NOTICE OF PRIVACY PRACTICES
Station X, Inc. (“Company”, “Our”, “Us”, or “We”, “Station X”) is committed to protecting the privacy of individuals who visit the Company’s Web sites (“Visitors”), individuals who register to use the Services as defined below (“Customers”), and individuals who register to attend the Company’s corporate events (“Attendees”). This Privacy Statement describes Station X’s privacy practices in relation to the use of the Company’s Web sites and the related applications and services offered by Station X, Inc. (the “Services”).
1. Web Sites Covered
2. Information Collected
a. The Site:
i. Contact Details and Personally Identifiable Information
When expressing an interest in obtaining additional information about the Company, products or Services, We require you to provide the company with personal information such as email address and name. If you contact us, we may also keep a record of that correspondence or communication, including any Personal Information it contains. When purchasing the Services, Station X may require you to provide the Company with financial qualification and billing information such as billing name and address.
ii. Site Usage and Cookies
As you navigate the Site Station X may collect information such as cookies and web site navigational information including your Internet protocol (IP) address, and the actions you take on the Site, such as pages visited and links clicked.
i. Account Information / Personally Identifiable Information
When you register with us through GenePool and during your use of GenePool, we will ask you for personally-identifiable information, which is information about you that can be used to contact or identify you (“Personal Information”), such as: your name, company or organization name, title, e-mail address, postal address, telephone numbers. If you contact us, we may also keep a record of that correspondence or communication, including any Personal Information it contains.
ii. Usage and Cookies
iii. Customer Data
Customers voluntarily provide access to source data including DNA sequence alignments (e.g. BAM files), DNA variants (e.g. VCF files), gene expression levels (e.g. count files), patient and sample metadata and other associated information derived from humans or other organisms for import into GenePool. This access is fully Customer controlled and revocable. Customers agree to and accept full responsibility for obtaining all necessary permissions and informed consent from the donors of all samples from which your submitted sequence data is derived.
GenePool also creates derivative data from source data, which is used to drive genomic analyses. This data includes database tables and indices that GenePool uses to store and process genome data, and any data and information created wholly or in part by Customers through their use of GenePool.
Together, this source data and derivative data comprise “Customer Data”.
3. HIPAA, Protected Health Information
Station X is not a Covered Entity as that term is defined in the Health Insurance Portability and Accountability Act of 1996, as amended, and its related regulations (collectively, "HIPAA"). On occasion, Station X may agree in writing with a user to perform services for the user in the capacity of a Business Associate under HIPAA. We offer a separate HIPAA Business Associate Agreement (“BAA”) for HIPAA-regulated users, and we recommend that such users enter into a BAA with Station X prior to uploading, storing, or otherwise transferring "protected health information" as defined in HIPAA (“PHI”) using the Site.
4. Security of Your Information
Station X uses Secure Socket Layer (SSL) encryption to protect all GenePool data transmitted and received to and from the Customer. Communications of any data when communicated across the Internet, network communications facilities, telephone or other electronic means cannot be 100% secure and there is always the potential for data to be accesses by unauthorized parties. Station X uses robust measures to secure all data submitted by the customer, however due the nature of data transmission is unable to guarantee the security of any data transmitted over the internet, including account credentials which may compromise Customer data stored or transmitted to / from GenePool. We ask, in partnership with our Customers, that a joint responsibility for security of transmitted data be established and if for any reason it is believed that security has been compromised or that the interaction with GenePool is not secure that We be notified immediately.
As part of the joint security model, accounts created in GenePool are password protected. By use of GenePool, Customers agree to be responsible for all actions taken under an authenticated login. Accordingly, we recommend that you select a strong password and do not divulge that password to anyone. Also, be certain to sign out of your Station X account and close your browser window when you have finished using the Site to prevent others from accessing your personally identifiable information and data.
Please note that, unlike GenePool, data transmitted to, the Company’s corporate website, stationxinc.com is not encrypted or secured. Station X recommends not sending or submitting any sensitive information to the Site.
5. How Your Information May be Used
We may use your Personal Information to provide you with a personalized experience on our Site and to communicate with you through periodic messages regarding new service features, events, and other information and notices. We will not sell or provide your information to third parties for their own direct marketing purposes.
We use usage and other non-Personal Information collected to maintain, secure, and improve both our Site and GenePool, and to understand your interests when visiting GenePool and the Site. We may generate statistical information regarding our user-base and use it to analyze our Site, GenePool, our Services or business. We may use information collected in GenePool to help provide end user support to our Customers.
When initiated by Customers, Customer Data is accessed by GenePool using industry standard authentication and encryption procedures and/or by uploading the data to GenePool over TLS/SSL. Customer Data may be accessed during certain user-initiated functions of GenePool, when such access has been set-up by the Customer. Station X and its employees will never access or share CUSTOMER Data without prior explicit consent from the Customer.
