Privacy Policy

Last Updated: 17 November 2023

Our privacy policies, statements, and notices offer details about how personal data is processed by Alnylam Pharmaceuticals and its worldwide affiliates, including how your personal data might be disclosed as well as the data privacy rights of individuals.

Website Privacy Policy

This website is owned and operated by Alnylam Pharmaceuticals, Inc. (“Alnylam”, “we”, “our” or “us”), a company established under the laws of Delaware with registered offices at 675 W Kendall Street, Cambridge, MA 02142 USA, Tel: 617.551.8200, Fax: 617.551.8101, e-mail: info@alnylam.com.

To learn more about Alnylam and its worldwide presence and how to contact Alnylam’s affiliates directly please visit our corporate website at www.alnylam.com/contact-us/.

Alnylam respects the privacy of visitors to our website. This privacy policy describes the types of personal data we collect about visitors to the website, how we use the personal data and with whom we share it. This privacy policy also describes (1) the measures we take to safeguard the personal data we collect and (2) your rights and privileges concerning our collection, use, and disclosure of your personal data.

This website privacy policy applies to personal data collected through this website by Alnylam or by third parties acting for and on our behalf as data processors, or as may be referenced in other Alnylam policies or terms, and further processed for the purposes specified herein. It does not describe the ways in which we collect or use personal data obtained in ways other than via this website, or the collection, use or disclosure policies or practices of any third party independently collecting and processing personal data through this website.

For information on the collection, use and processing of personal data of Healthcare Professionals by Alnylam read the specific Privacy Notice for Healthcare Professionals (General Use)

For more information on the collection, use and processing of your personal data for electronic communications purposes, read the specific Data Privacy Notification and Consent Form for electronic communications.

For more information on the collection, use and processing of your personal data for electronic communications purposes, read the specific Direct Marketing / Email Communications Notice

For more information on the collection, use and processing of your personal data collected at congresses, read the specific Data Privacy Notice for Use of Personal Data Obtained at Congresses, Symposia and other Events

For more information on the collection, use and processing of your personal data for the purpose of recruitment, read the specific Alnylam Pharmaceuticals Recruitment Data Privacy Notice

For more information on the collection, use and processing of your personal data for the purpose of social listening, read the specific Alnylam Pharmaceuticals Social Listening Privacy Notice

Personal Data Collection and Use

Alnylam respects the data privacy rights of visitors to our website, and we recognize your need for appropriate protection and management of the personal data you share with us. If you contact us, you may choose to provide to us, and we may collect and use your personal data, such as real name, alias, postal address, unique personal identifier, Internet Protocol address, email address, or other similar identifiers; telephone number, education; characteristics of protected classifications under California or federal law, such as race, religion, gender; commercial information, including records of real property, products or services considered, or other purchasing or consuming tendencies; internet or other electronic network suppliers, including, but not limited to, browsing history, and information regarding a consumer’s interaction with an Internet Web site, or advertisement; geolocation data; audio, electronic, visual, or similar information; professional or industry associations and related information; and inferences drawn from any of the other information categories to create a profile about a consumer reflecting the consumer’s preferences, characteristics, including trends, predispositions, and behaviors.

We will collect and use your personal data for the purposes for which you submitted it to us, namely to respond to your inquiry, to provide you with information that you have requested (such information may either relate to our products or services or consist of up-to-date disease awareness information) in the form of sending of newsletters or otherwise, to bill you for products and services you have requested, to market products and services which we think are of interest to you, or to communicate with you for other purposes which are evident from the circumstances or about which we inform you when we collect personal data from you. Such other purposes may include, from time to time, monitoring our regulatory compliance, and compiling profiles and personal information about you in order to identify suitable education/awareness programs or suitable opportunities to collaborate with you.

In the preceding 12 months, Alnylam has collected and disclosed, sold to a third party, or shared with a third party for cross-context behavioral advertising, the following categories of personal data:

Category of Personal Data	Collect	Disclose for a business purpose	Sell or Share	Categories of Sources
Identifiers, such as your name, email address, country, and zip code.	Yes	Yes	No	Directly from you Our business partners and affiliates Third parties you direct to share information with us
Commercial Information, such as profession and/or industry.	Yes	Yes	No	Directly from you
Protected Classification Characteristics, such as age, gender, disability information.	Yes	Yes	No	Directly from you
Internet/Network Information, such as your IP address, or browser or device information.	Yes	Yes	No	Your browser or device
Geolocation Data, such as information about your physical location collected from geolocation features on your device, including your IP address.	Yes	Yes	No	Your browser or device
Sensory Information, such as pictures of you.	Yes	Yes	No	Directly from you
Professional/Employment Information, such as your employing entity, business unit, manager and management reporting structure, job title, function and the nature of your duties and responsibilities.	Yes	Yes	No	Directly from you Public third-party sources, such as LinkedIn
Other Personal Information, such as information you provide to us when you register for or attend an event organized or hosted by us, including your preferences or education information, information you permit us to see when interacting with us through social media, or comments and opinions you provide to us such as when you post on message boards, blogs or complete an online form.	Yes	Yes	No	Directly from you Our business partners and affiliates Third parties you direct to share information with us Information generated from your online browsing and usage activity
Inferences, such as including information generated from your use of the websites reflecting predictions about your interests and preferences.	Yes	Yes	No	Your browser or device Information generated from your online browsing and usage activity
Sensitive Personal Information, such as health information, diagnoses, or medical conditions that you provide when enrolling in a program	Yes	Yes	No	Directly from you

Non-disclosure of Personal Data

We will not sell, share, or otherwise distribute your personal data, such as your IP address, name, address, telephone number or e-mail address to third parties except as provided in this privacy policy. We will disclose your personal data to other Alnylam affiliates worldwide, as shown on our website here, that agree to treat it in accordance with this privacy policy and applicable data protection laws. Personal data will also be transferred to third-party processors and service providers who act for and on our behalf, for further processing in accordance with the purpose(s) for which the personal data were originally collected or will otherwise be lawfully processed, such as services delivery, evaluating the usefulness of this website, marketing, data management or technical support. These third parties have contracted with us to only use personal data for the agreed upon purposes and not to sell or disclose your personal data to third parties except as required by law, as permitted by us or as stated in this privacy policy.

Personal data collected from you would also be transferred to a third party in the event that all or a part of the business associated with this website, and the customer data connected with the business or website is sold, assigned or transferred, in which case we would require the buyer, assignee or transferee to treat personal data in accordance with this privacy policy. Also, personal data will be disclosed to a third party if we are required to do so because of an applicable law, court order or governmental regulation, or if such disclosure is otherwise necessary in support of any criminal or other legal investigation or proceeding here or abroad.

Alnylam does not, and will not, sell personal data, and has not sold or shared your personal data in the preceding 12 months.

Your Privacy Rights

Whenever we process personal data concerning you, we take reasonable steps to ensure that your personal data is kept accurate and up-to date for the purposes for which it was collected. Our ability to respond to most requests will be subject to certain exceptions under the applicable law.

Per applicable law, you may have the right to correct inaccurate personal data that we maintain about you. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate personal data.

Per applicable law, and subject to receipt of a verifiable request from you, you may have the right to access your personal data. Your right of access may include the right to request that Alnylam disclose to you the following: (1) the categories of personal data Alnylam has collected about you; (2) the categories of sources from which the personal data is collected; (3) the business or commercial purpose for collecting personal data; (4) the categories of personal third parties with whom Alnylam shares personal data; and (5) the specific pieces of personal data Alnylam has collected about you.

Per applicable law, you may also have the right to request that your personal data be deleted or transferred, and that any of our service providers or contractors delete your personal information from their records, to the extent that such deletion or portability is technically possible or permitted by law.

Per applicable law, you may also have the right not to receive discriminatory treatment or to be retaliated against by us as a result of exercising your rights and Alnylam will not discriminate against you for exercising your data privacy rights.

You have the right not to receive discriminatory treatment as a result of exercising your rights under the California Consumer Privacy Act, and Alnylam will not discriminate against you for exercising your privacy rights.

