Iovance Biotherapeutics, Inc. Privacy Statement

By using this Site or sending Iovance your information, you accept the provisions of this Statement.

Privacy Statement
Last Updated: 16th of October, 2019
Version number: V1.2

Who are we?

We are Iovance Biotherapeutics Inc. located at 999 Skyway Road, Suite 150, San Carlos, California. Iovance Biotherapeutics, Inc. and its subsidiaries (collectively, “Iovance”) operates a variety of websites (individually a “Site” and collectively the “Sites”) designed to provide you with information and services, including but not limited to health resources, clinical information, and corporate news.  Whether you are a patient, healthcare provider, investor, or job applicant, respect for the privacy of your personal information is very important to us. This Privacy Statement describes how we handle information we learn about you when you visit any of our Sites. Iovance Sites that display this Privacy Statement (“Statement”) are committed to collecting, maintaining and securing your personal information in accordance with the terms of this Statement.

How do we collect your personal data?

Iovance will not collect personally identifiable information about you unless you provide it voluntarily. This means we only process your personally identifiable information on our Sites when you have given your consent to providing your personal data. Iovance will request your consent to collect your personally identifiable information when you register for a program or service. We will also offer you the option of discontinuing your consent (“opting out” or “unsubscribing”) if you later decide that you no longer want to participate in that program or receive additional information from us.  In these circumstances, we may need to continue for a limited period of time to process personally identifiable information that we collected from you prior to your revocation of consent in order to protect our legal rights and interests.

You can use many of our Sites without telling us who you are or revealing any personal information. Depending on which Site you visit, you may not be able to receive certain information unless you agree to provide us with personally identifiable information. The type of information collected from you will be based on the specific program that you register for, as indicated at the time of your registration.

What personal information do we collect?

The information that we may ask you to provide may include the following categories of personal  information:

  1. Your first and last name;
  2. Your mailing address;
  3. Your age;
  4. Your birth date;
  5. Your email address;
  6. Information about your medical condition(s);
  7. Internet protocol (IP) address of the computer you are using, including the browser software you use and your operating system; the date and time you accessed our Site; or the Internet address of the Site from which linked you directly to our Site and the name of the domain and host from which you access the Internet.
  8. We may provide opportunities to contact us to ask questions or provide comments, ideas, and/or suggestions. When you communicate with us and request a response, we may ask you for additional information such as specific contact information. If we collect this type of information, we will notify you as to why we are asking for it and how this information will be used. Your provision of such information to us is entirely voluntary.

Why do we collect your personal information?

Iovance limits the collection and processing of personal information to what is necessary to fulfill the purposes for which it is to be used. For example, Iovance may collect and process your personal information to register you for a specific program.
Iovance will not use your personal information for automated decision-making, including profiling.

Where Iovance intends to further process your personal information for a purpose other than that for which your personal information was collected, prior to that further processing Iovance will provide you with information on that other purpose and with any relevant further information, insofar as you do not already have the information.

How long do we store your personal information?
Iovance limits the duration of storage of personal information to what is necessary to fulfill the purposes for which it is to be used. If you opt-out or withdraw your consent Iovance may need to continue for a limited period of time to process personal information that we collected from you prior to your revocation of consent in order to protect our legal rights and interests.

Cookies

Where permitted by law, non-personally identifiable information and data may be automatically collected through the standard operation of Iovance’s Internet service or through the use of “cookies” or “internet tags” and other similar techniques. Cookies are small text files that are sent to your computer when you visit a Site. Cookies on Iovance Sites do a lot of different jobs, such as letting you navigate between pages efficiently, storing your preferences, and generally improving your experience with a Site.  There are four types of cookies:

  1. Necessary Cookies;
  2. Preference Cookies;
  3. Statistical Cookies;
  4. Marketing or Third-Party Cookies.

Necessary Cookies
Necessary Cookies are cookies which are placed on your computer in order to let our website function as intended. Without placing this cookie on your computer, our website will not be displayed correctly or will be not be usable at all. We always place these cookies.

Preference Cookies
These cookies allow our website to remember information that changes the way
our Site behaves or looks bases upon your preferences, such as your preferred language or the region you are in. Also these cookies can assist you in changing text size, font, and other parts of web pages that you can personalize.

Loss of the information stored in a preference cookie may make our website less functional but should not prevent it from working.

Statistical Cookies

These cookies allow for the customization of our website to visitor requirements. We may  use this data to compile traffic analysis statistics that can be used to improve our Site based on the success of a particular page. For example, we may measuring the number of visits to our Site, the number of pages viewed, what visitors do on our Site and how often they return to it.

Restricting Cookies
If you wish to restrict or block web browser cookies which are set on your device then you can do this through your browser settings; the Help function within your browser should tell you how. Alternatively, you may wish to visit www.aboutcookies.org, which contains comprehensive information on how to do this on a wide variety of desktop browsers.

Data Integrity and Security

Iovance takes reasonable steps to ensure that the personal information we collect from you is compatible with its intended use, accurate, complete, and current. We use appropriate technical, administrative, and physical safeguards to protect personal information that pertains to you from loss, misuse or alteration. In addition, we take steps to ensure that our safeguards consider new known threats. Of course, no organization can guarantee the absolute security of personal information. You should keep in mind that Internet transmissions, particularly email transmissions, are never 100% secure or error-free. Accordingly, we also caution you to guard your own computer and password against unauthorized access by others.

