Powering the Immune System to Transform Lives
Privacy Notice
Last updated February 1, 2025.
This privacy notice (“Privacy Notice”) describes the privacy practices of Vir Biotechnology, Inc. and our subsidiaries and affiliates (collectively, “Vir Biotechnology”, “we”, “us”, or “our”). This Privacy Notice describes how we collect, use, disclose and otherwise process Personal Information (defined below in this Notice) in connection with the websites, mobile applications or digital services on which we post or link to this Privacy Notice (the “Sites”) and explains the rights and choices available to individuals with respect to their information. Please note that, in some circumstances, including when you otherwise interact with us (such as in connection with our clinical trials, products and services), we may provide additional privacy notices to you in connection with your participation in our programs, events, clinical trials, or other engagements with Vir Biotechnology (“in-time notices”). Such in-time notices will govern our privacy practices in connection with those engagements and take precedence to the extent there exists any conflict between this Privacy Notice and the in-time notice.
Individuals who interact with our European subsidiary, Humabs BioMed SA (“Humabs”) and individuals located within the European Economic Area (“EEA”), United Kingdom or Switzerland (collectively, “Europe”) should read the important information provided here, in addition to reviewing the general provisions of this Privacy Notice.
The following links will take you directly to the corresponding sections of this Privacy Notice:
Personal Information We Collect
Sources of Personal Information
How We Use Your Personal Information
How We Disclose Your Personal Information
How We Protect Your Personal Information
Other Sites and Social Media Services
Changes to this Privacy Notice
PERSONAL INFORMATION WE COLLECT
We use the term “Personal Information” – also called “personal data” or “personally identifiable information” in the laws of some jurisdictions – to refer to information that reasonably identifies, relates to, describes, or can be associated with you. Data that has been de-identified or anonymized or that otherwise cannot reasonably be related back to a specific person may not be considered Personal Information under applicable laws or regulations. The precise definition of Personal Information may vary depending on your place of residence and applicable laws or regulations.
Personal Information We Collect from You Directly
Personal Information you provide to us through the Sites may include, without limitation, the categories and types of information listed below, depending on how you interact with us and the Site:
- Business and personal contact information, such as your first and last name, email and mailing addresses, phone number, professional title, company name.
- Demographic information, such as gender and geographic location
- Professional credentials, such as your educational and professional history, certifications, and institutional affiliations
- Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online.
- Usage information, such as information about how you use the Sites and interact with us. This may include records of your communications and other requests. For example, if you email, call, or otherwise communicate with us or with members of our team, we collect and maintain a record of your contact details, communications and our responses. When you fill out a form on one of our websites or sign up for news and updates from us, or otherwise request information from us, we collect and maintain records of your requests.
- Marketing information, such as your preferences for receiving communications about our activities and publications, and details about how you engage with our communications.
- Information provided by job applicants, such as professional credentials and skills, educational and work history, and other information of the type that may be included on a resume or curriculum vitae. Please note that job applicants and/or employees may receive a separate applicant/employee privacy notice, depending on the individual’s place of residence.
- Health and medical information, such as medical insurance details, information about physical and mental health conditions and diagnoses, treatments for medical conditions, to the extent you participate in our clinical trials, patient support programs, or expanded access programs.
- Professional activity information. If you are a health care professional, we collect information about the programs and activities in which you have participated, your prescribing of our products, and the agreements you have executed with us.
- Other information that we may collect which is not specifically listed here, but which we will use in accordance with this Privacy Notice or as otherwise disclosed at the time of collection
We may combine other publicly available information, such as information related to the organization for which you work, with the Personal Information that you provide to us.
Personal Information We Collect Automatically
When you visit our Site or open emails we send you, we or third parties we work with may automatically collect certain information using technologies such as cookies and other tracking technologies described below.
- Cookies and Similar Technologies
"Cookies" are pieces of information that may be placed on your computer by a website to collect data to facilitate and enhance your communication and interaction with that website. Such data may include, for example, the address of the websites you visited before and after you visited our Site, the type of browser you are using, the pages on the Site you visited and what links you clicked on, and the region where your device is located. We may store some information on your device or device hard drive as a cookie or similar type of file to collect data related to usage of the Site. We may also use cookies to make your visit more convenient or to enable us to enhance the Site.
