Version date: July 12, 2022
THIS PRIVACY POLICY APPLIES TO YOUR ACCESS AND USE OF BIOGEN INC., ITS SUBSIDIARIES, AFFILIATES AND AGENTS, (COLLECTIVELY “BIOGEN”, OR “WE”, “US” OR “OUR”) WEBSITES (“WEBSITES”). BY USING THE WEBSITES, YOU CONFIRM THAT YOU HAVE READ AND AGREE TO BE BOUND BY THIS PRIVACY POLICY. IF YOU DISAGREE WITH ANY PART OF THIS PRIVACY POLICY, THEN PLEASE DO NOT USE THE WEBSITES.
This Privacy Policy explains the policies and practices that we have developed to safeguard personal information and to comply with applicable data protection laws. Please read this notice carefully to understand what information we collect, how we collect it, how we use it, who we may disclose it to, and how you can manage your personal information. We control and operate the Websites from within the United States of America. Our online privacy practices are governed by the laws of the United States and the Commonwealth of Massachusetts, which may differ from privacy laws in your state or home country. By submitting your personal information to us through the Websites, you consent to the transfer of your personal information to any country and its use and disclosure in accordance with applicable U.S. Federal and State laws and with this Privacy Policy.
We may change our Privacy Policy, so please check this page periodically, as your continued use of the Websites, after we publish our changes, indicates your acceptance of any changed terms.
Russell Koste serves as Chief Information Security Officer and is responsible for overseeing cybersecurity within Biogen.
INFORMATION WE COLLECT
We provide Websites to share information about the services and products we offer. Regardless of the device you use to interact with our Websites, Biogen may collect some information that identifies you or that can be used to contact or distinguish you as an individual (“Personal Information”). We may need to collect Personal Information about you to provide you with services or information you request, or to facilitate commercial engagements with you. If you do not provide Personal Information, we may not be able to provide services or information to you, or enter commercial engagements with you.
We will only collect Personal Information about you that is necessary for one or more of our legitimate business purposes, or is required by law. When you visit our Websites, we collect the following types of Personal Information:
(a) Personal Information that we collect directly from you: We collect Personal Information directly from you when you register with the Websites, subscribe to online services, or otherwise provide information directly to us. The following are examples of Personal Information that we may collect directly from you:
(b) Other Information that we collect when you visit our Websites:
We use a variety of common, automated data collection technologies, such as internet tags or cookies (“Data Collection Technologies”), to assess how our Websites are used, to personalize your experience, and to deliver content tailored to your interests. In doing this, we collect information about you when you visit our Websites. When you request pages on our Websites, for example, our servers automatically log your internet protocol (IP) address. The IP address is a unique number assigned to your computer to identify it whenever you are surfing the Web. We use the IP address to understand the web pages you visit. The IP address does not identify you personally, but it allows us to maintain communications with you as you move about the Website. Generally, these types of data elements (“Other Information”) do not reveal your identity or do not relate directly to you or any other individual.
The following are some examples of Other Information:
(c) Sensitive Personal Information
We generally avoid collecting sensitive personal information, such as health data (“Sensitive Personal Information”), through our Websites. In some cases, however, we may need to collect such Sensitive Personal Information to facilitate providing services to you, such as certain patient support service offerings. Where required to comply with all applicable data protection and privacy laws, we will obtain your explicit consent to collect Sensitive Personal Information about you through our Websites.
(d) Data enhancement
In addition, we may collect information about you from publicly-available sources, third parties, and directly from you through your interactions with us.
HOW WE USE YOUR PERSONAL INFORMATION
By providing your Personal Information, you agree that, where it is permitted by local law, we may use your Personal Information:
When we collect your Personal Information, we will take reasonable steps to advise you of what Personal Information we are collecting, the purposes for which we are collecting the Personal Information and will use such Personal Information only for stated primary or related secondary purposes.
Product reports. If you contact us regarding a product experience, we may use the Personal Information you provide to generate complaints or adverse event reports.
Marketing. We may use your Personal Information for marketing-related activities, including to communicate with you about our products, services, and company and to invite your participation in engagement opportunities (e.g., surveys). You can unsubscribe from marketing communications by clicking the “Unsubscribe” link included in each message.
HOW WE SHARE YOUR PERSONAL INFORMATION WITH OTHERS
Your privacy is very important to us. We may disclose your Personal Information to certain third parties listed below, including third parties who provide us with various business services. We will not sell your Personal Information. We will not otherwise disclose your Personal Information without your consent, except where such disclosure is reasonably necessary for normal business operations and such disclosure is in accordance with all applicable data protection and privacy laws.
(a) Affiliates We may disclose Personal Information to our affiliated companies for the purposes described in this privacy notice, including for marketing purposes, and to be consistent with our goal of providing our consumers with the superior product and consumer experience that our customers have come to expect from us around the globe. Affiliates are those companies that are under common control of our parent company Biogen, Inc.
