Privacy Notice

1. Overview
Vividion Therapeutics, Inc., a wholly owned and independently operated subsidiary of Bayer AG (“Vividion Therapeutics,” “we,” “us,” or “our”), is a biopharmaceutical company utilizing novel discovery technologies to unlock high value, traditionally undruggable targets with precision therapeutics for devastating cancers and immune disorders.

We process Personal Data in different contexts, and we do so by respecting your privacy as part of our unwavering commitment to ethical and responsible practices. We process Personal Data collected through our website (“Website”) or otherwise through your interactions with us, either online or offline, and we process Personal Data for conducting clinical trials. We process the Personal Data of our employees and we also gather Personal Data for conducting our day-to-day business activities.

This Privacy Notice explains Vividion Therapeutics’ practices regarding the collection, use and disclosure of Personal Data (defined below) that you may provide to Vividion Therapeutics. By using the Vividion Therapeutics Website, or submitting any Personal Data to Vividion Therapeutics, you acknowledge and agree with the practices and the terms described in this Privacy Notice. Please review this Privacy Notice carefully before using the Vividion Therapeutics Website and/or submitting Personal Data to Vividion Therapeutics.  

2. About this Privacy Notice
This Privacy Notice is designed to help you understand what information we gather from you when you visit our Website or interact with us, and what we do with that information.

This Privacy Notice applies to information collected by Vividion Therapeutics through our Website or in the course of our business activities, including Personal Data processed in the context of clinical trials, information from our service providers, suppliers, their personnel and other health care professionals, and researchers that participate in clinical trials.

Vividion Therapeutics has specific policies for how we process Personal Data of our employees. 

If you are a California resident and would like to learn more about your consumer privacy rights, please see our California Consumer Privacy Act (CCPA) Privacy Notice.

For information about our privacy practices with respect to job applicants located in California, please see our Privacy Notice for California Candidates.

3. Personal Data We Collect
“Personal data” means any information that can directly or indirectly identify you or other individuals. We collect different types of Personal Data depending on the context of your interactions with Vividion Therapeutics.  

Vividion Therapeutics collects the following types of Personal Data as further described below.

Personal Data collected through the Website: Information collected automatically through the use of cookies, including location data, browser type, device data, usage data, and web log data. For additional information, please see the “Cookies” section below to learn more about how we use cookies.

Personal Data from job applicants: Information which may include your contact details, employment details and history, educational history, and other information that you submit for our consideration when you apply for a job posting with Vividion Therapeutics.

Personal Data collected from healthcare professionals and other personnel from our clinical trial partners: Information regarding their contact details and qualifications or resumes of persons that participate in the clinical trials or in research studies.

Personal Data provided directly by you or our clinical trial partners: Information provided directly by you when you interact with us through our Website or by some other method such as email or telephone. We collect contact details from you when you request information or submit questions to us. This may include other personal information that you decide to share with us. In the context of clinical trials in which we participate, we may also collect additional Personal Data such as your protected health information, either directly from you or from our clinical trial partners.

Cookies: We use cookies to operate and administer our Website, gather usage data on our Website, and improve your experience on it. A “cookie” is a piece of information sent to your browser by a website you visit. Cookies can be stored on your computer for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third party placing it) and help recognize your computer when you open your browser and browse the Internet again (persistent cookies).

On most web browsers, you will find a “help” section in the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of the Website and you may not be able to benefit from the full functionality of the Website. Advertising networks may use cookies to collect Personal Data. Most advertising networks offer you a way to opt out of targeted advertising.

If you access the Website on your mobile device, you may not be able to control tracking technologies through the settings.

Analytics: We use Google Analytics, a web analytics service provided by Google, Inc. that uses cookies to help us analyze how users use the Website and enhance user experience when you use the Website. For more information on how this data is used, go to www.google.com/policies/privacy/partners/. You can also opt-out of Google Analytics by downloading Google’s Opt-Out Browser Add-on. 

Do Not Track Signals: Our Website currently does not respond to “Do Not Track” (“DNT”) signals and operates as described in this Privacy Notice whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will update this Privacy Notice to describe how we do so.

2. How We Use Personal Data

The purposes for which we collect and use your Personal Data varies depending on the type of relationship you have with us.

We may use Personal Data for the following purposes:

  • To ensure the proper operation of our day-to-day business, including recruitment practices;
  • To respond to your inquiries, comments, feedback, or questions;
  • To send administrative information to you, for example, information regarding our services and changes to our terms and conditions, and policies;
  • To understand your needs and interests, and personalize your experience with our Website and our communications;
  • To prevent fraud, criminal activity, or misuses of our Website, and to ensure the security of our IT systems, architecture, and networks;
  • To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties; and
  • To identify clinical trial sites and investigators and conducting clinical trial and research activities and communicate with them; 
  • For any other purpose that you specifically authorize us based on your consent.

Aggregated Information: We may aggregate Personal Data and use the aggregated information to analyze the effectiveness of our services, to improve and add features to our Website, and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Website and share aggregated information like general user statistics with prospective business partners. We may collect aggregated information through the Website, through cookies, and through other means described in this Privacy Notice.

3. Disclosure of Personal Data

In certain circumstances, Vividion engages third party vendors and service providers to help us accomplish our business objectives. We may share the categories of Personal Data described above with our third party vendors and service providers without further notice to you, unless required by law. Vividion does not sell Personal Data.

