Sigilon Therapeutics, Inc. Privacy Notice

Effective August 28, 2020

This Privacy Notice is intended to describe how Sigilon Therapeutics, Inc. (“Sigilon”) collects, uses, and shares Personal Data that you submit to us and that we collect through our website www.Sigilon.com (the “Site”).  The Site provides a venue to obtain information about our company, our science, our pipeline, our therapeutics areas of focus and product candidates, our partners and investors, employment opportunities and other information related to our business (collectively, the “Services:”).

 

INFORMATION WE COLLECT

For purposes of this Privacy Notice, “Personal Data” means any information relating to an identified or identifiable natural person. As described in detail below, we may collect certain Personal Data from or about you in connection with your use of, or your submissions to, the Site.

 

We may collect Personal Data as follows:

 

When you communicate with us, use sign-up forms for important news and events, and interact with the Site. We may collect Personal Data, such as your name, address, email address, and business contact information, when you communicate with us or submit information to us, including when you inquire about partnering with us. We may also collect Personal Data when you interact with our Site our utilize Site features, and when you sign up to receive newsletters, updates, or other information. For example, for our sign-up forms, we use an application that does not collect cookies, it collects personal information provided through the website and includes names and emails (not IP address).

 

When you apply for a job with us. We may collect Personal Data from you when you apply for a job with us, such as if you submit your resume for consideration.

 

USE OF COOKIES

The Site uses Google analytics cookies(https://privacy.google.com/businesses/compliance/) to improve user experience, for performance and analytics, and to improve our content,
products, and services.

 

A “cookie” is a small text file that a web server stores in browser software. A browser sends cookies to a server when the browser makes a connection to the server (for example, when requesting a web page from the same domain that created the cookie). The purpose of cookies is to remember the browser over time and distinguish one browser instance (or user) from all others. Most browsers allow you to control cookies, including whether or not to accept them, and how to remove them. The data stored are trends such as what browsers visitors use to view the site, or their country of origin. The information collected is not tracked to the specific IP address of the user and is thus anonymized, these are the only cookies we use on the Site.

 

If you want to block the use and saving of cookies from the Site on to the computers’ hard drive, you should take the necessary steps within your web browser’s settings to block all cookies from the Site and its external serving vendors. Please note that if you choose to erase or block your cookies, certain parts of our Site may not function correctly. For information on how to disable cookies, refer to your browser’s documentation.

 

HOW WE USE THE INFORMATION WE COLLECT

We may use Personal Data for a variety of different purposes as set out in further detail below. Subject to applicable law, the purposes for which we use and process Personal Data, and the legal basis for such processing, are set forth below.

 

  • For our legitimate Interests. To operate our business, other than in performing our contractual obligations to you, for our “legitimate interests” for the purposes of applicable law, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of
    • To communicate with you regarding important news and events.
    • To address and respond to your requests, inquiries, and complaints;
    • To develop, provide, and improve the Site, including to better tailor the features, performance, security and support of the Site, and for statistical and analytics purposes;
    • For fraud, loss, and other crime prevention purposes;
    • For employment recruitment purposes;
    • To assist in the investigation of suspected illegal or wrongful activity, and to protect and defend our rights and property, or the rights or safety of third parties;
    • To enforce this Privacy Notice.
    • To comply with laws, regulators, court orders, or other legal obligations, or pursuant to legal process; or
    • Subject to applicable contractual or legal restrictions, in connection with a contemplated reorganization or an actual reorganization of our business, in connection with financing, a sale or other transaction involving the disposal of all or part of our business or assets, including for the purpose of permitting the due diligence required to decide whether to proceed with
      a transaction.
  • To comply with legal obligations. To comply with laws, regulators, court orders, or other legal obligations, or pursuant to legal process.
  • To protect data subjects’ vital interests. To protect the vital interests of you or of another person.

