Please read this Privacy Policy carefully before accessing or using this website
This website is owned and operated by Evelo Biosciences, Inc. (“Evelo”, “we”, “our” or “us”). The materials on our website (the “website” or the “site”) are provided by Evelo as a service to our customers and the general public and are to be used for informational purposes only.
Evelo respects the privacy of visitors to this website, and we recognize the importance of taking steps to protect the privacy of information we may collect via this website. This Privacy Policy describes the types of Personal Data (defined below) we may collect about visitors to this website, how we may use the Personal Data and with whom we may share it. This Privacy Policy also describes (1) the measures we take to safeguard the Personal Data we collect and (2) your rights and privileges concerning our collection, use, and disclosure of your Personal Data.
Exclusions. This policy only addresses Personal Data collected through this website. It does not describe the ways in which we may collect or use Personal Data obtained offline, and it does not address or control the privacy practices of other websites (including those to which this website links), which may have their own policies. We encourage you to be aware when you leave this website and to read the privacy statements of other websites you visit that collect personally identifiable information. Unsolicited information you provide to us may be deemed to be non-confidential and Evelo will be free to reproduce, use, disclose, and distribute such unsolicited information without permission, compensation, limitation or attribution.
By accessing this website, you agree to the terms of this Privacy Policy and to the Terms and Conditions of Use. If you do not agree to these terms, you are not authorized to use this website.
Introduction
“Personal Data” is data that can be used to identify or contact you, such as your contact details, including your name, address, e-mail address, country, and telephone number, any other information that may be listed on your resume in the event that you submit a job application to Evelo via our website, and, where provided for under applicable law, any data about your use of this website or your device that may be collected automatically, including through the use of cookies, web beacons and other tracking technologies.
We will handle your Personal Data in accordance with applicable law and in line with the following principles:
- We will process Personal Data lawfully, fairly and in a transparent manner.
- We will only collect Personal Data for a specified, explicit and legitimate purpose, and we will only use personal information for the purposes for which it was originally collected.
- We will limit collection of Personal Data to the extent minimally necessary in relation to the purpose for which they are processed.
- We will make reasonable efforts to ensure that your Personal Data is accurate and, where necessary, kept up to date.
- We will store Personal Data for no longer than is necessary for the purpose for which Personal Data are processed.
- Personal Data will only be processed in a manner that ensures appropriate security of the personal information.
Our privacy practices are described in greater detail in the remainder of this Privacy Policy.
Information We Collect
You may visit this website without affirmatively providing any information about yourself. If you choose to submit your information through the “Contact” feature on this website or if you apply for a job with Evelo via the “Careers” section of this website, we may ask you to provide Personal Data, such as your name, address, telephone number and e-mail address, job title, company name, country, information about your job role and other job-related information. You are not obligated to provide any Personal Data to Evelo, but your ability to use this website or its features and your ability to apply for an employment position may be limited if you do not.
Personal Data About Use of the Website Collected by Cookies or Other Automated means. When you use this website, we may automatically collect information about your use of this website, including through the use of cookies, web beacons and other tracking technologies (“automated information”). Automated information may include device information such as IP address, device identifiers, and operating system, as well as usage information such as time and duration of use, interaction with content, information stored in cookies or similar technologies. Pursuant to EU Regulation 2016/679 on data protection (the “GDPR”), automated information is considered personal data, and we will treat such automated information as Personal Data in accordance with this privacy policy.
“Cookies” are small files that this website places on your hard drive for identification purposes. These files are used for website registration and for customization of your next visit to this website. Cookies cannot read data off your hard drive.
We may use the following types of cookies on this website:
- Strictly necessary cookies. These are cookies that are required for the operation of this website. They include, for example, cookies that enable you to log into your job applicant account.
- Functionality cookies. These are used to recognize you when you return to this website and to embed functionality from third party services. This enables us to personalize our content for you, remember your preferences and to integrate useful services provided by third party providers into this website.
- Analytical cookies. We collect and use certain analytical information to help us better understand activity on this website and improve our services and the quality of this website. This information includes the IP address, page requests, referring websites or ads, operating system and browser, and time spent on this website. We receive this data in an aggregated form. We use this information to help us understand how visitors engage with this website and to improve our visitors’ experience.
