Privacy Policy

Last updated : February 2025

1. General information

We prioritize the protection of your data. We handle your data in accordance with relevant legal regulations for safeguarding personal information, including the EU General Data Protection Regulation (GDPR) and country-specific laws that apply to us. Through this data protection statement, we provide comprehensive information about how Pilatus Biosciences processes your personal data and the rights you have. Personal data refers to information that allows the identification of an individual, such as your name, address, phone number, email address, and IP address. The entity responsible for data processing on this website is:

Pilatus Biosciences SA
Route de la Corniche 6
1066 Epalinges
Vaud - SWITZERLAND
E-Mail: info@pilatusbio.com

2. Data processing related to visiting this website

Categories, sources and origin of data

In server log files, the provider of the website automatically collects and stores information that your browser transmits to us. These are: 

  • Visited page on our domain 

  • Date and time of the server request 

  • Browser type and browser version 

  • Operating system used 

  • Referrer URL 

  • IP address (anonymized) 

  • Hostname of the accessing computer 

These data are not merged with other data sources. The data processing is based on Art. 6 para. 1 lit. b EU-GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.  

Passing on to third parties

We engage service providers, which are companies we authorize to handle data processing within the legal framework defined by Article 28 of the GDPR. This specifically applies to payment and shipping processes. We have established the necessary data protection agreements with these service providers. Outside of these scenarios, data is shared with third parties only when mandatory legal requirements compel us to do so (for instance, sharing data with external bodies like supervisory authorities or law enforcement agencies). Within our organization, we ensure that only individuals who require the data for fulfilling their contractual and legal obligations have access to it.

Storage period of the data

We retain your data for as long as it is necessary for the specific processing purpose. It’s important to be aware that various retention periods require data to be stored. This is especially relevant for obligations related to commercial law or tax law (such as the Commercial Code and Tax Code). If no further retention obligations apply, the data will be promptly deleted once its intended purpose has been fulfilled.

Data transmission

For security purposes and to safeguard the transmission of sensitive information that you provide to us as the website operator, our site employs SSL or TLS encryption. This ensures that any data you send via this website cannot be intercepted by third parties. You can identify an encrypted connection by the “https://” address in your browser’s address bar and the lock symbol displayed there. To protect the data stored with us from accidental or deliberate manipulation, loss, destruction, or unauthorized access, we implement appropriate technical and organizational security measures.

Third country transmission

Data will only be transferred to third countries (outside the European Union or the European Economic Area) to the extent that this is necessary for the performance of the contractual obligation required by law or you have given us your consent.

Cookies

Our website utilizes cookies. These are small text files that your web browser stores on your device. Cookies enhance our site’s user-friendliness, effectiveness, and security. Some cookies are “session cookies”, which are automatically deleted at the end of your browser session. Conversely, other cookies persist on your device until you manually delete them. These persistent cookies assist us in recognizing you when you revisit our website.

With a modern web browser, you can monitor, restrict, or prevent cookie usage. Many browsers allow you to configure automatic deletion of cookies when the program is closed. However, disabling cookies may result in limited functionality on our website.

The setting of cookies, particularly those necessary for electronic communication processes or specific functions (e.g., shopping carts), is based on Article 6, Paragraph 1, Lit. f of the EU-GDPR. As the website operator, we have a legitimate interest in storing cookies to ensure technically flawless and seamless service provision. Any other cookies (e.g., for analytics) will be addressed separately in our data protection declaration.

Social Plugins

On our website, we have integrated social plugins that allow data to be sent to social networks and utilized by them. These plugins are identifiable by the logos of the respective networks, as well as labels like “Twitter” or “Youtube”. Currently, we offer plugins for LinkedIn. Importantly, when you visit our website, no data is immediately transferred to the social networks. Instead, data transmission occurs only after you click on one of the corresponding buttons, at which point the data is transferred and stored by the social network.

The use of these social plugins is voluntary and not directly tied to website usage. However, it’s essential to note that the provider of the specific service receives information about your visit to our website. If you are logged into your user account on that social network, this information can be linked to your account. Unfortunately, we have no control over the extent, purpose, or duration of data storage by the social network provider. Additionally, it’s possible that the social network provider utilizes cookies in this context. Through the social plugins on our site, you can access the services provided by the following companies:

Google Web Fonts

For uniform representation of fonts, this page uses web fonts provided by Google. When you open a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO. If your browser does not support web fonts, a standard font is used by your computer. Further information about handling user data, can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy at https://www.google.com/policies/privacy/. 

3. Your rights as a data subject

Your rights as a data subject are standardized in Art. 15 – 22 EU-GDPR. These include :

  • The right of access (Art. 15)

  • The right to rectification (Art. 16)

  • The right to erasure “right to be forgotten” (Art. 17)

  • The right to restriction of processing (Art. 18)

  • The right to data portability (Art. 20)

  • The right to object to data processing (Art. 21)

  • The right of appeal to the competent supervisory authority (Art. 77)

Right of access, rectification, deletion, limitation

You have the right to receive free information about your stored personal data, including details about its origin, recipients, and the purpose of processing. If applicable, you also have the right to correct, block, or delete this data at any time within the framework of the applicable legal provisions. Feel free to contact us anytime regarding this matter or for any further questions related to personal data.

Data portability

Data that we automatically process based on your consent or as part of a contract fulfillment can be transferred to you or third parties. This information is provided in a machine-readable format. If you request the direct transfer of this data to another responsible party, it will be done only to the extent that it is technically feasible.

Rights of objection

Some data processing activities require explicit consent from you. You have the right to withdraw your consent at any time. A simple email notification is sufficient for the withdrawal. Importantly, the legality of data processing that occurred before the withdrawal remains unaffected by the revocation.

Rights of complaint to the responsible supervisory authority

You can exercise the rights mentioned above by submitting a written request using the contact details provided in point 1. Additionally, you have the right to appeal to a data protection supervisory authority under Article 77 of the EU DS Block Exemption Regulation if you believe that we have violated data protection regulations while processing your personal data. For instance, you can file a complaint with the Federal Data Protection and Information Commissioner (EDÖB). Here are the contact details for the EDÖB: Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter, Feldeggweg 1, CH-3003 Bern, Switzerland.

Update of the Privacy Notice

This Privacy Notice is not part of a contract with you. We can change this Privacy Notice at any time. The version published on this website is the current version.

Last updated : February 2025