(Last Modified March 2022)

Acorda Therapeutics, Inc. and its affiliated companies (together, “Acorda” or “we”) recognize the importance of protecting the privacy of your personal information, and we have prepared this Privacy Notice to provide you with important information about our privacy practices. This Privacy Notice applies when you use acorda.com, ampyra.com, inbrija.com, and any other website, application, or online service that is owned and operated by Acorda and links or refers to this Privacy Notice (the “Services”). This Privacy Notice does not apply to information collected through other unaffiliated websites or online services, aggregated information, or information that has been de-identified or anonymized in accordance with applicable law.

By using the Services, you consent to the practices described in this Privacy Notice. Please take a moment to review the terms of our Privacy Notice, and if you have any questions about this Privacy Notice, please contact us at dataprivacy@acorda.com.


COLLECTION OF PERSONAL INFORMATION

We collect personal information directly from you as a result of providing the Services, from third parties or public sources, and automatically using various tracking technologies on our websites.

Information You Provide to Us. In order to take advantage of certain Services or features offered or provided on our websites, you may be asked to provide personal information, such as your name, e-mail address, mailing address, and phone number. For example, we will collect certain personal information if you sign up to receive updates and newsletters, register for an event, send questions or comments to us via e-mail, or request product information from us. We may also collect personal information when you submit a job application, apply for a research grant, or if you report an adverse event or product complaint.

Information About Your Use of the Services. We may collect personal information about your devices and personal information about your use of the Services and online activity.

  • We may collect personal information concerning your computer and other devices used to access the Services. For example, we may collect your IP address and other unique device identifiers, operating system version, hardware model, and settings of the device you use to access the Services. Depending on your internet browser permissions, we also may collect personal information that is associated with your device.
  • We also may collect personal information about the Services you use, your interactions with content offered through the Services, and other online activity. For example, we may collect information about how many visitors visit a specific web page, how long they stay on that web page, and which hyperlinks, if any, they click on. We collect this information, in part, through the use of technologies such as cookies and web beacons, which are discussed in greater detail below. We may also group this information into aggregate visitor data.
  • When you use location-enabled services, we also may collect specific location information drawn from your device’s GPS, Bluetooth, or WiFi signals.

Information From Third-Party Sources. We may receive personal information about you from publicly and commercially available sources, as permitted by law, which we may combine with other personal information we receive from or about you.

In addition to the Services, Acorda collects personal information about healthcare professionals when they interact with us or our representatives. Acorda also collects personal data from a number of third-party data sources, in particular from publicly available sources such as public registers of healthcare professionals, published journals and event materials and from websites of healthcare professionals or their employers. Acorda also makes use of third-party data providers to enhance its own knowledge of the healthcare sector. This data will include personal information about health care providers’ role(s), qualifications, specialty, employer, experience, publications and other information related to their professions.


HOW WE USE INFORMATION

To Provide and Manage the Services You Request. If you provide us with personal information, we will retain and use that information to provide you with the products or services you use or request. We may also use personal information to analyze, improve, and customize your experience with our products and services, including the Services.

To Contact You. We may use your personal information to respond to questions that you may submit to us via the Services or to communicate with you about our products, services, and promotions, such as e-mailing press releases, company announcements, and health and product related information. If you provide a resume to us through the Services, we may retain your resume in our files in order to contact you for current or future job openings.

To Better Understand Our Users. We may use personal information we gather to determine which areas of the Services are most frequently visited to understand how to enhance the Services.

To Deliver Targeted Advertising. We may use your personal information to facilitate the delivery of targeted ads, promotions, and offers to you, on behalf of ourselves and advertisers, on and off the Services. Please see the section of this Privacy Notice regarding Online Tracking and Advertising for further information about our and third parties’ use of tracking technologies to provide you relevant ads, as well as information about how to disable cookies and make other choices related to targeted advertising.


SHARING OF INFORMATION

Except for the limited situations discussed in this Privacy Notice, we will not share your personal information with third parties.

Service Providers. We rely on third parties to perform a variety of services for us, such as sending postal mail and providing data analysis. To do so, we will only provide those companies the personal information they need to deliver the Services.