If you wish to contact us to receive further information regarding our use of your personal data, or if you wish to access your personal data, please complete this Data Subject Request form, email us at privacy@alnylam.com, or call us at 800.231.8685  or as specified in the “For Additional Information” section below.

We will require evidence of your identity or to be provided with additional information before we are able to act on your request when the information we have is insufficient to accommodate your request. We will attempt to respond to your verified requests to the extent allowable and as required under applicable data privacy laws. In any event, we will respond to you as soon as reasonably possible to advise you of the outcome of your request.

If you are a California or Connecticut resident, you may have an authorized agent submit a request to know, a request to delete, or a request to opt-out so long as you provide the authorized agent with written permission to submit the relevant request and you verify your own identify directly with Alnylam. Such restrictions do not apply where you provide your authorized agent with power of attorney pursuant to California Probate Code sections 4000 to 4465.

If you are a Utah or Virginia resident, the applicable laws do not allow you to have an authorized agent exercise your rights described above, so Alnylam will not accept an authorized agent if you are a resident of these states. The Colorado CPA allows you to have an authorized agent exercise your right to opt-out of targeted advertising and profiling.

Data Transfers

We transfer the personal data we collect about you to third parties or within Alnylam (to other Alnylam Affiliates worldwide). Such data transfers include the transfer of personal data to countries other than the country in which the personal data was originally collected. Those countries may not have the same level of data protection as the country in which the personal data initially originated. When we transfer your personal data to such other countries, we have taken appropriate measures to ensure the protection of your personal data in accordance with this privacy policy and all applicable data protection laws.

In particular, we ensure that third parties receiving personal data from Alnylam are contractually bound to comply with applicable data protection laws and Alnylam’s policies, including this privacy policy. We also ensure that authorized personnel handling personal data are appropriately trained and committed contractually to a duty of confidentiality.

Where cross-border data transfers occur, we ensure that an adequate level of data protection exists in the recipient country, by executing with third parties appropriate contractual arrangements for cross-border data transfers to third-party countries for controllers or processors as applicable. Alnylam adopts the Standard Contractual Clauses as part of our commercial terms for cross-border data transfers.

An updated list of Alnylam’s data processors can be made available upon request by email at privacy@alnylam.com.

Information Security

Alnylam uses commercially reasonable administrative, technical, personnel-related, and physical security measures designed to safeguard the personal data in our possession against loss, theft and unauthorized use, disclosure, or modification.

Alnylam has taken reasonable steps to ensure that appropriate technical and organizational security measures are implemented not only by Alnylam but also by data processors acting for and, on its behalf, to ensure the security of the processing of your personal data overall.

Links to Third Party Websites

As a convenience to our visitors, this website contains links to other websites that we believe offer useful information. Those links direct you to websites of third parties that perform services for us. As stated in more detail in the Terms and Conditions of Use for our website, the terms of usage and other conditions of use posted on those websites, and not the policies and procedures we described here, apply to those websites. We cannot guarantee the data privacy standards of websites to which we link or be responsible for the contents of sites other than this one, and this privacy policy is not intended to be applicable to any linked, non-Alnylam website.

Data Retention

Your personal data will be retained by Alnylam for the intended purposes in accordance with applicable data protection laws and company policies. Once your personal data is no longer needed, and subject to any obligations Alnylam may have under applicable data retention laws or regulations, it will be deleted without undue delay or anonymized in accordance with Alnylam’s policies.

Cookies Notice

Periodically, some pages on this website use “cookies,” which are small files that the website places on your hard drive for identification purposes. These files are used for website registration and customization of your next time visit to our website. You should note that cookies cannot read data off your hard drive. Your web browser may allow you to be notified when you are receiving a cookie, giving you the choice to accept it or not. You can also refuse all cookies by turning them off in your browser. By not accepting cookies, some features on our website may not fully function, and you may not be able to access certain information on this website. However, by continuing to use the site without changing settings, you are agreeing to our use of cookies as is.

If you require further information on how we use cookies in connection with our website, visit our Cookie Policy.

Our Children’s Policy

We are committed to protecting the data privacy rights of children. You should be aware that this website content and services are not intended for, or designed to attract, children under the age of 18. No personal data should be submitted to Alnylam through the website by visitors who are less than 18 years old. If it comes to our attention that an under-18 user of this website has volunteered personal data and/or health-related personal data, or that a healthcare professional has volunteered personal data about a patient who is identified as younger than 18, without the given or authorized consent of the holder of parental responsibility over such child, we will promptly, upon relevant notification or request, delete such personal data in accordance with our deletion policy. As noted above, we do not collect personal data unless you provided it to us by including an individual’s age.

CalOPPA Do-Not-Track Notice

Some web browsers incorporate a Do Not Track (DNT) or similar feature that signals to websites with which the browser communicates that a visitor does not want to have his/her online activity tracked. If a digital service that responds to a particular DNT signal receives the DNT signal, the browser can block that digital service from collecting certain Personal Information about the browser’s user. As of the Effective Date, not all browsers offer a DNT option and DNT signals are not yet uniform. For this reason Alnylam does not currently respond to DNT signals. For more information about DNT signals, visit allaboutdnt.com.

Privacy Policy Updates

Alnylam may, at any time, revise this privacy policy by updating this posting. If we make revisions to this privacy policy, we will update the date at the top of this privacy policy. We will continue to use and/or disclose personal data in accordance with the policy in effect at the time the data is collected, unless you have agreed to have an updated version of the privacy policy apply to the data collected while a prior version of our privacy policy was in force.

For Additional Information

If you have any questions about this privacy policy, or concerns about the practices of this website, or your dealings with this website or any data privacy-related matter in general, please email us at privacy@alnylam.com or contact us in writing at:

Alnylam Pharmaceuticals, Inc
Attention: Privacy Officer
675 W Kendall Street
Cambridge, MA 02142 USA
Tel: 800.231.8685

For any other questions or concerns, regardless of place of residence, please email us at info@alnylam.com or contact us in writing at:

Alnylam Pharmaceuticals, Inc
Attention: Corporate Communications
675 W Kendall Street
Cambridge, MA 02142 USA

You may also complete this Data Subject Request form.

Privacy Notice for Healthcare Professionals (General Use)

Alnylam Pharmaceuticals and its Affiliates (‘Alnylam’, ‘we’, ‘our’, or ‘us’) is committed to protecting your data privacy rights in your personal data, and will make all reasonable efforts to protect your personal data (“Personal Data”) in accordance with this Privacy Notice (“Notice”) which applies to the Personal Data that we collect and process about Health Care Professionals (‘HCPs’) and employees/representatives of Healthcare Organizations (‘HCOs’).

Data Controller and Data Protection Officer (“DPO”)

Each Alnylam entity is acting as a Data Controller for the purposes of this Notice when collecting and processing your Personal Data. You can find more information on Alnylam affiliates in Europe and worldwide as well as their establishment and contact details here: http://www.alnylam.com/contact-us/.

Personal Data Alnylam Collects and Source

Alnylam collects and processes Personal Data about you. The types of Personal Data Alnylam collects depend on your relationship with Alnylam as well as applicable laws and regulations and may include the following categories of personal information:

Basic personal details such as identity and contact information (e.g., your name, postal and e-mail address, telephone and mobile phone numbers); Educational and professional details such as qualifications and organizational or institutional affiliations (e.g., title, field of expertise, medical specialty, publications, interests in Alnylam products and your general treatment habits); Economic and Financial and Payments related information, where necessary.

This information may come directly from you or from public or third-party information sources (such as from third-party service providers providing health care professional data and related services).

To better understand and address your interests, and to ensure that the Personal Data that Alnylam maintains and processes about you is accurate, Alnylam may correct or add to any Personal Data you provided directly to Alnylam with Personal Data relating to you that Alnylam receives from other third-party sources.