Sharing Your Information with Third Parties

Iovance will not share your personal information with third-parties for their own independent use unless we have obtained your informed consent to do so, except when Iovance is required to share your information with third-parties who have not been retained by Iovance such as when reporting possible adverse drug experiences or responding to inquiries during inspections or audits with health authorities, as a result of a due diligence conducted as part of a possible merger or acquisition or as ordered or directed by courts or other governmental agencies. Entities receiving your personal information under these conditions have privacy requirements that apply to their handling of your information.

When you provide personal information to Iovance, it will be accessible to some of Iovance’s third-party vendors or contractors, service providers, such as companies we retain to fulfill requests for information, answer telephone calls or provide assistance to us on specific programs or projects. In those cases, these other companies may also have access to your personal information. Iovance requires third-parties to whom it discloses your personal information to protect your personal information using substantially similar standards to those required by Iovance. We also require that they do not use your personal information for any independent use that is not specifically authorized by Iovance.

Sharing Your Information within the Iovance Group of Companies

In addition to the above circumstances, the information that you provide to Iovance may sometimes be shared with other departments within Iovance, as well as Iovance subsidiaries and affiliates, and this may mean that your personal information may be transferred outside of the U.S. to Iovance affiliates or companies in other countries. Other departments within the Iovance group, and other Iovance companies that may receive your information, will abide by substantially similar privacy requirements relating to your personal information.

Updating and Accessing Your Information

If you have provided information to us, we encourage you to update the information periodically. This will help us continue to provide information to you that best meets your needs.

In addition, Iovance complies with laws and regulations applicable to the right to amend your personal information in our files. These rights are limited in some ways. In addition, in order to protect your personal information from unauthorized access or alteration by third parties, all requests to update or access your personal information will be subject to verification of your identity.

If you wish to access or correct your personal information, where it is incorrect, you can contact the Iovance Legal Department and we will respond to your request.

Children’s Online Privacy

Iovance’s Sites are not directed at children. The services offered on our Sites are designed for individuals who are 18 years of age or older. For more information about protecting the privacy of children online in the United States under the Children’s Online Privacy Protection Act, please see http://www.ftc.gov/ogc/coppa1.htm (last accessed February 2018).

Links and Third-Party Sites

Our Sites may contain links or references to third-party websites. This Statement does not cover the practices of those websites. Accessing these sources requires that you leave our Sites. We do not control the content of these third-party websites, and we are not responsible for the privacy practices of those websites. Please review the privacy policies on each website that you visit.

Addendum for the European Economic Area (EEA).

To the extent Iovance receives or processes personal data directly from an individual located in the EU or European Economic Area (EEA) via this Site, or via electronic or regular mail from such individual, the following additional principles and disclosures pursuant to Article 13 GDPR shall apply:

(a) Identity and the contact details of the controller: Iovance Biotherapeutics, Inc., 999 Skyway Rd, San Carlos, California 94070, USA;

(b) Contact details for privacy matters: see: Iovance Data Protection Representative for the EEA”;

(c) Purposes of the processing for which the personal data are intended: for marketing purposes, for information about Iovance’s clinical trials, or to respond to inquiries by individuals pursuant to Art. 6 (1) (a) and (b) GDPR;

(d) The recipients or categories of recipients of the personal data: employees and consultants of Iovance who respond to the inquires;

(e) The personal data will be stored by Iovance for a period necessary to respond to the inquiry of the individual and to fully resolve the query;

(f)  You have the right at any time to request from Iovance:

  1. Access to the personal data that you provide to us;
  2. Rectification of the personal data that you provide to us;
  3. Erasure of the personal data that you provide to us;
  4. Restriction of processing concerning your personal data;
  5. Notification on the rectification or erasure of your personal data or the restriction of processing.
  6. Objection to the processing of personal data;
  7. The right to data portability of your personal data; and/or
  8. Your withdrawal of consent for the processing of personal data.

(In these cases, please send your email request to Iovance’ s privacy contact listed under Iovance Data Protection Representative for the EEA.) You are obliged to provide your personal data to Iovance (such as name and contact) so that Iovance can respond to the inquiry. We also may require you to call in to verify your identity.

Iovance will respond to your request within 30 days.

Iovance Data Protection Representative for the EEA.

Iovance has appointed a Data Protection Representative (DPR) for the EEA. The DPR for Iovance is DPO Consultancy, established in the Netherlands at Australiëlaan 12A, 5232 BB ‘s-Hertogenbosch, the Netherlands. For questions directed at the Iovance EEA DPR (including questions about your rights) please use the following email address:
info@dpoconsultancy.nl

You furthermore have the right to lodge a complaint with your data protection authority against the data processing done by Iovance. Before you do so we urge you to contact Iovance directly via the contact information below. We will do our best to help you out with any complaints you may have.

If you are visiting this site from a country other than the United States, your communication with us will necessarily result in the transfer of information across international boundaries. The level of legal protection for personal information is not the same in all countries; however, we will take the security measures described in this Statement in an effort to keep your personal data secure.

This Statement is effective as of October 29, 2019. Iovance may update this Statement from time to time based on, among other things, changes in applicable laws, development of new Sites and advances in technology. Iovance reserves the right to modify, add or remove portions of this Statement at any time at our discretion. If we decide to change this Statement, we will post those changes at this Site.

This Statement is not intended to and does not create any contractual or other legal rights in or on behalf of any party.

How to Contact Us

999 Skyway Road, Suite 150

Phone: +1.650.260.7120

Email: legal@iovance.com