Other Parties When Required by Law or As Necessary to Protect Our Services. We reserve the right to disclose your personal information in cases when we have reason to believe that disclosing this information is necessary to identify, contact, or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other visitors, or anyone else that could be harmed by such activities. We also reserve the right to disclose your personal information when we believe in good faith that the law requires it or when doing so is necessary to respond to a government request.

Other Parties in Connection With a Corporate Transaction. We reserve the right to transfer any personal information we have about you in the event that we sell or transfer all or a portion of our business or assets to a third party, such as in the event of a merger, acquisition, or in connection with a bankruptcy reorganization.

Otherwise With Your Consent or At Your Direction. In addition to the sharing described in this Privacy Notice, we may share personal information about you with third parties whenever you consent to or direct such sharing.

We also may share other information with third parties in a manner that does not identify particular visitors, including, for example, aggregate information about how the Services are used.


ONLINE TRACKING & ADVERTISING

We and third parties that provide content, advertising, or functionality on our Services may use cookies, web beacons, and other tracking technologies to facilitate administration and navigation on the Services, to better understand and improve the Services, to provide you with a customized online experience, and to determine and/or improve the advertising shown to you here or elsewhere, including by combining personal information about your use of one device with personal information about your use of other devices. For example, these technologies help us determine whether you have seen a particular advertisement before, tailor ads to you if you have visited our Services before, and avoid sending you duplicate advertisements. You can learn more about certain types of targeted advertising by visiting the Digital Advertising Alliance.

Cookies. Cookies are small files that are placed on your computer when you visit a website. Cookies may be used to store a unique identification number tied to your computer or device so that you can be recognized as the same user across one or more browsing sessions, and across one or more sites. Cookies serve many useful purposes. For example, some of the Services allow visitors to increase the font size of the text contained on the applicable Service to make it easier to read. Cookies enable the Service to automatically use your preferred font size the next time you visit the Service. Most browsers are initially set up to accept cookies. Your browser or device may offer settings that allow you to choose whether browser cookies are set and to delete them. For example, you may be able to configure your browser not to accept cookies or to notify you when a cookie is being sent. For more information about whether these settings are available, what they do, and how they work, visit your browser help material. Please be aware that some features of the Services may not function properly or may be slower if you disable cookies.

Your Choices Regarding Cookies. You can change you cookie settings depending on which internet browser you use:

Where Can You Find More Information About Cookies. You can learn more about cookies from the following third-party websites:

Web Beacons and Other Tracking Technologies. We, along with third parties, also may use other tracking technologies. For example, we may use technologies called web beacons (or “pixels”) that communicate personal information from your device to a server. Web beacons can be embedded in online content, videos, and emails, and can allow a server to read certain types of personal information from your device, know when you have viewed particular content or a particular email message, determine the time and date on which you viewed the web beacon, and the IP address of your device. We and third parties use web beacons for a variety of purposes, including to analyze the use of our Services and (in conjunction with cookies) to provide content and ads that are more relevant to you.


YOUR CHOICES

E-mail Choices. If you have subscribed to our e-mail list and wish at any point to stop receiving commercial e-mails from us, simply follow the opt-out instructions that are included in each e-mail. If you have any questions relating to your choice to “opt-out” at any time, please Contact Us at the e-mail address or phone number provided below.

Additional Choices With Respect To Targeted Advertising. In addition to disabling cookies as described above, you may be able to opt-out of receiving targeted advertising from participating ad networks, audience segment providers, ad serving vendors, and other service providers by visiting websites operated by the Network Advertising Initiative and Digital Advertising Alliance.

Do Not Track Signals. Some web browsers may transmit “do not track” signals to the websites and other online services with which a user communicates. There is no industry standard that governs what, if anything, websites should do when they receive these signals. We currently do not take action in response to these signals. If and when a standard is established and accepted, we may revisit our Privacy Notice on responding to these signals.

Links to Other Sites. We provide links to websites or resources outside of our Services for your informational purposes only. These other sites may send their own cookies to you, collect data or solicit personal information from you. We are not responsible for the privacy or other practices of such sites and cannot guarantee the security of any of your personal information that you provide or is collected by such sites. We encourage you to review the privacy policies and terms and conditions on those linked sites.