You can refuse or accept cookies from this website at any time by activating the cookie settings in your browser. The “help” menu on most internet browsers contains information on how to disable cookies, or you can visit http://www.aboutcookies.org/how-to-control-cookies/. By not accepting cookies, some features on this website may not fully function, and you may not be able to access certain information on this website. By continuing to use this website without changing settings, you are agreeing to our use of cookies.
Personal Data From Third-Party Sources. We may receive information about you from publicly and commercially available sources, as permitted by law, which we may combine with other information we receive from or about you. For example, if you apply for an employment position with Evelo via this website, we may view your LinkedIn profile.
Aggregated Data. We may aggregate and/or de-identify any Personal Data that we collect, such that the information no longer identifies any specific individual. We may use, disclose and otherwise process such information for our own legitimate business purposes – including historical and statistical analysis and business planning – without restriction.
How We Use Personal Data
We may use Personal Data for the following purposes.
Our legitimate interests
We may process your Personal Data where it is necessary for our legitimate interest as a company, including to manage, promote and improve our business and manage our risk. For example, we may process your Personal Data to:
- provide you with information you requested and/or to respond to your inquiries submitted via this website, email and/or phone,
- facilitate our recruitment activities (such as processing employment applications, evaluating you as a job candidate for an employment activity, and monitoring our recruitment statistics),
- analyze and enhance our communications and strategies,
- tailor the content we display on this website,
- protect against, identify, investigate and respond to fraud, illegal activity (such as incidents of hacking or misuse of this website) and claims and other liabilities,
- maintain the privacy, security, safety or property of this website, and
- communicate with you for other purposes which are evident from the circumstances or about which we inform you when we collect Personal Data from you.
Legal obligation
We may be required by law to collect and process certain Personal Data about you. For example, we may need to process your Personal Data to comply with regulations of the U.S. Department of Labor concerning the demographics of job applicants.
Your consent
We may also seek, either directly or through our trusted third parties, your separate consent to process your Personal Data, for example, when you choose to receive Evelo news and updates from us, or for the use of non-essential cookies.
If we have sought your consent to process your Personal Data, you may subsequently withdraw it at any time by contacting us at the address listed in the “Your Privacy Rights” section below.
Sharing of Personal Data
We will not sell, share, or otherwise distribute your Personal Data to third parties except as provided in this Privacy Policy.
Affiliates and Service Providers. We may disclose your Personal Data to other Evelo affiliates worldwide that agree to treat it in accordance with this Privacy Policy. We may also transfer Personal Data to service providers who act for or on our behalf for further processing, such as evaluating the usefulness of this website, data management, technical support or recruiting data analysis. These service providers have contracted with us to only use the Personal Data for the purpose(s) for which the data were originally collected or may otherwise be lawfully processed, not to sell your Personal Data to other third parties, and not to disclose it to other third parties except as may be required by law, as permitted by us or as stated in this Privacy Policy.
Other Parties in Connection with a Corporate Transaction. We may also transfer Personal data we collected from you to a third party as part of a corporate business transaction such as a merger, acquisition, reorganization, joint venture, financing or sale of our assets.
Other Parties when Required by Applicable Law or As Necessary to Protect Evelo. We may disclose Personal Data to a third party to comply with legal and regulatory requirements, or to protect against fraud, illegal activity (such as responding to incidents of hacking or misuse of this website) and claims and other liabilities.
International Data Transfers
When we share Personal Data with a third party, such data transfers may include the transfer of Personal Data to other countries. Those countries may not have the same data protection laws as the country in which the Personal Data initially originated.
EEA Residents Only
Evelo, in the US, will act as a data controller and will process your Personal Data, by determining purposes and means of its processing, as per the GDPR. Please be aware that your Personal Data may reside on servers outside of the European Union. Before transferring your Personal Data outside the EEA, we will take steps to ensure that such data will be afforded the same level of protection as under applicable data protection laws within the EEA. For data transfers outside the EEA, we use, where required, applicable safeguards, including standard contractual clauses approved by the European Commission. A copy of these measures can be obtained by contacting us at the email address listed below.
