Reata Pharmaceuticals, Inc. (Reata, us, we or our) respects the privacy of visitors to its website. The purpose of this Privacy Notice is to provide you with information on how we will use and protect the personally identifiable information you share with us. This Privacy Notice will be continuously assessed against new technologies, business practices and the needs of persons with whom we communicate. By using Reata’s website, you agree to the practices described in this Privacy Notice. If you have any concerns or would like to contact us about any aspect of this Privacy Notice, please get in touch with us through the contact details at the bottom of this notice.
As the controller of the personal information as defined by the General Data Protection Regulation (EU) 2016/679 (GDPR), Reata has committed to comply with the GDPR. Reata wants to make sure that European Union (EU) data subjects understand what personal information is collected about them, how their personal information is used and how it is kept safe by Reata when they use Reata’s website.
Reata is located at 2801 Gateway Drive, Suite 150, Irving, Texas 75063 (US).
Information We Gather:
We will collect personal data from you when you visit this website to undertake a pre-qualifying assessment for one of our clinical trials; we will collect the following types of information:
- Personal details, such as name and age
- Contact information, including your address phone number and email
- Website tracking data, which may include IP address, site pages visited and your general location
- Health information, particularly medical conditions and medication
We may collect additional personal data from you, including personal health information, by telephone or email as a follow up to information that you provide to us through this website.
We also track IP addresses and geolocation down to the area code, how a visitor got to our site, what the visitor does at the site, for how long the visiter remains on the site, what the visitor clicked on at the site and how the visitor leaves the site. We will use your information only to respond to your requests and to aid us in making our website services more accessible and friendly to you.
What Are Cookies?
Cookies are small pieces of text sent by your web browser by a website you visit. A cookie file is stored in your web browser and allows the website or a third-party to recognize you and make your next visit easier and the website more useful to you.
Cookies can be “persistent” or “session” cookies. Persistent cookies remain on your personal computer or mobile device when you go offline, while session cookies are deleted as soon as you close your web browser.
When you use and access the website, we may place a number of cookies files in your web browser.
- Track your IP address & machine ID for website traffic analysis using third party Google Analytics and Open Tracker.
- WordPress sets a standard test cookie containing no personal information. This is a function of the WordPress platform upon which reatapharma.com is built.
We use both session (WordPress) and persistent (third party analytics) cookies to run the website.
What Are Your Choices Regarding Cookies
- For the Chrome web browser, please visit this page from Google: https://support.google.com/accounts/answer/32050
- For the Internet Explorer web browser, please visit this page from Microsoft: http://support.microsoft.com/kb/278835
- For the Firefox web browser, please visit this page from Mozilla: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
- For the Safari web browser, please visit this page from Apple: https://support.apple.com/kb/PH21411?locale=en_US
- For any other web browser, please visit your web browser’s official web pages.
Where Can You Find More Information About Cookies
You can learn more about cookies and the following third-party websites:
- AllAboutCookies: http://www.allaboutcookies.org
- Network Advertising Initiative: http://www.networkadvertising.org
Log Files and Aggregate Information
We may track the total number of visitors to our website, the number of visitors to each page of our website, IP addresses and the domain names of our users’ internet service providers, and we may analyze these data for trends and statistics in the aggregate, but such information will be in aggregate form only and it will not contain personally identifiable data.
We may use such aggregate information to analyze trends, administer the website, track users’ navigation within the website and gather broad demographic information for aggregate use. We may share this aggregate information with our corporate partners and contracted vendors to assist us in operating the website and to enable them to better understand Reata’s business.
Uses of Information
We only use your personal information to help us improve our services and to inform you about additional products, services or developments that may be of interest to you and for which you have given us your consent. We do not share this information with outside parties without your explicit consent.
The information we collect will be used for the following purposes:
|The reasons we process your personal information||How we justify the processing|
|To assess (at your request) whether you may qualify to participate in our clinical trial and, if so, to direct you to one of our clinical trial sites for further evaluation||
For EU data subjects, we consider that it is our legitimate interest to process your personal data in order to respond to your requests or inquiries
For non-EU subjects to whom the GDPR does not apply, we will ask for you consent to process your data
For US subjects, we consider the processing of your data to be pre-contractual measures taken at your request.
|To meet our legal and regulatory obligations||The processing of your personal data is necessary to comply with our legal regulatory obligations.|
|To keep your informed about our trials or other activities that we believe may be of interest to you||We will ask for your consent to keep you informed about our trials and other activities.|
We do not sell, trade or rent your personal information to others. We may provide aggregate statistics about our customers, sales, traffic patterns and related site information to reputable third-party vendors, but these statistics will include no personally identifying information. We may also release information when we believe, in good faith, that such release is reasonably necessary to (a) comply with law, (b) enforce or apply the terms of any of our user agreements, or (c) protect the rights, property or safety of Reata, our users or others. We will not share, sell or transfer your personally identifiable data to any third party without your explicit consent.