- Clickstream Data
As you use the Internet, a trail of electronic information is left at each website you visit. This information, which is sometimes referred to as "clickstream data," can be collected and stored by a website's server. Clickstream data can tell us the type of computer and browsing software you use and the address of the website from which you linked to our Sites. We may collect and use clickstream data as a form of aggregate information to anonymously determine how much time visitors spend on each page of our Sites, how visitors navigate throughout the Sites, and how we may tailor our web pages to better meet the needs of visitors. This information will be used to improve our Sites.
- Analytics
We may work with third-party vendors who use the technologies described in this section to conduct website analytics to help us track and understand how visitors use our Website. Such analytic information is not linked to the Personal Information of any visitor to the Website. One such provider is Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help analyze how users interact with the Website. By using the Website and accepting cookies, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Please refer to the currently available opt-outs for Google Analytics by visiting https://tools.google.com/dlpage/gaoptout/. You may obtain additional information about Google Analytics by visiting the section titled “How Google uses information from sites or apps that use our services,” located at www.google.com/policies/privacy/partners/.
- Social Media Platforms and Networks
If you interact with us on social media or use features, such as plugins, widgets, or other tools made available by social media platforms or networks in connection with our Site, we may collect information that you share with us on social media or that such platforms share with us. Please review the privacy policies and settings of the social media platforms and networks that you use for more information about their privacy practices.
- From Other Sources
We may obtain information about you from other sources, such as data analytics providers, fraud prevention vendors, vendors that provide other services on our behalf, or publicly available sources.
- Non-Personal Information
We may collect information that is not Personal Information (“Non-Personal Information”), which may include anonymous or aggregated data, or information lawfully made available from federal, state or local government records. Because Non-Personal Information does not personally identify you, we may collect, use and disclose Non-Personal Information for any purpose permitted by applicable law. In some instances, we may combine Non-Personal Information with Personal Information, in which case the combined information will be treated by us as Personal Information to the extent that it may be used to personally identify you. We reserve the right to develop and derive aggregate data (meaning information that relates to a group or category of individuals, from which individual identities have been removed) from Personal Information in order to enhance and maintain the Site, and such aggregate data will be treated as Non-Personal Information.
SOURCES OF PERSONAL INFORMATION
We collect Personal Information:
- directly from you, such as when you contact us;
- through the Sites;
- from healthcare professionals;
- from hospitals, clinics and other healthcare providers; from contract research organizations and clinical trial investigators; from government agencies or public records;
- from third-party service providers, data brokers or business partners;
- from industry and patient groups and associations;
- from your interactions with social media and other public forums (including adverse event information or product quality complaints); and
- as otherwise described in this Privacy Notice.
INVESTORS
You may provide information to us when visiting the “Investors” page of our Sites, such as your name and email contact information. We use this information to respond to and communicate with you, as well as to respond to your requests, operate the Sites, to comply with law, and for other compliance, fraud prevention, and safety purposes. We may share this information with our affiliates, service providers, and professional advisors, as well as for compliance, fraud prevention and safety, and in the event of a business transfer, each as explained below.
JOB APPLICANTS
This Privacy Notice does not apply to the Personal Information that we collect and process about employees and personnel or job applicants and candidates, which is subject to separate privacy notices A Candidate Privacy Notice for California residents can be found here.
When you visit the careers portion of our Sites, we collect the information that you provide to us in connection with your job application. This includes business and personal contact information, professional credentials and skills, educational and work history, and other information of the type that may be included in a resume. This may also include diversity information that you voluntarily provide. We use this information to facilitate our recruitment activities and process employment applications, such as by evaluating a job candidate for an employment activity, and monitoring recruitment statistics. We may also use this information to operate the Sites, and as otherwise necessary to comply with law or for compliance, fraud prevention, and safety purposes.
HOW WE USE YOUR PERSONAL INFORMATION
To operate our Sites and related services. We use your Personal Information to:
- operate, maintain, administer and improve the Sites;
- provide information about our products and services;
- better understand your needs and interests, and personalize your experience with the Sites;
- provide support and maintenance for the Sites;
- respond to your service-related requests, questions and feedback;
- provide you with investor, media or other information and materials; and
- manage access to our products, including where access is limited by law to licensed physicians.
