We may collect Personal Data from you in a variety of ways, including, but not limited to:
- Directly from you, (e.g., when you fill out a form, send us an inquiry, respond to a survey, register an account, or in connection with other activities, services, features, or resources we make available through our Services, including KiteKonnect®)
- Through our websites and mobile apps
- Participation in clinical trials
- Treatment with commercially available therapy
- From healthcare professionals
- From contract research organizations and clinical trial investigators
- From government agencies or public records
- From third-party service providers, data brokers, or business partners
- From industry and patient groups and associations
From time to time, we may use or augment the personal data we have about you with information obtained from other sources, such as public databases, social media platforms, and other third parties. For example, we may use such third-party information to confirm or verify licensure of healthcare professionals or to better understand your interests by associating demographic information with the information you have provided.
We may collect the following Personal Information
- Contact information and preferences such as name, email address, mailing address, phone number, and emergency contact information
- Biographical and demographic information, such as date of birth, age, gender, ethnicity, marital status, and sexual orientation
- Health and medical information, such as information about physical and mental health conditions and diagnoses, treatments for medical conditions, genetic information, family medical history, and medications an individual may take, including the dosage, timing, and frequency of medication
- Information we collect in connection with managing clinical trials, conducting research, providing patient support programs, distributing and marketing our products, managing compassionate use and expanded access programs
- Financial information to complete a transaction or determine eligibility for patient assistance programs
- Publicly available information
- Inferences drawn from other Personal Data listed above, to create a profile reflecting your preferences, characteristics, behavior, attitudes, and abilities
- Adverse event information
- We may use the Personal Data we collect about you with information obtained from other sources, such as public databases, social media platforms, and other third parties
- In limited circumstances and only with additional notice and consent, genetic information and biometric markers
- Internet activity, such as your browsing history, your search history, and information on your interaction with our Services and advertisements
- Username and password and any other information you provide in connection with establishing an account on our websites or mobile apps
- Your photograph, social media handle, or digital or electronic signature
If you are a healthcare professional, we may also collect:
- Professional credentials, educational and professional history, institutional and government affiliations, and information included on a resume or curriculum vitae education and work history (such as work experience, education, and languages spoken)
- Information about the Kite programs, products, and activities with which you have engaged
- Details about our interactions with you, your prescribing of our products, and the agreements you have executed with us
- Publicly available information related to your practice, such as license information, disciplinary history, prior litigation and regulatory proceedings, and other due diligence related information
We may use or augment the Personal Data we collect about you and your practice with information obtained from other sources, such as public databases, social media platforms, and other third parties. For example, we may use public information to confirm contact or financial information, to verify licensure of healthcare professionals, or to better understand your interests by associating demographic information with the information you have provided.
Kite processes your Personal Data for the following purposes:
- Communicating with you about Kite Services
- Where you have requested participation in a clinical trial with Kite or one of Kite’s partners
- Disease management, education, or decision support systems related to the use of Kite products
- Where you have requested support from Kite, assisting you in the completion of your application, the assessment of your eligibility for any requested offering, the processing and maintenance of the offering, as well as any applicable renewal of such offering
- Responding to your inquiries about applications, trials, and other offerings
- Making proposals for future needs
- Allowing our affiliated companies to notify you of certain products or services offered by our affiliated companies
- Processing transactions through service providers
- Conducting research and secondary research
- Meeting legal, security, processing, and regulatory requirements
- Protecting against fraud, or suspicious or other illegal activities
- Compiling statistics for analysis of our sites and our business
Kite processes Personal Data where it has a legal basis for doing so. Legal bases include:
- The transfer or processing is in Kite’s legitimate interest in providing you with access to our Services and programs
- The transfer or processing is necessary for the performance of a contract between you, or your Provider, and Kite (or one of its affiliates)
- The transfer or processing is necessary for the performance of a contract, concluded in your interest, between Kite (or one of its affiliates) and a third party
- The transfer or processing is necessary, or legally required, on important public interest grounds, for the establishment, exercise, or defense of legal claims, or to protect your vital interests
- The transfer or processing is required by applicable law
Within our family of companies
With our Service Providers
We may retain other companies and individuals to perform services on our behalf and we may collaborate with other companies and individuals with respect to particular products or services. Examples of service providers include data analysis firms, customer service and support providers, email and SMS vendors, web hosting and development companies, and fulfillment companies. Providers also include our co-promote partners for products that we jointly develop and/or market with other companies. Some providers may collect Personal Data on our behalf.
