Privacy Statement
Last Updated: March 22, 2021
What does this Privacy Statement apply to?
This Privacy Statement (“Statement”) explains how Aurinia Pharmaceuticals Inc. and its subsidiaries and affiliates (collectively, “Aurinia”, “we”, “us”, or “our”), collects, uses, discloses, protects, and otherwise processes Personal Information about you when you access or use our website https://www.auriniapharma.com, and any other website or application owned and operated by Aurinia that links to this Statement (collectively, the “Site").
Your Personal Information includes information or a combination of information that could directly or indirectly be used to identify you or your household (“Personal Information”). This includes identifiers like name, contact details, birthday, online identifier, or other factors about physical, physiological, genetic, mental, economic, cultural, or social identity. Please note, the definition of Personal Information can vary by region. If we collect information that is considered Personal Information in your region, then we will treat it as such in accordance with this Privacy Statement and applicable local law. We follow country and state data protection laws and we cooperate with data protection authorities.
If you have a question about how your Personal Information is being used, you can contact us by using the information in the "Contact Us" below. Please also refer to the section regarding Laws and Rights that May Apply to You.
What Personal Information do we collect and how?
You hereby acknowledge and agree that we collect Personal Information you choose to provide when engaging in certain activities on our Sites, e.g. through registrations, applications, surveys, and in connection with your inquiries. For example, you may choose to provide your name, contact information, health, and/or financial information in connection with a promotion, a patient assistance or support program. You may choose to provide information relating to your specialties and professional affiliations.
In addition, we may gather information about you automatically through your use of the Site, e.g. your IP address and how you navigate our Site. See also the section below on Use of Cookies and Other Technologies.
From time to time, we may use or augment the Personal Information we have about you with information obtained from third parties. For example, we may use such third-party information to confirm contact or financial information, to verify licensure of users, or to better understand your interests by associating demographic information with the information you have provided. Aurinia may receive your data indirectly from the following categories of sources:
- Consumers
- Services Providers and Contractors
- Third Parties like Data brokers, data analytics providers, background check providers
- Third Parties with whom you associate (e.g. social media networks of you use those to link to the Site); and
- Affiliates
You hereby undertake that your Personal Information provided by you as prescribed in this Privacy Statement is correct, up-to-date, and true, and you shall be responsible for its correctness. In no case shall we be liable for any incorrectness of the personal information you provided.
You understand and agree that if you provide us any Personal Information pertaining to a third party, you shall be responsible for obtaining their consent and you shall hold us harmless from any claim of any type from any third party for using their personal information.
Aurinia may collect and process the following categories of Personal Information:
- Identifiers: such as first and last name, email address, or unique online identifiers
- Personal Information contained in Customer records: such as physical characteristics or description, insurance policy number, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
- Protected classification characteristics: such as race, date of birth, religion, sexual orientation, gender identity, gender expression, age.
- Data Concerning Health such as Personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health status
- Internet or other similar network activity includes but is not limited to, browsing history, search history, and information regarding a consumer’s interaction with an Internet Web site, application, or advertisement.
- Employment or Educational Information information that is not publicly available personally identifiable information
- Sensitive Data such as digital signature, passwords, demographic information, financial information, and government issued information.
- Data for agreements with customers or vendors This includes the assessment and acceptance of a customer or vendor. For example, we may collect credit status or information publicly available on sanctions or watch lists. Company name, Tax Forms, payment details, company contact details.
- Information collected from our Sites and social media pages: This includes information collected when you interact with us. For example, comments, photos, or other information that you post through blogs, message boards, or social networking.
- Other information we have collected from you with your explicit consent.
- Third-party service and advertising partners may also collect information automatically
Use of Cookies and Other Technologies
Some Aurinia Sites or pages use “cookies,” or small data files that the Site places on your hard drive, for identification purposes. Your web browser may be programmed not to accept “cookies” or it may allow you to be notified when you are receiving a “cookie,” thus giving you the option of accepting it or rejecting it. You are free to decline our cookies if your browser permits but doing so may interfere with your use of the Site.
We and our third-party service providers may also use technologies like cookies to track your interaction with the Site. Some of these technologies may include web beacons, pixels, tags, web server logs, geo-location technologies, and Flash objects. As with cookies, you are free to decline such technologies if your browser permits. You should refer to your browser’s instructions to remove cached history and images from your device. Deleting or disabling cookies will not remove Flash objects. You should refer to Adobe’s website (http://www.adobe.com) for more information on how to disable these objects. The Site may use Google Analytics to analyze traffic.