To support our research and patient support activities. We may use your Personal Information when necessary to facilitate our clinical trials, studies, research and related activities that support patients and help us to improve our products or our product candidates, including to:
- recruit staff and manage clinical trials, including by recruiting investigators and participants;
- track and respond to safety and product quality concerns (including product recalls);
- support public health initiatives, symposia, conferences, and scientific, educational and volunteer events;
- identify and engage thought leaders and external experts;
- award scholarships and grants;
- attribute authorship to academic and promotional materials; and
- pay for services that physicians, researchers and other individuals may provide to us
To send you marketing and promotional communications. We may send you Vir Biotechnology-related marketing communications, as permitted by law. You will have the ability to opt-out of our marketing and promotional communications as described in the Opt out of marketing communications section below.
To comply with law. We use your Personal Information as we believe necessary or appropriate to comply with applicable laws, lawful requests and legal process, such as to respond to subpoenas or requests from government authorities.
For compliance, fraud prevention and safety. We use your Personal Information as we believe necessary or appropriate to: (a) enforce the terms and conditions that govern our websites, mobile apps, products and services; (b) comply with regulatory monitoring and reporting obligations (such as those related to adverse events, product complaints, patient safety, and financial disclosures); (c) protect our rights, privacy, safety or property, and/or that of you or others; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.
With your consent. In some cases, we may ask for your consent to collect, use or share your Personal Information, such as when required by law.
To create anonymous, aggregated or de-identified data. We may create anonymous, aggregated or de-identified data from your Personal Information and other individuals whose Personal Information we collect. We make Personal Information into anonymous, aggregated or de-identified data by removing information that makes the data personally identifiable to you. We may use this anonymous, aggregated or de-identified data and disclose it to third parties with which we have contractual or other relationships for our lawful business purposes.
HOW WE DISCLOSE YOUR PERSONAL INFORMATION
Affiliates. We may disclose your Personal Information to our subsidiaries and corporate affiliates for purposes consistent with this Privacy Notice.
Service providers. We may employ third-party companies and individuals to perform services on our behalf, including, without limitation:
- contract research organizations that conduct clinical trials;
- technology services and support (including email and web hosting providers, data storage and analytics vendors, and marketing and advertising technology providers);
- event planning and travel organizations that help facilitate Vir Biotechnology programs;
- payment, shipping and fulfillment service providers;
- customer service representatives and patient-support providers (such as for product quality and adverse event reporting, patient co-pay assistance, prescription adherence programs and similar efforts); and
- companies that support product recall administration.
These third parties may use your information only as directed by Vir Biotechnology and in a manner consistent with this Privacy Notice. Such third parties are prohibited from using or disclosing your information unless otherwise required by law or regulation.
Business partners and other professionals and organizations. We may disclose your Personal Information to partners with whom we jointly develop products or services in connection with the development and promotion of such products or services. We will ask for your consent before disclosing your information with our business partners where required by applicable law. We may also share your Personal Information with healthcare professionals, researchers, institutions, academics, public health organizations and publishers for purposes consistent with this Privacy Notice.
Professional advisors. We may disclose your Personal Information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of professional services that they render to us.
For compliance, fraud prevention and safety. We may share your Personal Information for the compliance, fraud prevention and safety purposes described above.
Public authorities. We may disclose your Personal Information in response to lawful requests by public authorities.
Corporate changes. We may sell, transfer or otherwise share some or all of our business or assets, including your Personal Information, in connection with a business deal (or potential business deal) such as a merger, consolidation, acquisition, restructuring, reorganization or sale of assets or in the event of bankruptcy or dissolution.
YOUR CHOICES
Consistent with applicable law, you may exercise the choices described in this section regarding your Personal Information and communications from us. You may also have certain additional rights available depending on laws in your state or country of residence, as described further below in the Privacy Notice.
We may send you marketing or other messages via email. If you receive a marketing message from us, you may unsubscribe from future messages in accordance with our standard unsubscribe process (such as by using the unsubscribe link included in an email), or by sending an unsubscribe request to us at privacy@vir.bio. We will process your request within a reasonable time after receipt within the time periods provided under applicable law.
