Privacy Notice

Last Edited on November 26, 2024

This Privacy Notice (“Notice”) applies to the processing of personal information of website users and other business partners (“you” or “your”) in relation to the use of the website at https://interiusbio.com/ (hereinafter the “Website“) and in the context of its business activities (together with the Website, the “Services”).

Interius BioTherapeutics Inc. (hereinafter as “Interius”, “we” or “us”), acts as the Controller, of your personal information. With this Notice, Interius wants to make sure that you understand what personal information it collects about you and how it uses and protects your personal information. It also tells you about the rights and choices you have about your personal information.

General

This Notice applies to other websites that Interius operates, including our Company pages on LinkedIn. This Notice does not apply to pages hosted by third parties to which Interius may refer and whose privacy notices may differ. Interius is not responsible for any data processed on these websites or by them. Further, this Notice does not apply to our clinical trials. If you are a participant in one of our clinical trials, a separate policy will apply to the processing of your personal information.

Please note that for the use of social media in the European Economic Area (EEA), Interius may in some cases act as a Joint-Controller with LinkedIn, for example for accessing and processing statistical aggregate data. For other processing on the platform, the social media platform shall be considered as the sole Controller and its privacy policies will apply.

1. Why, how and for how long do we collect your personal information?

We process personal information for the purposes set out below. We will keep your personal information for no longer than necessary to fulfill the purposes for which we collected it, including any legal requirements.

Depending on each case, the processing will be as follows:

Purposes	Types of personal information	Legal basis	Retention period
To answer to your queries either by email or through the contact form	Name, email address, other contact information and the content of your messages.	This processing is based on our legitimate interest in answering the requests or queries raised by you through the existing different contact channels.	We generally retain personal information for as long as reasonably needed for the specific business purpose or purposes for which it was collected.
For job application	Name, email, address, CV, background and other information provided in the context of your application	This processing is based on our legitimate interest for the purpose of our recruitment process in order to administer and appraise job applications.	We generally retain personal information for as long as reasonably needed for the specific business purpose or purposes for which it was collected.
To organize your participation in one of our events	Name, email address, financial details and other information relating to the event	This processing is based on our contractual obligations or on our legitimate interests to organize events	We will process your data related to your subscription and payment for the time necessary for the organization of your participation to one of our events.
For statistical purposes and product improvement	including aggregate and/or statistical data	We consider that we have lawful interest to understand the way our page and Services are used.	We will not store personal information for longer than required for our statistical purposes. We may store statistical reports for longer, but only in an anonymous form.
Troubleshooting and investigating and protecting against fraudulent or unauthorized activity	Any relevant personal information including statistical information	We consider that we have lawful interest to keep the Services secure.	We will not store personal information for longer than required for this purpose.
Use of cookies for the functioning and managing of our website	Cookies may store in certain circumstances personal information which may include: IP addresses, browser type, location, operating system etc.	Please, see our Cookies Notice for more information.	Please, see our Cookies Notice
To comply with legal obligations, and to defend us against legal claims or disputes	Any personal information relevant to the legal obligation, claim or dispute	This processing is based on legal obligations or on our legitimate business interest to defend Interius in legal claims or disputes.	We will not store personal information for longer than required for the legal obligation, claim or dispute.

2. Data sharing

We do not sell or trade your personal information to outside parties. Nevertheless, Interius may share your personal information with:

Affiliates. Our corporate parent, subsidiaries, and affiliates, for purposes consistent with this Notice.
Service providers. Companies and individuals that provide services on our behalf or help us operate the Services or our business (such as hosting, information technology, customer support, email delivery, and website analytics services).
Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional Services that they render to us.
Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above.
Business transferees. Acquirers and other relevant participants in business transactions (or negotiations for such transactions) involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Interius or our affiliates (including, in connection with a bankruptcy or similar proceedings).

Sharing your personal information as explained above may involve a transfer of personal information to a country outside the EEA, and/or the UK. When transferring personal information internationally, Interius complies with transfer rules under applicable Data Protection Laws including by:

Transferring your data to countries that have been recognized as adequate by the European Commission or by the UK secretary of state; or
implementing appropriate safeguards, such as the EU Standard Contractual Clauses (“SCCs”) (and the UK addendum), and/or the International Data Transfer Agreement (“IDTA”).

You can contact our Data Protection Officer (“DPO”) (see contact details below), if you want to have more details about the mechanism supporting data transfer.

3. How do we protect your information?

Interius treats your personal information in a confidential manner and employs a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, no security measures are failsafe and we cannot guarantee the security of your personal information.

Your personal information is contained behind secured networks and are only accessible by a limited number of persons who have special access rights to such systems and are required to keep the information confidential.

4. Your rights

Depending on your location, you may have the following rights subject to limitation as set forth by applicable data protection law:

Access. The right to obtain confirmation as to whether or not personal information concerning you is being processed, and, where that is the case, information related to the processing of data and a copy of the data.
Rectification. The right to require rectification of inaccurate or incomplete data about you.
Right to be forgotten. The right to obtain the deletion of your personal information under certain specified circumstances.
Restrict processing. The right to restrict processing of personal data under certain specified circumstances.
Data portability. The right to request for the receipt or the transfer to another organization, in a machine-readable form, of your personal information.
Object to processing. The right to object, on grounds relating to your particular situation, at any time to the processing of your data.
Right to withdraw consent. When you have given your explicit consent for the processing of your data, you can withdraw it at any time without any cost nor justification.

Please note that all these rights are not absolute and will be assessed on a case-by-case basis by our DPO.

If you would like to exercise your rights, please let us know by contacting our DPO, interiusbio.dpo@mydata-trust.info.

If you are located in the EEA or the UK, you also have the right to lodge a complaint with a competent data protection authority if you consider that your personal information is not processed in accordance with applicable data protection law.

If you are an EEA resident: You have the right to lodge a complaint with the data protection authority in the Member State of the European Union of your habitual residence, place of work or place of the alleged infringement. If you are a UK resident, the Information Commissioner’s Office will be the competent data protection authority.

Please find the contact information of all Authorities in section 7 “Contacts”.

Do Not Track (“DNT”) requests.

DNT is an optional browser setting that allows you to express your preferences regarding tracking by advertisers or other third parties. Some web browsers may allow you to transmit a “Do Not Track” signal to online services and websites. If a website receives such signal, the web browser can block that website from collecting certain Personal Information about you. We will try our best to respond to global privacy controls, including DNT signals. However, we do not assume liability for failure to comply with DNT signal by our partners and / or providers.

5. Children

The Services are not intended for use by children under 18 years of age. If we learn that we have collected personal information through the Services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.

6. Changes to this Privacy Notice

This Notice is effective as of the date stated at the top of this page. We may change this Notice from time to time. Please refer to this Notice on a regular basis.

7. Contacts

Interius, acting as Controller
3401 Grays Ferry Avenue,
Building 200 Suite 300,
Philadelphia, PA 19146, USA
info@interiusbio.com
215-608-9333

Data Protection Representative/Data Protection Officer
MyData-TRUST SA
Boulevard Initialis, 7 box 3 – 7000 Mons (BELGIUM)
interiusbio.dpo@mydata-trust.info

For other EU Data Protection Authorities
https://edpb.europa.eu/about-edpb/about-edpb/members_en