Governing Laws: California Law and GDPR

Governing Law

This Privacy Policy and the privacy practices of DrugBank is governed by the laws in force in the Province of Alberta, Canada, without regard to choice-of-law or conflict-of-law principles.

California Law Compliance

We permit residents of California to use our Services, and fully comply with California’s privacy laws to the extent applicable to DrugBank’s Services. California's “Shine the Light” law (Civil Code Section § 1798.83) permits users of our Services that are California residents to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@drugbank.com.

Data Protection Addendum and EC Standard Contractual Clauses

This Privacy Policy incorporates The European Commission’s Standard Contractual Clauses (or “SCCs”) a copy of which can be obtained at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:32010D0087 . The SCCs are standardized contractual terms, recognized and adopted by the European Commission, with the primary purpose of ensuring that any Personal Information leaving the European Economic Area (“EEA”) will be transferred in compliance with EU data-protection law. The SCCs also incorporate the principal EU General Data Protection Regulation (GDPR) requirements covering access, disclosure, security and transparency of Personal Information, and sets forth a framework for U.S. companies, and EU entities working with U.S. companies, to meet the requirements of the GDPR.

In certain cases, DrugBank will transfer Personal Information in accordance with the SCCs.

DrugBank, complies with the SCCs regarding the collection, use, and retention of Personal Information transferred from the European Union and Switzerland to the United States. If there is any conflict between the terms in this Privacy Policy and the SCCs, the SCCs shall govern. Both you and DrugBank will comply with the SCCs, so that DrugBank’s EU-based users can share Personal Information with us and remain compliant with the GDPR.

We are committed to protecting your privacy in compliance with the SCCs. EU and Swiss Individuals with inquiries or complaints regarding our Privacy Policy can contact us at privacy@drugbank.com.

We work hard to promptly respond to any requests we receive regarding privacy and data protection. If you do not receive a timely acknowledgement of your request from us, or if we have not addressed your request to your satisfaction, you agree to refer the matter to the International Center for Dispute Resolution / American Arbitration Association (ICDR/AAA). ICDR/AAA is an independent recourse mechanism chosen by DrugBank. You may get more information or contact ICDR/AAA athttps://www.icdr.org/about_icdr . The services of ICDR/AAA are provided at no cost to you. Under certain conditions, individuals may invoke binding arbitration when the dispute resolution procedures of ICDR/AAA have been exhausted.