In connection with Business Transactions
As we continue to develop our business, we might sell or buy assets. In such transactions, user information, including Personal Data, generally is one of the transferred business assets. Also, if either Kite itself or substantially all of Kite assets were acquired, your Personal Data may be one of the transferred assets. Therefore, we may disclose and/or transfer your Personal Data to a third party in these circumstances.
To comply with our legal obligations
Kite reserves the right to disclose without your prior permission any Personal Data about you or your use of the Services if Kite has a good faith belief that such action is necessary to: (a) protect and defend the rights, property, or safety of Kite, employees, other users of the Services, or the public; (b) enforce the terms and conditions that apply to use of the Services; (c) as required by a legally valid request from a competent governmental authority and/or to comply with a judicial proceeding, court order, or legal process; or (d) respond to claims that any content violates the rights of third parties. We may also disclose Personal Data as we deem necessary to satisfy any applicable law, regulation, legal process, or governmental request.
We may also disclose aggregate or de-identified data that is not personally identifiable to third parties for any purpose.
Please note, Kite does not sell Personal Data to third parties.
Kite websites and apps may collect information that could be potentially personally identifiable about your visits without you actively submitting such information. This information may be collected using various technologies, such as cookies and web beacons. Cookies are small text files that are transferred to your computer’s hard disk by a website. Web beacons (also referred to as GIFs, pixels, or internet tags) help Kite understand how you navigate around the Kite websites. As part of your use of the site, your internet browser automatically transmits to Kite websites some of this unidentified information, such as the URL of the website you just visited and the browser version your computer is operating. Passive information collection technologies can make your use of Kite websites easier by allowing Kite to provide better service, customize Kite websites based on consumer preferences, compile statistics, analyze trends, and otherwise administer and improve Kite websites. You can prevent the storage of cookies by adjusting the settings on your browser, though certain features of Kite websites may not work without use of passive information collection technologies. Information collected by these technologies cannot be used to identify you without additional information.
Some internet browsers allow you to limit or disable the use of tracking technologies that collect unidentified information, such as a “Do Not Track” (“DNT”) setting. Currently, we do not respond to DNT signals.
Kite may offer apps, special programs, clinical trials, activities, events, or promotions (“Programs”) that have unique or additional specific terms, privacy notices, and/or consent forms that explain how any information you provide will be processed in connection with the Programs. Certain Programs may include coupons, discounts, or other financial incentives. Where required, we may provide additional terms. You should review the terms applicable to the Programs before interacting or participating in the Program.
Kite does not target its Services to children and does not collect information directly from children under the age of 13 through our websites or apps. We may handle the information of children in connection with certain programs, but only with the consent of a parent or legal guardian.
If you believe that a child of whom you are the parent or legal guardian has improperly provided us with Personal Data, please contact Kite using one of the methods specified herein and Kite will work with you to address this issue.
Kite maintains servers and other storage facilities in the United States and EU. Kite may transfer Personal Data outside of its country of origin for the purposes, and in the manner, set out above; including for processing and storage by service providers and Affiliates in connection with such purposes. In all situations, Kite takes reasonable steps to ensure that your privacy is protected. Such steps include, but are not limited to: implementing privacy, security, and contractual controls; as well as steps noted above, as required by applicable law.
To the extent that any Personal Data is sent out of an individual’s country, it is subject to the laws of the country in which it is held, and may be subject to disclosure to the governments, courts, or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country.
Where Kite relies on consent for the fair and lawful processing of Personal Data, the opportunity to consent will be provided prior to when the Personal Data in question is collected. Your consent may be given through your authorized representative such as a legal guardian, agent, or holder of a power of attorney. Where Kite relies on consent, you will be entitled to withdraw that consent at any time.