You can find out more information about Google Analytics cookies here: Google Analytics Cookie Usage on Websites. To opt-out of Google Analytics relating to your use of the Site, you can download and install the Browser Plugin available via this link: Google Analytics Opt-out Browser Add-on. Aurinia and the third parties who assist in operating the Site do not respond differently or limit their practices under the terms of this Statement when you access those online services with a browser that uses a do not track signal or similar mechanism.
Please note that linked, non-Aurinia websites may also use cookies. Aurinia cannot control the use of cookies by these non-Aurinia websites. We also want you to know that when you link from a Aurinia website to another website, that website may have the ability to recognize that you have come from a Aurinia website. If you do not want any other websites to know that you have been on this website, we recommend that you do not use the links provided in our website.
How we use your Personal Information?
Aurinia may use the information that it gathers for the following purposes:
- to contact you or your company to provide information, products, or services;
- to provide support for, promote, and improve the Site and Aurinia offerings;
- to customize the Site to provide content most relevant to you;
- to compare information for accuracy and verify our records; and
- to detect, investigate, and prevent activities that may violate our policies or rules or that may be otherwise illegal.
Aurinia may also use the information to communicate with you, in instances such as when we make changes to our policies; to respond to your inquiries; to contact you about your account; or to send you or your company information about promotions, offerings, and other marketing materials.
How will we share and disclose your Personal Information?
We may share your Personal Information with our employees, agents, affiliates, representatives, service providers, contractors, Government entities, Internet service providers, data analytics providers, operating systems and platforms, acting on our behalf, all of whom are under a duty of confidentiality to use your Personal Information only as necessary for the purpose it was collected for. This may include sharing Personal Information with service providers who are authorized to use your Personal Information only as necessary to support our business operations, such as those who provide data storage, technology support and services, customer service, risk solution provision, analytics, fraud prevention, legal services, and marketing services. We may also share some of your Personal Information as otherwise permitted or required by law or as authorized by you. Although Aurinia makes every effort to preserve your privacy, Aurinia may need to disclose or provide access to Personal Information if Aurinia has a good faith belief that such action is necessary to comply with the law, such as in connection with a judicial proceeding, court order or other legal process.
No Sale of Personal Information
Aurinia will not sell Personal Information and does not share PersonalInformation withunaffiliated third parties for their use for marketing purposes. However, in the event Aurinia goes through a business transition, such as a merger or an acquisition of its equity interests or assets, or a business reorganization, your Personal Information contained or stored by Aurinia may be part of the assets transferred.
Additional Helpful Information
How is my data secured?
We use commercially sound efforts to maintain administrative, technical, and physical safeguards that are designed to protect the privacy and security of Personal Information.
Please note that we cannot guarantee the security of our databases or Site, nor can we guarantee that information will not be intercepted while being transmitted over the Internet.
We retain and store your Personal Information only for as long as we have a legitimate business purpose and in accordance with our data retention policies. The retention period may also be based on 1) the length of time we have a relationship with you, or 2) the need to fulfill legal obligations to which we are subject (retention periods will vary depending on the specific legal requirements or jurisdiction).
Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
How we Communicate with You
Aurinia may use your contact information to promote Aurinia’s products or services or replying to your inquiries. This may include you receiving promotional e-mails if you signed up for such.
Even if you choose not to receive promotional emails, you may still receive emails that facilitate, complete, or confirm a commercial transaction that you have already agreed to enter with us. These include communications about completion of your registration, correction of user data, transaction confirmations, shipping notices, and other communications essential to your transactions with us.
We may also offer text/SMS messaging to you. We require you to opt-in to receive text messages from us. At any time, you may opt-out of receiving particular text messages from us (other than text appointment reminders) by texting STOP in response to any text message.
Message, data rates and other charges may apply. You are liable for any mobile phone charges incurred (usage, subscription, etc.) as a result of using any of our products or services. Please consult your mobile service carrier’s pricing plan to determine the charges for sending and receiving text messages.
Children
The Sites are not intended for children under the age of 18 and none of our Sites are designed to attract such children. We do not knowingly collect personal information from children under the age of 18 (or applicable age in your country). If you are a parent or guardian and you learn that your Child has provided us with Personal Information, please contact us at privacy@auriniapharma.com. If we discover that a child has provided us with Personal Information, we will take reasonable steps to delete such information from our servers.
