This Privacy Policy describes the ways in which BioLineRx Ltd., along with its affiliates and subsidiaries (collectively, “BioLineRx,” “we,” “us,” or “our(s)”), having its registered office at Modi’in Technology Park, 2 HaMa’ayan Street, Modi’in 7177871, Israel, collects and processes information about you that identifies you directly or indirectly (“Personal Information”), either alone or in combination with other information made available to us, through your interactions with us via our website at www.biolinerx.com and related websites owned or operated by us (collectively, “Website”).

BioLineRx is responsible for the processing of your Personal Information, as it determines why and how it is processed, thereby acting as the “Data Controller” of such Personal Information.

This Privacy Policy covers how we respect and describe your privacy rights when you access and use our Website and/or for the purposes described in this Privacy Policy. We consider the protection of your Personal Information and privacy to be a very important matter. As such, we invite you to carefully read this Privacy Policy. This Policy should be read together with our Terms of Use. If you have any questions in relation to the processing of your Personal Information or this Policy, please refer to our Contact Us section.

WHAT PERSONAL DATA WE PROCESS AND FOR WHICH PURPOSES

Accessing our Website does not require any form of registration or “sign-up.” Depending on how you interact with us, we may collect and process Personal Information that directly identifies you such as your name, contact details, Website activity, and email address, among other things. We may also collect certain Personal Information that does not directly identify you, but which makes identification possible through the combination of other information or identifiers such as your company name and position, among other things. Personal Information may also include information, such as computer or device serial numbers or IP addresses, among other things.

Information that you provide to us

Contact requests, customer support, or feedback
For inquiries via our contact form, you need to provide your name, email address, and your message. You may also provide your company’s name and phone number (“Contact Information”). We collect your Contact Information only to process and answer your request regarding our products and services, and to communicate with you. We need to use your Contact Information for our legitimate interest as a commercial organization, to communicate with you, and to present you marketing materials, information, and opportunities regarding our products and services.

You do not have a legal obligation to provide us with your Personal Information. However, if you choose to not share this information with us, we may not be able to respond to your inquiries or provide full functionality of our Website.

Information that is collected automatically

Website Usage and Analytics Information
We may collect and process Personal Information about your interaction with the Website, including the IP address from which you access the Website, time and date of access, type of browser used, language used, links clicked, and actions taken while using the Website. We may use such information to help improve the contents of the Website, optimize your experience, and to optimize the ways we communicate with you and/or to compile aggregate statistics about visitors using our Website for our internal usage and market research purposes. In doing this, we may install “cookies” or similar technologies that collect the domain name of the user, your internet service provider, your operating system, and the date and time of access, among possible other data points. To optimize our Website, we may use the web analysis service “Google Analytics.” You can always delete the cookies saved on your device through the settings of your computer browser or device. You can also disable cookies for future use through the settings of your computer browser or device. The legal basis for the processing of your Usage and Analytics Information when we do website analytics, is your consent and/or our legitimate business interests.


HOW WE SHARE YOUR PERSONAL DATA

This Privacy Policy describes the circumstances in which we may share your Personal Information. We may share your Personal Information with our subsidiaries and affiliated companies to exchange information and maintain databases in different countries and, in fact, this Policy is applicable to our subsidiaries and affiliates. We will not sell, share, or otherwise transfer your Personal Information to third parties other than those indicated in this Privacy Policy or when you provide us with your explicit and informed consent.

We will process information with our service providers helping us to operate our Website
We will process personal information with the assistance of our service providers that assist us with the operations of the Website. These companies are authorized to use your Personal Information in this context to provide these services to us and not for their own promotional purposes.

We will share Personal Information with competent authorities, if you abuse your right to use the Website or violate any applicable law
If you have abused your rights to use the Website (as determined by us), or if you violated, or appear to be likely to violate, any applicable law, we will share information with competent authorities and with third parties (such as legal counsels and advisors) for the purpose of handling of the violation or breach. Our legal basis for this processing is our legitimate interest in defending and enforcing against violations and breaches that are harmful, or potentially harmful, to our business, our personnel, or third-parties.

We will share your Personal Information if we are legally required
We may disclose and/or share your Personal Information to comply with legal or regulatory obligations (including, but not limited to, to comply with a court order, judicial subpoena, other subpoena, or warrant), industry standards, judicial process, and our policies, as well as to protect against, identify, investigate, prevent and respond to fraud, illegal activity (such as identifying and responding to incidents of hacking or misuse of our Website), and claims and other liabilities.

