Privacy Policy - Agena Bioscience

Privacy Notice

Last Updated: April 1, 2024

Mesa Laboratories, Inc. and its subsidiaries, including Agena Bioscience, Inc., Agena Bioscience GmBH, Gyros AB, Protein Technologies Inc., Gyros Protein Technologies AB, GKE-GmbH, IBP Medical GmbH, Simicon GmbH, Mesa Germany GmbH, SAL GmbH, Mesa France SAS, and Gyros France Sarl (together, “Mesa Labs” or “we”) respect your privacy. We created this Privacy Notice to explain how we collect, use, and disclose your personal data when you interact with us through our websites and digital properties, including mesalabs.com, sterilizemonitoring.mesalabs.com, info.blogs@mesalabs.com, shop.mesalabs.com, gyrosproteintechnologies.com, and agenabio.com (collectively, our “Websites”). If you are a resident of the European Economic Area or the United Kingdom, please consult our Supplemental Notice at the end of this Notice for additional details that are relevant to you.

Overview

While the entire Notice is important, we want to highlight a few points that we believe will be of interest, depending on whether you interact with us through our websites or through a customer portal. More information about our practices is provided in the Notice below.

	Website	Customer Portal
What personal data do we collect?	In the past twelve (12) months, we have collected the following categories of personal data: Identifiers, Internet or Other Electronic Network Activity Information, and Professional and Educational Information.	In the past twelve (12) months, we have collected the following categories of personal data: Identifiers, Customer Records, Commercial Information, Internet or Other Electronic Network Activity Information, and Account Login data.
How do we use your personal data?	We use your personal data for purposes of providing our sites/services, communicating with you, delivering advertising and marketing, or to conduct other business operations or comply with legal obligations.	We use your personal data for purposes of managing and fulfilling orders and purchases, providing our sites/services, communicating with you, or to conduct other business operations or comply with legal obligations.
How long do we keep your personal data?	We will retain personal data for the period of time necessary to fulfill the purposes outlined in this Notice unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include: the length of time we have an ongoing relationship with you; whether there is a legal obligation to which we are subject; whether the retention is advisable considering our legal position (such as, for example, statutes of limitation, litigation, or regulatory investigations); and whether retention is consistent with our internal records retention and management policies.	We will retain personal data for the period of time necessary to fulfill the purposes outlined in this Notice unless a longer retention period is required or permitted by law. The criteria used to determine our retention periods include: the length of time we have an ongoing relationship with you; whether there is a legal obligation to which we are subject; whether the retention is advisable considering our legal position (such as, for example, statutes of limitation, litigation, or regulatory investigations); and whether retention is consistent with our internal records retention and management policies.
Do we sell or share your personal data?	We use third-party services that monitor certain activity on our website and across the internet in order to improve our user experience and provide you with useful advertisements. To the extent that constitutes selling or sharing your personal data, we only allow the services to collect the following categories of information: Internet and Electronic Network Activity Information. You can opt out of such sales or sharing by exercising your rights using the process detailed below.	No

What personal data do we collect and how do we use it?

In the last 12 months, we collected and used the following categories of personal data:

Identifiers, such as name, email address, and postal address. We collect this information directly from you or from business partners who assist us with technical, payment, and delivery services. We use it to provide and improve our website and services, communicate with you, and manage and fulfill orders and purchases.
Customer Records, such as name, phone number, postal address, and payment information. We collect this information directly from you or from business partners who assist us with technical, payment, and delivery services. We use it to communicate with you, manage and fulfill orders and purchases, conduct other business operation such as billing or collections, and comply with legal obligations.
Commercial Information, such as product purchase history or transaction history. We collect this information directly from you. We use it to manage and fulfill orders and purchases, conduct other business operations such as billing or collections, and comply with legal obligations.
Internet or Other Electronic Network Activity Information. We collect this information from your device or browser. We use it to provide and improve our website and services, perform analytics, deliver advertising and marketing, and measure and understand the effectiveness of the advertising we serve to you and others.
Professional and Educational Information, such as your work history and education background. We collect this information directly from you or from third parties you have authorized to provide us such information (like references or former employers). We use it to consider your candidacy for employment and to communicate with you throughout the recruitment process.

For our customer portals, we also collect account login data, which may be deemed sensitive under the privacy laws of certain states. We do not use this information for any purpose other than those permitted under applicable privacy law.

We neither target our Website to minors nor knowingly collect personal data from children under 13. If we learn we have mistakenly or unintentionally collected or received personal data from a child under 13 without appropriate consent, we will delete such data from our active databases.

How do we disclose your personal data?

In the last 12 months, we have not disclosed personal data to a third party (as that term is defined in the California Consumer Privacy Act) for a business purpose. We do, however, provide personal data to others in limited circumstances. We disclose information to our:

Affiliates, for purposes of supporting our business operations, which may include legal and administrative support.
Business Partners. These are people or companies who get the data to perform services for us, including operating our Website, monitoring and analyzing web traffic, managing customer information databases, sending communications for us, executing marketing programs and delivering ads, processing payments and calculating sales tax or other required tax, processing and shipping product orders, delivering products and services, and helping us with our recruiting efforts. Our partners can only use the information for purposes we specify.
Marketing Partners. These are companies who help us provide you more relevant advertising. These disclosures are addressed further in the “Do we sell or share your information” category below.

We may also disclose information to others: (1) if we believe there has been a violation of our website policies; (2) if we believe that someone may be causing injury to our rights or property, other users, or anyone else; (3) to respond to judicial process or to provide information to law enforcement; (4) as required by law; or (5) in connection with a corporate reorganization, such as a merger or asset acquisition.

