Website Privacy Statement

Last Updated May 21, 2018

NanoString Technologies, Inc.

This Privacy Statement (“Privacy Statement”) describes the practices and policies of NanoString Technologies, Inc. and its subsidiaries (collectively “NanoString” or “we”, “our”, or “us”) regarding the collection, use, storage and disclosure of personal information collected through www.nanostring.com, www.prosigna.com, and related websites (collectively, the “Site”) as well as the services and features that we make available through the Site (the “Services”), and your choices and obligations regarding that information. NanoString values the trust placed in us by our employees, customers, and business partners, and others (“you”). NanoString is committed to upholding best practices in our use, collection, storage, and disclosure of personal information. This document refers to personal data (here referred to as “data”) which is defined as information concerning a living person here referred to as “you” or “your” or otherwise a “data subject”.

To the extent that visitors to this website are EU residents and to the extent that NanoString provides goods and/or services to EU residents and/or collects data from such individuals, NanoString is subject to the provisions of the EU General Data Protection Regulation 2016/679 (here referred to as “GDPR”), which is EU-wide and which seeks to protect and enhance the rights of data subjects.

By continuing to use the Site and/or the Services or by providing your personal information to us, you agree to the practices and policies described in this Privacy Statement.

How we collect and use information

We do not require you to register with us to visit our Site. We do collect de-identified information from you during the course of your visit to the Site, as further described below. We may also collect personal information (such as name, email address, postal code, mailing address or other information) when you voluntarily give it to us by registering for updates, providing us your contact information, or contacting us (e.g. a NanoString webinar registration, NanoString Contact a Rep Request or a NanoString Support Request).

Information collected automatically/aggregate data collection​

We trace visits to our Site and its webpages and use visitor logs to compile aggregate statistics, (e.g., information such as your web requests, browser type, browser language, domain names, referring and exit pages and URLs, platform type, pages viewed and the paths you took on our Site). We use this information to analyze trends, administer our Site, improve our Site design and otherwise enhance our Site and Services.

Legal basis for and legitimate interest in processing any personal data

To meet NanoString’s contractual and other obligations to customers, to improve this Site, to communicate with you, including to provide you with information about NanoString's products and services that may be of interest to you, to compile and analyze trends, to carry out the transactions you request when you visit the Site, and as otherwise described herein.

Consent

Where you have consented to NanoString processing your personal data for the purposes outlined, you can withdraw consent at any time by emailing legal@nanostring.com or by telephoning 1-206-378-6266 or by writing to us (please see last section for full address contact details).

Use of cookies/web beacons

We may use cookies, both session and persistent cookies, or web beacons on certain webpages and/or html email correspondence to track visitors, save website preferences or allow us to recognize visits from the same computer and browser. The information collected by our web server may include the Internet Protocol (IP) address of your Internet Service Provider, the content you access, the platform operating system and web browser you use, and the date and time of your visit. You have the option to disable cookies in your browser and still use our Site, although it may limit your access to the Site. For additional information, see our Cookies Policy at https://www.nanostring.com/legal/cookies-policy.

Information you voluntarily provide

We may use your personal information to contact you regarding an inquiry or to provide you with more information about NanoString or other marketing information we believe you may be interested in. We will send you email alerts or notification messages unless you unsubscribe.

When you send us an email

If you contact us about our Site, Services, or products, we may retain the content of your email, your email address and our response to you. We may retain your information for a period of time to resolve disputes, troubleshoot problems, or for other valid business or legal reasons.

How to unsubscribe

In various registration forms, you will have the opportunity to select certain communication methods from us. Any email from us will include instructions on how to update your personal information and on how to unsubscribe or change your communication preferences. Please follow these instructions to notify us of any changes to your information and/or marketing preferences. You may also unsubscribe or change your preferences at any time by contacting us at webmaster@nanostring.com.

How we share information

We do not sell or rent your personal information to any other third party. We do share your information with third party providers who perform services on our behalf, such as web analytics, and help us provide the Site and Services to you.

NanoString is a global company with customers and partners worldwide.  Accordingly, the information we collect may be used, stored and processed in the United States or in any other country in which NanoString does business.  By providing the information via the website, you are consenting to the transfer of the information outside of your country to any country (including countries which may not have adequate levels of protection).  However, if you are a client or customer within the EU, please note that your personal data will not be transferred to a country or territory outside the EU unless either that country ensures an adequate level of protection is in place or that the appropriate safeguards are in place to protect your personal data and to meet the “adequacy” requirement under the GDPR and EU data protection laws.

We may provide access or disclose your personal information as required by law, and/or if disclosure is necessary in accordance to a judicial or legal process (including to law enforcement authorities if required), or when disclosure is necessary to prevent physical harm. We reserve the right to transfer your information in the event of a corporate restructuring, merger, acquisition, or consolidation with, or sale of substantially all of our assets to a third party (including bankruptcy).

Can you update and/or amend the personal information you have provided?

You are entitled to know whether we hold information about you and, if we do (subject to certain limitations), to have access to that information and have it corrected if it is inaccurate or out of date.

If you are an EU resident and we are in possession of or processing your data or in relation to offering you goods and/or a service or services you have the following rights under the GDPR:

• Right of access – you have the right to request a copy of the information that we hold about you.

• Right of rectification – you have a right to correct data that we hold about you that is inaccurate or incomplete.

• Right to be forgotten – in certain circumstances you can ask for the data we hold about you to be erased from our records.

• Right to restriction of processing – where certain conditions apply you have a right to restrict the processing.

• Right of portability – you have the right to have the data we hold about you transferred to another organization.

• Right to object – you have the right to object to certain types of processing, such as direct marketing.

• Right to object to automated processing, including profiling – you also have the right to be subject to the legal effects of automated processing or profiling.

In the event that NanoString refuses your request under rights of access, we will provide you with a reason as to why, which you will have the right to legally challenge.

NanoString at your request can confirm what information it holds about you and how it is processed.

To access what personal data is held about you, identification will be required

NanoString will accept the following forms of ID when information on your personal data is requested:
A copy of your driving license, passport, birth certificate and a utility bill not older than three months.  A minimum of one piece of photographic ID listed above and a supporting document is required. If NanoString is dissatisfied with the quality of the ID presented, further information may be sought before any personal data is released.
All requests should be made to legal@nanostring.com or by telephoning 1-206-378-6266, or by writing to us at NanoString Technologies, 530 Fairview Avenue North, Seattle, Washington 98109, USA, Attn: General Counsel

Business relationships

This website contains links to other websites. Nanostring is not responsible for the privacy practices or the content of such other websites.

How we secure information

We secure information by using industry standard administrative, physical and technical safeguards. We encrypt information transmitted to us using Secure Sockets Layer (SSL) technology. All information is stored on controlled servers with restricted access. It is important for you to know that, despite using these current technical and industry-recommended practices, it is never possible to fully guarantee against breaches in security.

How you may access information

You may contact us to notify us of any changes to your name, email address or marketing preferences. If you have provided us with your personal information and would like access to or be able to review the information, you may submit a request to us by sending an email to legal@nanostring.com

Children

Our Site is directed toward adults and NanoString does not knowingly collect information from children under the age of 13, or under the age of 18 in relation to EU residents.

Links to other sites
This Privacy Statement does not apply to third-party websites. NanoString may provide links to other websites and the terms and conditions of such other websites apply.
Updates
Please make sure you review our most current Privacy Statements, as we may revise this Privacy Statement from time to time. Updated versions will be posted on the Site. 
How to Contact Us
If you have any questions about this Privacy Statement, please contact us at legal@nanostring.com.