Kite will use Personal Data only in ways that are compatible with the purposes for which it was collected, or consented to by the individual. Kite will have appropriate steps in place to ensure that Personal Data is relevant to its intended use, accurate, complete, and current. Kite will only store Personal Data for as long as it is needed to fulfill the purposes for which it was collected, subject to applicable data retention periods imposed upon Kite by applicable law. This may mean that your Personal Data is stored by Kite for a number of years, depending on the purpose and need for that data to be processed. For more information about Kite’s retention periods for Personal Data, please refer to the contact information section below.
You may have certain rights and choices regarding our processing of our Personal Data. Depending on your jurisdiction, applicable law may entitle you to additional consumer rights, including the right to:
- Know the categories and/or specific pieces of Personal Data collected about you, including whether your Personal Data is sold or disclosed, and with whom your Personal Data was shared
- Access a copy of the Personal Data we retain about you
- Request deletion of your Personal Data
- Correct or amend your Personal Data
- Object to certain uses of your Personal Data
We will verify your identity in connection with any requests regarding Personal Data to help ensure that we provide the information we maintain to the individuals to whom it pertains, and allow only those individuals or their authorized representatives to exercise rights with respect to that information. If you are an authorized agent making a request on behalf of a consumer, we may require and request additional information to verify that you are authorized to make that request.
Kite may not be able to comply with a request where Personal Data has been destroyed, erased, or made anonymous in accordance with Kite’s record retention obligations and practices. In the event that Kite cannot provide an individual with access to his/her Personal Data, Kite will provide the individual with an explanation, subject to any legal or regulatory restrictions.
To submit a request, please contact us using one the following options:
Through our web portal for:
By email to priva[email protected]
By telephone at (855) 650-5483(855) 650-5483
By mail to the following address:
Kite Pharma, Inc.
Santa Monica, CA 90404
We will not restrict or deny you access to our Services because of choices and requests you make in connection with your Personal Data. Please note, certain choices may affect our ability to deliver the Services.
Kite has implemented reasonable physical, technical, and managerial controls and safeguards to keep your Personal Data protected from unauthorized access, disclosure, alteration, and destruction. Such measures may include, but are not limited to: the encryption of communications, encryption of information while it is in storage, firewalls, access controls, separation of duties, and similar security protocols.
Access to Personal Data is limited to a restricted number of Kite employees whose duties reasonably require such information, third parties with whom Kite contracts to carry out business activities for Kite, and certain companies with which Kite may conduct joint programs. Kite trains its employees on the importance of privacy and how to handle and manage Personal Data appropriately and securely.
Please note, the confidentiality of Personal Data transmitted over the internet cannot be guaranteed. Kite urges you to exercise caution when transmitting Personal Data over the internet. Kite cannot absolutely guarantee that unauthorized third parties will not gain access to your Personal Data; therefore, when submitting Personal Data to Kite online, you must weigh both the benefits and the risks.
Kite Pharma, Inc.
Santa Monica, CA 90404
(855) 650-5483(855) 650-5483
All communications to Kite should include the individual’s name and contact information (such as email address, phone number, or mailing address), and a detailed explanation of the request. Email requests to delete, amend, or correct Personal Data should include “Deletion Request” or “Amendment/Correction Request,” as applicable, in the subject line of the email. Kite will endeavor to respond to all reasonable requests in a timely manner, and in any case, within any time limits prescribed by applicable local law.
If you are an EU citizen and/or accessing Site or Services in the European Economic Area, then this Supplement may apply in addition to the above.
Transfers of your Personal Data may be made to entities located outside the European Economic Area, including entities located in the United States, for processing consistent with the purposes above. Kite will implement appropriate contractual measures (including standard data protection clauses, a copy of which you can obtain by contacting [email protected]) to ensure that the relevant Kite affiliates and third parties outside the European Economic Area provide an adequate level of protection to your Personal Data as set out in this notice and as required by applicable law.
For the processing of Personal Data relating to the European Economic Area, Kite has assigned a data protection officer responsible for overseeing our compliance with EU data protection law, who you may contact at [email protected] in case of any questions or concerns regarding the processing of your Personal Data.
If Kite’s processing of your Personal Data is covered by EU law, you may also lodge a complaint with the corresponding data protection supervisory authority in your country of residence. You can find the relevant supervisory authority name and contact details under http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
Last Updated: December 20, 2019