Privacy & Security

Discovery Donor Center

Website Privacy Notice

This Privacy Notice applies to all personal information gathered for and on behalf of Discovery Donor Center (collectively, “we”, “us”, or “Discovery”) through the various Discovery sites that link or refer to this Privacy Notice (such as any website operated by or on behalf of Discovery, mobile applications, or social media pages) together with any and all offline sources including sales and marketing activities (collectively, the “Sources”). By using the Sources, you consent to the data collection and use practices described in this Privacy Notice. IF YOU DO NOT AGREE WITH ANY PART OF THIS PRIVACY NOTICE, THEN PLEASE DO NOT USE ANY OF THE SOURCES. 

The Sources may provide links to or the ability to connect with non-Discovery websites, social networks or applications (“Third-Party Sites”). Clicking on those links or enabling those connections may allow the third party to collect or share information about you. Those Third-Party Sites are beyond Discovery control, and Discovery does not accept responsibility for those Third-Party Sites and/or their privacy notices. We encourage you to check the privacy policies and terms of use of any Third-Party Sites before providing your personal information to them. If you are an individual located in California USA, please see below to review Privacy Notice and Policy provisions specific to California and supplemental to those detailed below. 

Information We Collect

Through your interaction with and use of the Sources, Discovery may collect personally identifiable and other information. Depending on the information and/or services you request, you may be asked to provide your name, residential address, telephone number, e-mail address, and other information. You are also asked to provide Discovery with sensitive personal information, such as health and medical information and such sensitive personal information must be provided in order for you to be considered as a donor. 

If you send us correspondence, such as emails, we may keep a record of that correspondence. We also periodically ask users and our donors for feedback that we use to improve the donor experience.  If you respond to these requests, we will retain that correspondence and feedback. 

Discovery may also collect other information through your interaction with and use of the Sources, which does not reveal your specific identity or does not directly relate to an individual. This other information may include, but is not limited to, browser and device information, internet protocol (IP) address, data collected through automated electronic interactions, application usage data, demographic information, geographic or geo-location information, statistical and aggregated information, and other usage information about the use of the Sources, including a history of the pages you view. Statistical or aggregated information does not directly identify a specific person, but it may be derived from personal information. We use this information to help us design our Sources to better suit our users’ needs. We may also use your IP address to help diagnose problems with our systems and to administer our website, analyze trends, track visitor movements, and gather broad demographic information that assists us in identifying visitor preferences. Discovery has a legitimate interest in understanding how its website visitors use the website to assist Discovery with providing more relevant products and services, with communicating value to our customers and others with whom we do business, and with providing appropriate staffing.  In some instances, we may combine personal information with other information, such as combining a precise geographical location with your name. If we combine personal information with other information, we will treat the combined information as personal information. 

How We Collect Information

Discovery collects information in a variety of ways that fit broadly into the following general categories: 

• Direct Interactions: From your use of and interaction with us through the Sources and other activities such as sales inquiries and transactions. 

• Automated Interactions: From the use of technologies such as cookies and other tracking technologies to collect usage data.  “Usage data” is information about your activity while accessing the Sources, such as browser type, operating system and webpages visited, that does not alone identify you and so is not considered personal information about you.  

Cookies: “Cookies” (which may be html files, javascript files or other technology) are text files that help store user preferences and activity. “Web beacons” (also known as image tags, gifs or web bugs) are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses. The Sources and/or third parties may use “cookies,” “web beacons” and other similar tracking technologies (collectively, “Tracking Technologies”) to collect information from you automatically as you use the Sources, browse Discovery websites and the web so that we can recognize revisits to our Sources and provide a more personalized experience. Cookies are sent to your browser from our Sources and stored on your computer or device. Discovery uses Cookies to track certain information about your usage and devices, such as host domain, IP address, pages accessed, clickstreams, time spent on our Sources and general browser statistics. Discovery uses this information to, among other things, identify broad demographic trends that may be used to provide information tailored to your interests. If we link the usage data we store in Cookies to personal information you submit while using our Sources, we will treat such linked information as personal information that is subject to the obligations and protections set forth in this Privacy Notice. 

Other Tracking Technologies: We use Tracking Technologies to help tailor our content, understand website and internet usage, improve or customize the content, offerings or advertisements through the Sources, personalize your experience with respect to the Sources (for example, to recognize you by name when you return to a Discovery website), save your password in password-protected areas, help us offer you products or services that may be of interest to you, deliver relevant advertising, maintain and administer the Sources and for other purposes described in the “How We Use and Share your Information” section below. 

These Tracking Technologies collect “click stream” data and information regarding your use of the Sources, such as your visits, use of our features and preferences, and may also collect your IP address or some other identifier unique to the device you use to access the Sources (“Identifier”). Your Identifier may be automatically assigned to the device you use to access the Sources. By using the Sources, whether as a registered user or otherwise, you acknowledge, understand and hereby agree that you are giving us your consent to track your activities and your use of the Sources through these Tracking Technologies. 

