Effective September 19, 2019
Blueprint Medicines may maintain any information or data collected in an electronic database. Blueprint Medicines will store and maintain this data for as long as necessary (i) for the purposes for which it was collected, (ii) to meet its current and future legal obligations, and (iii) as permitted to meet its legitimate interests.
Notification of Changes to This Policy
Personally Identifiable Data Collected Through this Website and Security
The only personally identifiable data Blueprint Medicines currently collects through this website is the information you send to us when you (1) contact Blueprint Medicines with your questions and comments through the Contact page on this website, (2) send us an email, (3) complete a sign-up form to learn more about a clinical trial or medical condition (4) complete a survey or (5) consent to collection of information pertaining to your visit.
PLEASE DO NOT SEND INFORMATION RELATING TO MEDICAL CONDITIONS OR OTHER SPECIFIC PERSONAL HEALTH INFORMATION VIA EMAIL OR THIS WEBSITE. Further, as a reminder, any email that you send or receive on your employer’s email system may be the property of your employer. Consequently, your employer may have the ability to review your personal information sent via email. Please keep this in mind when disclosing any personally identifiable data to Blueprint Medicines via email or this website.
Data Collected Through Cookies
We collect information about your use of this site through cookies and similar technology. A cookie is a piece of information that the computer that hosts this site gives to your browser when you access this site. With cookies, the information that we collect and share is anonymous and not personally identifiable. It does not contain your name, address, telephone number or email address. We may use the information from cookies for various business purposes, including development and improvement activities.
We may also track the total number of visitors to this website, the number of visitors to each page of this website, and the domain names of our visitors’ Internet service providers. On certain Blueprint Medicines websites, we may also ask users that have opted to receive information to complete a survey.
Your Web browser can be set to allow you to control whether or not you will accept cookies or turn cookies off. If your browser is set to reject cookies, sites like ours that are cookie-enabled will not recognize you when you return to the site and some site functionality may be lost. For more information about cookies, please visit http://aboutcookies.com/.
We are committed to protecting the privacy of children. This website is intended for users over the age of 18, and we do not knowingly collect personal information from children under the age of 13. You should be aware that this website is not intended for, or designed to attract, children under the age of 13. No information should be submitted to Blueprint Medicines through this website or by email by visitors who are less than 13 years of age. If a child has provided us with personally identifiable information, the parent or guardian of the child may contact us, and we will take steps to remove such information.
Please note that any information you send to Blueprint Medicines via email or other Internet transmission is not completely secure. We take reasonable steps to protect the personally identifiable information provided via this site or email from loss, misuse and unauthorized access or disclosure, however, no Internet or e-mail transmission is ever fully secure from illegal tampering or “hacking” or error free. Due to the nature of the Internet, there is a possibility that unsecured (unencrypted) email could be intercepted and read by third parties. Blueprint Medicines assumes no responsibility for interception of confidential information (including in a resume or CV) that you send in an unsecured (unencrypted) email message or other Internet transmission to and from this website. Therefore, you should take special care in deciding what information you send to us via e-mail or other Internet transmission.
Links to Other Sites
Your Privacy Choices
You may always update your personal information and your preferences by contacting us at Privacy@BlueprintMedicines.com.
If you have submitted personally identifiable information through this site and would like to have that information deleted from our records, please notify us at the address below. You may also request access to personal data about you that Blueprint Medicines holds and you may have the opportunity to request a correction or amendment to your personal data. Please note that although we attempt to adhere to requests to remove personal data from our records, it may not be possible to remove all copies depending on the manner in which the information was submitted to us. In addition, we reserve the right not remove or amend information provided to us regarding an adverse drug effect and information is otherwise required to be retained by law.
You can also choose not to receive future emails, information or updates from Blueprint Medicines at any time by either clicking the “unsubscribe” link provided in emails from Blueprint Medicines or by contacting Blueprint Medicines at the following address:
Blueprint Medicines Corporation
45 Sidney Street
Cambridge, MA 02139
Telephone: (617) 374-7580
Your California Privacy Rights: While Blueprint Medicines does not provide your personally identifiable information to third parties for their use in marketing, under California law, California residents have the right to opt-out of such use of their personally identifiable information if it occurred.
Your Rights in Connection with Your Personally Identifiable Information: Under certain circumstances and/or in certain jurisdictions, and as required by law you may have the right to:
- Request access to your personally identifiable information. This enables you to receive a copy of the personally identifiable information we hold about you.
- Request correction of any incomplete or inaccurate personally identifiable information that we hold about you.
- Request erasure of your personally identifiable information when there is no need for us to continue processing it, or you have exercised your right to object to processing (see below).
- Object to processing of your personally identifiable information where we are relying on a legitimate interest (or those of a third party), and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personally identifiable information to suspend the processing, for example if you want us to verify its accuracy or the reason for processing it.
- Request the transfer of your personally identifiable information to another party.
