Scope

FibroGen China (“FGC”) recognize the importance of and are committed to respecting and protecting your privacy. This Privacy Notice applies to our collection and use of “Personal Information” through our website and through our offline business-related interactions with you including your Personal Information and the Personal Information of others you provide (if any), hereinafter collectively referred to as “Your Personal Information”, not including data from clinical trial data subjects (except where noted below). “Personal information” means any information that can be used for independent identification or in combination with other information to identify a natural person or reflect the activities of a natural person. Personal information does not include anonymous data that has deleted the identity of the person. “Sensitive Personal Information” refers to Personal Information that, once disclosed or illegally used, can easily lead to the violation of the human dignity of natural person or harm to the personal safety and property safety, including but not limited to medical and health information, Personal Information of juveniles under the age of 14, etc. Unless otherwise stated below, the term “Personal Information” used in this statement shall include Sensitive Personal Information and other Personal Information.

Please read this Privacy Notice carefully to understand how we process Personal Information. If you do not agree with our use of your Personal Information as described in this Privacy notice, please do not use the Site, or otherwise provide Personal Information to us.

Privacy Notice Updates

FibroGen China may need to update this Privacy Notice from time to time. If so, FibroGen China will post its updated Privacy Notice on our website located at www.fibrogen.cn so users are always aware of what personally identifiable information we may collect and how we may use this information. When we believe that there are any changes in this privacy notice that can reasonably be considered significant, we will notify you through our website, email, or other means. FibroGen China encourages you to review this Privacy Notice regularly for any changes. Regardless of whether you have received our notification or not, your continued use of this website will be subject to the then-current Privacy Notice.

Information Collection and Use

You can generally visit our website without revealing any personally identifiable information about yourself. However, to access certain options we may ask you to provide certain personally identifiable information such as, your name, email address, telephone number, professional credentials. During the period of your use of our website's services, or if your account has not been logged off, you will continue to authorize us to use any personal information you provide. Without providing such personally identifiable information, you may be unable to access certain options and services. We (and our third party partners) generally collect personally identifiable information about you only if you voluntarily provide it to us. You have the option not to provide any personally identifiable information, but we may not be able to provide you with the requested services.

Note that this Privacy Notice does not apply to information that we may collect through our clinical trials, which are governed by separate terms and agreements.

In addition, we automatically collect basic technical information from all visitors to the Site. We collect technical information during your visit to the Site through our automatic data collection tools, which may include cookies and other commonly used technologies. These tools collect certain standard information that your browser sends to the Site such as your browser type and language, access times, and the address of the Site from which you came to the Site. They may also collect information about your Internet Protocol (IP) address, or click stream data within the Site (i.e. the actions taken in connection with the Site). Please see “Cookies and other similar technologies” below for additional detail about the information we collect through cookies and other commonly used technologies.

How we use your Personal Information

Subject to applicable data protection laws, we may use your Personal Information for the following purposes: (i) to provide you with the services and information offered through the Site; (ii) to contact you and respond to your requests and inquiries; (iii) for business administration, including answering questions or inquiries, job submissions, and statistical analysis; (iv) to personalize your visit to the Site and to assist you while you use the Site; (v) to improve the Site by helping us understand who uses the Site; (vi) to collect adverse events or other safety information about our products, and transfer your personal information (including sensitive personal information) to our affiliates, overseas affiliate (FibroGen, Inc.) and authorized third-party vendors, in accordance with applicable laws, so as to meet the legal reporting obligations of pharmacovigilance to appropriate health authorities. You can use the contact information of the data protection officer provided below in this privacy statement to learn the specific name and contact information of the authorized third-party service provider, as well as the method and purpose of processing your personal information; (vii) for fraud prevention and detection and to comply with applicable laws, regulations or codes of practice.

We will only use your personal information for the purpose for which we collected it. If we need to use your personal information for unrelated purposes, we will notify you in accordance with applicable laws and regulations and obtain your consent. If the information you provide includes personal information of other patients, their family members, etc., you should ensure that the source of such information is legal and inform the information subject(s) how you will process their personal information, provide this privacy notice and ensure that the necessary consent or authorization has been obtained from the information subject(s). This privacy notice will also apply to the personal information of others we collect from you.

Sharing of your Personal Information

We may provide your personally identifiable information that we collect, and the data generated by cookies to a parent, subsidiary or affiliate entity related to FibroGen China, partner entities, and the vendors and service agencies that we may engage to assist us. We may also transfer your Personal Information to a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or shares (including in connection with any bankruptcy or similar proceedings.)

