
It may happen that content by third parties, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are included as part of this online service. This always presupposes that the providers of these contents (hereinafter referred to as “third party providers”) detect the users’ IP address. For without the IP address, they could not send the content to the browser of the respective user. The display of these contents therefore requires the IP address. We attempt to use only content whose respective providers use the IP address solely for content delivery. However, it is outside our sphere of influence whether third parties store the IP address for e.g. statistical purposes. Whenever we are aware of this, we will inform the users about it.
Use of cookies
In order to make your visit to the website appealing and to enable the use of certain functions, the website uses so-called cookies on various pages. These are small text files stored on your device (e.g. mobile phone, tablet, PC). Some of the used cookies are deleted following any given browser session, i.e. after closing your browser (so-called session cookies, such as ‘are you logged in?’). Other cookies remain on your device and make it possible to recognize your browser upon your next visit (so-called persistent cookies, such as the storage of your login data upon request). You can set your browser in such a way as to being informed about the placement of cookies and you can decide for yourself about their acceptance; or you can reject them by default. We hereby point out that the functionality and the comfort of use might be reduced when disabling cookies. More information here:
https://support.google.com/accounts/answer/32050
For further information, please see our cookie policy here:
Use of web fonts
These websites use external fonts, i.e. Google Fonts. Google Fonts is a service by Google Inc. (“Google”). The integration of these web fonts occurs via a server call, usually a Google server in the USA. This transmits to the server, which of our websites you have visited. Google also stores the IP address of the browser installed on the terminal of this website’s visitor. For more information, please see Google’s data protection information accessible here:
Social Media Plugin
Our website uses a so-called social plugin (“plugin”) from LinkedIn Corporation (“LinkedIn”).
In order to increase the protection of your data when you visit our website, this button is not fully integrated into the page as plugin, but only using an HTML link. This type of integration ensures that no connection is established with the server of the aforementioned social network when a page of our website containing such button is accessed. When you click on the button, a new browser window opens and calls up the page of the respective network provider, where you can interact with the plugin there (if necessary after entering your login data).
The purpose and scope of the data collection and the further processing and use of the data by the social network as well as your rights in this regard and setting options to protect your privacy can be found in the data protection notice of LinkedIn:
Your rights
You are entitled to ask for details of the personal data we hold about you and how we process it and to receive a copy of your personal data. You may also have your data rectified or deleted, restrict our processing of that information, and object to the processing of your personal data. You may also choose to withdraw your consent and request further information necessary for the exercise of your rights. To do this, please contact: lisanne.vankouterik@memo-therapeutics.com.
Please note that even after you have chosen to withdraw your consent we may be able to continue to process your personal data to the extent required or permitted by law. In particular, the obligations of clinical trial legislation may impede the exercise of certain rights, for example, in order to maintain the integrity of clinical trial data. You may also lodge a complaint in relation to our processing of your personal data with a local supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner, with its registered office at Feldeggweg 1, 3003 Berne, Switzerland, email: info@edoeb.admin.ch.
Contact details of supervisory authorities of EU Member States can be found at:
Contact
Amendment of this privacy policy
This privacy policy is not part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.