- Cookies and Tracking Technologies
If you would like to stop or restrict the placement of cookies or flush any cookies that may already be on your computer or device, please use our cookie banner located at the bottom of our webpage or refer to and adjust your web browser preferences. Further information on cookies is available at www.allaboutcookies.org.
Note that cookie-based opt-outs must be performed on each device and browser that you wish to have opted out. For example, if you have opted out on your device browser, that opt-out will not be effective on your mobile device. Additionally, if you opt out on one of your devices, that opt out may not be effective on all of your devices. However, please be advised that cookie-based opt-outs are not effective on some mobile services. To learn more about how we use cookies, please see our Cookie Policy at https://www.vir.bio/cookie-policy/.
Please note that we will also treat Global Privacy Control (“GPC”) browser signals, which are available as a feature on certain browsers, as valid opt-out requests. You may opt out by enabling the transmission of the GPC signal on the browsers and/or browser extensions that support it. To download and use a browser supporting the GPC browser signal, please click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.
HOW WE PROTECT YOUR PERSONAL INFORMATION
Personal Information is maintained on our servers or those of our vendors, and is accessible by authorized employees, independent contractors, representatives, and agents as necessary for the purposes described in this Privacy Notice. We use reasonable and appropriate physical, technical, and organizational safeguards designed to promote the security of our systems and protect the confidentiality, integrity, availability, and resilience of Personal Information. Our employees and third-party service providers have access to your Personal Information only on a "need to know" basis. Additionally, we maintain internal policies that govern the proper handling of Personal Information by employees and require third parties that provide support or marketing services on our behalf to adhere to appropriate security standards with respect to such information. However, due to the inherent open nature of the Internet, we cannot guarantee that communications between you and Vir Biotechnology, or information stored on the Website or our servers, will be free from unauthorized access by third parties, and your use of the Website demonstrates your assumption of this risk. If you have reason to believe that your interaction with us is no longer secure (for example, if you believe that the security of any Personal Information you may have provided to us has been compromised), please immediately notify us of the problem by contacting us at 1-833-619-8830, option 3 or privacy@vir.bio.
OTHER SITES AND SOCIAL MEDIA SERVICES
For your convenience, we may provide links to other websites that may be of interest to you but are not owned, operated or controlled by Vir Biotechnology. Additionally, we may obtain information about your interactions with us or our content on social media sites. We do not endorse any other websites, providers, or services by providing such links or obtaining such information, and this Privacy Notice applies only to your use of our Sites. We are not responsible for the privacy policies of any websites and services we link to on our Services, and you should read the privacy policies of each site you visit to determine what data that site may collect about you.
Video Content
We may collect information regarding your viewing activity of specific video content available through the Sites so that we may better tailor the content we present to your interests and preferences. In some instances, your video viewing activity may be disclosed to third parties, including, without limitation, service providers with whom we partner to provide our Sites to you, as well as other business entities. By accessing video content displayed on our Sites, you consent to our collection and disclosure to third parties of your video viewing activity, with such consent being valid for two years, unless you have subsequently consented, in which case your consent shall be valid for two years from that date. You may withdraw your consent by emailing us at privacy@vir.bio.
CHILDREN’S PRIVACY
Vir Biotechnology does not solicit or knowingly collect any Personal Information from or about children under 13 years old through our Sites and we do not knowingly sell or share such Personal Information. However, if the parent or the guardian of a child under 13 believes that the child has provided us with Personal Information, the parent or guardian of that child should contact us at privacy@vir.bio, or via any applicable data subject request process as detailed below, if they want this information deleted from our files. Anyone under 18 years old should seek their parent’s or guardian’s permission prior to using or disclosing any personal information on our Sites.
CROSS-BORDER DATA TRANSFERS
Vir Biotechnology is headquartered in the United States, but Vir Biotechnology and its affiliates may also have service providers in other countries. If you submit Personal Information to us, such information may be processed in a jurisdiction where privacy laws may be less stringent than those in your country of residence. By submitting your Personal Information to us, you agree to the transfer, storage, and processing of such information in foreign jurisdictions including, but not limited to, the United States. Your Personal Information may be subject to access requests from governments, courts, or law enforcement in the United States. Where applicable, we may use model clauses approved by the laws of your jurisdiction (such as Standard Contractual Clauses approved by the European Commission) for cross-border data transfers.