Any organization to which we provide such personally identifiable information is required to respect the security of your Personal Information and keep your personally identifiable information confidential in accordance with this Privacy Notice. Unless allowed by this Privacy Notice or you otherwise agree to, we do not allow our third-party service providers to use your Personal Information for their own purposes and only permit them to process your Personal Information for specified purposes and in accordance with our instructions

Similarly, we may share your Personal Information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property, or the rights, property or safety of others, including to advisers, law enforcement, judicial and regulatory authorities.

The servers used in the operation of the Site automatically identify a computer by its IP address. If we, in good faith, determine that you have or are attempting to misuse or harm the Site, we may investigate and cooperate with appropriate law enforcement to protect our rights or property.

International data transfers

Your personal information may be provided to our overseas affiliate (FibroGen, Inc.) for the purpose of providing feedback on adverse events, so as to meet the legal reporting obligations of pharmacovigilance. Please refer to the table below for specific overseas recipient information.

Your rights

Access

Upon request and as requested under applicable laws, FGC will provide individuals with reasonable access to Personal Information about them. FGC will also take reasonable steps to allow individuals to review Personal Information for the purposes of correcting, amending, or deleting such information in instances where Personal Information is demonstrated to be incomplete or inaccurate.

If you wish to access, correct, amend, or delete your Personal Information, or inquire about how to restrain the use or disclosure of Personal Information, please send us your request via email to: DPO@FibroGen.com.

Alteration or withdrawal of your consent

If we process your Personal Information based on your consent, you may alter or withdraw your consent at any time. However, this will not affect the legality of any Personal Information processing that takes place prior to your withdrawal of consent. If you withdraw your consent, we may not be able to provide you with certain products or services. If so, we will notify you when you withdraw your consent.

If you wish to exercise one of the above-mentioned rights, please send us your request via email to: DPO@FibroGen.com. Individuals also have the right to lodge a complaint about the processing of their Personal Information with the local data protection supervisory authority.

No fee usually required

You will not have to pay a fee to access your Personal Information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request.

Security and retention of your Personal Information

The security of your Personal Information is important to us. We take reasonable steps, including technical, administrative, and physical safeguards, designed to protect the Personal Information submitted to us from loss, misuse and unauthorized access, disclosure, alteration, and destruction. However, no method of security or method of transmission over the Internet is entirely secure. You should always use caution when transmitting Personal Information over the Internet.

We may retain your Personal Information for as long as your account is active or as needed for the specific business purpose for which it was collected. In some cases, we may be required to retain information to comply with laws or regulations or other legal obligations, resolve disputes and enforce our agreements.

If required by law, we will notify you and/or any applicable regulatory authority of any personal information violations.

Cookies and Other Similar Technologies

Cookies are small text files that are stored on computer hard drives by websites that you visit. There are two general types of cookies, session cookies and persistent cookies. Session cookies are only used during a session online and will be deleted once you leave a website. Persistent cookies have a longer life and will be retained by the website and used each time you visit a website. Both session and persistent cookies can be deleted by you at any time through your browser settings.

We use the following session and persistent cookies on the Site:

• Strictly necessary cookies: these session cookies are essential for visitors to move around the Site and use its features.

• Analytical / performance cookies: these session cookies allow us to recognize and count the number of visitors and to see how visitors move around our Site when they are using it. This helps us to improve the way our Site works, for example, by ensuring that users are finding what they are looking for easily.

• Functionality cookies: these persistent cookies are used to recognize you when you return to our Site. This enables us to personalize our content for you and remember your preferences.

We may track the total number of visitors to our website or use such information, individually or in the aggregate, to analyze trends, administer the website, track user’s movement, and gather broad demographic information for use. We may share this information with our corporate partners and contracted vendors to assist us in operating the website and to enable them to better understand FGC’s business.

Web browsers often allow you to erase existing cookies from your hard drive, block the use of cookies and/or be notified when cookies are encountered. If you elect to block cookies, please note that you may not be able to take full advantage of the features and functions of the Site. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, please visit www.allaboutcookies.org.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies on our website, over which we have no control.

External links

The Site contains links to external Sites operated by third parties. We are not responsible for these third party Sites or the content of such third party sites. Once you have left the Site, we cannot be responsible for the protection and privacy of any information, which you provide. You should exercise caution and look at the privacy notice for the website you visit.

Children

This Site is not directed towards children under 18 years of age, nor do we knowingly collect information from children under 18. If you are under 18, please do not use the Site or submit any Personal Information to us. If you believe that we have unintentionally collected Personal Information about your child, you can contact us as described below.

Contact us 

We have appointed a Data Protection Officer (DPO) to handle issues related to this Privacy Notice. If you have any questions regarding this Privacy Notice, including any requests to exercise your legal rights, please contact as follows:

Address: Building A2, No. 88, Ke Chuang Liu Jie, BDA, Beijing, China 101111
Tel.: 010- 5814-1999

Email: DPO@FibroGen.com