Your Privacy Rights
You may have certain rights as a data subject under applicable law. For example, you may have the right to object to or request restriction of processing of your Personal Data and to request access to, rectification, erasure and portability of the Personal Data we hold about you, subject to certain exceptions prescribed by law. If you would like to receive further information regarding our use of your Personal Data, or if you would like to exercise your rights, please contact us at:
Evelo Biosciences, Inc.
620 Memorial Drive
Cambridge, MA 02139
USA
Privacy@evelobio.com
We will attempt to provide any requested information and to make requested changes to the extent required by and permissible under applicable privacy laws and other laws and regulations. In any event, we will endeavor to respond to you as soon as practicable to advise you of the outcome of your request.
You may file a complaint with the relevant supervisory authority if you consider that our processing of your Personal Data infringes applicable law. Contact details for all EU Supervisory Authorities can be found here.
Information Security
Evelo uses commercially reasonable administrative, technical, personnel-related, and physical security measures designed to safeguard the Personal Data in our possession against loss, theft and unauthorized use, disclosure, or modification. Of course, despite these measures, we cannot guarantee perfect security of the networks, servers, and databases we operate or that are operated on our behalf. In particular, email sent to or from this website may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any Personal Data to us via this website.
Data Retention
Your Personal Data will be retained by Evelo only for as long as necessary to fulfill the purpose(s) for which it was collected, depending on the purpose(s) for which the Personal Data was collected, the nature of the Personal Data, any contractual relationship that governs the retention of the Personal Data, and our legal or regulatory obligations. We will then destroy or anonymize your Personal Data, in accordance with applicable law.
Email Communications
In the event that we contact you, including via email, we will provide you with a method to opt out of or opt in to receiving further communications to the extent required by law. For example, you may elect to receive email updates about Evelo by completing the “Email Alerts” electronic form on the investors page of this website. If you decide, at any later time, that you no longer wish to receive such email communications from us, you may unsubscribe to any such contact list by using the relevant “Unsubscribe” link within the respective electronic communications channel, or by sending us an email entitled “Unsubscribe from email updates” privacy@evelobio.com.
Our Children’s Policy
We are committed to protecting the privacy of children. This website’s content and services are not intended for, or designed to attract, children under the age of 18. No Personal Data should be submitted to Evelo through this website by visitors who are younger than 18 years old or about children who are younger than 18 years old. If it comes to our attention that a user of this website is under the age of 18 and has volunteered Personal Data and/or health-related Personal Data, or that a healthcare professional has volunteered Personal Data about a patient who is identified as younger than 18, without the given or authorized consent of the guardian of such child, we will promptly, upon relevant notification or request, endeavor to delete such Personal Data.
CalOPPA Do-Not-Track Notice
We do not track visitors to this website over time and across third party websites and, therefore, do not respond to Do Not Track (DNT) signals. Evelo does not authorize third parties to collect Personal Data directly from our users on this website, such as through the use of third-party advertisements.
Links to Third Party Websites
As a convenience to our visitors, this website may contain links to other websites that we believe may offer useful information. These links may include links to websites that may perform services for us. Please be aware that Evelo is not responsible for the privacy practices of such other websites and cannot guarantee the privacy standards of such other websites. We encourage you to be aware when you leave this website and to read the privacy statements of other websites that collects personally identifiable information. This privacy statement applies solely to information collected by this website, and not to any linked, non-Evelo website.
Notification of Privacy Policy Updates
If we change our Privacy Policy, we will post those changes on this website. If we make revisions to this Privacy Policy, we will update the date at the top of this Privacy Policy.
For Additional Information
If you have any questions about this Privacy Policy, or concerns about the practices of this website, or your dealings with this website or any privacy-related matter in general, please email us at privacy@evelobio.com or contact us in writing at:
Evelo Biosciences, Inc
620 Memorial Drive
Cambridge, MA 02139
USA
Attention: Legal Department
EVELO BIOSCIENCES RESERVES THE RIGHT TO SUBSTITUTE OR CHANGE THIS POLICY AT ANY TIME WITHOUT NOTICE.