Individuals who interact with Humabs and individuals who reside in Europe should read the important information provided below about transfer of Personal Information outside of Europe.
CHANGES TO THIS PRIVACY NOTICE
We reserve the right to modify this Privacy Notice at any time. If we make material changes to this Privacy Notice, we will notify you by updating the date of this Privacy Notice and posting it on our Sites. We may, and if required by law will, also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail (if we have your contact information) or another manner through the Sites.
Any modifications to this Privacy Notice will be effective upon our posting the new terms and/or upon implementation of the new changes on the Sites (or as otherwise indicated at the time of posting). In all cases, your continued use of the Sites after the posting of any modified Privacy Notice indicates your acceptance of the terms of the modified Privacy Notice.
CONTACT US
If you have any questions or concerns about our Privacy Notice or our privacy practices, please contact us at:
Vir Biotechnology, Inc.
Attn: Legal – Privacy
1800 Owens Street, Suite 900
San Francisco, CA 94158
privacy@vir.bio
Humabs BioMed SA
Attn: Legal – Privacy
Via dei Gaggini 3
CH-6500 Bellinzona
Switzerland
privacy@vir.bio
EUROPEAN PRIVACY RIGHTS
TO THE EXTENT APPLICABLE, AND ONLY IF YOU ARE SITUATED IN THE EUROPEAN ECONOMIC AREA, SWITZERLAND, OR THE UNITED KINGDOM, THIS SECTION DESCRIBES OUR PROCESSING OF YOUR PERSONAL DATA COLLECTED VIA THE SITES AND SETS FORTH THE RIGHTS YOU MAY HAVE UNDER APPLICABLE LAW.
Personal information. References to “Personal Information” in this Privacy Notice are equivalent to “personal data” governed by European data protection legislation.
Controller. Vir Biotechnology, Inc. and Humabs BioMed SA, respectively, are the controllers of Personal Information for purposes of European data protection legislation, with respect to the individuals who interact with each entity or its service providers, respectively.
EU Data Protection Representative. Vir Biotechnology’s EU Data Protection Representative is:
DataRep
3rd and 4th floor
Altmarkt 10 B/D
Dresden, 01067
Germany
You may also email any Personal Information-related questions to DataRep at datarequest@datarep.com, making sure to include “Vir Biotechnology, Inc.” in the subject line.
UK Data Protection Representative. Vir Biotechnology’s UK Data Protection Representative is:
DataRep
107-111 Fleet Street
London, EC4A 2AB
United Kingdom
You may also email any Personal Information-related questions to DataRep at datarequest@datarep.com, making sure to include “Vir Biotechnology, Inc.” in the subject line.
EU and UK Data Protection Officer. Vir Biotechnology’s Data Protection Officer is:
Trilateral Research
c/o Vir Biotechnology, Inc.
2nd Floor Marine Point
Belview Port, Waterford
X91 W0XW
Ireland
You may also send an email to dpo@vir.bio.
Legal bases for processing. Our legal bases for processing the Personal Information described in this Privacy Notice are described in the table below.
| Processing purpose | Legal basis |
|---|---|
| Details regarding each processing purpose listed below are provided in the section above titled “How we use your Personal Information”. | |
| Processing is necessary to perform the contract governing our provision of the Sites or related services or to take steps that you request prior to entering into the contract. If we have not entered into a contract with you, we process your Personal Information based on our legitimate interest in providing the services you access and request. | |
| Where we process sensitive Personal Information in connection with this processing purpose, the processing is authorized by Member State law or is necessary for scientific research, historical research, or statistical purposes. In all other cases, these processing activities constitute our legitimate interests. We make sure we consider and balance any potential impact on you (both positive and negative) and your rights before we process your Personal Information for our legitimate interests. We do not use your Personal Information for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). |
|
|
To send you marketing and promotional communications To manage our recruiting and process employment applications |
These activities constitute our legitimate interests. We do not use your Personal Information for these activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law). |
| To comply with law | Processing is necessary to comply with our legal obligations. |
| With your consent | Processing is based on your consent. Where we rely on your consent you have the right to withdraw it any time in the manner indicated when you consented. |
Use for new purposes. We may use your Personal Information for reasons not described in this Privacy Notice where permitted by law and the reason is compatible with the purpose for which we collected it.