Do we sell or share personal data?

We do not provide your information to third parties in exchange for money. However, we use cookies to disclose limited personal data to some of our trusted partners so that they can provide you tailored advertising based on your interactions with us and others online. Some jurisdictions consider our practice as us selling your personal data or disclosing it for targeted advertising (which California calls “sharing”). In the last 12 months, we have sold and shared the following categories of personal data: Internet and Electronic Network Activity Information. Given that we limit our collection of data concerning minors, we do not have actual knowledge that we sold or shared personal data on anyone who is younger than 16 years old.

If you do not want us to sell your personal data or use it for targeted advertising, you can choose to opt out by exercising your rights discussed below. We do not currently respond to Do Not Track signals.

How do we safeguard your personal data?

We recognize the importance of maintaining the security of your information, and so we have implemented technical and organizational security measures designed to protect your information from unauthorized processing.

Links to third-party websites

The Website may include links to third-party websites, plug-ins, social networks or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. We do not control these third-party websites, and we encourage you to read the privacy notice of every website you visit.

Your choices

Consistent with our goal of empowering customers, we offer a variety of ways for you to exercise control over your personal data. This includes exercising the following rights:

Access. You can request that we provide you access to the information we collected about you, including the specific pieces of information and details about that information.
Portability. You can ask us to transfer your personal data to another party.
Correction. You can request to update or change your personal data when it is incorrect.
Deletion. You can ask us to delete your personal data that we have about you.
Opt Out of Selling. You can request that we do not sell your personal data.
Opt out of Sharing. You can ask us to not share (use for targeted advertising) your personal data.

We will not discriminate against you for exercising the above rights. You can exercise your (1) opt-out rights by disabling “Advertisement” cookies using our “Cookie Settings” link on the Website or (2) other rights by emailing us at privacy@mesalabs.com. You can also have your agent submit a request on your behalf. If you rely on an agent, we require one of the following before we can process the request:

The agent providing us proof that you authorized the request;
The agent providing us a signed authorization from you permitting them to act for you; or
You verifying your identity directly with us.

In order to process your request, unless you are requesting to opt out of sales or sharing, we will need to verify your identity. We will verify your identity by asking you for certain details—such as your name, address, and email address—and comparing your responses to the information we have on file.

Will we update this Notice?

We may update this Notice from time to time. If we do so, we will post a new version on the Website and, as required by law, notify you of the change.

What if I have questions?

If you would like to contact us for any reason regarding our privacy practices, please write to us at: privacy@mesalabs.com. You can also contact us by sending a letter to:

Mesa Laboratories, Inc.
12100 West 6th Ave.
Lakewood, CO 80228

Supplemental Notice for Residents of the European Economic Area/United Kingdom

This Supplemental Notice provides additional details that apply only to residents in the European Economic Area or United Kingdom.

Controller: The controller of your information is Mesa Laboratories, Inc. and its subsidiaries.

Legal Basis for Processing Your Information: We will only process your personal data where we have a legal basis to do so. The legal basis will depend on the reason(s) we collected and need to use your personal data. We rely on the following legal bases:

Consent. Where you have told us you are happy for us to process your personal data for a specific purpose, such as when you request that we contact you with information about our products and services.
Legitimate Interests. Where the processing is necessary for us to conduct our business, but not where your interests are overridden by your rights or interests. This may include processing to inform you of changes to our Website, products, or services; to provide you with information about other products or services we offer; to conduct internal operations such as billing, support, or troubleshooting; and to improve our Website, products, and services.
Contractual Necessity. Where the processing is necessary based on your purchase of a product or service from our Website.
Legal Claims. Where the processing of your personal data is necessary for the establishment, exercise, or defense of legal claims.
Legal obligation. Where we are required by law to process your personal data.

Cookies: We use cookies and similar technologies to help us deliver a better and more personalized service when you browse our Websites. Cookies are typically assigned to one of the following categories, depending on their function and intended purpose:

Essential cookies. These enable you to navigate our Website and to use its services and features. Without these cookies, our Website will not perform as smoothly for you as we would like, and we may not be able to provide certain core functions and features.
Analytics cookies. These collect information about the use of our website and enable us to improve the way it works. For example, analytics cookies show us the most frequently visited pages and analyze site traffic. We use them to look at overall patterns of usage on the site, rather than the usage of any particular individual.
Customer interaction cookies. These allow us to communicate with you.
Marketing cookies. These track browsing habits and are used to deliver targeted (interest-based) advertising. We discuss these cookies, and your rights to limit their usage, in the “Do we sell or share your personal data” section below.

Cross-Border Transfers: We are based in the United States and, where required, use legally-approved mechanisms to lawfully transfer data across borders. Depending on the situation, we may rely on adequacy decisions or approved standard contractual clauses. You can contact us using the information below to get more details on the precise mechanism we use for your information.

Your Rights: Under certain circumstances, you have the right to:

Restrict Processing. You can request that we restrict the processing of your personal data (while we verify or investigate your concerns with this information, for example).
Object to Processing. You can object to the further processing of your personal data, including certain marketing activities.
Withdraw Consent. Where the processing of your personal data by us is based on consent, you have the right to withdraw that consent without detriment. But doing sill not affect any processing we performed before you revoked your consent.
File Complaint. You can file a complaint with the appropriate data protection authority, but we ask that you give us an opportunity to address your concern first.

You can exercise the rights listed above at any time by contacting us at privacy@mesalabs.com.

Agena Bioscience® Privacy Policy