Privacy Shield

Cell Signaling Technology (CST) complies with and is subject to the EU-U.S. Privacy Shield framework and the Swiss-U.S. Privacy Shield framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States. Cell Signaling Technology has certified to the Department of Commerce that they adhere to the Privacy Shield principles. If there is any conflict between the terms in this privacy policy and the Privacy Shield principles, the Privacy Shield principles shall govern. To learn more about the Privacy Shield program, and to view our certifications, please visit https://www.privacyshield.gov/.

In compliance with the Privacy Shield Principles, Cell Signaling Technology commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Cell Signaling Technology at: privacy@cellsignal.com.

Cell Signaling Technology has further committed to refer unresolved Privacy Shield complaints to the International Centre for Dispute Resolution (ICDR-AAA), an alternative dispute resolution provider located in the United States. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact or visit http://go.adr.org/privacyshieldfiling.html for more information or to file a complaint. The services of ICDR-AAA are provided at no cost to you.

Cell Signaling Technology commits to cooperate with EU data protection authorities (DPAs) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) and comply with the advice given by such authorities with regard to human resources data transferred from the EU and Switzerland in the context of the employment relationship.

Additional information protection rights and choices are afforded to EU- and Swiss-residents. These personal information protection rights and choices, along with additional information about how we process personal information are described below:

What personal information do we gather from you on our websites, via email, or from our discussions with you on the phone?

If you are a customer, we need to process basic personal and business contact information about you, which is defined as your personal data in the EU and EEA, as this information is required by us to fulfill your order, contact you in case there are issues with or questions about the order, arrange for the payment of your order, and to continue our relationship with you. This data includes: Name, Email Address, Title, Phone Number, Office Location, Home Address, Manager Name, and Department.

This is information provided by you directly to us during the ordering process. In addition, any forms that you fill out or information provided over the phone or via email, for example, surveys, support requests, etc. may contain personal information and this data is gathered by our system and stored by it for processing so as to support the order fulfillment, customer support, and our other business operations processes. If you use our website, we do capture your IP address. This allows us to provide certain occasional geographical sales and marketing specials and savings for certain products, depending on your member state. Your location also allows us to translate our website into the appropriate local language.

If you are a general visitor or browser to our website, you are not required to provide personal information. We do capture your IP address, which may indicate your geographic location

Why do we process your personal information?

CST processes your personal information to fulfill customer orders in a timely manner, undertake the appropriate billing processes, send you acknowledgements of your order, keep you informed of your order’s status, and efficiently undertake other order related matters on your behalf. In addition, we do use your personal information to conduct direct marketing activities to you to make you aware of our different products, some of which you may be interested in purchasing from us. Our direct marketing activities to you include phone calls, postal mail and email.

You may opt-out of any or all of these activities at any time by emailing us at privacy@cellsignal.com or by using the opt-out link included in each mailing.

In addition, we process your IP address to determine your approximate geographic location. Occasionally, we run product sales and specials in different member states and locations; your IP address helps us understand if you are eligible for those specials. We also use your location to determine which language to render our website in to you. We do not process your IP address or your location for any other reasons.

We process your movements within our website so as to better understand how to optimize our web environment for the future and to make it more user friendly for you. We also process your movements on our web site to present products to you that you may be interested in purchasing from us.

If you have filled out additional forms, such as surveys, feedback or support forms on our website, we store and process your personal information appropriate to that form. For example, if it is a survey or feedback form, we will aggregate results from the surveys or feedback pages to better understand how we can improve our business, customer services, or web environment.

Occasionally, depending on the feedback, we may reach out to a specific user or customer using their contact information, for further information or input from them. You certainly don’t have to respond to our requests in this matter.

We will not process your personal information for other reasons than those listed except for reasons related to public, governmental, compliance-related, statutory, legal claims, medical care, personal emergencies or other legitimate interests or obligations placed on our organization by valid, external parties.

Who do we share your personal data with and why?

We will share your personal data that you provided to us with companies that distribute our own products to you. These are companies that are trusted partners within our network and support the distribution of our products; they will process your information for this specific goal and as data processors for CST. They are not allowed to process your information for their own purposes.

We do provide your personal data to outside companies that work, on our behalf, to help market our own products directly to you, via the phone, via mail, and via email. We also provide your personal information, gathered from our website that you visit, to a web analytics company that helps us better understand and plan for our web marketing approaches, such as email campaigns to you, and designs for our website. Each of these vendors processes your personal information on our behalf.

Cell Signaling Technology takes privacy and security pledge seriously and so do the companies that we work with in these matters. At any time, you can “opt-out” of any or all of these marketing campaigns by contacting “privacy@cellsignal.com”.

Can you request to see what personal information Cell Signaling Technology stores about you? And can you modify if it is incorrect? Can you ask Cell Signaling Technology to delete your personal information or halt processing of that information about you?

Absolutely. Of course, we have to confirm your identity first prior to providing access to your personal information. Once that confirmation process has been completed, we will be happy to share the information that we have about you.