In the preceding 12 months, Alnylam has collected, disclosed, sold to a third party, or shared with a third party for cross-context behavioral advertising the following categories of personal information:

Category of Personal Data	Collect	Disclose for a business purpose	Sell or Share	Categories of Sources
Identifiers, such as your name, email address, country, and zip code.	Yes	Yes	No	Directly from you Our business partners and affiliates Third parties you direct to share information with us
Commercial Information, such as profession and/or industry.	Yes	Yes	No	Directly from you
Protected Classification Characteristics, such as age, gender, disability information.	Yes	Yes	No	Directly from you
Internet/Network Information, such as your IP address, or browser or device information.	Yes	Yes	No	Your browser or device
Geolocation Data, such as information about your physical location collected from geolocation features on your device, including your IP address.	Yes	Yes	No	Your browser or device
Sensory Information, such as pictures of you.	Yes	Yes	No	Directly from you
Professional/Employment Information, such as your employing entity, business unit, manager and management reporting structure, job title, function and the nature of your duties and responsibilities.	Yes	Yes	No	Directly from you Public third-party sources, such as LinkedIn
Other Personal Information, such as information you provide to us when you register for or attend an event organized or hosted by us, including your preferences or education information, information you permit us to see when interacting with us through social media, or comments and opinions you provide to us such as when you post on message boards, blogs or complete an online form.	Yes	Yes	No	Directly from you Our business partners and affiliates Third parties you direct to share information with us Information generated from your online browsing and usage activity
Inferences, such as including information generated from your use of the websites reflecting predictions about your interests and preferences.	Yes	Yes	No	Your browser or device Information generated from your online browsing and usage activity
Sensitive Personal Information	No	No	No

Lawfulness of Processing

Alnylam processes Personal Data based on one or more of the following legal grounds:

In certain cases, Alnylam may ask for your consent to collect and process your Personal Data. Should you choose to provide your consent, you may later withdraw your consent without giving any reason by contacting us as described in the “How to Reach Us” section. Please note that the withdrawal of consent will not affect processing by Alnylam which has already occurred up to the date of withdrawal.

In other instances, the processing of your Personal Data may be necessary in order to comply with an applicable law or regulation or for the performance of a contract to which you are subject. You may not be able to opt-out of this processing, or your choice to opt-out may impact our ability to perform a contractual obligation otherwise owed to you.

In still other instances, Alnylam may process your Personal Data based on Alnylam’s legitimate interests in communicating with you about our products and services, about scientific research and/or about educational opportunities. You have the right to opt-out of all such processing of your Personal Data. You may do so by contacting us as described in the “How to Reach Us” section.

How Alnylam Uses Your Personal Data

Alnylam processes Personal Data about you for one or more of the following purposes:

To perform Alnylam’s obligations under a contract to which you are a party;
To comply with applicable laws or regulations;
To publicly disclose any transfers of value made to you, as a Health Care Professional, as required by law or in order to comply with applicable industry standards;
To provide you with corporate information on Alnylam;
To provide you with promotional information on Alnylam branded products and services and to carry out promotional activities to you, subject to other applicable regulatory provisions;
To provide you, at your request, medical and scientific information and updates;
To handle adverse events reports or quality complaints;
To send you invitations to promotional or scientific events, e.g., webinars or CME events;
To invite you to share with Alnylam your professional insights, to participate in surveys and market research activities; and/or
To collect and analyze your interests and professional experiences to improve our profile of you as an HCP, including by inferring insights, to provide you with targeted advertising, e.g., scientific updates and further enhance the business relationship we have with you (this profile may include your age and gender, medical specialty, prescription habits and others).

The information provided above will be shared via Alnylam’s e-communications channels e.g., by sending you customized or non-customized email and internet communications or by contacting you at your office or mobile telephone number (by call or SMS messages), by fax, by the post or through Alnylam’s social media accounts and specific content websites.

Alnylam shall use your Personal Data only for the purposes specified in this section; processing of your Personal Data for any other purpose will be carried out only through prior notification and your specific consent to processing such Personal Data for any possible secondary use or for further purposes.

With Whom Alnylam Shares your Personal Data

Alnylam may transmit Personal Data about you to other Alnylam affiliates worldwide, as shown on our website here. These affiliates may in turn transmit Personal Data about you to other Alnylam affiliates. Alnylam may also contract with third parties (third-party service providers) to perform wholly or partly activities or functions related to the purposes specified above on behalf of Alnylam that involve the use of Personal Data about you. In such cases, Alnylam will require these third parties to comply with applicable data protection laws or regulations and Alnylam company policies to protect the confidentiality and security of the Personal Data that is shared with them. These third parties will be required to agree that they will not use or disclose Personal Data about you except as necessary to provide services to us or perform services on our behalf, or as necessary to comply with applicable laws or regulations.

Moreover, all of Alnylam’s affiliates and third-party data processors acting for and on behalf of Alnylam are required to treat Personal Data in a manner consistent with applicable data protection laws and internal company policies including this Notice.

Alnylam does not, and will not, sell, or share with a third party for cross-context behavioral advertising your Personal Data, and has not sold or shared with a third party for cross-context behavioral advertising your Personal Data in the preceding 12 months.

Data Transfers

Some of Alnylam's group companies and/or third-party service providers may be located in countries whose laws may not afford your Personal Data the same level of data protection as the one afforded inside your country. Where your Personal Data will be transferred to third-party countries, Alnylam will ensure that all adequate safeguards are in place and that all applicable laws and regulations are complied with in connection with such cross-border data transfers; in particular by adopting in its contractual arrangements for cross-border data transfers for Controllers and Processors as well as by implementing appropriate technical and organizational security measures to ensure the security of the processing.

In addition, for the aforementioned purposes, Alnylam transfers some of your Personal Data, according to a strict criterion of relevance, to authorities as well as to other external governmental bodies, having the power to execute checks and investigations towards Alnylam in fulfilment of legal obligations or regulations. These authorities and institutions will act as independent data controllers of their respective processing operations.

To obtain a list of Alnylam’s data processors and categories of data controllers as well as additional information regarding the safeguards Alnylam has in place for cross-border transfers of Personal Data, please contact us using the information provided in the “How to Reach Us” section.

How Alnylam Protects your Personal Data

Alnylam will take reasonable and appropriate physical, administrative and technical safeguards to protect the processing of your Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction. In this perspective, the data may be used only by Alnylam’s personnel who need it because of their job or hierarchical position, with confidentiality obligations, which have been assigned a specific role and which have been given appropriate operating instructions.

Your Rights and How to Exercise Them

Certain individuals in the EU, UK, and other countries, and in California, Colorado, Connecticut, Utah, Virginia, and other U.S. states as applicable, have specific data subject rights which may be subject to limitations and/or restrictions. These rights may be subject to receipt by us of a verifiable request from you and may be subject to limitations under applicable law. Your rights may include, under applicable data privacy law, the right to: (i) request access to and rectification or erasure of their Personal Data; (ii) restrict processing, or object to processing of their Personal Data; (iii) data portability; and (iv) not receive discriminatory treatment or be retaliated against by us as a result of exercising your rights under the applicable data privacy law. If you wish to exercise one of the above-mentioned rights, please refer to the “How to Reach Us ” section below. Alnylam will not discriminate or retaliate against you for exercising your data privacy rights. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct inaccurate Personal Data and respond to your requests as required under applicable law.

You also have the right to ask Alnylam not to process your Personal Data for marketing purposes. Alnylam will usually inform you (before collecting your data) if it intends to use your Personal Data for such purposes or if it intends to disclose your Personal Data to any third party for such purposes. You can exercise the right to prevent such processing by informing Alnylam at any time that you do not wish to receive such marketing. Where you wish to exercise this right please refer to the “How to Reach Us” section below.

We will require evidence of your identity or to be provided with additional information before we are able to act on your requests when the information we have is insufficient to accommodate your request. We will attempt to respond to your verified requests to the extent allowable and as required under applicable data privacy laws. In any event, we will respond to you as soon as reasonably possible to advise you of the outcome of your request.

If you do not receive a (timely) response from Alnylam or if you are not satisfied with our response to you, you also have the right to lodge a complaint about the processing of your Personal Data with the appropriate national data protection supervisory authority if you are an EU or UK resident; a list of the national data protection supervisory authorities in Europe can be found here: https://edpb.europa.eu/about-edpb/board/members_en, and UK residents can contact the Information Commissioner’s Office at: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, +0303 123 1113 (or +44 1625 545745 if calling from outside the UK).