Discovery’s use of Automated Interactions may change over time as technology evolves. The descriptions above are designed to provide you with some detail about Discovery’s current approach to information collected from Automated Interactions. 

How We Use & Share Your Information

Operations 

We use personal information and other information collected to: 

• To notify you of updates relating to Discovery Donor Center and donation opportunities. 

• To confirm or otherwise contact you regarding any appointments you have scheduled with us. 

• To respond to your requests or inquiries. 

• To provide you with newsletters, articles, or programs, alerts and announcements. 

• To analyze communications to improve our programs and other offerings. 

• As necessary to verify and validate your identity. 

• To keep records of our interactions with you if you schedule an appointment or otherwise deal with our representatives. 

• To carry out our obligations and enforce our rights. 

• To fulfill any other purpose for which you provide your personally identifiable information to us. 

The legal bases for the processing of your personal information will depend on the reason you provided your personal information via the Sources: (i) the performance of a contract with you or your employer or in order to take steps at your request prior to entering into such contract, (ii) use of your Personal information is necessary for us to comply with a legal or regulatory obligation, (iii) our legitimate interests (or those of a third party), which will be assessed in connection with the specific use of Personal information, or (iv) your consent, which will be requested when required and given via the other Sources. 

Disclosure to Third Parties 

We do not sell your personal information. In addition to aggregate information (discussed previously), we may share some kinds of personal information with third parties, as described below. 

• Third parties and agents who perform services for Discovery: We contract with other companies and individuals to help us provide services including the Sources. In order to perform the services, these other companies may have limited access to some of the personal information we maintain about our users. Other companies may collect information on our behalf through their web sites. 

• Business transfers: Your information will be shared amongst the various Discovery companies. If we transfer a business unit or an asset (such as a Discovery website) to another company, we may transfer the personal information we have collected to the relevant third party. 

Legal requirements: We may be obligated to cooperate with various law enforcement inquiries. Discovery reserves the right to share or transfer your information to comply with a legal requirement, disclose any activities or information about you to law enforcement or other government officials as we, at our sole discretion, determine necessary or appropriate, in connection with an investigation of fraud, for the administration of justice, intellectual property infringements, or other activity that is illegal or may expose us or you to legal liability.

Protection of Information

To help protect the privacy of the data and personal information you transmit through use of the Sources, Discovery maintains commercially reasonable physical, technical and administrative safeguards that are designed to protect your personal information from loss, misuse and unauthorized access, disclosure, alteration, and destruction.

Informational/Promotional Email Opt-Out

From time to time we send email messages with information/promotions, announcements, enhancements, maintenance information and general updates. You can change your preferences for receiving group marketing emails, updates, and other information from us at any time. If you no longer wish to receive these promotional communications, you may opt-out of receiving them by following the instructions included in each communication or you may contact us at Unsubscribe@dls.com.

Retention & Deletion

Discovery will retain your personal information for the duration of your relationship with Discovery and for a period thereafter as needed to maintain the history of that relationship; as long as it is necessary and relevant for our operations; as needed for the purposes outlined in this Privacy Notice or at the time of collection; as necessary to comply with our legal obligations (e.g., to honor opt-outs), resolve disputes and enforce our agreements; or to the extent permitted by law.  To determine the appropriate retention period for personal information, Discovery considers the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.  At the end of the retention period, Discovery will delete your personal information in a manner designed to ensure that it cannot be reconstructed or read. 

Changes to This Privacy Notice

We may update this Privacy Notice occasionally, and we reserve the right to amend this Privacy Notice at any time, for any reason, without notice to you, other than the posting of the amended privacy notice at this Site. We may email periodic reminders of our notices and terms and conditions, but you should check our sources frequently to see the current Privacy Notice that is in effect and any changes that may have been made to it. Your continued use of the Sources after the posting of any amended Privacy Notice shall constitute your agreement to be bound by any such changes. Any changes to this Privacy Notice are effective immediately after being posted by us. 

Children’s Policy

We are committed to protecting the privacy of children. The Sources are not intended for use by children, and we do not knowingly collect or maintain personally identifiable information from any person we actually know is under the age of majority under the applicable laws protecting children’s privacy. If you are under the age of majority, you may not use this website or the other Sources. If you believe we may have collected information from or about a child under age 18 in the US, please contact our Global Privacy Officer at privacy@dls.com. 