Reata will retain personal data only as long as necessary to fulfill the purpose for which such data was collected or as necessary for compliance with a legal obligation to which Reata is subject, or in order to protect your vital interests or the vital interests of another person.
Location of Your Personal Data
Reata is a United States pharmaceutical company, and inquiries made through our website will be processed in the United States.
The personal data you provide will be accessible to our affiliates and may also be shared with third parties. These third parties may include (i) external third party outsourced service providers, vendors or business partners that assist us in carrying out our business activities (“third party agents”) and (ii) other unaffiliated third parties which do not act as agents or service providers and are not performing functions on our behalf (e.g. purchasers and prospective purchasers or other parties in any proposed reorganization, sale, joint-venture, merger, transfer or other transaction relating to our business, assets, companies or stock).
Reata is committed to ensuring the security of personal data in order to protect it from unauthorized access, unlawful processing or disclosure or accidental loss, modification or destruction. To this end, Reata uses technical, administrative and procedural measures in an attempt to safeguard your personal data. It includes the use of encryption practices to help insure the integrity and privacy of the personal and health-related personal data you provide to us. Equally, all personal and/or health-related personal data is kept physically behind firewalls that prevent intruders from gaining access. Nevertheless, while we will make reasonable efforts to protect personal and/or health-related personal data, you should be aware that there is always some risk that an unauthorized third party could intercept an internet transmission, and we do not guarantee that your personal data will be secure from accidental loss, unauthorized access, improper use or disclosure.
Your rights as an EU data subject
GDPR provides EU data subjects with rights over their personal data. These rights include:
- Information. The right to be informed about the processing of your personal data.
- Access. The right of access to your personal data. You have the right to obtain confirmation as to whether or not your data are being processed. If yes, you have the right to access your data, to receive information related to the processing and also to receive a copy of the data undergoing processing.
- Rectification. You are entitled to have your personal data rectified if it is inaccurate or incomplete.
- Erasure. This right enables you to request the deletion or removal of your personal data in certain circumstances.
- Restriction. The right to restrict processing of your personal data.
- Portability. The right to portability of your data in a re-usable format, such as spreadsheets. This right enables you to reuse your personal data for your own purposes across different services.
- Opposition. The right to object to processing for certain purposes.
- Withdraw consent. The right to withdraw your consent at any time and without justification when you have given your consent for the data processing.
Reata will provide all visitors to this website with the same rights as provided to the data subjects under the scope of the GDPR.
Protection of Children’s Information
Reata’s dedication to protecting your privacy also extends to children, and our website is not designed or intended to attract children 15 years old or younger, based on the country you are in. We do not knowingly collect personal information from any person we actually know is defined to be a child in a given country. If you have questions or concerns about the Internet and privacy for children, we encourage you to visit https://www.consumer.ftc.gov/topics/protecting-kids-online.
For EU data subjects – Our Data Protection Representive and Data Protection Officer
The data protection representative of Reata in the EU is MyData-TRUST S.A., located at Boulevard Initialis, 7/3, BE 7000, Mons, Belgium.
If you are an EU data subject and have any questions about this notice or how we process your personal data, please contact our Data Protection Officer, Nicole Rensonnet, at firstname.lastname@example.org.
If you are an EU data subject, you also have the right to raise a complaint about how your personal data is handled to the National Data Protection Authority located in the Member State in which you have your main residence or located in the Member State the alleged violation took place. To obtain contact details of all Member States Data Protection Authorities, click here.
As a convenience to our visitors, Reata’s website provides links to a number of sites that we believe may offer useful information. The policies and procedures we described here do not apply to those sites. We suggest contacting those sites directly for information on their privacy, security and data collection and distribution policies.
Changes to the Privacy Notice
Personal data privacy is a new and evolving area, and Reata is evolving to meet these demands. Mistakes are possible and miscommunications are possible. If you have any comments or questions regarding this Privacy Notice, please contact us by submitting an online form at inquire.reatapharma.com. We will address any issue to the best of our abilities.
European Economic Area
Provisions of this Privacy Notice that apply to EU data subjects shall also apply to European Economic Area data subjects.