How long Alnylam Retains Personal Data

Personal Data will only be stored as long as necessary to fulfil the purposes and respective obligations related to such Personal Data for which it was collected, subject to local laws and regulations and legitimate business needs in accordance with Alnylam internal policies.

However, as these purposes and obligations vary from one processing situation to another, Alnylam provides more information on such storage periods in the topic-specific data privacy notices. Once Personal Data is no longer necessary, Alnylam deletes it or anonymizes it without undue delay

For marketing purposes, including any profiling for direct marketing, we will keep your Personal Data for as long as you want to receive marketing from us. If you decide to opt-out of or withdraw your consent to our marketing, we will no longer use your Personal Data for this purpose and we will suspend your HCP account for marketing purposes. If your Personal Data is not needed for some other purpose (e.g., to carry out our customer relationship), we will delete your Personal Data without undue delay or anonymize it as practically possible.

How to Reach Us

For further details on how Alnylam collects and processes your Personal Data please read the relevant section in this privacy policy.

You may also reach us via email us at privacy@alnylam.com or contact us in writing at:

Alnylam Pharmaceuticals, Inc
Attention: Privacy Officer
675 W Kendall Street
Cambridge, MA 02142 USA
Tel: 800.231.8685

You may also complete this Data Subject Request form.

Fair Market Value and Transfers of Value

What personal data do we process?

In some situations, we may seek to enter into a separate agreement or relationship with you such as if you participate in a special program or activity. Any Personal Data provided by you and/or collected by Alnylam including but not limited to your name and surname, professional contact details, professional and/or academic qualifications, curriculum vitae, financial details and payments made will be processed for the purposes of evaluating any potential collaboration with Alnylam in those initiatives of your interest and for any future collaborations including payment of honoraria when applicable. Alnylam collects most of this personal data directly from you when you provide us with your curriculum vitae. Where permitted, we may also collect information about you from publicly available sources to evaluate compliance with anti-bribery and corruption laws. This information is only processed where relevant and necessary to evaluate your background properly and to meet our commitment to deal only with valid and ethical business partners.

For what purpose do we Process your personal data?

Managing our contractual relationship with you including payment of honoraria and taxes and monitoring such payments for compliance with our internal procedures relating to engagements with healthcare professionals and experts; management of your travel and accommodation arrangements; submission of records to public authorities under any applicable law; and for our own internal evaluation and business overview purposes.
Complying with openness and transparency principles and legislation that are key for the pharmaceutical industry. These principles and/or provisions of the law aim to increase the understanding about collaborations between pharmaceutical companies and healthcare organizations and its co-workers. As part of this goal, transfers of value, such as consultancy fees from pharmaceutical companies to healthcare professionals and healthcare organizations are publicly disclosed on an annual basis. The information remains publicly available for a limited period; in Europe, the retention period is set to three years calculated from the date on which the information was first published. If under local law or other regulations of the country where you reside in, we need your consent for this purpose and should you disagree with your information being shared individually, we would only publish it in an aggregated manner.

What is the legal basis for processing your personal data?

Necessary to fulfil the contract that you are going to enter into, or have entered into, with us
Necessary for compliance with Alnylam’s legal obligations with respect to reporting transfers of value
Consent for reporting transfers of value, which you can withdraw at any time without affecting the lawfulness of processing based on consent before its withdrawal

Where is your personal data transferred?

Alnylam might transfer your personal data to the affiliates of the Alnylam Group of Companies worldwide and any other third parties and collaborators located in countries that might not provide an adequate level of data protection. However, Alnylam will implement the adequate safeguards to protect the confidentiality of your personal data such as the signature of the Standard Contractual Clauses approved by the European Commission and any other legal mechanisms required by applicable legislation. Alnylam might also share your data with the competent authorities in your country and in other countries for Alnylam’s compliance with any legal obligations as required by applicable law.

For how long do we keep your personal data?

Your data will be kept by Alnylam for the retention periods defined by applicable legislation and as long as necessary for achieving the data processing purpose.

What are your rights and how you can exercise them?

Please, note that you can exercise your data privacy rights such as the rights of access, rectification, cancellation, opposition, deletion or obtention of a copy, please complete this Data Subject Request form or email us at privacy@alnylam.com.

In case you have any questions about how your personal data is processed, please contact us in the first instance and we will take appropriate steps to address your concern. However, please note that you have the right to lodge a complaint with the applicable Supervisory Authority if you are a European Economic Area (EEA) or United Kingdom (UK) resident. A list with the Supervisory Authorities in the EEA and their contact details is available here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en and UK residents can contact the Information Commissioner’s Office at: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, +0303 123 1113 (or +44 1625 545745 if calling from outside the UK).

Last update, May 2024

Consumer Health Data Privacy Policy

Last updated / effective date: March 31, 2024

Alnylam Pharmaceuticals, Inc. and its affiliates (“Alnylam”, “we”, “our” or “us”) is committed to protecting your data privacy rights in your personal data in accordance with applicable state laws. This Consumer Health Data Privacy Policy (“Notice”) supplements our other privacy policies and notices to provide additional information about our practices when we collect information about the health status of consumers (“consumer health data”) outside the context of a clinical trial or other similar human subject research. For more information about our privacy practices in the context of human subject research, please refer to the applicable informed consent documentation.

What Consumer Health Data We Collect

The categories of consumer health data we collect will depend on your interactions with us. We may collect information that you provide to us or our vendors, such as when you interact with a patient support or patient assistance program we operate; information from other sources, such as your health care provider, with your authorization, and other business partners and affiliates; information that is collected automatically; and data we infer or generate from other data. These categories of information may include:

Health and medical information (such as medical insurance details, information about physical and mental health conditions and diagnoses, treatments for medical conditions, genetic information, family medical history, and medications an individual may take, including the dosage, timing, and frequency). For example, we may collect health and medical information in connection with providing patient support programs, distributing and marketing our products, or managing compassionate use and expanded access programs.
Biographical and demographic information, to the extent such information identifies your past, present, or future health status.
Other information that may be used to infer or derive data related to the above or other health information. For example, we may monitor social media posts to analyze and better understand needs regarding diseases and medicinal products and services relevant to Alnylam. For details about our use of cookies and similar tracking technologies, please see our Cookies Policy.

For additional details about the types of personal data we collect and how we collect it, please review “Personal Data Collection and Use” in our Website Privacy Policy.

How We Use Your Consumer Health Data

Where permitted by law, Alnylam may use consumer health data for the purposes described in our Website Privacy Policy , including for business and commercial purposes as reasonably necessary to provide and maintain the products and services you request from us. This includes to operate our business and services; to respond to your inquiries; to analyze the use of our products; support and facilitate public health initiatives; facilitate medical adherence programs; and as otherwise permitted or required by law. We may also use your consumer health data for other purposes with your consent, such as communicating with you about the products and services we offer and otherwise marketing to you based on your interests.

In some situations, we may have a separate agreement or relationship with you with respect to a specific type of processing of your personal data, such as if you participate in a special program, activity, or event. These situations may be governed by specific terms, privacy notices, or consent forms that provide additional information about how we will use your personal data. We strongly recommend you review any relevant additional terms prior to participating in any programs.

How We Share Your Consumer Health Data

We may share personal data, including each of the categories of consumer health data listed above, with your consent or as reasonably necessary to provide you with requested products or services.

We may share personal data, including consumer health data:

With Alnylam affiliates worldwide (including those identified here). To learn more about how we share information with certain corporate group entities, see the “Non-disclosure of Personal Data” section in our Website Privacy Policy.
With service providers and business partners that perform services on our behalf.

We may also share your consumer health data with our advertising or marketing partners, although we will seek your consent where required by law.

Unless prohibited by applicable law, we may share consumer health data as part of a corporate business transaction, such as a merger, acquisition, reorganization, joint venture or financing, licensing, or sale of our assets, and could be sold or transferred to a third party as party of such a transaction. We may also share consumer health data to a successor entity in the event of insolvency, bankruptcy or receivership.

In addition, we may share your personal data to comply with legal and regulatory requirements; investigate and protect against fraud, security incidents, identity theft, harassment, and other illegal activity; pursuant to pharmacovigilance and safety obligations; and for other reasons as permitted or required by law.