Questions & Concerns

If you have any questions or concerns about this Privacy Notice or Discovery’s collection and use of your personal information, you can contact our Privacy Officer at Privacy@dls.com 

or 

ATTN: Discovery Life Sciences Privacy Officer 
900 Hudson Way 
Huntsville, Alabama 35806 

You are also able to contact Discovery with respect to personal data protection matters via its third party reporting mechanism: Discovery Compliance Reporting Portal 

Privacy Notice & Policy for California Donors

Introduction

The California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (collectively, the “CPRA”), gives California residents certain rights and requires businesses to make certain disclosures regarding the Processing of Personal Information. This California Privacy Notice and Policy for California Users (Business Contacts) provides supplemental disclosures to those provided in the Website Privacy Notice and applies only to California-resident individuals with whom Discovery interacts as a potential or actual donor. This Privacy Notice and Policy does not apply to individuals who are residents of other U.S. states or other countries and/or who do not interact with Discovery as a potential or actual donor.

Information We Collect

In connection with your use of the Sources, we may collect the categories of personal information listed below about you and other users. In the preceding twelve (12) months, Discovery has disclosed personal information about the users of its Sources to the general categories of third parties identified in the chart below.

Discovery does not sell your identifiable personal information/sensitive personal information and also will not share it with third parties for cross-context behavioral advertising. 

Category of Personal Information	Relevant Examples	Does Discovery Collect?	Has Discovery Collected in the Preceding 12 Months?	Has Discovery Disclosed for a Business Purpose in the Preceding 12 Months?
A. Identifiers	Name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, or other similar identifiers.	YES	YES	YES (affiliates, website and technology service providers, other service providers, government authorities)
B. California Customer Records personal information	Name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.	YES	YES	YES (affiliates, website and technology service providers, other service providers, government authorities)
C. Protected classification characteristics under California or federal law	Such as citizenship (based on your physical location) and gender/gender identity	YES	YES	YES (affiliates, website and technology service providers, other service providers, customers/vendors (if your employer), government authorities)
D. Commercial information	Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	NO	NO	NO
E. Biometric information	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	NO	NO
F. Internet or other similar network activity	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	YES	YES	YES (affiliates, website and technology service providers)
G. Geolocation data	Physical location or movements, such as device location and use of facility access badges.	YES	YES	YES (affiliates, website and technology service providers)
H. Sensory data	Audio, electronic, visual, thermal, olfactory, or similar information, such as call and video recordings.	YES	YES	YES (affiliates, website and technology service providers)
I. Professional or employment-related information	Current or past job history, such as your employer(s).	YES	YES	YES (affiliates, website and technology service providers, other service providers, customers/vendors (if your employer), government authorities)
J. Non-public education information	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO	NO	NO
K. Inferences drawn from other personal information	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	NO	NO	NO
L. Sensitive Personal Information	1. Social Security, driver’s license, state identification card, or passport number;	YES	YES	YES (affiliates, website and technology service providers, other service providers, government authorities)
	2. account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password or credentials allowing access to an account;	NO	NO	NO
	3. precise geolocation;	YES	YES	YES (affiliates, website and technology service providers)
	4. racial or ethnic origin, religious or philosophical beliefs, or union membership;	YES	YES	YES (affiliates, website and technology service providers)
	5. contents of mail, email, and text messages of which Discovery is not the intended recipient of the communication;	NO	NO	NO
	6. genetic data;	YES	YES	YES (affiliates, website and technology service providers, other service providers, government authorities)
	7. biometric information for the purpose of uniquely identifying you;	NO	NO	NO
	8. health information;	YES	YES	YES (affiliates, website and technology service providers, other service providers, government authorities)
	9. sex life or sexual orientation.	YES	YES	YES (affiliates, website and technology service providers, other service providers, government authorities)

You are the primary source of the personal information that is collected by Discovery when you are accessing the Sources. 

¹Personal information does not include: 

• Publicly available information from government records. 

• De-identified or aggregated consumer information. 

• Information excluded from the scope of the California Consumer Privacy Act of 2018 (CCPA), like: 

• health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; 

• personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

Your Rights Under the CPRA

You have the following rights under the CPRA: 

• To request deletion of the personal information you provided to Discovery (but note that Discovery may not be required to comply with a request for deletion, and we will provide you with the reasons if any request to delete is denied) 

• To request that Discovery correct inaccurate personal information about you 

• To request what personal information Discovery has collected, used and disclosed about you 

• To request to know what personal information is sold to or shared with third parties for cross-context behavioral advertising purposes and also to opt out from such sales or sharing 

• To opt-out of the sale and sharing of your personal information and to limit the use of your sensitive personal information. NOTE THAT WE WILL NOT SELL OR SHARE ANY PERSONALLY IDENTIFIABLE PERSONAL INFORMATION WE COLLECT ABOUT YOU, AND WE HAVE NOT SOLD OR SHARED ANY PERSONALLY IDENTIFIABLE PERSONAL INFORMATION IN THE PAST 12 MONTHS. Any personal information about you that is shared outside of Discovery is first deidentified so that the other party is unable to link the personal information to you.