Laws and Rights that May Apply to You
Depending on your residence, the rights available to you may differ in some respects. Aurinia will respond to any rights request in accordance with local legal regulations. If you wish to make a request related to any of these rights, please contract us via:
Toll Free Phone: +1 (888) 500 2905
E-mail: privacy@auriniapharma.com
In some cases, state laws such as the California Consumer Privacy Act of 2018 require us to verify the identity of the individual submitting a request for their Personal Information before providing a substantive response to the request. Consistent with those requirements, and because we take the privacy and security of your Personal Information seriously, we will verify your identity by asking you to provide certain information about yourself. Once your identity is verified, we will work to provide you with your requested information in a timely manner.
If you choose to empower an “authorized agent” to submit requests on your behalf, we will require the authorized agent to have a written authorization confirming that authority.
Please be aware that the following right may not apply to you as it depends on your residence.
For specific data protection rights regarding users from California, Nevada, Europe, Switzerland, and the United Kingdom please see specific sections below.
Right of Access
You may have the right to get confirmation about whether or not your Personal Information is being processed. If so, you have the right to access the Personal Information and other information, such as the purposes, the categories of Personal Information, the recipients (or categories of recipients) to whom the Personal Information have been or will be disclosed, for particular recipients in third countries or international organisations, where possible, the predicted period that the Personal Information will be stored, or, if not possible, the criteria used to determine that period, your rights, etc.
Where feasible and permitted by law, we will provide a copy of the Personal Information we are processing. For any further copies, we may charge a reasonable fee based on administrative costs. If you make the request by electronic means, and unless otherwise requested, the information shall be provided in electronic form.
Right to rectification
You may have the right to request that Aurinia correct any information you believe is inaccurate and to complete information you believe is incomplete.
Right to erasure (‘right to be forgotten’)
You may have the right to the erasure of your Personal Information in certain circumstances.
Right to restriction of processing
You may have the right to restrict the processing for the below reasons.
- You contest the accuracy of your Personal Information, for a period enabling us to verify the accuracy of the Personal Information
- The processing is unlawful and you oppose the erasure of the Personal Information and request the restriction of their use
- We no longer need the Personal Information for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims
- You exercised your right to object to processing pending the verification whether our legitimate grounds override yours
Right to data portability
You may have the right to receive the Personal Information that you have given us, in a structured, commonly used and machine-readable format. You have the right to send that Personal Information to another controller if the processing is based on consent pursuant or on a contract and is carried out by automated means.
Right to Object
You may have the right to object, on grounds relating to your particular situation, to processing of your Personal Information which is based on our legitimate purposes. We will stop processing the Personal Information unless we have compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. If Personal Information is processed for direct marketing purposes, including profiling, you may object at any time.
Automated individual decision-making, including profiling
You may have the right not to be subject to a decision based solely on automated processing, including profiling, except under certain exceptions under local law.
Right to Withdraw Consent
Where the processing of Personal Information is based on your consent, you may have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
Right to anonymity
You may also have a right to request anonymity. This means that your Personal Information would not be collected or processed. If you choose to exercise this right, we may not be able to provide you with your requested goods or services.
Right to lodge a complaint with a supervisory authority
You may have the right to lodge a complaint with a supervisory authority.
Job Applicants
When you visit the “Careers” portion of our website, we collect the information that you provide to us in connection with your job application. We use this information to facilitate our recruitment activities and process employment applications.
Contact Us
Toll Free 1 (888) 500 2905
E-mail: privacy@auriniapharma.com
Changes to this Privacy Statement
Aurinia reserves the right, at our discretion, to change, modify, add, or remove portions of this Privacy Statement at any time by posting the amended Privacy Statement on the Site. You should review this Statement periodically, and especially before you provide any Personal Information. Your continued use of the Site after we post any modifications to the Privacy Statement will constitute your acknowledgment of the modifications and your consent to our privacy practices as described in the modifications. If we decide to use particular information collected about you in a manner materially different from that stated at the time it was collected, we will let you know through the Site, by email, or other communication.
Nevada Privacy Rights
Updated: March 22, 2021
Although we do not currently conduct sales of Personal Information, Nevada residents may submit a request directing us to not sell Personal Information we maintain about them if our practices change in the future.
To exercise this right, please contact us by e-mail at privacy@auriniapharma.com
California Privacy Rights
Updated: March 22, 2021
This section contains additional disclosures not covered in the above which are required by the California Consumer Privacy Act (“CCPA”) and applies only to “Personal Information” that is subject to the CCPA.
Categories of Personal Information We Collect
We collect the categories of Personal Information about California consumers identified in the above section called: What Personal Information do we collect and how?. In the past 12 months, we have disclosed California consumers’ Personal Information to third parties for business or commercial purposes.