SECURITY. We have adopted physical, technical, and administrative safeguards to help protect against theft, loss, misuse, and unauthorized access to or disclosure of the personal information we collect and receive. However, please note that no data transmission over the Internet can be guaranteed to be 100% secure. As a result, while we strive to protect your personal information and privacy, we cannot guarantee or warrant the security of any personal information you disclose or transmit to us online and cannot be responsible for the theft, destruction, or inadvertent disclosure of your personal information.


CHILDREN’S PRIVACY. Our websites and the Services are not intended for children, and we do not knowingly collect personal information from children under the age of 18. If you are under the age of 18, please do not provide any personal information to us. If you believe we have gathered your personal information in a manner inconsistent with this Privacy Notice or if your child has submitted personal information to us and you would like us to delete that information, please contact us.


CHANGES TO OUR PRIVACY NOTICE. We may modify this Privacy Notice from time to time. We recommend that you revisit this Privacy Notice periodically to ensure that you are aware of our current privacy practices, although we may also elect to notify you by e-mail or by posting something on some or all of our Services. Your continued use of the Services following the posting of changes will mean you accept the Privacy Notice and any changes.


CONTACT US. Any questions that you may have regarding this Privacy Notice should be directed to dataprivacy@acorda.com.


ADDITIONAL PRIVACY NOTICES

Notice to Individuals within the European Economic Area

The EU General Data Protection Regulation (“EU”) 2016/670 (“GDPR”) requires that we have a “legal basis” for the processing of your personal data. The legal basis for our processing of your personal data depends on the Services that you are using. We may process your personal data as necessary for our legitimate interests, as may be required by law, or for the performance of a contract.

  • Legitimate Interests. In order to operate our websites securely and efficiently and provide you with a personalized experience while using the Services, we may process your personal information such as your IP address, geographic location, resources you have accessed on our websites, and other related information. We may also process your personal data in order to provide you with the Services. For example, we will process your personal information if you sign up to receive updates and newsletters, register for an event, send questions or comments to us via e-mail, or request information from us.
  • Required by law. In some cases, our processing of your personal data is required by law. For example, we are required to collect and report adverse events and product complaints to regulatory authorities.
  • Performance of a contract. In some cases, the processing of your personal data may be necessary in order to evaluate and award research grants or sponsorships

If you are an individual within the European Economic Area, you have the following rights with respect to your personal data under the GDPR:

  • Access. You have the right to access your personal data and receive information about our processing of your personal data.
  • Rectification. You have the right to request that we update or correct inaccuracies in your personal data.
  • Erasure. You have the right to request that we delete your personal data.
  • Restrict processing. You have the right to ask that the use of your data is “frozen” to leave you the possibility to exercise other rights. Your personal data shall not be used anymore but must be kept by us during this period.
  • Data portability. You have the right to retrieve your data in a structured, commonly used, machine-readable format for personal use or send to another service provider.
  • Object. You have the right to object to our legitimate interests as the basis of our processing of your personal data.
  • Right to withdraw consent. When you have given your explicit consent for the processing of your data, you have the right to withdraw your consent at any time without justification.

You may exercise any of these rights by contacting us at dataprivacy@acorda.com or by mail at Acorda Therapeutics, Inc. 420 Saw Mill River Road Ardsley, NY 10502 Attn: Data Controller. If you believe that our processing of your personal data does not comply with GDPR, you also have the right to lodge a complaint with your local Data Protection Authority.

The United States does not have the same level of data protection as the European Economic Area. Nevertheless, protecting your privacy is our priority and when your personal data is disclosed to us through third parties in the EU, we comply with the legal requirements for cross-border personal data transfers through the use of standard contractual clauses and, in some cases, other personal data transfer mechanisms permitted under GDPR.

Acorda will retain your personal data for as long as required to serve the purpose for which it was collected, unless a longer retention period is required in order to comply with applicable laws. Our personal data retention schedules vary depending on the nature of the personal data, the purpose for which it was originally collected and legal basis of our processing, how long you engage the Services, and whether there are any legal requirements to retain the personal data. For security and business continuity, we make backups of certain data, which we may retain for longer than the original personal data.