In some cases where we are not already authorized to process the Personal Data under applicable law, we may ask for your consent to process your Personal Data:

  • When we leverage and/or collect cookies, device IDs, Location, data from the environment, and other tracking technologies. We specifically use browser cookies for different purposes, including cookies that are strictly necessary for functionality and cookies that are used for personalization and performance/analytics. When you visit the Site, we may also automatically collect certain data about your web browser, Additionally, as you browse the Site, we collect information about the individual web pages that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site.

You are not required to provide any Personal Data identified in this Privacy Notice in order to use the Site.

HOW WE MAY DISCLOSE INFORMATION

We may disclose Personal Data as described in this Privacy Notice, including:

  • Affiliates. We may disclose some or all of your Personal Data to our subsidiaries, joint ventures, and other companies under our common control (collectively, “Affiliates”), for the purposes described in this Privacy Notice. Where we share Personal Data with our Affiliates, we will require our Affiliates to honor this Privacy Notice.
  • Service Providers. We may disclose Personal Data to business partners, distributors, service providers, and vendors in order to maintain the Site and provide, improve, and personalize the Services. We may also share Personal Data for other technical and processing functions, such as sending e-mails on our behalf, technical support, or otherwise operating the Site, for analytics. Such third parties may have access to Personal Data only as needed to perform their functions for us, and they may not use Personal Data for other purposes.
  • Pursuant to Legal Process and Protection of Rights. We may also disclose Personal Data to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or as otherwise pursuant to legal process. We may also use and disclose Personal Data to establish or exercise our legal rights, to enforce our Terms of Use, this Privacy Notice, or agreements with third parties, to assert and defend against legal claims, or if we believe such disclosure is necessary to investigate, prevent, or take other action regarding actual or suspected illegal or fraudulent activities or potential threats to the physical safety or well-being of any person.
  • Corporate Transactions. Subject to applicable law, Sigilon reserves the right to sell or transfer Personal Data in the event that Sigilon is acquired by or merged with another company or in connection with the potential sale or transfer of some or all of the business assets of the Site or Sigilon, including for the purpose of permitting the due diligence required to decide whether to proceed with a transaction. If the sale occurs, the purchaser will be entitled to use and disclose the Personal Data collected by us, and the purchaser will assume the rights and obligations regarding Personal Data as described in this Privacy Notice.

DE-IDENTIFIED OR ANONYMOUS DATA

We may create de-identified or anonymous data from Personal Data by removing data components (such as your name, email address, or linkable tracking ID) that makes the data personally identifiable to you or through obfuscation or through other means. Our use of anonymized data is not subject to this Privacy Notice.

 

DO-NOT-TRACK

Do-Not-Track is a public-private initiative that has developed a “flag” or signal that an Internet user may activate in the user’s browser software to notify websites that the user does not wish to be “tracked” by third-parties as defined by the initiative. The online community has not agreed on what actions, if any, should be taken by the websites that receive the “do not track” signal, and therefore Do-Not-Track is not yet standardized. Please note that the Site does not alter its behavior or use practices when we receive a Do Not Track signal from your browser.

 

INFORMATION FROM CHILDREN UNDER 18 YEARS OF AGE

We do not knowingly collect information from minors under the age of 18 years without parental consent. If you become aware that an individual under 18 years of age has provided us with Personal Data without parental consent, please contact us at info@sigilon.com. If we become aware that an individual under 18 years has provided us with Personal Data without parental consent, we will take steps to remove the data as permitted by law.

 

LINKS TO OTHER SITES

Our Site may contain links or otherwise provide access to another website, mobile application, or Internet location (collectively “Third-Party Sites”). We provide these links merely for your convenience. Sigilon has no control over, does not review, and is not responsible for Third-Party Sites, their content, or any goods or services available through the Third-Party Sites. Our Privacy Notice does not apply to Third-Party Sites. We encourage you to read the privacy policies of any Third-Party Site with which you choose to interact.