(b) Third parties/Service Providers We may disclose your Personal Information to third-party service providers who provide services to us, such as: Website hosting, professional services, including information technology services and related infrastructure, customer service, e-mail delivery, auditing and other similar services. We may also disclose your Personal Information to third parties to perform services you request or functions you initiate on the Website. In addition, we may disclose your Personal Information to other companies that we collaborate with to jointly develop and/or market our products. If we allow a third party to have access to your Personal Information, they will only be permitted access for purposes that are consistent with this privacy notice and will be required to protect your Personal Information in accordance with all applicable data protection laws. (c) Law enforcement In certain circumstances, we may be called upon to release your Personal Information in response to a court order, subpoena, search warrant, law or regulation. We plan to cooperate in responding to such requests, taking appropriate measures to ensure that the requester understands the sensitive nature of the Personal Information that they may receive. We also reserve the right to cooperate with law enforcement authorities in investigating and prosecuting users who violate our rules or engage in behavior that is illegal or harmful to individuals or the Personal Information we are responsible for.
(d) Regulators and physicians If you contact us regarding your experience in using one of our products, we may use the Personal Information you provide as necessary to submit complaint or adverse event reports to local and international health or pharmaceutical regulators, and as otherwise required by law. We also may use the Personal Information to contact the prescribing physician to follow up regarding an unexpected event involving use of our product.
(e) Corporate transactions We may disclose your Personal Information to a third party relating to a corporate reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock, including regarding any bankruptcy or similar proceedings.
(f) Other Legal Reasons In addition, we may use or disclose your Personal Information as we deem necessary or appropriate: (1) under applicable law, including laws outside your country of residence; (2) to respond to requests from public and government authorities including public and government authorities outside your country of residence; (3) to comply with subpoenas and other legal processes; (4) to pursue available remedies or limit damages we may sustain; (5) to protect our operations or those of any of our affiliates; (6) to protect the rights, privacy, safety or property of Biogen, our affiliates, you and others; and (7) to enforce our terms and conditions.
HOW WE USE OR SHARE OTHER INFORMATION
We use Other Information or additional information that we collect for any purpose not prohibited by law. We may collect, compile, store, publish, promote, report, sell, or otherwise disclose or use all Other Information, provided that such information does not personally identify you. If we combine Other Information or additional information with Personal Information in a way that can identify or be used to identify you, we will treat that information as Personal Information.
INTERNATIONAL TRANSFERS
As a global company, Biogen conducts business in many countries. Please note that permitted transfers of Personal Information to third parties or other companies within the Biogen group include the transfer of data from one country to another and may include transfers to a country where the laws provide different protection from your country. In such cases, we will take appropriate measures to ensure adequate data protection in accordance with applicable data protection laws.
YOUR PRIVACY CHOICES & RIGHTS
You have the rights and choices regarding Biogen’s processing of your Personal Information:
Opt-in. When you access any interactive tool or service on the Website that collects Personal Information, you will be asked to affirmatively choose (“opt-in”) to provide the requested Personal Information. You may always choose not to provide the requested Personal Information.
Manage email. You may elect to receive email updates about developments regarding Biogen. If you decide, at any later time, that you no longer wish to receive these emails, you may unsubscribe to any such contact list by using the “Unsubscribe” links within the electronic communication channel, or by sending an email entitled “Unsubscribe” to privacy@biogen.com.
Manage cookies. Most web browsers allow control of cookies through the browser settings. You can set your browser to notify you when you receive a cookie, which will enable you to decide if you want to accept it or not. However, if you do not accept a cookie, certain elements of the Website may not function correctly or completely.
Access/review/update Personal Information. If you become aware that Personal Information we maintain about you is inaccurate, incomplete, misleading, irrelevant or out of date, or if you would like to access, update or review your information, you may contact us using the contact information below. We will attempt to provide the requested information or make requested changes to the extent allowable by applicable privacy or other laws. In any event, we will respond to you as soon as reasonably possible, to advise you of the outcome of your request.
Transparency about sharing. We will advise you of the organizations (or types of organizations) to which we may normally disclose Personal Information, and we will provide you with contact information in the event you would like access to your Personal Information we hold about you or need to update your Personal Information or preferences.
Remove Personal Information. You may request the removal of previously provided Personal Information at any time using the contact information below. Please be aware that we may not comply with your request to amend or remove information that was provided to Biogen by a healthcare professional or a consumer regarding an adverse drug event.
Please note that some of the above rights are limited by applicable information protection law and we have the right to collect, process and hold your Personal Information to perform our legal obligations (for example: data regarding an adverse drug event). We may require you to provide additional information necessary to confirm your identity before we comply with any request made by you.
DATA COLLECTION TECHNOLOGIES, INTEREST-BASED ADVERTISING AND “DO NOT TRACK”
Data Collection Technologies. In addition to collecting your IP address as described above, we may also use certain Data Collection Technologies on our Websites such as:
Cookies. Cookies are small text files placed in your computer browser or other web-accessing device directories to store your information about your use of the Websites and your activities online (collectively, “Cookies”). A Cookie will typically contain the name of the domain (internet location) from which the Cookie has come, the “lifetime” of the Cookie (i.e. when does it expire), and a value, usually a randomly generated unique number. To find out more about Cookies, including how to see what Cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org. We use first-party, session, and persistent cookies. These cookies allow us to distinguish you from other users of our Websites, and to enhance this Website and your experience when you browse this Website. If you do not wish to receive Cookies or wish to manage when you accept Cookies in general, you may set your browser to reject Cookies or to alert you when a Cookie is placed on your computer. Although you are not required to accept our Cookies, if you set your browser to reject Cookies, you may not be able to use all the features and functionality of the Website.