Your Rights

Under applicable law, you may have certain rights with rights with respect to your consumer health data, including rights to request access, correction, deletion, or withdrawal of consent relating to our use of your consumer health data, subject to certain exceptions. You can request to exercise such rights or appeal a denied request by completing this Data Subject Request Form, email us at privacy@alnylam.com, or call us at 800.231.8658, and we will endeavor to process your request in accordance with applicable state laws.

Privacy Policy Updates

We may amend or update this Consumer Health Data Privacy Policy from time to time. When we update the Consumer Health Data Privacy Policy, we may notify you of material changes by updating the “Last Updated/Effective Date” date at the top of the new Privacy Policy, posting the new Privacy Policy, or by providing other notice required or permitted by applicable law. We recommend that you review the Privacy Policy from time to time to stay informed of our privacy practices.

Contact Us

Questions, comments, and requests regarding this Consumer Health Data Privacy Policy should be addressed to: privacy@alnylam.com.

Data Privacy Notice and Consent Form for Use of Your Personal Data for Electronic Communications Purposes

Data Controller

Alnylam Pharmaceuticals Inc. in the U.S. (“Alnylam”) will act as a data controller and will process your personal data, as specified below, by determining purposes and means of its processing.

Types of Personal Data

Alnylam will process the following Personal Data as applicable: Your contact details, including your name, address, e-mail address, country (collectively, “Personal Data”).

In the preceding 12 months, Alnylam has collected, disclosed, sold and shared with a third party for cross-context behavioral advertising, the following categories of Personal Data:

Category of Personal Data	Collect	Disclose for a business purpose	Sell or Share	Categories of Sources
Identifiers, such as your name, email address, country, and zip code.	Yes	Yes	No	Directly from you Our business partners and affiliates Third parties you direct to share information with us
Commercial Information, such as profession and/or industry.	Yes	Yes	No	Directly from you
Protected Classification Characteristics, such as age, gender, disability information.	Yes	Yes	No	Directly from you
Internet/Network Information, such as your IP address, or browser or device information.	Yes	Yes	No	Your browser or device
Geolocation Data, such as information about your physical location collected from geolocation features on your device, including your IP address.	Yes	Yes	No	Your browser or device
Sensory Information, such as pictures of you.	Yes	Yes	No	Directly from you
Professional/Employment Information, such as your employing entity, business unit, manager and management reporting structure, job title, function and the nature of your duties and responsibilities.	Yes	Yes	No	Directly from you Public third-party sources, such as LinkedIn
Other Personal Information, such as information you provide to us when you register for or attend an event organized or hosted by us, including your preferences or education information, information you permit us to see when interacting with us through social media, or comments and opinions you provide to us such as when you post on message boards, blogs or complete an online form.	Yes	Yes	No	Directly from you Our business partners and affiliates Third parties you direct to share information with us Information generated from your online browsing and usage activity
Inferences, such as including information generated from your use of the websites reflecting predictions about your interests and preferences.	Yes	Yes	No	Your browser or device Information generated from your online browsing and usage activity
Sensitive Personal Information, such as health information, diagnoses, or medical conditions that you provide when enrolling in a program .	Yes	Yes	No	Directly from you

Purposes of Use of your Personal Data

Alnylam shall use, process and store your Personal Data in order to send you non-customized email communications in relation to Disease Awareness information in the disease area(s) of your choice and for no other purposes. Any other purpose will require your specific consent.

Your personal data will be processed only for the purposes of your subscription and will not be shared with any third parties for additional commercial or promotional purposes. This includes SMS and mobile information.

Scope of Data Flows

For the above-mentioned purposes, your Personal Data will be collected by Alnylam, which is the U.S. legally incorporated entity, and transmitted to Alnylam affiliates , with the adoption of adequate technical and organizational measures. Alnylam will forward the Personal Data to third party processors, service providers and/or contractors (individuals and/or companies) who act for and on behalf of Alnylam as data processors (collective, “Data Processors”), including Salesforce Cloud Inc., as data storage, under written contracts that include restrictions and obligations on such Data Processors with respect to the confidentiality, use and protection of your Personal Data. Such Data Processors may be established and processing your Personal Data outside of the originating countries. In the preceding 12 months, Alnylam has shared your Personal Data with such Data Processors.

Alnylam does not, and will not, sell or share with a third party for cross-context behavioral advertising your Personal Data, and has not sold or shared your contact details in the preceding 12 months.

The list of Data Processors can be requested by sending an email to privacy@alnylam.com.

Some or all of your Personal Data may be transferred to and reside on servers located in the U.S. In this case, Alnylam will ensure that appropriate safeguards are in place to legitimize and secure the transmission.

Free Provision of Data and Free Consent

No Personal Data should be submitted to Alnylam by any individuals who are less than 18 years old. If it comes to our attention that an individual under-18 has provided Personal Data and/or health-related Personal Data, or that a healthcare professional has provided Personal Data about a patient who is identified as younger than 18, without the given or authorized consent of the holder of parental responsibility over such child, we will promptly, upon relevant notification or request, delete such Personal Data in accordance with our deletion policy.

You declare that you are at least eighteen (18) years old and legally competent to provide the consent under this Notice.

You further declare that you are free to provide your Personal Data to Alnylam and your consent to the processing described in this Notice, and your refusal will solely mean that Alnylam will not be authorized to collect and use your Personal Data for sending electronic communications to you.

Processing Mechanisms

Personal Data above will be processed both electronically and manually.

Data Retention

Your Personal Data will only be stored as long as necessary to fulfil the purposes and respective obligations related to such Personal Data for which it was collected, subject to local laws and regulations and legitimate business needs in accordance with Alnylam internal policies. Once Personal Data is no longer necessary, Alnylam deletes it or anonymizes it without undue delay.

We will keep your Personal Data for as long as you want to receive marketing from us. If you decide to opt-out of or withdraw your consent to our marketing, we will no longer use your Personal Data for this purpose and we will suspend your HCP account for marketing purposes. If your Personal Data is not needed for some other purpose (e.g., to carry out our customer relationship), we will delete your Personal Data without undue delay or anonymize it as practically possible.

We will keep your Personal Data for as long as you are participating in the receipt of information about your selected disease area(s) of interest, and your Personal Data will be reviewed after a 5-year period to ensure your continued active participation in the receipt of information about your selected disease area(s) of interest, and deleted if we determine that you no longer are actively participating. If you would like your Personal Data to be deleted prior to the 5-year period, please contact privacy@alnylam.com. If you withdraw your consent, we will no longer use your Personal Data to send information and, if your Personal Data is not needed for some other purpose (e.g., to carry out our customer relationship), we will delete your Personal Data without undue delay or anonymize it as practically possible.

Exercise of Your rights

You have the right to unsubscribe from receipt of emails in relation to Disease Awareness information in the disease area(s) of your choice, amend your contact details and other Personal Data or change your disease area(s) choice at any time by clicking the unsubscribe link included in future email communications. You can at any time request to be informed about the Personal Data Alnylam holds about you, access your Personal Data or ask Alnylam to rectify, erase or block such Personal Data. Per applicable law, you may also have the right not to receive discriminatory treatment or to be retaliated against by us as a result of exercising your rights, and Alnylam will not discriminate against you for exercising your data privacy rights.

If you are a California or Connecticut resident, may have an authorized agent submit a request to know, a request to delete, or a request to opt-out so long as you provide the authorized agent with written permission to submit the relevant request and you verify your own identify directly with Alnylam. Such restrictions do not apply where you provide your authorized agent with power of attorney pursuant to California Probate Code sections 4000 to 4465.

For these purposes and for any other questions, please contact Alnylam at the following email address: privacy@alnylam.com; by phone at 800.231.8685; or by mail to Alnylam’s address:

Alnylam Pharmaceuticals, Inc.
Attention Privacy Office
675 W Kendall Street
Cambridge, MA 02142 USA

You can at any time revoke your consent in writing and submit via email to the address specified above, without having to provide any reason.

You may also complete this Data Subject Request form.

In case your data protection-related requests are not handled in a timely and appropriate manner, you have the right to recourse to the competent data protection supervisory authority by lodging a relevant complaint.