Regarding incorrect information about our customers, we will rectify that problem immediately via our normal customer support process; please contact them directly. For those that are not customers, please contact us at privacy@cellsignal.com.

You will receive notice of receipt of your request as soon as possible. You will receive a response to your request within one month. We may extend this term with one month if needed, provided we have informed you thereof in a timely manner. If you are unsatisfied with our response, you may file an appeal with us and we will investigate your matter.

If you are not satisfied with our response to your appeal or believe we are processing your personal data not in accordance with the law, you may file a complaint directly with the supervisory authority, such as the UK Information Commissioner’s Office (ICO) or the Netherlands ‘Autoriteit Persoonsgegevens’.

Please know: If you are a customer of CST, we may not be able to immediately delete or halt the processing of your personal data, especially if you are in the middle of a transaction or order with our organization, as our systems need to process that order to completion. In addition, our ability to remove or erase the personal data of our customers (which is primarily limited to their business contact information) may be limited due to local, European and international audit, accounting and compliance laws, which require that we maintain a history of our customers’ financial transactions with us for, tax purposes.

Note that our backup and disaster recovery systems may store some of our customers and other visitors’ personal information for indefinite periods of time due to the limitations of these technologies.

What are your rights under law?

You are granted the following under EU law regarding how CST processes your personal information.

• Objection: Depending on the situation and the personal information that is processed, you have the right to consent or object to the processing of personal information and the conditions under which this processing takes place.
• Access: you have the right to obtain from CST a confirmation as to whether or not personal information concerning you are being processed, and, when such is the case, access to the personal information and the following information:
  1. the purposes of the processing;
  2. the categories of personal information concerned;
  3. the recipients or categories of recipient to whom the personal information is or will be disclosed, in particular recipients in third countries or international organizations;
  4. where applicable, the fact that personal information is to be transferred to third countries;
  5. where possible, the envisaged period for which the personal information is or will be stored, or, if not possible, the criteria used to determine that period;
  6. the existence of the right to request from the CST rectification or erasure of personal information or restriction of processing of personal information concerning the Data Subject or to object to such processing;
  7. the right to lodge a complaint with a supervisory authority, such as the UK Information Commissioner’s Office (ICO) or the Netherlands ‘Autoriteit Persoonsgegevens’;
  8. in the event that the collected personal information is not originating from you, any available information as to its source;
  9. the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

In the event that personal information is transferred to a third country or to an international organization, you will have the right to be informed of the appropriate safeguards as applied. CST will provide you a copy of the personal information that is being processed. For any further copies as requested by you, we may charge a reasonable fee based on administrative costs.

• Rectification, amendment:You have the right to obtain from CST, without undue delay, the rectification of inaccurate personal information concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal information completed, including by means of providing a supplementary statement.
• Deletion:You have the right to obtain from CST the erasure of personal information concerning you without undue delay and CST shall have the obligation to erase personal information without undue delay where one of the following grounds applies:
  1. the processing of the personal information is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  2. you withdraw consent, in case the processing of such is based on your permission, and where there is no other legal ground for the processing;
  3. you object to the processing pursuant and there are no overriding legitimate grounds for the processing;
  4. the personal information is unlawfully processed;
  5. the personal information is to be erased for compliance with a legal obligation in the European Union or a Member State of such Union law to which CST is subject;
  6. the personal information has been collected for the performance of a contract to provide services while you are not aged 16 or above.

When CST has made the personal information public and CST is obliged to erase the personal information, CST shall take all reasonable steps, taking account the available technology and the costs, to inform other data controllers which may process the personal information concerning you that you have requested the erasure of personal information.

• Notification:You have the right to a notification to third parties to whom the personal information has been disclosed, when you have been granted any rectification, erasure, blocking or deletion as stated above, unless such notification proves to be impossible or requires a disproportionate effort from CST.
• Data Portability:You have the right to receive the personal information you have provided to CST on your own initiative, in a structured, commonly used and machine-readable format and you have the right to transmit the personal information to another Data Controller.
• Complaint:You have the right to lodge a complaint with the supervisory authority, such as the UK Information Commissioner’s Office (ICO) or the Netherlands ‘Autoriteit Persoonsgegevens’.
• Right to restriction of processing: You have the right to obtain restriction of Processing when:
  1. you contest the accuracy of the personal information, for a period enabling CST to verify the accuracy of the personal information
  2. the processing is unlawful and you oppose the erasure of the personal information and requests the restriction of this use instead;
  3. when CST no longer needs the personal information for the purposes of the Processing.

With respect to personal data received or transferred pursuant to the Privacy Shield frameworks, Cell Signaling Technology is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission.

Under certain conditions, more fully described on the Privacy Shield website (https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.

In certain situations, Cell Signaling Technology may be required to disclose personal information in response to lawful requests by public authorities, including the need to meet national security or law enforcement requirements.

Cell Signaling Technology is responsible for the processing of personal information they receive, under each Privacy Shield framework, and subsequent transfers to a third party acting as an agent in their behalves. Cell Signaling Technology complies with the Privacy Shield principles for all onward transfers of personal information from the EU and Switzerland, including the onward transfer liability provisions.