If we deem the information you provide to be safety information or a product complaint about our medications, we will use the information in order to meet our legal obligations. Reporting a safety issue relating to our medication is beneficial for the protection of public health because it helps us to investigate and address an issue that may be relevant to the health of other members of the public who use our medications. We may follow-up directly with you in order to gain more information about the safety or product issue you informed us about.

Our legal basis for this processing is our legitimate interest in complying with mandatory legal requirements imposed on us.

We will share your Personal Information with third parties in any event of change in our structure
If the operation of our business is organized within a different framework, or through another legal structure or entity (such as due to a merger or acquisition), we will share your Personal Information as required or advisable to enable the structural change in the operation of the business. Our legal basis for this processing or use is our legitimate interest in our business continuity.

SECURITY AND DATA RETENTION

We will retain your Personal Information for as long as we need it for business purposes or per legal obligation
We will store your Personal Information for as long as is reasonably necessary for the purposes for which it was collected, as explained in this Privacy Policy. Where your Personal Information is no longer needed, we will ensure that it is deleted or disposed of in a secure manner. In some circumstances we may store your Personal Information for longer periods of time; for instance, where we are required to do so in accordance with legal, regulatory, tax, or accounting requirements.

We implement measures to secure your Personal Information
We take security very seriously. We have implemented and maintain appropriate technical and organizational security measures, policies, and procedures designed to reduce the risk of accidental destruction or loss, or the unauthorized disclosure or access to such information appropriate to the nature of the information concerned and our business. However, these measures may not provide absolute information security. Therefore, although efforts are made to secure personal information, it is not guaranteed, and you cannot expect that the Website will be immune from information security risks.

INTERNATIONAL DATA TRANSFERS

We will internationally transfer Personal Information in accordance with applicable data protection laws
We operate globally. In particular, we have a presence in Israel and the United States. Accordingly, your Personal Information may be transferred and stored in other countries that are subject to different standards of data protection. Recipients of your Personal Information may be in countries that do not provide the same standard of legal protection for your Personal Information as in your country.

We will, however, take appropriate steps to ensure that transfers of Personal Information are made in accordance with applicable law, and carefully managed to protect your privacy rights and interests and limited to countries that are recognized as providing an adequate level of legal protection, or where we can be satisfied that alternative arrangements are in place to protect your privacy rights.

YOUR RIGHTS

Whenever we process Personal Information, we take reasonable steps to keep your Personal Information accurate and up-to-date, for the purposes for which it was collected. We will provide you with the ability to exercise the following rights under the conditions and within the limits set forth in the law.

You have certain rights to access, update or delete your Information, obtain a copy of your Information, or restrict certain data processing activities
If you are in the EEA, Switzerland, or UK, you may have some or all of the following rights in relation to how we use your Personal Information:

Right of access: you may request information on, or a copy of, your Personal Information processed by us. Upon your request, this information will be provided to you electronically.

Right to rectification: If your Personal Information is inaccurate or incomplete, you may request to have it rectified or completed.

Right to erasure: You may ask us to delete or remove your Personal Information in some circumstances, such as where we no longer need it, or when you withdraw your consent.

Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your Personal Information in certain instances, such as where you contest the accuracy of your Information or object to us processing it.

Right to data portability: where you have provided consent for processing of your Personal Information or where the data processing is necessary to perform a contract with you, you may ask us to provide you with your Personal Information in a structured, commonly used, and machine-readable format that can be shared with others.

Right to object: You may ask us at any time to stop processing your Personal Information.

Right to Complain: Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. You can lodge a complaint to the supervisory authority, in the EU Member State of your residence (if any), your place of work, or any other lawful forum. For a list of supervisory authorities in the EU, click here.

We reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason for this.

If you wish to exercise any of these rights, contact us at IR@biolinerx.com.

INFORMATION RELATING TO CHILDREN

You must be at the age of majority or older to use the Website
We do not knowingly collect or use Personal Information from children under the age of majority at your country or province of residence, or under the age of 18 in any case. If we gain actual knowledge of the information from or about a child, we reserve the right to immediately delete the account and wipe all related information from our servers.

CHANGES TO THIS PRIVACY NOTICE

We may change this Privacy Policy and in the event of material change, we will inform you of such change, usually via an update to our Website
We reserve the right to update this Privacy Policy from time to time, to reflect changes in our practices or changes in applicable laws. If we make material changes to how your Personal Information is collected, accessed, or otherwise used as a result of your use of the Website or if your rights under this Privacy Policy are materially impacted by changes to our privacy practices, we will make a reasonable effort to inform you by additional means such as notification to your email address, if we have it. Please check this Privacy Policy periodically for changes, as notice of changes will usually take this form of notice.

Contacting us

You may contact us with questions and comments about this Policy by email: IR@biolinerx.com

Last Update: Nov. 2023