To exercise your data protection rights under applicable law in respect to third-party companies that provide services to Alnylam, you can at any time request the list of such companies—including their contact details—by sending an email to privacy@alnylam.com.

Consent Statement

I have read and understood the content of the above notification and by completing the subscription form to receive updates I expressly consent to the processing of my Personal Data by Alnylam in the U.S. as well as to the transfer of such data, in accordance with the terms and mechanisms specified above, taking into consideration that my consent can be withdrawn at any time.

Direct Marketing / Email Communications Notice

You can elect to receive email updates about developments regarding Alnylam’s products and/or services or about health-related specific topics (e.g., to receive email updates about hereditary ATTR amyloidosis from Alnylam) by completing the relevant electronic form on our website.

In the event of direct marketing of our products and/or services, with any and all means, we will provide you with a method to opt-out of or opt-in in receiving further marketing materials as required by law.

If you decide, at any later time, that you no longer wish to receive such email communications from us, you can unsubscribe to any such contact list by using the relevant “Unsubscribe” link within the respective electronic communications channel, or by sending us an email (e.g., entitled “Unsubscribe from email updates about hATTR amyloidosis”) at privacy@alnylam.com.

Data Privacy Notice for Use of Personal Data Obtained at Congresses, Symposia and other Events

At a congress in which Alnylam participates as a sponsor and/or exhibitor, at an Alnylam organized symposia or at any other event, Alnylam authorized personnel may request your consent to scan your badge when entering the event venue, including when attending Alnylam sponsored sessions or when visiting Alnylam’s exhibitor booth.

By allowing Alnylam to scan your badge in the above circumstances, you express your consent for Alnylam and its affiliates worldwide (collectively referred to as “Alnylam”) to receive your personal data, such as name, surname, address, e-mail address, phone numbers, medical specialty (collectively, “Personal Data”), which you voluntarily provided to the congress organizer, when you registered for the venue, and further process your Personal Data for marketing and compliance purposes, in accordance with applicable data protection laws, industry codes and Alnylam’s policies.

We will further process your Personal Data by relying on Alnylam’s legitimate business interests to comply with industry codes and standards and to communicate with you to provide you with information about Alnylam’s medicinal products and services, about medical and scientific research updates and/or about educational opportunities, that might be of interest to you, as well as to invite you to relevant promotional activities as further described in the specific Privacy Notice for Healthcare Professionals (General Use).

Scanning of your badge is voluntary; you are not required to agree to the scanning and it will not affect your participation to the event or any specific session if you do not scan your badge. If you choose at the time to consent to the scanning of your badge, you are able to withdraw your consent at any later time, without giving any reason, by contacting us at privacy@alnylam.com or 800.231.8685.

Candidate Privacy Notice

This Privacy Notice was last updated on March 18th, 2024.

"Alnylam " means Alnylam Pharmaceuticals Inc. in the United States together with its subsidiaries and affiliates worldwide. Alnylam is also referred to in this Notice as "we", "us" or "our".

Data Controller

The data controller decides why and how to process your personal data. However, other affiliates of the Alnylam Group of Companies may also access and process your personal data as described in this notice. For each activity, Alnylam and its affiliates worldwide will act as controller together or jointly regarding the processing of your data.

Purposes for the Collection and Processing of Your Personal Data

The Notice provides you with ("you" or "your") information regarding how we handle, process and protect your personal data, in connection with our recruiting process as well as informing you of your data privacy rights related to our processing of your personal data. Please read this Notice carefully prior to providing your personal data to Alnylam.

As used in this Privacy Notice, “personal data" means any information related to job applicants and potential candidates for employment with Alnylam, either submitted as part of an online application platform and/or through alternative recruitment channels (e.g., via professional social media channels, professional recruiting firms or thorough our Employee Referral Scheme).

An updated list of recruiting agencies and other third-party sources, providing Alnylam personal data on job applicants and potential candidates, can be available to you upon submission of a relevant request via e-mail at privacy@alnylam.com.

We will process your personal data in accordance with this Privacy Notice, and for the uses and purposes that are compatible with the management of your candidacy for the positions of your interest and in the context of our selection processes.

Legal Basis for Processing

In some countries a legal basis for the processing of your personal data might not be required (e.g. United States, Hong Kong).

In those countries and states where a legal basis is required for the processing of your personal data, the legal basis shall be determined based on the type of data we process about you and the uses for the processing of your personal data. In those cases the most suitable legal basis in relation to recruitment will be one of the following:

Legitimate interests - the processing is necessary for our legitimate interests or the legitimate interests of a third party e.g., to process and assess your application for employment with us.
Consent – only in those cases where consent is strictly necessary, such as in connection with the processing of sensitive data that you voluntarily provide to us in connection with inclusion and diversity purposes. Please note that this information will be processed by Alnylam in an aggregated form exclusively. Also, when you have given your consent for the processing to take place when requested explicitly e.g., contacting a referee or for pre-employment screening where applicable.

Where we have relied on your consent as the legal basis for processing your personal data, you have the right to withdraw your consent at any time. For further information on how to withdraw your consent please see the “Your Data Privacy Rights" section.

What Personal Data We Collect About You

The types of personal data that we request from you and the ways that we process it are determined by the requirements of the country in which the position is located, and not the country in which you reside. Should you apply to more than one location or should the role to which you apply be available in more than one country, the types of personal data we request from you and the ways that we process it are determined by the requirements of all the countries in which the position is located. We usually collect personal data directly from you and/or through our recruitment portal when you apply for a role with us, such as but not limited to your name, address, contact information, ID and passport number, professional and academic qualifications, certifications, test results obtained during the process and other relevant information from your Curriculum Vitae (CV) and in the context of the selection process. Through your application you agree that we may also collect personal data about you from third parties, such as the referees provided by you and prior employers. We may also collect and process your personal data from professional portals where you have made available your personal data for recruitment purposes e.g., LinkedIn. Finally, we collect and store login and password details for your online account.

We encourage you to exclude any sensitive personal data and those that is not relevant for selection purposes in your application including in your cover letter.

How We Use your Personal Data

We collect and use your personal data in connection with your application for the positions of your interest and the management of your selection process Our main processing activities consists on the following:

identifying and evaluating candidates for potential employment, as well as for future roles that may become available;
supporting and processing your application, for example, so we can assess your ability to meet the requirements for an specific position;
to verify references and professional qualifications provided by applicants;
evaluating and assessing the results of interviews;
record keeping in relation to recruiting and hiring;
carrying out pre-employment screening, that is appropriate and proportionate to the nature of the job function, subject to specific local regulations;
compliance with our legal obligations in connection with the applicable legislation locally;
Conducting the relevant background checks and other due diligence processes as permitted by applicable legislation;
for the legal defense of the company to the extent authorized or permitted by law; or
Relevant contact by us or through our recruitment partners via the details you have provided us in relation to your application.

We may also analyse your personal data or aggregated/anonymised data for diversity and inclusion purposes, to improve our recruitment and hiring process and augment our ability to attract successful candidates.

Use of Artificial Intelligence and Similar Technologies

Alnylam is an organization that is committed to the compliance with the applicable legislation and has developed internal policies for the responsible use of artificial intelligence technologies “AI").

These policies involve the application of principles for the responsible use of AI, the implementation of the adequate organizational and information security measures and to enter into agreements with third parties and collaborators that guarantee the protection of the confidentiality of your personal data.

Alnylam might use technologies that qualify as AI for recruiting purposes and increasing our efficiency for the selection of the potential candidates for recruiters’ review when candidates submit any application through the Alnylam recruitment portal.

These technologies might also be used to match the candidate profile within the recruitment portal with potential professional opportunities and facilitate these operations.

Notwithstanding, these algorithms will not have the level of autonomy to make any decisions and such technologies are not used by Alnylam to make any decisions about the potential selection of candidates without human intervention. Any decisions regarding the selection of candidates for Alnylam positions are made by our recruitment team.

Your aggregated information might be used by Alnylam and their third-party vendors for machine learning purposes and for the continuous improvement of our recruiting processes. Your personal data will not be used for these purposes.