Disclosures to Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share Personal Data with vendors and service providers, including providers of hosting services, cloud services, other information technology services, email solutions, data analytics services, or support and maintenance services for the Website. Pursuant to our instructions, the vendors or service providers will access, process, or store Personal Data in the course of performing their duties to us. If the engagement involves the transfer of Personal Data, we require vendors and service providers to sign a data processing agreement consistent with this notice before we transfer any Personal Data to them. These companies do not have any independent right to share or use this information.

Disclosures to Business Partners: As necessary to participate in clinical trials, we may share Personal Data with our clinical trial partners, which may include our affiliate, Bayer AG, as well as healthcare providers, contract research organizations, pharmacies, and pharmacovigilance providers.

Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively a “Transaction”), your Personal Data and other information may be shared in the diligence process with counterparties and others assisting with the Transaction, and also may be transferred along with other assets to a successor or affiliate of Vividion Therapeutics as part of that Transaction.

Legal Requirements: We may also share your Personal Data if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users, or the public, or (v) protect against legal liability.

5. Children

Our Website is not directed to children who are under the age of 16. Vividion Therapeutics does not knowingly collect Personal Data from children under the age of 16. If you have reason to believe that a child under the age of 16 has provided Personal Data to Vividion Therapeutics through the Website, please contact us and we will endeavor to delete that information from our databases.

6. Links to Other Websites

The Website may contain links to other websites not operated or controlled by Vividion Therapeutics, including social media services (“Third Party Websites”). The information that you share with Third Party Websites will be governed by the specific privacy policies and terms of service of the Third Party Websites and not by this Privacy Notice. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Websites directly for information on their privacy practices and policies.

7. Security

We implement commercially reasonable technical, administrative, and organizational measures designed to protect Personal Data both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Website or e-mail. Please keep this in mind when disclosing any Personal Data to Vividion Therapeutics via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Website, or third-party websites.

8. International Users

You understand and acknowledge that your Personal Data will be transferred from your location to our facilities and servers in jurisdictions other than where you are located. Where necessary, we utilize a valid transfer mechanism, such as the European Union Standard Contractual Clauses, to facilitate the transfer. To obtain a copy of these clauses or additional information on transfers, please contact us at the contact information listed below in this Privacy Notice.

9. Your Choices

In certain circumstances providing Personal Data is optional. However, if you choose not to provide Personal Data that is needed to use some features of our Website, you may be unable to use those features. You can also contact us to ask us to update or correct your Personal Data.

10. European Data Protection Rights

For Individuals that reside in the European Economic Area (EEA), Switzerland or the United Kingdom, we are committed to facilitate the exercise of your rights granted by the data protection laws of these territories. For the purposes of European data protection law, we are controllers of your Personal Data.

In addition to the disclosures made elsewhere in this Privacy Notice with respect to our privacy practices, our legal basis for processing Personal Data we collect in the EEA, Switzerland and the UK, can vary depending on the manner in which you use our Website or otherwise engage with us. To the extent we rely on our legitimate interests as a legal basis for processing your Personal Data, we have considered the balance between our own interests (among other things, the lawful and efficient operation of our Website and business) and your interests, and we believe that (a) you would reasonably expect us to carry out the kind of processing referenced herein and (b) such processing will not cause you any harm and/or will not seriously impact your rights and freedoms with regard to data privacy. To the extent we rely on your consent as a legal basis for processing your Personal Data, you have the right to withdraw such consent given to us for the processing of your Personal Data at any time, although such withdrawal will not affect the lawfulness of our processing prior to your withdrawal of consent. We may also process Personal Data where necessary for our compliance with legal obligations to which we are subject. We also reserve the right to process Personal Data in the event we believe doing so is necessary to protect the rights of the data subject or another person.

Individuals located in the EEA, Switzerland, or the UK have the right to access, rectify, or erase their Personal Data; to restrict or object to processing of your Personal Data, including automated processing; and to data portability (i.e., the right to receive a copy of your Personal Data).

For individuals located in the EEA, Switzerland, or the UK, Vividion Therapeutics has appointed an EU Representative in the European Union. Our EU Representative is Bayer AG.

If you have any questions about our privacy practices or wish to exercise these rights, please contact us using the contact information listed below, or our EU Representative at dataprivacy@vividion.com. You also have the right to file a complaint with your data protection authority if you have a concern about the manner in which we are processing your Personal Data.

11. Changes to the Privacy Notice

Our business may change from time to time. As a result, we may update this Privacy Notice at any time and we will let you know about changes by updating the Privacy Notice on the Website, unless another type of notice is required by applicable law. By continuing to use our Website or providing us with Personal Data after we have posted an updated Privacy Notice, or notified you by other means if applicable, you consent to the revised Privacy Notice and practices described in it. The most current version of the Privacy Notice will always be available on the Website. You can check the “last updated” date above to see when the Privacy Notice was last updated.

12.  Contact Us

If you have any questions about our Privacy Notice or if you would like to exercise your privacy rights, please feel free to contact us at:

Vividion Therapeutics, Inc.
Attn: Legal
5820 Nancy Ridge Drive
San Diego, CA 92121
USA
Email: dataprivacy@vividion.com
Phone: 858-345-4690

We will respond to your request consistent with applicable law.