You will not have to pay a fee to access your personally identifiable information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances. In addition, there may be requests that we are unable to process because of other EU legal requirements. If a request is denied, we will notify you of the reason.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is an appropriate security measure to ensure that personally identifiable information is not disclosed to a person who doesn’t have the right to receive it.
As it pertains to users of our website located in the EU, the controller of your personally identifiable information is Blueprint Medicines.
We reserve the right to disclose your personal information (i) as required by law, court order, legal process or government or regulatory requirement or (ii) to protect the safety, rights, or property of the public or Blueprint Medicines.
Other Terms and Conditions
Blueprint Medicines Corporation
45 Sidney Street
Cambridge, MA 02139
If you are located in the EU, you have the right to lodge a complaint with an EU Supervisory Authority. However, if you have a complaint regarding the processing of your personally identifiable information, we request that you first contact us, and we will reply on timely basis.
EU-US PRIVACY SHIELD POLICY
Effective Date: October 2, 2019
PURPOSE OF DATA COLLECTION:
Blueprint Medicines Corporation (“Blueprint Medicines”) is a precision therapy company developing medicines for genomically defined cancers, rare diseases and cancer immunotherapy. Blueprint Medicines may collect personal information from or concerning individuals in the European Economic Area (“EEA”), Switzerland, and the United Kingdom. The purposes for collecting data vary but may include carrying out scientific or medical research, adverse event and product complaint reporting, managing and overseeing vendors/consultants, and communicating about Blueprint Medicines’ current for future drug candidates, approved therapies, if any, and services. Blueprint Medicines also processes human resources data for various purposes, including without limitation: recruitment; compensation, benefits administration and payroll; performance appraisals and training; protection against injury, theft, legal liability, fraud and abuse; and other business purposes.
This Privacy Shield Policy sets forth the privacy principles that Blueprint Medicines Corporation together with its U.S. subsidiary Blueprint Medicines Security Corporation (collectively, “Blueprint Medicines”) follows in connection with the transfer of personal information from European Economic Area (“EEA”) member countries, Switzerland, and the United Kingdom to the United States.
Blueprint Medicines may collect personal information from or concerning individuals in the EEA, Switzerland, and the United Kingdom which may include full name, address, telephone or mobile number, business and home contact details including e-mail addresses, health information and demographic information, as well as any other personal information that you voluntarily provide to us, such as when you contact us with inquiries. Personal information may further include any information that identifies an individual but does not include information that has been anonymized. This personal information may come from sources such as: (1) clinical research subjects; (2) medical and healthcare professionals, including clinical investigators and staff conducting clinical or medical research; (3) potential or actual clinical trial and post-market patients and their family members/caregivers; (4) adverse event reports; (5) investors and stockholders; (6) consumers; (7) vendors, suppliers, contractors, and business partners; and (8) government officials or agencies.
PURPOSE OF DATA COLLECTION
The purposes for collecting data vary but may include: (1) carrying out scientific or medical research; (2) adverse event and product complaint reporting; (3) managing and overseeing vendors/consultants; and (4) communicating about Blueprint Medicines’ current for future drug candidates, approved therapies, if any, and services. Blueprint Medicines also processes human resources data for various purposes, including without limitation: (1) recruitment; (2) compensation, benefits administration and payroll; (3) performance appraisals and training; (4) protection against injury, theft, legal liability, fraud and abuse; and (5) other business purposes.
PRIVACY SHIELD PRINCIPLES
Pursuant to the Privacy Shield, Blueprint Medicines will not sell or provide the personal information of EEA, Swiss, and/or British individuals to any third party without notice. When Blueprint Medicines directly collects personal information from EEA, Swiss, and/or British individuals, it will notify you of the purposes for which the information is collected and used, your ability to limit the use and disclosure of such information, and how to contact Blueprint Medicines. Blueprint Medicines will provide this notice in clear and conspicuous language, either through this Privacy Shield Policy or other means, such as informed consent forms, statements on Blueprint Medicines’ website and other disclosures.
Subject to the exceptions outlined in the “Product Safety and Efficacy Monitoring” section below, and as otherwise permitted by applicable law, Blueprint Medicines does not use or intend to use your personal information for any purpose (other than that for which it was originally collected) without your consent.
Blueprint Medicines does not disclose personal information to third parties for purposes that are incompatible with the purposes for which it was originally collected. Blueprint Medicines may occasionally transfer personal information to third parties who act for or on behalf of Blueprint Medicines, or in connection with the business of Blueprint Medicines, for further processing consistent with purposes for which the data were originally collected. Where disclosure of personal information to a third party is likely or necessary, further notice may be provided, where appropriate, at such collection points as to the intended use of the data.
Blueprint Medicines requires that such third parties protect the information and, where appropriate, Blueprint Medicines will contractually require such parties to process data transferred only for the purposes expressly authorized by Blueprint Medicines.
Blueprint Medicines will provide an individual opt-out choice, or opt-in for sensitive data, before it shares your data with third parties (other than Blueprint Medicines’ agents) or before Blueprint Medicines uses such data for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please submit a written request to Blueprint Medicines per the Contact Information section below.