You can find further information on how to exercise your data privacy rights such as your right to object or request human intervention in the Section “Your Data Privacy Rights".

Automated Decision Making

We do not make recruiting or hiring decisions based solely on automated decision-making.

Who We Share Your Personal Data With

Alnylam might share your personal data with their affiliates worldwide and their third-party vendors and collaborators in the context of their global operations as follows:

With the affiliates of the Alnylam Group of Companies worldwide - We restrict access to your personal data to people within Alnylam who “need to know" that information, e.g. the individuals who will process your job application and manage the recruitment process working in the country where the position for which you are applying is based, as well as by recruiters and interviewers working in different countries within the Alnylam global organization.
With our third-party vendors and collaborators- Alnylam shares your personal data with trusted third-party providers and collaborators, in order to manage recruitment, notably to conduct screening and verification of your application and the information you provide, e.g., academic/professional qualifications, where necessary and applicable.

Generally, Alnylam will only disclose your personal data to other third parties:

when required to do so by law;
based on a court order, in response to a legitimate request for assistance by the competent authorities and public bodies or other law enforcement agency; or
for the legal defense of the company or to seek legal advice from Alnylam’s external lawyers or in connection with litigation.

International Data Transfers

We may transfer any personal data we collect about you to the affiliates of the Alnylam Group of Companies or to third parties worldwide. Such data transfers include the transfer of personal data outside to your country of residence. Those countries may not have an adequate level of data protection Notwithstanding, when we transfer your personal data to such other countries, we have taken appropriate measures to ensure the protection of the confidentiality of your personal data in accordance with this privacy policy and all applicable data protection laws.

Where cross-border data transfers occur, we implement the correspondent legal mechanism, such as the signature of the Standard Contractual Clauses approved by the European Commission and other applicable mechanisms recognized by the applicable legislation to cover these cross-border data transfers.

An updated list of Alnylam’s data processors can be made available upon request by email at privacy@alnylam.com.

Data Retention

If you accept an offer of employment by Alnylam, any relevant personal data collected during the selection process will become part of your employee records and will be retained in accordance with specific country requirements and internal policies and procedures.

If your application is unsuccessful, we will hold your personal data on file for the purpose of system administration and reporting purposes and to consider you for potential future roles and employment opportunities. This personal data will be kept for the maximum retention period defined by the applicable law in your country of residence.

At the end of such period, we may ask you to renew your registration in our recruitment platform or confirm the retention of your personal data by Alnylam for an additional period of time and provide you an opportunity to update your personal data. If you accept, the retention period shall be extended, otherwise your personal data will be safely and permanently deleted from our records, in accordance with our data retention policy and schedule.

Your Data Privacy Rights

You can exercise your data privacy rights regarding the personal data that we process about you (this will depend on the jurisdiction where you reside and the legal basis that we use). Please note that the exercise of your data privacy rights might be restricted according to the applicable laws. We will respond to your request accordingly and provide further clarification in case your request is subject to any of these limitations.

Please note that your rights might vary depending on your jurisdiction.

You may have the following data privacy rights:

Right of Access – Access to the personal data we hold about you, free of charge in most cases.
Right to Rectification – The correction of your personal data when incorrect, out of date or incomplete.
Right to Erasure – The deletion of the personal data we hold about you, in specific circumstances; for example, when you withdraw consent or object, and we have no legitimate overriding interest, or once the purpose for which we hold the personal data has come to an end.
Right to Data Portability – A computer file in a common format (CSV or similar) containing the personal data that you have previously provided to us, and the right to have your personal data transferred to another entity where this is technically possible.
Right to object to or restrict processing – Restriction of the use of your personal data, in specific circumstances, generally while we are deciding on an objection you have made.
Right to Object – That we stop processing your personal data, in specific circumstances; for example, when you have withdrawn consent, or object for reasons related to your individual circumstances.
Rights in relation to automatic decision making and profiling – Review of any decision made based solely on automatic processing of your personal data (so where no human has yet reviewed the outcome and criteria for the decision).
Rights in relation to whether a business has disclosed personal data to any third parties for the third parties’ direct marketing purposes. However, as stated in our Privacy Policy, Alnylam will not sell or share your personal data with anyone other than our research and/or development partners or agents and will not sell or share your personal data with anyone for their direct marketing purposes.

If you would like to exercise any of the above rights or make a request to access, review, or correct the personal data we have collected and hold about you, or to receive further information on how we process your personal data, please contact us at privacy@alnylam.com.

For residents in California: please contact us at privacy@alnylam.com or by phone to +1 800.231.8685

Children’s Policy

We are committed to protecting the privacy of children. You should be aware that our recruitment site is not intended for, or designed to attract, children under the age of 18. No information should be submitted to Alnylam through the web site by visitors who are less than 18 years old. As noted above, we do not collect personally identifiable information unless you provided it to us including an individual’s age.

Cookies and other tracking technologies

When you visit our websites, we may store or retrieve information on your browser, mostly in the form of cookies. You can find out more about cookies and how to control them in the information below.

By accepting the cookie banner on our websites you accept the use of cookies in accordance with our Cookie Policy. In particular, you accept the use of Third-Party Cookies for the purposes described in our Cookie Policy.

If you do not accept the use of these cookies please disable them following the instructions in this Cookie Policy, for instance by changing your browser settings so that cookies from this website cannot be placed on your computer or mobile device.

Alnylam does not track its users over time and across third party websites and therefore does not respond to Do Not Track (DNT) signals. Alnylam does not authorize third parties to collect personal data directly from our users on our web site, such as through the use of third-party advertisements.

You can learn more about our use of Cookies and other tracking technologies by reading our Privacy Policy as well as our Cookie Policy.

Contact Us

If you have any enquires or if you would like to contact us about our processing of your personal data, including to exercise your data privacy rights as outlined in the Section “ Your Data Privacy Rights", please contact us at privacy@alnylam.com.

Additional Privacy Rights

If you have any concerns or complaints regarding the processing of your personal data, or our compliance with the applicable data privacy legislation , you can contact Alnylam’s Data Protection Officer at privacy@alnylam.com.

The residents in the European Economic Area (EEA) also have the right to lodge a complaint with the with the competent data protection authority whose contact details are available at the following link: https://edpb.europa.eu/about-edpb/board/members_en.

Changes to this Notice

Alnylam reserves the right to modify this Privacy Notice. We will publish any changes made to our Privacy Notice on this page. Please check this page regularly to see an updated version of this Notice.

Social Media Monitoring Privacy Notice

Scope

Alnylam Pharmaceuticals, Inc together with its Affiliates (‘Alnylam’, ‘we’, ‘our’, or ‘us’) wants to understand how social media users discuss about diseases and medicinal products and services relevant to the Alnylam brand, so that we can take into account the needs of the general public in our communications and business plans. From time to time, we analyse social media activity related to our brand and monitor the use of our own social media channels. The conclusions drawn from the analysis will help shape Alnylam’s business plans and communication strategy. Alnylam is strongly committed to protecting your data privacy rights in your personal data and will make all reasonable efforts to protect your personal data (“Personal Data”) in accordance with applicable data protection laws and regulations and this Privacy Notice (the “Notice”).

Data Controller and Data Protection Officer (“DPO”)

Alnylam is the Data Controller for the processing of your Personal Data for the purposes of this Notice. You can find more information on Alnylam affiliates in Europe and worldwide as well as their establishment and contact details here: http://www.alnylam.com/contact-us/

Our Alnylam EU Privacy Office and the designated Data Protection Officer (DPO) can be contacted by email at: privacy@alnylam.com

Personal Data Alnylam Collects and Source

We monitor publicly available media including social media data, using commercially available media monitoring tools. The data we obtain from monitoring efforts is used to better understand public discussions and needs regarding diseases and medicinal products and services relevant to Alnylam brand.

We use an external service provider to process and analyse public social media data (social media monitoring activities) on our behalf and according to our documented instructions, in compliance with applicable laws and regulations.

