Privacy Shield Notice

Last Updated: January 22, 2020

Introduction

ACADIA Pharmaceuticals, Inc. and its U.S. controlled subsidiaries (collectively, “ACADIA”, “we”, “our” or “us“) respect your privacy. This Privacy Shield Notice (“Notice”) describes our standards and procedures for handling Personal Information transferred from the European Economic Area (“EEA“) and Switzerland to the U.S. in accordance with ACADIA’s obligations under the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks.

ACADIA Pharmaceuticals, Inc. and its controlled subsidiaries comply with the EU-U.S. Privacy Shield Framework and Swiss-U.S. Privacy Shield Framework (together the “Privacy Shield”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Information transferred from the EEA member countries, the UK and Switzerland to the United States.  ACADIA Pharmaceuticals, Inc. has certified to the Department of Commerce that it adheres to the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access and Recourse, Enforcement and Liability (collectively, the “Principles”). If there is any conflict between the terms in this Notice and the Principles, the Principles shall govern.  To learn more about the Privacy Shield program, and to view our certification, please visit https://www.privacyshield.gov/.

This Notice supplements ACADIA’s Privacy Policy (“Privacy Policy”). Unless specifically defined in this Notice, the capitalized terms in this Notice have the same meaning as those capitalized terms provided in our Privacy Policy. 

Personal Data Covered by our Privacy Shield Certification

We obtain and process Personal Information from the EEA and Switzerland in different capacities as provided in our online Privacy Policy. This Privacy Policy describes the categories of Personal Information we may receive in the United States, as well as the purposes for which we use that Personal Information. We will only process Personal Information in ways that are compatible with the purpose we collected it for, or for the purposes you later authorize. ACADIA commits to comply with the Principles with respect to all Personal Information received from the EEA and Switzerland in reliance on the Privacy Shield, as we further describe below.

Privacy Shield Principles

  1. Notice. ACADIA’s Privacy Policy in combination with this Notice describes our privacy practices with respect to Personal Information received from the EEA and Switzerland in reliance on the Privacy Shield.
  2. Choice. You may choose the types of Personal Information we process and the purposes of the processing. In the event Personal Information is (i) to be used for a purpose that is materially different from the purposes for which the Personal Information was originally collected or subsequently authorized, or (ii) transferred to a third party acting as a data controller, individuals will be given, where practical and appropriate, an opportunity to opt-out of having their Personal Information so used or transferred where it involves non-sensitive information. Where such use or transfer involves sensitive information, individuals must opt-in before such use or transfer.
  3. Data Integrity and Purpose Limitation. Any Personal Information we receive may be used by ACADIA for the purposes indicated in our Privacy Policy or as otherwise notified to you. We will not process Personal Information in a way that is incompatible with these purposes unless subsequently authorized by you. We take reasonable steps to limit the collection and usage of Personal Information to that which is relevant for the purposes for which it was collected, and to ensure that such Personal Information is reliable, accurate, complete and current. We will retain your Personal Information in an identifiable form only for the period necessary to fulfill the purposes outlined in our Privacy Policy,  unless a longer retention period is required or permitted by law or by the Principles. We will adhere to the Principles for as long as we retain the Personal Information collected under the Privacy Shield.
  4. Accountability for Onward Transfer of Personal Information. ACADIA may transfer Personal Information for the purposes described in our Privacy Policy to a third parties, including agents, regulatory authorities and service providers. We may transfer Personal Information to a third party acting as a data controller or as an agent. If we intend to disclose Personal Information to a third party acting as a data controller or as an agent we will comply with, and protect, Personal Information as provided in the Accountability for Onward Transfer Principle. We remain responsible for the processing of Personal Information we receive, under each Privacy Shield Framework, and subsequent transfers to a third party acting as an agent on its behalf, unless we prove that we are not responsible for the event giving rise to the damage. We try to minimize disclosures of Personal Information as reasonably practical because we are mindful of our responsibility and potential liability in cases of onward transfers to third parties. We may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. For further information about how we disclose your Personal Information, please see our online Privacy Policy.
  5. Security We maintain reasonable and appropriate security measures to protect Personal Information from loss, misuse, unauthorized access, disclosure, alteration, or destruction in accordance with this Notice.
  6. Access  You have the right to access Personal Information that we hold about you and request that we correct, amend or delete it if it is inaccurate or processed in violation of Privacy Shield. These access rights may not apply in some cases, including where providing access is unreasonably burdensome or expensive under the circumstances or where it would violate the rights of someone other than the individual requesting access, or as otherwise permitted by the Principles. If you would like to request access to, or a correction, amendment, or deletion of your Personal Information, you can submit a written request to the contact information provided below. We may request specific information from you to confirm your identity. In some circumstances we may charge a reasonable fee for access to your information.
  7. Recourse, Enforcement and Liability. In compliance with the Principles, ACADIA commits to resolve complaints about our collection or use of your Personal Information.  EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield policy should first contact ACADIA at the contact information provided below.

    ACADIA has further committed to cooperate with the panel established by the EU Data Protection Authorities (“DPA”) and the Swiss Federal Data Protection and Information Commissioner (“FDPIC”) with regard to unresolved Privacy Shield complaints concerning human resources data transferred from the EU and Switzerland in the context of the employment relationship. Under certain conditions, more fully described on the Privacy Shield website https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint , you may also be able to invoke binding arbitration when other dispute resolution procedures have been exhausted.

    For purposes of enforcing compliance with the Privacy Shield, ACADIA Pharmaceuticals, Inc. is subject to the investigatory and enforcement authority of the US Federal Trade Commission.

Amendment. This Notice may be amended consistent with the requirements of the EU-U.S. and Swiss-U.S. Privacy Shield Frameworks. When we update this Notice, we will also revise the “Last Updated” date at the top of this document.

Questions or Complaints. In compliance with the Principles, ACADIA commits to resolve complaints about our collection or use of your Personal Information. EU and Swiss individuals with inquiries or complaints regarding our Privacy Shield Notice should first contact ACADIA at privacy@acadia-pharm.com or by postal mail at:

ACADIA Pharmaceuticals, Inc.
Attn: Privacy Shield Inquiry
3611 Valley Centre Drive., Suite 300
San Diego, California, 92130