Should you want to exercise any of these rights, please send an email to Privacy@dls.com or call Discovery’s Privacy Office at (800) 461-9330. You may authorize an agent to make a data subject rights request on your behalf, and your authorized agent may also do so via these submission methods. We may ask you to provide information that will enable us to verify your identity in order to comply with your data subject request. In particular, if you authorize an agent to make a request on your behalf, we may require the agent to provide proof of signed permission from you to submit the request, or we may require you to verify your own identity to us or confirm with us that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under the CPRA. We will respond to your request consistent with applicable law.

Discovery does not provide financial incentives to California donors who allow us to retain, Sell, or Share their personal information. We will separately describe such programs if and when we offer them to you. 

Discovery Donor Center SMS (Text Messaging) Privacy Notice

This Privacy Notice applies only to the personal information you may provide to the Discovery Donor Center via text message in response to your texting “Donate” to the Discovery Donor Center short code expressing an interest in donating blood.  Please note that this Privacy Notice applies only to personal information collected from US individuals residing in the geographic area near Discovery as these are the only individuals who can feasibly provide donations at Discovery.  If you are not a US individual residing in the geographic area near Discovery, please do not provide any personal information to Discovery via text message. 

Discovery Donor Center (“Discovery”) is committed to your privacy, and this Privacy Notice describes how the Discovery collects information from all individuals who contact us via text messaging, what we do with the information we collect, and the choices you have concerning the collection and use of such information. We request that you read this Privacy Notice carefully. 

If you have questions or complaints regarding this Privacy Notice or practices, please contact us at Privacy@dls.com. 

Information We Collect

We collect personally identifiable information from you if you contact us via text message/short code regarding donating blood, request information from us, or otherwise communicate with us. 

In order to provide you with additional information regarding blood donations or to consider you as a blood donor, we request certain personally identifiable information from you, including your contact information (such as name, email or address). 

How We Use Your Information

Information we collect may be used in the following ways: 

• To notify you of updates relating to Discovery and blood donation opportunities. 

• To confirm or otherwise contact you regarding any appointments you have scheduled with Discovery. 

• To respond to your requests or inquiries. 

• To provide you with newsletters, articles, or programs, alerts and announcements. 

• To analyze communications to improve our programs and other offerings. 

• To conduct pools and surveys. 

• As necessary to verify and validate your identity. 

• To keep records of our interactions with you if you schedule an appointment or otherwise deal with our representatives. 

• To carry out our obligations and enforce our rights. 

• To fulfill any other purpose for which you provide your personally identifiable information to us.

Your Rights

You may have the right to request a copy of, correction to or deletion of any personally identifiable information that we hold about you. If you would like to make any of these requests, please email us at Compliance@dls.com. We may request proof of your identity before sharing such information. It may not be possible for us to delete all of the information we hold about you where we are fulfilling our legal or contractual obligations or have a legal basis to retain the information; however. please contact us to discuss how we can assist you with your request. 

When we process your information on the basis that you have consented to such processing, you have the right to withdraw your consent, or ask us to stop or restrict processing the personally identifiable information we have about you, at any time by emailing us at Privacy@dls.com. 

We will retain your information for as long as you are active with Discovery or as needed to fulfill your requests, comply with our contractual or legal obligations, resolve disputes, and enforce our agreements. 

Disclosure of Personally Identifiable Information

Our practices with respect to the disclosure of personally identifiable information include the following: 

Consent. We may disclose your personally identifiable information to third parties with your express consent. 

Vendors and Affiliated Businesses. We may share your personally identifiable information with our parent company and affiliated businesses, for their use in a manner described in this Privacy Policy. 

Agents/Service Providers. We use third party service providers to assist us in providing our services and sites, including database backup providers to protect our data. We may disclose your personally identifiable information to third parties who complete transactions or perform services on our behalf. We may utilize the services of third parties to verify data or to supplement other information we have collected. All service providers are authorized to use your personally identifiable information only as necessary to provide their respective services to us and are obligated to protect your personally identifiable information under contract terms which are no less protective than those set forth in this Privacy Notice. 

Legal Process. We may disclose your personally identifiable information as required by law, such as to comply with a subpoena or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, or respond to a government request. 

Certain Business Transfers. Your personally identifiable information may be disclosed as part of a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of Discovery assets, and could be transferred to a third party as one of the business assets in such a transaction. It may also be disclosed in the event of insolvency, bankruptcy or receivership. We will use reasonable efforts to direct any such transferee to use your personally identifiable information in a manner that is consistent with this Privacy Notice. 

Security

We follow generally accepted industry standards to protect the personally identifiable information submitted to us. No method of transmission via text message or method of electronic storage is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personally identifiable information, we cannot guarantee its absolute security.