6. With Whom May Station X Share Your Information?
We may share aggregated and statistical information with third parties for industry analysis, demographic profiling, and other purposes. Any aggregated and statistical information shared in these contexts will not contain Personal Information.
7. Data Storage
GenePool stores Customer Data along with your account, profile, and member information (including Personal Information), usage and debugging information on "cloud" servers owned and operated by third party providers. Our current provider is Amazon Web Services (AWS). For information about AWS's privacy protection and data security practices, please visit http://aws.amazon.com/security.
The Site stores usage information along with any information submitted by the Visitor on “cloud” servers owned and operated by third party providers. Our current provider is Squarespace.com. For information about Squarespace’s privacy protection and data security practices, please visit http://www.squarespace.com/privacy/
8. Service Providers
In supporting the Site, GenePool and our operations, including, without limitation, maintenance of our databases, distribution of emails and newsletters on our behalf, data analysis, payment processing and other services of an administrative nature we may rely on third-party service providers and contractors (“Service Providers”). Such third-parties may have access to your Personal Information and Customer Data for the purpose of performing the service for which they have been engaged.
9. Compliance with Laws and Law Enforcement
Station X may disclose Personal Information and Customer Data and other user information with government, law enforcement officials and/or private parties as required or permitted by law or in compliance with a court order or a subpoena. Station X may disclose Personal Information and Customer Data and other user information when we, in our sole discretion, have reason to believe that disclosing this information is necessary to identify, contact, or bring legal action against someone who may (either intentionally or unintentionally) be causing injury to or interference with our rights or property, users of our Site, GenePool, our Services or anyone else who could be harmed by such activities.
10. Business Transfers
In the event of any corporate reorganization, merger, sale, joint venture, assignment, transfers, or other disposition of all or any portion of Station X's business, assets, or stock we reserve the right to transfer any and all information that we collect from both GenePool and Site users, including Personal Information, Customer Data and other user information.
11. Information You Share With Others
GenePool allows you to share your Customer Data and other information you submit to GenePool with other users of the product and third parties who are not users of GenePool. Station X is not responsible for other users' and third parties' use of your Customer Data or other information. You understand and acknowledge that, if you choose to share Customer Data or other information you submit to GenePool with other users of GenePool or third parties, such shared information might be copied or redistributed by other users and third parties. Even after you remove information from your account or delete your account, copies of that information may remain viewable elsewhere to the extent it has previously been shared with others.
We and our Service Providers may make available through the Site and GenePool certain services to which you are able to post information and materials (for example, forums, chat rooms, message boards, and news groups). If you utilize such services, please remember that any information that is disclosed in these areas becomes public information and may be available to other users and the general public. In addition, when you choose to make a posting on such services, certain Personal Information (such as your user name) will be available for other users to view.
We urge you to exercise discretion and caution when deciding to disclose Personal Information, Customer Data or any other information, in GenePool. We are not responsible for the use of any Personal Information, Customer Data or other information you voluntarily disclose or make available to other users or the public through the product.
12. Changing or Deleting Your Information
The Personal Information you provide may be reviewed, updated, corrected or deleted by contacting us. If you would like us to delete your account in our system, please contact us at email@example.com with a request that we delete your Personal Information and Customer Data from our database. We will use commercially reasonable efforts to honor your request. We may retain an archived copy of your records as required by law for compliance and legitimate business purposes.
13. Unsubscribing from Our Email List
If you wish to no longer receive email notices of new product/services, newsletters or other future promotional communications from us, please use the unsubscribe link included in the communication or notify us by email at firstname.lastname@example.org with the word "remove" in the subject header, and we will remove your name from our email recipient list. You may not, however, unsubscribe to necessary service or account maintenance notices or other administrative and transactional notices.
14. Users Under 13 Years of Age
GenePool, the Site and our Services are not directed towards users under the age of 13. We do not knowingly collect Personal Information from users under the age of 13. If a parent or guardian becomes aware that his or her child under the age of 13 has provided us with Personal Information without their consent, he or she should contact us at email@example.com. If we become aware that a child under 13 has provided us with Personal Information, we will delete such information from our files.
15. Links and Third Party Applications
On the Site and within GenePool, we may provide links to websites or applications maintained by third parties, which we believe you may find useful. Station X is not responsible for the privacy practices of these other websites or applications and we encourage you to review the privacy policies of each of those other websites or applications before using such websites and applications. If you click on these third-party links, these other websites or applications may place their own cookies or other files on your computer, collect data, or solicit Personal Information from you. Other websites and applications will have different policies and rules regarding the use or disclosure of the personal information you submit to them. We make no representation with regard to the policies or business practices of any websites or applications to which you connect through a link from this Site, and are not responsible for any material contained on, or any transactions that occur between you and any such website or application.
Questions or Concerns?
If you have any questions, comments, or concerns regarding this Policy, please contact us by email at firstname.lastname@example.org