GDPR Privacy Notice

This Privacy Notice applies to individuals (“you”) who are covered by the European Union’s General Data Protection Regulation (Regulation (EU) 2016/679) (“GDPR”), and outlines the policies of Fairfax Cryobank, Inc. (“we” or “us”) for the collection, use and disclosure of personal information that identifies you in connection with your use of our products and services, including those offered through our websites, emails and mobile applications (collectively, the “Sites”).  This notice does not apply to individuals who do not reside in the European Economic Area, or to aggregate, anonymous or other non-personally identifiable information about any individual.

Types of Personal Information We Collect

Data you give us

You do not have to provide personal information in order to visit and browse our Sites, or to receive general information from Client Services.  We record Client Services telephone calls, online chats and email communications for quality assurance, employee training and our own protection, so if you volunteer personal information through one of those channels, we may collect and use it for those purposes.

We collect your personal information, such as your name, address, email address, telephone numbers, credit card information and the name and address of your physician, when you provide it during a voluntary or mandatory registration process or when you order our products and services.  We strive to collect only the information necessary to perform our contracts with you, to communicate with you about our business relationship, to comply with our regulatory obligations and to confirm your identity if you request information about your own account.  When we collect payment information from you, we will only use it to facilitate payment for our products and services.

You do not have to agree to receive marketing communications from us in order to purchase our products or services.  You can opt out of receiving marketing emails as explained below.

We have social media accounts with companies like Facebook, Instagram and Twitter.  If you interact with those accounts, or access our Sites through your social media accounts, your personal information may be visible to others.

Data we collect passively

As you interact with our Sites, we may automatically collect information on your computer and Internet connection, such as the IP address of your computer and/or Internet service provider, the date and time you access a Site, the Internet address of websites from which you link to a Site, the computer technology you are using and your movements and preferences on our Sites.  We use technology that many other websites employ, including without limitation cookies, server logs other similar technologies.  We may also use analytics services providers such as Google.

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree.  Cookies contain information that is transferred to your computer’s hard drive.  We use different types of cookies for different reasons.  Some cookies are required for the operation of our Sites, and enable you to chat with Client Services, log into secure areas of our website, use a shopping cart or download donor information.  Some cookies record your visits to our Sites, pages you have visited and links you have followed, to let us know how many people visit our Sites and how they use them.  Some cookies allow us to recognize you when you return to our Sites, so that we can personalize content for you and remember your preferences, such as choice of language.

You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our Sites may become inaccessible or not function properly.

How We May Use Your Personal Data

The most common use we will make of your personal data is to provide you with information you have requested, and products and services you have ordered from us.  These and other likely uses of your personal data are set forth below, along with the legal bases for such uses:

How We May Share Your Personal Data

We will share your name, address, donor number, specimen prep type and specimen quality information with your clinic, in order to coordinate shipping and to track specimen quality and safety.  If required by law in your jurisdiction, we will also provide your clinic with your donor’s identifying information.

We may grant access to your information to affiliated and unaffiliated service providers and third parties who have a business reason to access it, such as website hosting service providers, payment processors, attorneys, accountants, common carriers and individuals or companies that conduct, manage or otherwise handle our marketing and promotional campaigns.  They will only process your personal information on our instructions and they are subject to a duty of confidentiality.

We may also share your information in the course of regulatory inspections, to respond to law enforcement requests, court orders or other legal process or to enforce our contracts, protect our assets and other legitimate business interests, collect past-due accounts and respond to comments or complaints made on social media or other public forums.

We do not sell or rent personal data; however, we may share or transfer your information in connection with a prospective or actual sale, merger, transfer or other reorganization of all or parts of our business.

Except as specifically set forth above, we do not transfer personal data to third countries.

How Long We Keep Your Personal Data

We are required by regulation in several different jurisdictions to maintain tissue banking records for as long as 30 years, including information that identifies donors and recipients.

How We Protect Your Personal Data

We employ reasonable technical, administrative and physical safeguards to protect the confidentiality and security of your personal information. We use industry-recognized technical safeguards, such as firewalls, and have adopted and implemented security procedures to protect your information from loss, misuse or unauthorized alteration.

You should keep in mind, however, that no Internet transmission is ever completely secure or error-free. In particular, e- mail sent to or from the Sites may not be secure.

Your Rights to Access, Correct and Remove Your Personal Data

Under certain circumstances, and subject to certain exceptions, you have rights under the GDPR in relation to your personal information. This may include the following rights:

• To obtain a copy of your personal information that we process;
• To correct your personal information, if it is inaccurate or incomplete;
• To have us delete your personal information;
• To restrict processing of your personal information;
• To request the transfer of your personal information to another party;
• To object to the processing of your personal information, including for direct marketing; and
• To withdraw consent you have previously given, although this will not affect any lawful processing carried out before the withdrawal.

Your Right to Complain

If you believe that the processing of your personal data infringes the GDPR, you have a right to file a complaint with a supervisory authority in the European Union country where you live or work, or where you consider that data protection rules have been breached.

How to Exercise Your Rights

If you wish to exercise any of the rights set out above, please contact us using the details in our “Contacting Us” section below.  We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights).  This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.  We may also contact you to ask you for further information in relation to your request to speed up our response.  We try to respond to all legitimate requests within one month.  Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests.  In this case, we will notify you and keep you updated.

Opting Out

You may modify your communication preferences and/or opt-out from specific communications at any time by notifying us via email to [email protected].

Notification of Changes

We may revise this Privacy Policy from time to time, and the most current version will be located on our website at fairfaxcryobank.com.  If we make material changes, we will notify you by posting a notice on our website prior to the effective date of the changes. By continuing to access or use the Sites or our products and services after those changes become effective, you acknowledge the revised Privacy Policy.

Contacting Us

Fairfax Cryobank, Inc.
Attention:  Privacy Officer
3015 Williams Drive, Suite 110
Fairfax, VA 22031
USA

U.S. Telephone in English:  703-698-3976 or 800-338-8407
En Español- 1800-338-8407 Presione el #1
Clients in the United Kingdom, toll free:  0800 404 9186
Clients in Spain: +34 931845772
Fax:  703-698-3933
Email:  [email protected]

Effective Date:  June 15, 2018