 

DATA SUBJECT RIGHTS

Data subjects in the European Economic Area and certain other jurisdictions may have certain rights under applicable data protection law, including the right to request confirmation from us as to whether or not we are processing your Personal Data. Where we are processing your Personal Data, subject to applicable law, you also have the right to:

  • Request access to, modification or rectification, or deletion. You may have the right to request access to, modification of, or deletion of your Personal Data we maintain.
  • Request restriction of processing. You may have the right to request that we restrict processing of your Personal Data in certain circumstances, such as where you believe that the Personal Data we hold about you is inaccurate or our processing is unlawful.
  • Object to processing. In certain circumstances, you may have the right to request that we stop processing your Personal Data, such as a request to stop sending you direct marketing communications. To opt-out of direct marketing communications, please see the instructions in the “Withdrawing Your Consent” section of this Privacy Notice.
  • Data portability. In certain circumstances, you may have the right to receive the Personal Data concerning you that you provided to us or to request that we transmit your Personal Data to another data controller.
  • Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority.

To exercise your rights, you may contact us as at info@Sigilon.com. As permitted by law, certain data elements may not be subject to access, modification, portability, restriction, and/or deletion. Furthermore, where permissible, we may charge for this service. We will respond to reasonable requests as soon as practicable and as required by law. To protect your privacy and security, we may take steps to verify your identity in order to respond to your request.

 

WITHDRAWING YOUR CONSENT

In most cases, we need to process certain of your Personal Data in order to fulfill our obligations to you and for our legitimate interests. Where the basis of processing is legitimate interests, you have a right to object to the processing of your Personal Data. Please note that, subject to applicable law, we may continue to process your Personal Data even where you object if there are compelling legitimate grounds for processing that override your interests and rights, or where processing is necessary to establish, exercise, or defend legal claims.

Where consent is the basis of processing, you may at any time withdraw the consent you provided for the processing of your Personal Data for the purposes set forth in this Privacy Notice by contacting us at info@sigilon.com, provided that we are not required by applicable law or professional standards to retain such information. If you would like to stop receiving notifications, or updates, you may do so by following the unsubscribe instructions that appear in these e-mail communications. Alternatively, you may contact us at info@sigilon.com to opt-out notifications. . Please be advised that you may not be able to opt-out of receiving certain service or transactional messages from us, including legal notices and certain communications related to the
provision of the Services. Please note that if you do not provide consent, if you withdraw your consent or object to processing, or if you choose not to provide certain Personal Data, we may be unable to provide you some or all of the Services.

 

TRANSFER OF DATA

Please note that if you are visiting the Site from outside of the United States, your information may be transferred to, stored, and/or processed in this country. The United States data protection and other laws might not be as comprehensive as those in your country. If you are located outside of the United States, the transfer of Personal Data is necessary to provide you with the requested information and Services and/or to perform any requested transaction. By using any portion of the Site, you acknowledge and consent to the transfer of your information to our facilities in the United States.

 

DATA RETENTION

We will retain your Personal Data for as long as is necessary to fulfill the intended purpose or for such longer period as may be required or permitted by applicable law. We will also retain your Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

 

SECURITY

Sigilon uses technical and organizational security measures designed to secure and protect Personal Data. Please note, however, we cannot fully eliminate security risks associated with the storage and transmission of Personal Data.

 

CALIFORNIA PRIVACY RIGHTS

Under Section 1798.83 of the California Civil Code, residents of California have the right to request from a business, with whom the California resident has an established business relationship, certain information with respect to the types of personal information (as defined by California law) the business shares with third parties for those third parties’ direct marketing purposes, and the identities of the third parties with whom the business has shared such information during the immediately preceding calendar year. To exercise your rights, you may make one request each year by emailing us at info@sigilon.com with “Request for California Privacy Information” in the subject line and in the body of your message. Be sure to provide in the request sufficient information to properly identify you and/or the members of your family.

 

UPDATES TO THIS PRIVACY NOTICE

We may update this Privacy Notice from time to time. The most recent version of the Privacy Notice is reflected by the version date located at the top of this Privacy Notice. We encourage you to review this Privacy Notice often to stay informed of how we may process your information.

 

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@sigilon.com or by mail at the following address:

 

Sigilon Therapeutics, Inc.
100 Binney Street, STE 600
Cambridge, MA 02142