3. ACCOUNTABILITY FOR ONWARD TRANSFERS
Blueprint Medicines will not transfer personal information from or concerning individuals in the EEA, Switzerland, or the United Kingdom to third parties unless such third parties have entered into a written agreement with Blueprint Medicines requiring that the third party provide at least the same level of privacy protection as is required by the relevant principles of the Privacy Shield. Blueprint Medicines will only transfer data to its agents, resellers or third-party service providers who need the information in order to provide services or to perform activities on behalf of Blueprint Medicines. The third parties that now or in the future may receive personal information provide services to or on behalf of Blueprint Medicines, including without limitation: clinical research, direct marketing assistance, distributors/resellers, data storage, hosting services, and sales support. Blueprint Medicines does not share data with non-agent third parties who are not providing services to or on behalf of Blueprint Medicines.
In certain situations, we may be required to disclose personal information in response to legal or regulatory requests by government authorities or agencies, including to meet national security or law enforcement requirements.
Blueprint’s accountability for personal information that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Blueprint remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process personal information on its behalf do so in a manner inconsistent with the Principles, unless Blueprint proves that it is not responsible for the event giving rise to the damage.
Blueprint may provide personal information from clinical trials conducted in the EEA, Switzerland, or the United Kingdom to regulators in the United States and other countries for regulatory and supervision purposes.
To protect personal information from or concerning individuals in the EEA, Switzerland, and the United Kingdom Blueprint Medicines has in place reasonable and appropriate technical and operational security measures to prevent unauthorized access, loss, misuse, unauthorized access, disclosure, alteration and destruction of data in its control.
5. DATA INTEGRITY AND PURPOSE LIMITATION
The personal information Blueprint Medicines uses or processes will be necessary for and related to the purpose for which it was obtained or collected. Blueprint Medicines will not use or process the data in a manner that is incompatible with the reason it was collected or authorized to be used. Blueprint Medicines will take reasonable measures to ensure that the data is accurate, complete, current, and reliable for its intended use.
Pursuant to the Privacy Shield, Blueprint Medicines will provide individuals in the EEA, Switzerland, and the United Kingdom with reasonable access to the personal information it maintains about them upon such individual’s written request, and Blueprint Medicines will take reasonable measures to allow for the correction, amendment, or deletion of information that is shown to be inaccurate or processed in a manner that violates the Privacy Shield Principles. You may contact Blueprint Medicines per the Contact Information section below to learn whether or not Blueprint Medicines has your personal information subject to this Privacy Shield Policy, and to request corrections, amendments or deletion of such data. This right applies only to personal information about you and is subject to other limitations as defined by applicable law, rule or regulation, as well as whether the burden or expense of providing access would be disproportionate to the risks related to the privacy of the individual or where the rights of other individuals would be violated.
7. RECOURSE, ENFORCEMENT & DISPUTE RESOLUTION
The FTC has jurisdiction over Blueprint Medicines’ compliance with the Privacy Shield.
In compliance with the Privacy Shield Principles, Blueprint Medicines commits to resolve complaints about your privacy and Blueprint Medicines’ collection or use of your personal information transferred to the United States pursuant to the Privacy Shield. EEA, Swiss, and British individuals with Privacy Shield inquiries or complaints should first contact Blueprint Medicines (see Contact Information section below).
Blueprint Medicines’ has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit http://www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.
If your complaint involves human resources data transferred to the United States from the EU, Switzerland, and/or the United Kingdom in the context of the employment relationship, and Blueprint Medicines does not address it satisfactorily, Blueprint Medicines commits to cooperate with the panel established by the EU data protection authorities (the “DPA Panel”) or the Swiss Federal Data Protection and Information Commissioner, or the UK Information Commissioner’s Office (“ICO”) as applicable, and to comply with the advice given by the DPA panel, Commissioner, and/or the ICO as applicable with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Contact details for the EU data protection authorities can be found at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. Complaints related to human resources data should not be addressed to the Better Business Bureau (https://www.bbb.org/).
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. Please see Privacy Shield Annex 1 at https://www.privacyshield.gov/article?id=ANNEX-I-introduction.
PRODUCT SAFETY AND EFFICACY MONITORING
The Notice, Choice, Onward Transfer and Access Principles outlined above do not apply to Blueprint Medicines’ product safety and efficacy monitoring activities, including the reporting of adverse events and the tracking of patients or subjects using certain medicines or medical devices to the extent that the adherence to these principles interferes with compliance with regulatory requirements, including disclosures to agencies, such as the U.S. Food and Drug Administration.
Blueprint Medicines Corporation
45 Sidney Street
Cambridge, MA 02139 USA
Attention: Chief Compliance Officer
CHANGES TO THIS PRIVACY SHIELD POLICY
Blueprint Medicines may amend or change this Privacy Shield Policy at any time and from time to time without prior notice consistent with the requirements of the Privacy Shield and applicable data protection and privacy laws and principles. If and when Blueprint Medicines amends or changes this Privacy Shield Policy, Blueprint Medicines will post the changes on this page of its website to notify you of the changes.