Privacy Policy

1.       Introduction

Alithea Genomics (“Alithea”, “we”, “us”, or “our”) is committed to protecting the privacy and security of personal data.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data obtained through:

• Our website;
• Customer and supplier relationships;
• Newsletter sign-up forms
• Requests for information and quotes;
• Business communications;
• Contractual and commercial activities.
• Webinars

This Privacy Policy applies to website visitors, customers, prospective customers, suppliers, business partners, and other business contacts.

This policy does not replace product terms, service agreements, data processing agreements, quotation terms, or separate notices that may apply in a laboratory, service delivery, employment, distributor, or customer relationship context.

2.       Who we are

Alithea Genomics SA

Route de la Corniche 8, 1066 Epalinges, Switzerland

privacy@alitheagenomics.com

If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us using the details above.

The Swiss company is the sole data controller responsible for the processing of personal data covered by this Privacy Policy.

Our U.S. subsidiary, Alithea Genomics Inc., 321 Ballenger Center Drive, Suite 125, Frederick, MD 21703, USA acts only as a processor or operational partner under the instructions of the Swiss entity and does not make independent decisions about personal data processing.

We comply with applicable data protection laws, including the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

3.       Personal data we may collect

Information you provide directly:

• Identity and contact information, such as your name, business email address, telephone number, company name, job title, country, and mailing details.

• Commercial and inquiry information, such as the products, services, workflows, sample types, project details, support requests or scientific interests you describe when contacting us or requesting a quote.

• Event and marketing information, such as webinar registrations, newsletter subscriptions, survey responses, attendance preferences, and communication preferences.

• Any correspondence you send us, including messages, attachments, call notes, and follow-up history.

Information collected automatically:

• Technical and device information, such as IP address, browser type, device type, operating system, language preferences, referral URLs, and approximate location derived from IP data.

• Website usage data, such as pages viewed, clicks, downloads, session data, consent choices, and interactions with forms, videos, or scheduling tools.

Information from third parties:

• Professional or business contact details from distributors, event partners, webinar partners, analytics providers, CRM platforms, or publicly available professional sources such as company websites or LinkedIn, where permitted by law.

4.       Why we process personal data and our legal bases

Depending on the context, we process personal data for the purposes listed below based on the mentioned legal basis.  

Purpose	Typical personal data	Typical legal basis
Operate, secure, and improve the website; troubleshoot issues; prevent misuse	IP address, device identifiers, browser information, cookie data, website logs, usage data	Legitimate interests; consent for non-essential cookies
Respond to contact requests, meeting requests, quote requests, and scientific or commercial inquiries	Name, business email, phone number, company, job title, correspondence content	Steps prior to entering into a contract; legitimate interests
Send newsletters, product updates, event invitations, and other marketing communications	Name, email address, company, job title, marketing preferences	Consent where required; legitimate interests where permitted by law for business communications
Manage registrations for webinars, events, training sessions, and access to resources.	Name, email address, company, job title, registration details, attendance information	Consent where required; steps prior to contract; legitimate interests
Analyze website usage, marketing campaigns, and user engagement to improve our products, services, and communications	IP address, cookie identifiers, device information, browsing behavior, campaign interaction data	Consent for non-essential cookies or similar technologies where required; legitimate interests for strictly necessary analytics or aggregated reporting where lawful
Manage relationships with customers, distributors, suppliers, and business partners	Name, business contact details, company, job title, communications, transaction history	Contract performance; steps prior to contract; legitimate interests
Manage customer relationships, document business discussions, maintain accurate records of customer interactions, generate meeting notes and transcripts, improve service quality, and support sales and account management activities.	Contact details, Voice recordings, Meeting transcripts, Customer communications, Notes and action items	Legitimate interest; Consent
Comply with legal, tax, accounting, regulatory, and audit obligations	Contact details, transaction records, invoices, correspondence, compliance-related records	Legal obligations; legitimate interests
Establish, exercise, or defend legal claims and manage corporate transactions	Contact details, contractual records, communications, transaction information	Legitimate interests; legal obligations where applicable

5.       How we share personal data

We may share personal data with the following categories of recipients on a need-to-know basis and subject to appropriate safeguards, including contractual agreements :

• Affiliated companies within the Alithea group, including Alithea Genomics Inc., which acts under the instructions of the Swiss entity, for sales support, customer support, logistics, finance, internal administration, and business continuity.

• Service providers that host or support our website, CRM, marketing automation, email distribution, analytics, scheduling, event management, webinar delivery, security monitoring, document handling, and IT support.

• Distributors, channel partners, or resellers where the inquiry relates to a geography, market, or product workflow handled through those channels.

• Professional advisers, auditors, insurers, banks, and legal counsel.

• Courts, regulators, law enforcement bodies, or other authorities where disclosure is legally required or necessary to protect our rights.

• A prospective or actual buyer, investor, or restructuring party in connection with a merger, financing, acquisition, asset sale, or corporate reorganization.

We do not sell personal data to third parties.

6.       International data transfers

Because Alithea works internationally, personal data may be processed in Switzerland, in the European Economic Area, the United Kingdom, the United States, and other countries where our affiliates and service providers operate.

Where required by applicable law, we use appropriate transfer mechanisms and safeguards for international transfers, such as adequacy decisions, standard contractual clauses, supplementary measures, or comparable legal mechanisms.

7.       Data retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, contractual, and reporting obligations, to resolve disputes, and to enforce agreements. The detailed retention periods are defined in our Data Retention Schedule.

Major categories	Example retention approach for review
Website security logs and basic technical records	Typically, a short operational period, unless a longer period is needed for security investigations or legal requirements
General contact inquiries and meeting requests	24 months after the last meaningful interaction, unless the inquiry turns into a customer or partner relationship
Marketing subscription records and suppression lists	Until consent is withdrawn, you unsubscribe, or the data is no longer needed; suppression records may be kept longer to honor opt-out choices
Quote, contract, order, and service records	For the contract term and for any additional period required by limitation periods, accounting laws, tax laws, or audit obligations
Event and webinar registration records	Typically, until the event has been completed and follow-up has ended, plus a reasonable business retention period
Communication recording and transcription using AI-powered tools	24 months after the last meaningful interaction, unless the inquiry turns into a customer or partner relationship

8.       Data Security

We implement appropriate technical and organizational measures to protect personal data against:

• Unauthorized access
• Alteration
• Loss
• Disclosure
• Destruction

Such measures may include access controls, encryption, backups, employee training, and monitoring activities. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

9.       Your privacy rights and complaints

Depending on where you are located and which law applies, you may have rights to request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to certain processing, withdrawal of consent, or portability of certain data.

If you are in Switzerland, the EEA, or the UK, you may also have the right to lodge a complaint with the competent supervisory authority. We encourage you to contact us first so that we can try to resolve the issue directly.

If you are located in a US state that grants specific privacy rights, you may also have additional rights under that state’s law. A short supplemental US section may be added once applicability has been confirmed.

Any request may be submitted to privacy@alitheagenomics.com

10.Important limits on what you should send us through the website

The website is intended for business and scientific communications. Unless we expressly ask for it through a suitable secure channel, please do not submit patient data, health data, special category data, clinical records, or other highly sensitive information through general website forms or standard email channels.

If we receive sensitive or unnecessary personal data through the website by mistake, we may delete it, restrict access to it, or take other reasonable steps to protect it and reduce unnecessary processing.

11.Cookies and similar technologies

We use cookies and similar technologies to operate the website, remember your preferences, understand usage patterns, and support communications and business development activities. Depending on the live configuration, these technologies may involve providers such as Google Analytics, HubSpot, LinkedIn, and Odoo, as well as any additional vendors deployed on the website.

12.Marketing communications

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us. Unsubscribing from marketing messages does not stop service, contractual, or transactional communications that are necessary for an existing relationship.

13. Children

The website is intended for business and professional audiences and is not directed to children. We do not knowingly collect personal data from children through the website.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, vendors, or our data practices. We will post the updated version on the website with a revised effective date.