Internet tags. Occasionally, we may use Internet tags (also known as Web beacons, action tags, single-pixel GIFs, clear GIFs, invisible GIFs and 1-by-1 GIFs) on our websites. Cookies and Internet tags are placed on different pages throughout our Websites. We also use them to measure responses to our Websites. We may deploy Cookies and Internet tags through our analytical service partners.
Social Plugins. The Website may also use social plugins (e.g., the Facebook “Like” button) to enable you to easily share information with others. When you visit our Website, the operator of the social plugin may be able to place a Cookie on your computer, enabling that operator to recognize individuals who have previously visited our Website. For further details about the information shared via a social media plugin, you should refer to that social media website’s privacy statement. For more information on Data Collection Technologies, please refer to Exhibit A: FOCUS ON DATA COLLECTION TECHNOLOGIES.
Online Advertising. We also use Data Collection Technologies to manage our online advertising program. These technologies are provided by our ad management partners and other third parties. We, and our ad management partners, may use these to track the actions of users of the Websites, to measure statistics of our marketing efforts, and to deliver advertisements on third party websites. We support the Self-Regulatory Principles for Online Behavioral Advertising of the Digital Advertising Alliance (“Principles”). This means that we allow you to exercise choice regarding the collection of information about your online activities over time and across third-party websites for online interest based advertising purposes. More information about these Principles can be found at www.aboutads.info/. If you want to “opt out” of receiving online interest-based advertisements, please follow the instructions at www.aboutads.info/choices, or http:// www.networkadvertising.org/choices/. An “opt-out” Cookie will be placed on your device indicating that you do not want to receive interest-based advertisements. If you delete Cookies on your device generally, you will need to opt-out again. Please note that when you “opt-out” of receiving interest-based advertisements, this does not mean you will no longer see advertisements from us. It means that the online ads that you do see will not be based on your interests. When you “opt-out” of receiving interest-based advertisements through one of the links above, these Data Collection Technologies may still collect information about your use of the Websites, including for analytics.
Advertisers. We do not permit advertisers to display their advertisements on our Website.
Do not track (DNT). We do not respond to DNT signals offered by some browsers.
OUR SECURITY MEASURES
We have implemented reasonable safeguards designed to prevent loss, misuse and unauthorized access, disclosure or modification of Personal Information provided or collected through the Websites. Unfortunately, no system or online transmission of data can be guaranteed to be 100% secure and you should always take appropriate security measures to protect your Personal Information, including ensuring that you have up-to-date antivirus software.
STORAGE & RETENTION
We provide products and services around the world. Accordingly, we store and process Personal Information on Biogen’s servers, and the servers of third parties we hire to provide our services, worldwide. These servers may be located outside the country from which you interacted with Biogen. We retain your Personal Information for no longer than is necessary for the purposes for which it has been collected.
LINKS TO OTHER SITES
Our Websites may feature links to third-party websites that we believe you might find useful and informative. We do not endorse or recommend these websites’ content or services, and we are not responsible for the privacy practices of the operators of these other websites. We encourage you to be aware of and read the privacy notice of each website you visit. When you link these third-party websites, please remember that you are bound by the privacy policy of the third-party. We may also partner with other companies to provide you with content or services on a joint or “co-branded” basis using a co-branded website with both the Biogen logo and the logo of the co-branded partner displayed. You should read the individual privacy policies of the co-branded websites, as these policies may differ in some respects from this privacy notice.
CO-BRANDED SITES
We may also partner with other companies to provide you with content or services on a joint or “co-branded” basis using a co-branded website with both the Biogen logo and the logo of the co-branded collaborator displayed. In these situations, we may share your Personal Information and/or Other Information with these co-branded collaborators to the extent permitted by this privacy notice and applicable local law. Please note that you should read the individual privacy policies of the co-branded websites, as these policies may differ in some respects from other Biogen privacy notices.
OUR CHILDREN’S NOTICE
We recognize the importance of protecting the privacy of children. Our Websites are neither intended for children nor are they designed to attract child users. Our Websites, their content and our services are intended for users over the age of eighteen (18). We do not knowingly collect any personally identifiable information from children under age eighteen (18). When a user discloses Personal Information on the Websites, the user is representing to us that he or she is at least eighteen (18) years of age. If we learn a user under the age of eighteen (18) has volunteered personally identifiable information on our Websites, we will delete such information from our active databases.
Your California Privacy Rights
If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, click here.
CONTACT US
If you have any concerns about the way your Personal Information has been collected or handled by Biogen, or any queries regarding this privacy statement, you can contact Biogen’s Global Privacy Office at privacy@biogen.com.
You can also write to the following address:
Global Privacy Office Biogen MA Inc. 225 Binney Street Cambridge, MA 02142 USA