Sensitive Personal Information. We ask that you not provide us with any sensitive Personal Information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) through the Sites. If you provide us with any sensitive Personal Information, you must consent to our processing and use of such sensitive Personal Information in accordance with this Privacy Notice. If you do not consent to our processing and use of such sensitive Personal Information, you must not submit to us such sensitive Personal Information. For individuals who interact with Vir Biotechnology in connection with clinical trials or participate in other activities we will require a separate consent prior to the collection and processing of sensitive Personal Information.
Retention. We retain Personal Information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes.
To determine the appropriate retention period for Personal Information, we consider the amount, nature, and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymize your Personal Information (so that it can no longer be associated with you) in which case we may use this information indefinitely without further notice to you.
Your rights. United Kingdom, Switzerland and European Union data protection laws may give you certain rights regarding your Personal Information. If you are located within these jurisdictions, you may ask us to take the following actions in relation to your Personal Information that we hold:
- Access. Provide you with information about our processing of your Personal Information and give you access to your Personal Information.
- Correct. Update or correct inaccuracies in your Personal Information.
- Delete. Delete your Personal Information.
- Transfer. Transfer a machine-readable copy of your Personal Information to you or a third party of your choice.
- Restrict. Restrict the processing of your Personal Information.
- Object. Object to our reliance on our legitimate interests as the basis of our processing of your Personal Information.
You can submit these requests by email to dpo@vir.bio or by contacting either Vir Biotechnology’s EU or UK Data Protection Representative or Data Protection Officer set forth above. We may request specific information from you to help us confirm your identity and process your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to legal restrictions. If you would like to submit a complaint about our use of your Personal Information or response to your requests regarding your Personal Information, you may contact us as described above or submit a complaint to the data protection regulator in your jurisdiction. You can find your data protection regulator here.
Cross-Border Data Transfer
If we transfer your Personal Information out of Europe to a country not deemed by the European Commission to provide an adequate level of Personal Information protection, the transfer will be performed:
- Pursuant to the recipient’s compliance with standard contractual clauses or Binding Corporate Rules;
- Pursuant to the consent of the individual to whom the Personal Information pertains; or
- As otherwise permitted by applicable European requirements.
You may contact us if you want further information on the specific mechanism used by us when transferring your Personal Information out of Europe or to request a copy of the appropriate safeguards relied on.
If you have any inquiry or complaint regarding our privacy practices, please contact us at:
Vir Biotechnology, Inc.
Attn: Legal – Privacy
1800 Owens Street, Suite 900
San Francisco, CA 94158
privacy@vir.bio
CALIFORNIA PRIVACY RIGHTS
The California Consumer Privacy Act of 2018 (“CCPA”), as amended by the California Privacy Rights Act of 2020, provides California consumers with specific rights regarding their Personal Information. This section describes the rights that California consumers have and explains how to exercise those rights. For the purposes of this section, Personal Information does not include: (i) information that is lawfully made available from federal, state or local government records; (ii) de-identified or aggregated data; or (iii) information excluded from the scope of the CCPA.
Our Sites are directed to healthcare providers (in their business capacity) who want to learn more about our immunology and oncology technologies and investigational candidates, individuals who are interested in (or who are already) participating in our clinical trials (including as investigators and study staff), current and potential investors in Vir Biotechnology, and candidates who wish to apply for a job with Vir Biotechnology.
The CCPA does not apply to the information we collect in connection with clinical trials, to any health or medical information we collect that is otherwise governed by California’s Confidentiality of Medical Information Act or the Health Insurance Portability and Accountability Act of 1996.
Information We Collect and How We Disclose It
General information regarding our collection, use, and disclosure of Personal Information is set forth in the Privacy Notice above. Information about our data practices pertaining to general categories of Personal Information can be found below (some types of Personal Information may apply to multiple categories).