To carry out the processing, Alnylam may use, for example, commercially available social media monitoring tools such as the one provided by Sprinklr, Inc. a US-based company with offices at 29 West 35th Street, New York, NY 10001, USA; please review Sprinklr’s privacy policy to understand how Sprinklr collects and processes your Personal Data: https://www.sprinklr.com/privacy

Processed data may include the following categories of personal information:

Identification data (name, username, user identification and geographical area);
personal characteristics (age, gender and family status);
consumer habits;
hobbies and interests;
professional and educational background;
pictures and videos;
any other information published on a website that is analysed or on a third-party platform.

The external provider collects, analyses and monitors through media monitoring tools data from public posts (conversation streams and publicly available opinions, statements or other interactions and content) by social media users on different social media channels (such as Instagram and Facebook), and tracks different online sources including forums, blogs and online news websites.

The data gathered through the media monitoring tools may include social media handles and content from posts which are exclusively made publicly available by the social media users themselves.

The data collected by the service provider via the media monitoring tools is used to create insight reports, which are then shared with Alnylam. These reports aim to gain insights in conversation trends over a specified period of time and not to identify specific individuals.

Insight reports will be anonymized and will not include any personal data gathered from media monitoring. However, individual quotes with personal information may be captured as examples and used to describe the general attitude towards Alnylam in social media and/or for monitoring/audit purposes. These quotes will be limited to those of individuals who publish posts about the Alnylam in their professional capacity (e.g. HCPs or representatives of patients’ associations) or those of patients’ ambassadors.

We do not actively collect sensitive personal data, but we may process such data in monitoring social media, where such data is included in social media posts solely for purposes linked to safety and quality surveillance and reporting as required by applicable laws and regulations.

We have set up strict limitations on the topics we monitor and have ensured that our personnel, when accessing and using the external’s provider’s database, is bound by clearly documented instructions and confidentiality obligations.

Lawfulness of Processing

The lawful basis for processing your Personal Data is Alnylam’s legitimate interests to protect its assets and its brand on social media, by gaining insights in conversation trends over a specified period, to the extent these interests are not outweighed by the rights and freedoms of the data subjects concerned.

To the extent that we will need to collect regular or sensitive data for safety surveillance and reporting purposes, as mentioned above, the lawful basis for that processing is that:

the processing is necessary for compliance with a legal obligation to which the data controller (Alnylam) is subject;
the processing relates to personal data which are manifestly made public by the data subject; and
the processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy;

Purpose(s) of Processing

Alnylam processes Personal Data for the following purposes:

To identify and assess what is being said about Alnylam and its products and services on publicly accessible social media content to understand sentiment, intent, mood and market trends and the public’s needs and thereby improve our services and take into account the needs of the general public in our communications; and
To measure the effectiveness of Alnylam’s communications strategy.

Alnylam shall use your Personal Data only for the purposes specified in this section.

Recipients of Your Personal Data

Any Personal Data retrieved from media monitoring tools will be retained and stored on the external service provider’s IT systems and applications and will not be downloaded into Alnylam IT systems.

Insight reports and/or Personal Data may be shared internally with other Alnylam affiliates worldwide. Insight reports will be anonymized and will not capture any personal data gathered from media monitoring. Anonymized reports will be stored on a secure collaborative platform which is owned and managed by our external service provider.

Where insight reports and/or Personal Data may be shared with recipients located in third countries, Alnylam will ensure that all appropriate safeguards are in place and that all applicable laws and regulations are complied with in connection with such cross-border data transfers; in the absence of any adequacy decision, Alnylam relies, in particular, on the execution of the appropriate EU standard contractual clauses for data controllers and processors, as adopted by the European Commission, to ensure an adequate or substantially equivalent level of data protection when transferring Personal Data to other member companies of the Alnylam Group (including in the United States and the United Kingdom), as well as with respect to data transfers made to service providers, acting on behalf of and for Alnylam and other Alnylam partners located outside the U.S. In adopting the appropriate safeguards, Alnylam will also implement any supplementary measures that may be required by legislative or regulatory authorities, or that may be deemed necessary, to ensure an adequate or substantially equivalent level of data protection with respect to the transferred data, taking into account the factual circumstances of the transfer in question.

Retention

Personal data will only be stored as long as necessary to fulfil the purposes and respective obligations related to such data, for which it was collected, subject to local laws and regulations and legitimate business needs in accordance with Alnylam internal policies.

The external service provider will retain identifiable personal information that is downloaded from search monitoring tools in order to compile the insight reports, consistent with such service provider’s policies and applicable data privacy laws.

Data gathered by our external service provider will be stored according to the service provider’s retention policies, applicable data privacy laws and Alnylam’s policies and documented instructions.

All downloaded identifiable data will be reviewed on an annual basis and deleted if no longer serves the original purpose of collection and processing. Τhe external provider will delete the results of the searches, as well as automatic backups after the end of the respective contract with Alnylam.

Produced insight reports will not include any Personal Data. Insight reports will be stored for a maximum of five years and will then be destroyed/deleted.

Automated decision-making

Data may have been subject to automated decision-making by the media monitoring tools to identify such data as falling within a particular search description. Alnylam does not use your Personal Data for automated decision-making.

How Alnylam protects your Personal Data

Alnylam will take reasonable and appropriate physical, administrative and technical safeguards to protect the processing of the Personal Data from loss, misuse, unauthorized access, disclosure, alteration or destruction. In this perspective, the data may be used only by Alnylam’s personnel who need it because of their job or hierarchical position, with confidentiality obligations, which have been assigned a specific role and which have been given appropriate operating instructions.

Your Rights and how to exercise them

Certain individuals in the EU, UK and other countries, and in California, Connecticut, Utah, and Virginia and other U.S. states, as applicable, have certain data subject rights which may be subject to limitations and/or restrictions under applicable law. Your rights may include the right to:

object to the processing of your Personal Data;
request information about how your Personal Data is processed, and to request a copy of that Personal Data;
Y request that any inaccuracies in your Personal Data are rectified without delay;
Y request that any incomplete Personal Data is completed, including by means of a supplementary statement;
request that your Personal Data is erased if there is no longer a justification for them to be processed;
in certain circumstances (for example, where accuracy is contested) to request that the processing of your Personal Data is restricted;
object to the processing of your Personal Data where it is processed for direct marketing purposes; and
Not receive discriminatory treatment or be retaliated against by us as a result of exercising your data privacy rights.

If you wish to exercise one of the above-mentioned rights, please refer to the “How to Reach Us” section below.

If you do not receive a (timely) response from Alnylam or if you are not satisfied with our response to you, you also have the right to lodge a complaint about the processing of your Personal Data with the appropriate national data protection supervisory authority; a list of the national data protection supervisory authorities in Europe can be found here: https://edpb.europa.eu/about-edpb/board/members_en, and UK residents can contact the Information Commissioner’s Office at: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, +0303 123 1113 (or +44 1625 545745 if calling from outside the UK).

Further information and Contact details

For additional information on how Alnylam collects and processes your Personal Data please visit our Privacy website available here: https://alnylampolicies.com/

The contact details of the data controller are:
Alnylam Pharmaceuticals, Inc:
675 W Kendall Street
Cambridge, MA 02142 USA
Tel: 800.231.8685

To exercise your rights or to request additional information, you may contact our Privacy Office and Data Protection Officer by email at privacy@alnylam.com or in writing at the address below:
Alnylam Pharmaceuticals, Inc
Attention: Privacy Officer
675 W Kendall Street
Cambridge, MA 02142 USA
Tel: 800.231.8685

Please note that you can also fill out this data subject request form.

Complaints

If you consider that your personal data has been misused or mishandled, you may also submit a complaint to the Federal Data Protection and Information Commissioner (FDPIC); the FDPIC can be contacted at:

Federal Data Protection and Information Commissioner:
Feldeggweg 1, CH – 3003, Berne
+41 (0)58 462 43 95
info@edoeb.admin.ch

Any complaint to the Federal Data Protection and Information Commissioner is without prejudice to your right to seek redress through the courts.

You may also contact, if you are an EU/EEA resident, the competent data protection authority of your country of residence or place of work; Information and contact details of the competent authorities is available on the EDPB’s website at Members | European Data Protection Board (europa.eu) , and UK residents can contact the Information Commissioner’s Office at: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, +0303 123 1113 (or +44 1625 545745 if calling from outside the UK).