Please note that we do not “sell” Personal Information for monetary or other valuable consideration.
Why We Collect, Use, and Share California Information
We use and disclose the Personal Information we collect for our commercial and business purposes, as further described in this Privacy Statement. These commercial and business purposes include, without limitation:
- Our commercial purposes, including enabling commercial transactions, providing the services to you, marketing, and advertising.
- Our business purposes as identified in the CCPA, include:
- Auditing related to our interactions with you
- Legal compliance
- Detecting and protecting against security incidents, fraud, and illegal activity
- Debugging;
- Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics;
- Marketing
- Internal research for technological improvement;
- Internal Operations
- Activities to maintain and improve our services; and
- Other one-time uses.
Your Rights Regarding Personal Information
California residents have certain rights with respect to the Personal Information collected by businesses. If you are a California resident, you may exercise the following rights regarding your Personal Information, subject to certain exceptions and limitations:
- The right to know the categories and specific pieces of Personal Information we collect, use, disclose, and sell about you, the categories of sources from which we collected your Personal Information, our purposes for collecting or selling your Personal Information, the categories of your Personal Information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared Personal Information;
- The right to request that we delete the Personal Information we have collected from you or maintain about you.
- The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA.
To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:
- By email at privacy@auriniapharma.com
- By toll free 1 (888) 500 2905
Note that there are restrictions on the number of times you can exercise some of these rights.
If we are unable to comply with all or a portion of your data privacy request, we will explain the reasons for declining to comply with the request.
European Economic Union, United Kingdom, Switzerland Privacy Rights
Updated: March 22, 2021
This section contains additional disclosures required by the European Union General Data Protection Regulation (“GDPR”) and applies only to “Personal Information” that is subject to the GDPR.
About Us and How to Contact Us
Aurinia is a global pharmaceutical company with operations in the United States, the EEA, and globally. Aurinia makes decisions on how your information is used and disclosed and shall be responsible as a ‘controller’ for ensuring that the GDPR is followed and your Personal Information are kept secured and used lawfully.Where required by law, Aurinia has appointed representatives to fulfill its obligations under the GDPR. For information on our representatives, or to exercise your rights or make requests concerning the processing of your Personal Information, please contact us at:
Aurinia Pharmaceuticals Inc.
#1203-4464 Markham Street
Victoria, BC V8Z 7X8, Canada
Attention: Legal and Compliance: Privacy
Aurinia’s Data Protection Officer (“DPO"):
Our DPO may be contacted at: privacy@auriniapharma.com or at the mailing address above.
Legal Basis for Lawfully Using Your Personal Information
Aurinia lawfully processes your Personal Information and relies on one or more of the following bases:
- Your Consent
- To negotiate, execute, or perform a contract with you
- To comply with a legal obligation that applies to Aurinia
- To carry out tasks for the public interest, which may include clinical research
- For our legitimate business interests only where it does not override the rights or freedoms of individuals who’s Personal Information we are using
Aurinia will not sell Personal Information and does not share Personal Information with unaffiliated third parties for their use for marketing purposes.
Our Legitimate Interests
Aurinia may lawfully process your Personal Information by relying on performing our legitimate interests. This includes our business operations, such as data storage, technology support and services, customer service, risk solution provision, analytics, fraud prevention, legal services, and marketing services. We will only use your Personal Information under this basis as long as your rights or freedoms are not overridden by our legitimate interest.
Cross Border Transfers of Your Personal Data:
When transferring your Personal Information to recipients in other jurisdictions, we ensure that safeguards are put in place to protect your Personal Information as required by applicable laws. These safeguards may include entering into agreements with recipients containing Standard Data Protection Clauses that have been approved by the European Commission.
To obtain a copy of safeguards taken, please contact us at privacy@auriniapharma.com.
Rights Over Your Personal Information
Under the law, you have certain rights regarding your Personal Information. You have the Right of Access, Right to rectification, Right to withdraw consent (withdrawal of consent will not affect the lawfulness of processing before your withdrawal), Right to object, Right to erasure (‘right to be forgotten’), Right to restriction of processing, the right to not be subject to Automated individual decision-making, including profiling, or Right to data portability (where appropriate). Please see the description of the individual rights under Laws and Rights that May Apply to You.
Please make your request at privacy@auriniapharma.com.We may need to verify your identity before fulfilling your request.
Filing a Complaint with a Supervisory Authority
You also have the right to complain about how we handle your Personal Information to a supervisory authority that is responsible for enforcing data protection law.A list of European Union supervisory authorities is available here:http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm