Recently updated: October 25, 2021

Galmed Research & Development Ltd. (collectively with its affiliates and subsidiaries shall be referred to as “Galmed”, “we”, “us”, or “our”) is committed to your right to privacy.

This policy applies to business partners including without limitation the clinical trial staff and investigators, employees, investors and shareholders, service providers, individuals that contact us or register to our newsletter and visitors of our website (“you” or “your”).

This Privacy Policy explains which data we may process from you, how such data may be used or shared with others, how we safeguard it and how you may exercise your rights related to your Personal Data.

In the event you are a California resident and the California Consumer Privacy Act (“CCPA”) applies to you – please review our CCPA Privacy Notice.

In case you are a participant or a prospective participant of Galmed’s sponsored study (i.e., clinical trial) (“Patient“), we may collect and process additional information about you as will be described in detail in the Inform Consent Form (“ICF”) you will receive and review before your enrollment in the study (“Patient’s Information“). More information regarding the collection and processing of Patient’s Information can be found in the ICF. Please contact your physician to receive further information. Please note that you may be entitled to certain rights under applicable data protection laws, these rights are also described in the detail in the ICF. This Privacy Policy does not apply to the processing of Patient’s Information.

THE HIGHLIGHTS
  • You are not required by law to provide us with any Personal Data. Sharing Personal Data with us is entirely voluntary.
  • You may be entitled under applicable law to request to review, amend, erase or restrict the processing of your Personal Data, all as detailed under this Policy.
  • We do not sell, trade, or rent your Personal Data to third parties. We only share Personal Data for limited circumstances as specified herein.

If you have any questions or requests regarding the processing of your Personal Data, or would otherwise like to contact us in connection with this Policy, please send us an email to: privacy@galmed.kingpaz.com.

POLICY CHANGES AND UPDATES

We may update or revise this Policy from time to time. Modifications to this Policy will be posted on the website, and shall be effective as of the date reflected under the “Recently Updated” header above. We encourage you to periodically review this Policy to stay informed about our practices related to the collection and processing of Personal Data.

WHAT DATA IS COLLECTED BY SMS AND FOR WHAT PURPOSES?

“Personal Data”, means information which identifies or may with reasonable effort identify an individual, including online identifiers, as detailed below.

“Non-Personal Data”, means non-identifiable aggregated data, such as technical data transmitted by the user’s device and aggregated use of the website. This data is not used to identify individuals.

Non-Personal Data Processed by us

We collect Non-Personal Data regarding use of the website, such as: type of browsers; type of operation system; type of device; time and date you access the website; visitors’ navigation and actions in the website; language preference; country level location. Non-Personal Data is used mainly for click stream analysis in order to provide, maintain, develop and enhance our website.

Personal Data Processed by Us

We collect the following Personal Data, and process it in accordance with the purposes and legal basis specified in the table below.

Type of Personal Data Purposes of Processing For EU Individuals – Legal Basis under the GDPR
Contact Details & Contact History
If you contact us via email address, info@galmed.kingpaz.com, or through one of our customer care representatives (via phone or email), you may need to provide us with your contact information such as your name, phone number, address, and email.
Your contact details and contact history with us will be processed in order to provide you with the support you have requested or response to your inquiry, as well as in the event we find it applicable (e.g., in the event of future claim). Performance of a contract
Online Identifiers We will collect your Internet Protocol (“IP”) addresses. This data might be collected by us or by our service providers (i.e., through the cookies displayed on our website). We use this data in order to maintain, protect and manage the website and for analytic and statistic purposes regarding traffic flow and users’ interaction with our website. We process this information based on your consent provided through our cookie notice.
Email Marketing If you subscribe to our newsletter or email alerts, you may be required to provide us with your email address. You can unsubscribe at any time from receiving our newsletter. As our partner we may send you newsletters and updates as well, you may also opt-out from receiving these emails at any time. We use this information solely to provide you with the content you have requested. If you registered to our newsletter, you have provided your consent. Otherwise, as our partner we have legitimate interest to send you such updates and content.
Investors Contact If you are an investor of Galmed and wish to contact us via our investor form or via email to: investor.relations@galmed.kingpaz.com you may be required to provide us with your full name, email address, phone number and provide with the information requested by you. We use this information solely to provide you with the content you have requested. Performance of a contract
Recruitment If you are interested in working with us, you may voluntarily send us your CV through the applicable button located in the Website. In the event you send us your CV, note that, your provision of Personal Data in connection with recruiting is voluntary, and you determine the extent of information you provide us. We do not request or require sensitive personal information concerning religion, health, sexual orientation, or political affiliation in connection with recruiting. We will use the information you have provided solely to communicate with you, to manage our recruiting and hiring processes, and for compliance with corporate governance and legal and regulatory requirements. If you are hired, the information may be used in connection with employment and corporate management. Your consent.
HOW PERSONAL DATA IS COLLECTED

Certain Personal Data is collected automatically by using cookies and other similar tracking technologies, while other Personal Data is provided by you voluntarily and actively, for example, when you contact us.

COOKIES & TRACKING TECHNOLOGIES

As stated above, when you access the website we may use “cookies” (or similar technologies). The use of cookies is a standard industry-wide practice. Cookies are very helpful and can be used for various different purposes. You can find more information about cookies at: www.allaboutcookies.org.

We may use Analytics, Measurement & Performance Cookies. These cookies are used to collect information about how visitors use the website, in order to improve our Services and website. These cookies enable us to, for example, assess the number of visitors who have viewed a certain page, as well as their country of origin.

We use the following third-party cookies on our Site

Type of Personal Data Purposes of Processing For EU Individuals – Legal Basis under the GDPR
Contact Details & Contact History
If you contact us via email address, info@galmed.kingpaz.com, or through one of our customer care representatives (via phone or email), you may need to provide us with your contact information such as your name, phone number, address, and email.
Your contact details and contact history with us will be processed in order to provide you with the support you have requested or response to your inquiry, as well as in the event we find it applicable (e.g., in the event of future claim). Performance of a contract

For additional information on our use of Google products, click here.

SHARING DATA WITH THIRD PARTIES

We will not share any Personal Data collected from you with third parties or any of our partners except in the following events:

  1. (i) Authorized Disclosures. We may disclose your Personal Data to third parties when you consent to a particular disclosure. Please note that once we share your information with a third party, that information becomes subject to the third party’s privacy practices.
  2. (ii) Compelled Disclosures. We will share your information, solely to the extent needed to comply with any applicable law or permitted by it, regulation, legal process or governmental request (e.g., pursuant to law enforcement inquiries, subpoenas or court orders), or when we believe, in good faith, it is required in order to enforce our policies (including our policies and agreements) including investigations of potential violations thereof or to detect, prevent, or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues. In addition, we will share your information, solely to the extent needed to establish or exercise our rights to defend against legal claims or to prevent harm to the rights, property or safety of us, our users, yourself or any third party or for the purpose of collaborating with law enforcement agencies or in case we find it necessary in order to enforce intellectual property or other legal rights
  3. (iii) Service Providers. We may disclose Personal Data to our trusted agents and service providers so that they can perform requested services on our behalf (among others, as detailed in the “Cookies and other technologies” Section above). For example, we may share your email address with a third-party service provider in order to assist us with email marketing. These entities are prohibited from using your personal information for any purposes other than providing us with requested services.
  4. (iv) Business Transfers. We may share Personal Data, in the event of a corporate transaction (e.g. sale of a substantial part of our business, merger, consolidation or asset sale). In the event of the above, our affiliated companies or acquiring company will assume the rights and obligations as described in this Privacy Policy.
USER RIGHTS

We acknowledge that different people have different privacy concerns and preferences. Our goal is to be clear about what information we collect, so that you can make meaningful choices about how it is used. We provide you with the ability to exercise certain choices, rights and controls in connection with your information. Depending on your relationship with Galmed and the applicable privacy laws that apply to you, for more information please see our User Right Policy

You may exercise any or all of your above rights in relation to your Personal Data by filling out the Data Subject Request(“DSR”) form available here and send it to our privacy team at: privacy@galmed.kingpaz.com.

Where we are not able to provide you with the information for which you have asked, we will endeavor to explain the reasoning for this and inform you of your rights, including the right to complain to the supervisor authority (in the event you are EEA resident). We reserve the right to ask for reasonable evidence to verify your identity before we provide you with any such information in accordance with applicable law.

DATA RETENTION

We retain the information we collect as long as it remains necessary for the purposes set forth above, all in accordance with applicable laws. We may at our sole discretion, delete or amend information from our systems, without providing any notice to you, once we deem it is no longer necessary for our purposes.

SECURITY OF THE DATA

We employ industry standard and implemented technical and administrative security measures to ensure the safety of our users’ Personal Data and prevent unauthorized access or use of such data. For more information regarding our security measures, please click here.

If you feel that your privacy was treated, or if suffered from individual attempt to abuse our Site or Service or acted in an inappropriate manner, please contact us directly at: privacy@galmed.kingpaz.com.

CHILDREN PRIVACY AND DATA

The Services are not intended for individuals under the age of sixteen (16). Accordingly, we do not use the website to knowingly solicit data from or market to children as defined under applicable law (e.g. thirteen (13) regarding US individuals and sixteen (16) regarding European Economic Area (“EEA”) individuals). We request that such individuals do not provide Personal Data. If you become aware or have any reason to believe that a child has shared any Personal Data with us, please contact us at: privacy@galmed.kingpaz.com.

DATA TRANSFER

Our databases are currently located in the in the Microsoft Azure data server.

Please note that we implement appropriate safeguards to protect data transferred as well as your rights in connection with such data. Any transfer of Personal Data shall be made in accordance with applicable law.

CONTACT US

If you have any questions or concerns regarding privacy issues, or if you wish to be provided with any other information related to our privacy practices, please contact us at:

Israeli Headquarters:
Galmed Pharmaceuticals Ltd.
16 Tiomkin Street,
Tel Aviv, 6578317 Israel Tel + 972 3 6938448
Fax + 972 3 6938447

Data Protection Officer:
If you have any requests regarding the data collected under this Policy, including without limitation, requests to remove, delete, amend, modify or transfer the data, please contact our Data Protection Officer at: dpo@Galmedpharma.com Please include your name, address and email address in any correspondence so that we can respond to your inquiry or
request.