Notice to California Consumers:

Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), California residents have the right to know what personal information Acorda collects about them, how we use that information, and to whom we may disclose the information. In providing you with the Services, we may collect and disclose, to our affiliates and third party services providers for operational business purposes, the following categories of personal information when you use the Services:

  • Identifiers, such as name, government-issued identifier (e.g., Social Security number, driver’s license number, or passport number), email address, IP address, postal address, or other similar identifiers;
  • Personal information, as defined in the California safeguards law, such as contact and financial information;
  • Characteristics of protected classifications under California or federal law, such as age, gender, medical conditions, and marital status;
  • Internet or network activity information, such as browsing history and interactions with our websites;
  • Biometric information
  • Geolocation data, such as device location;
  • Audio, electronic, visual and similar information, such as call and video recordings;
  • Professional or employment-related information, such as work history and prior employer;
  • Education information subject to the federal Family Educational Rights and Privacy Act, such as student records and directory information; and
  • Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.

Personal information may be collected directly from California residents themselves or from other parties including, but not limited to, joint marketing partners, public databases, providers of demographic data, publications, professional organizations, social media platforms, people with whom you are connected on social media platforms, caregivers, companies and other third parties that help us screen and onboard individuals for hiring purposes, and other third parties.

We may use your personal information to operate, manage, and maintain our business, to provide our products and the Services, for employment purposes, and to otherwise accomplish our business purposes and objectives. Our business purposes and objectives include, for example, developing, improving, repairing, and maintaining our products and Services; personalizing, advertising, and marketing our products and the Services; conducting research, analytics, and data analysis; maintaining our facilities and infrastructure; undertaking quality and safety assurance measures; conducting risk and security controls and monitoring; detecting and preventing fraud; performing identity verification; performing accounting, audit, and other internal functions, such as internal investigations; complying with law, legal process, and internal policies; maintaining records; and exercising and defending legal claims.

We do not “sell” your personal information. For purposes of this Notice, “sell” means the disclosure of personal information for monetary or other valuable consideration but does not include, for example, the transfer of personal information as an asset that is part of a merger, bankruptcy, or other disposition of all or any portion of our business.

If you are a California resident, you have the following rights with respect to your personal data under the CCPA:

  • Information. You may request that we disclose to you the following information covering the 12 months preceding your request:
    • The categories of personal information we collected about you and the categories of sources from which we collected such personal information;
    • The specific pieces of personal information we collected about you;
    • The business or commercial purpose for collecting personal information about you; and
    • The categories of personal information about you that we otherwise shared or disclosed and the categories of third parties with whom we shared or to whom we disclosed such personal information.
  • Access. You may request a copy of the personal information that we maintain about you.
  • Deletion. You may request that we delete personal information we collected from you.
  • Opt out of sales. You may ask us not to sell your personal information.
  • Nondiscrimination. You are entitled to exercise the rights described above free from discrimination. This means that we will not penalize you for exercising your rights by taking actions such as:
    • Denying you goods or services
    • Increasing the price/rate of goods or services
    • Decreasing the service quality
    • Suggesting that we may penalize you as described above for exercising your rights

To submit any requests relating to the rights described above, please contact us at dataprivacy@acorda.com. Please be advised that these rights are not absolute, and we may decline your request where an exception applies, such as where the disclosure of personal information would adversely affect the rights and freedoms of another California resident or where the deletion of personal information is not possible due to our compliance with a legal obligation.


Notice to Nevada Consumers:

Nevada Residents as Covered by Nevada Privacy Law.

We do not sell “Covered Information” as defined under Nevada law. If you would like to make a further inquiry regarding the selling of your covered information, as defined under Nevada law, please contact us at dataprivacy@acorda.com.


Notice to Texas Users:

Texas Residents

Pursuant to the Texas Health and Safety Code, Sec. 181.154, please be advised that if we receive any data that identifies you and relates to your past, present or future physical or mental health, healthcare or payment for your healthcare, such data may be subject to electronic disclosure by such means as file transfers or email.


© 2022 Acorda Therapeutics, Inc. All rights reserved.