As required under the CCPA, the following table below sets forth the categories of personal data that we: (1) collect and have collected in the preceding 12 months; and (2) disclose for a business purpose and have disclosed for a business purpose in the preceding 12 months. For more information about how we use your personal data, please refer to the How We Use Your Personal Data section, above, and for more information about our purposes for disclosing your Personal Information, please refer to the How We Disclose Your Personal Information section, above.
| Categories of Personal Information We Have Collected in the Past 12 Months | Categories of Third Parties to Which Personal Information Disclosed in the Past 12 Months |
|---|---|
| PERSONAL IDENTIFIERS: Identifiers such as a real name, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, social security number, tax ID, or other similar identifiers | Affiliates; Service Providers; clinical trial administrators |
| CONSUMER AND OTHER RECORDS: Paper and electronic consumer records containing personal data, such as name, address, telephone number, education, employment, employment history, financial information, medical information, or health insurance information | Affiliates; Service Providers |
| PROTECTED CLASSIFICATIONS UNDER APPLICABLE LAW: Characteristics of protected classifications under applicable state or federal law such as race, color, sex, gender, age, national origin, disability, and citizenship stat | Affiliates; Service Providers; professional advisors; clinical trial administrators; public authorities |
| INTERNET OR OTHER ELECTRONIC NETWORK ACTIVITY INFORMATION: Information regarding a consumer’s interaction with an internet website, application, or advertisement. | Affiliates; Service Providers |
| EMPLOYMENT HISTORY: Professional or employment-related information. | Affiliates; Service Providers; professional advisors; business partners and other professionals and organizations; public authorities |
| EDUCATION INFORMATION: Non-publicly available personally identifiable information as defined in the federal Family Educational Rights and Privacy Act (20 U.S.C. section 1232g, 34 C.F.R. Part 99). | Affiliates; business partners and other professionals and organizations; Service Providers; professional advisors; public authorities |
| SENSITIVE INFORMATION: Includes certain characteristics of protected classifications, health information, and financial information. | Authorities; Service Providers; clinical trial administrators |
| INFERENCES: Inferences drawn from any categories listed above to draw inferences or create a profile regarding a consumer’s preferences, characteristics, behavior, attitudes, intelligence, abilities, and aptitudes. | Affiliates; Service Providers; business partners |
Your Rights Under the CCPA
a. Right to Know
You have the right to request that we provide certain information to you about our collection, use, or disclosure of your Personal Information. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights, below), and subject to certain limitations that we describe below, we will disclose such information.
b. Right to Delete
You have the right to request that we delete any of your Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Your Rights, below), we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies. However, we may retain Personal Information that has been de-identified or aggregated.
c. Right to Data Portability
You have the right to request a copy of Personal Information we have collected and maintained about you. The CCPA allows you to request your information from us up to twice during a 12-month period. We will provide our response in a readily usable (and usually electronic) format.
d. Right to Correct
You have the right to request the correction of any Personal Information we maintain about you
e. Right to Opt Out of Selling or Sharing Your Personal Information
Although the CCPA provides you with the right to opt out of the sale or sharing of your Personal Information, we have not sold or shared your Personal Information, as those terms are defined under the CCPA, and do not intend to sell or share your Personal Information. Notwithstanding the foregoing, we honor Global Privacy Control (GPC) browser signals, which are available as a feature on certain browsers, as valid opt-out requests.
f. Right to Limit the Use of Your Sensitive Personal Information
You have the right to limit the use or disclosure of your sensitive Personal Information (“SPI”) if we are using your SPI beyond what is reasonable and proportionate to provide the requested goods or services.
g. Right to Non-Discrimination
You have the right not to receive discriminatory treatment for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
h. Exercising Your Rights
To exercise the rights described above, please contact us by using the following methods and indicate the right(s) that you wish to exercise:
- Calling us at: (833) 619-8830, option 3
- Emailing us at: privacy@vir.bio
- Writing us at: “Governance” section (Data Privacy Requests)
After submitting a request, we will take steps to verify your identity so that we may properly respond and confirm that it is not a fraudulent request. When providing us this information, you represent and affirm that all information provided is true and accurate. If we are unable to verify that the consumer submitting the request is the same individual about whom we have collected Personal Information, we may contact you for more information, or we may not be able to meet your request.
Only you, or an agent legally authorized to act on your behalf, may make a verifiable request related to your Personal Information. If you are making a request as the authorized agent of a California consumer, we will ask you also submit reliable proof that you have been authorized in writing by the consumer to act on such consumer’s behalf.