Charles River Laboratories Website Privacy Notice

We process personal data from our business contacts, customers, website visitors, on-site visitors and other business relations. Depending on the category you belong to, we process the following categories of personal data for the relevant purposes specified in Section 4 (Purposes of Processing Personal Data):

• Identification and Contact Details, such as your name, gender, company name, business function, contact and address details.
• Account and Usage Details, such as your username and password, your Internet Protocol (IP) address, pages you access on our website and what browser you are using.
• Financial Details, such as your credit card or bank details. • Inquiry Details, such as the nature of your inquiry to us, the content of your communication with us and any accompanying information you share in your inquiry.
• Event-Related Details, such as your dietary wishes or disabilities which you may choose to voluntarily share with us when registering for an event, photos or videos taken during an event.
• Visitor Details, such as the time of your visit to us, your vehicle license plate and CCTV footage.
• Other Details, such as personal data that you disclose to us voluntarily.  

We receive your personal data from the following sources: from you as a data subject who interacts with us or uses our services or products; third-party partners such as event sponsors or marketing partners and service providers; others providing information in connection with claims or disputes; publicly available sources. 

Subject to local laws, we may process sensitive or special categories of personal data. This may, for example, include information related to racial or ethnic origin, political opinions, trade union membership, physical or mental health, biometric or genetic data, government identifiers, or similar data which entails a high level of reasonable expectation of privacy. If applicable, you will be specifically informed of the collection and use of such data by Charles River.

We may process the categories of personal data set out in Section 3 (Personal Data We Process) for various purposes. Below you will find an overview of these purposes. Click on any of the general purposes below to read more.

A. Handling inquiries

If you have a question or request, you may contact us through our online contact form, by e-mail or phone. 

We process your personal data for the following specific purposes:

• to administer your question or request, and to direct it to the relevant contact person within our organization;
• to answer and facilitate your question or request, including any data subject right requests, and
• to review and improve the level of service we provide, including through the recording of customer service support engagement. 

If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases (unless otherwise specified in Section 11 (Local Specific Privacy Information)):

• our need to form or perform a contract to which you are subject, or to take pre-contractual steps at your request;
• our legitimate interest, and in particular, our need to handle your questions and requests properly, or
• our need to comply with legal obligations to which we are subject, for example, the handling of data subject right requests.

B. Managing our business

If you have a business relationship with us as a prospective or current customer, supplier or business partner, we may process personal data to establish or manage our business relationship with you.

We process your personal data for the following specific purposes:

• to enter into, maintain and execute our relationship with you, as our current or prospective customer, supplier or business partner;
• to provide and administer our services;
• to communicate with you in light of our commercial relationship;
• to safeguard our business and sites, including for security monitoring;
• to improve our business and conduct business development;
• to facilitate concerns from whistleblowers;
• to initiate disciplinary and legal processes and procedures, including collecting and disclosing evidence for the purpose of legal claims and proceedings, and
• to ensure compliance with legal, regulatory and contractual requirements to which our business may be subject.

If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases (unless otherwise specified in Section 11 (Local Specific Privacy Information)):

• our need to form or perform a contract to which you are subject, or to take pre-contractual steps at your request;
• our need to comply with legal obligations to which we are subject (e.g., for tax purposes when we process your payment details), or
• our legitimate interest, in particular to safeguard our business or to administer and maintain the business relationship with you or the company you represent.

C. Facilitating events

To help you stay informed, Charles River frequently hosts or sponsors events, such as conferences, seminars, symposia, live webinars, workshops or trainings. In addition, we offer e-learnings and on-demand webinars.

We will not publicly list our event attendees, but in certain situations, your contact information and imagery may be visible to other attendees or be shared with affiliated event sponsors or partners.

When attending an event, keep in mind that some events may be photographed, filmed or recorded. If you attend such an event, please be aware that your image and voice may be captured. This imagery may be shared with other attendees and connected parties.

We process your personal data for the following specific purposes:

• in order to organize the event and inform you about it, which may include activities such as informing you of the logistics surrounding the event and giving you access to the content related to the event;
• to manage your information and to share such details with affiliated event sponsors or partners, and
• to follow up after an event for commercial opportunities related to our products or services.

If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases (unless otherwise specified in Section 11 (Local Specific Privacy Information)):

• our need to perform a contract to which you are subject, or to take pre-contractual steps at your request;
• our legitimate interest, and in particular, our need to organize the event or training or to administer and maintain the relationship you have with us, or
• your consent, specifically regarding the desire to receive promotional follow-up communications.

D. Conducting marketing initiatives and administering surveys

As part of our marketing initiatives, we may send you communications. Such communications may include invitations to attend scientific seminars, symposia and webinars. They may also include an invite to complete a survey or to share featured news or resources related to updates at Charles River and the latest in drug discovery and development. We may also engage in other marketing activities, such as social media campaigns, telemarketing and mailing of marketing materials.

Note that if you have signed up to stay connected with Charles River, or to receive promotional communications from us, you are able to unsubscribe at any time by following the unsubscribe instructions included in such communications.

We process your personal data for the following specific purposes:

• to send our existing customers and subscribers communications, including event invitations, relevant news and information about our products and services;
• to send prospective customers invitations to opt-in to communications with event invitations, relevant news or information about our products and services;
• to assess your satisfaction with our products and services, and
• to conduct research on relevant topics, sometimes in collaboration with our partners.

If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases (unless otherwise specified in Section 11 (Local Specific Privacy Information)):

• our legitimate interest, in particular to understand if you are satisfied with our services and to maintain the business relationship you have with us, or
• your consent, specifically to receive communications with event invitations, relevant news or information about our products and services.

E. Administering visits to our sites

When you visit one of our physical sites, we may request your personal data to facilitate your visit and, as a basic security measure, we may perform a security check based on publicly sourced information.

We may also make use of video surveillance systems at some of our sites. If this is the case, this will be communicated to you by dedicated signs.

We process your personal data for the following specific purposes:

• to ensure the safety and security of our visitors and site staff;
• to maintain the safety and security of our property, as well as the information held therein;
• to investigate non-compliance with our policies and procedures, potential criminal activities and other incidents or accidents that might occur on our sites, and
• where relevant, to collect and disclose evidence for the establishment, exercise or defense of legal claims, whether in court legal proceedings or in administrative or out-of-court procedures.

If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases (unless otherwise specified in Section 11 (Local Specific Privacy Information)):

• our legitimate interest, in particular to protect the safety and security of all involved parties.

F. Our Use of Cookies and Similar Technologies

We may use cookies and similar technologies on our website domains. A cookie is a small text file containing small amounts of information which are downloaded to (or read off of) your device when you visit a website through, for example, the browser of your computer, smartphone or any other internet-enabled device. Cookies and similar technologies are widely used to make websites work efficiently and to collect information about your online preferences.

Charles River is the data controller of your personal data. If the cookies originate from a third party, then that third party is also likely to be a data controller. For more information on the processing by such third parties, we refer you to the applicable third-party privacy notice.

Please note that if your browser or device is not set to accept certain cookies from our website, the use of our website’s functionalities can be limited.

The various types of cookies we use may process the following personal data:

Required Cookies
These cookies are essential to enable the basic features of the website to function, such as language and preference settings, providing secure log-in, allowing images to load, or allowing selection of cookie preferences.

Functional Cookies
These cookies allow for analysis of website usage to evaluate and improve the performance of the website. They may be used to recognize and count the number of website visitors, to see how you navigate the website and to record which content you view. This information may qualify as personal data.

Advertising Cookies
These cookies may be used to track your activity across multiple websites and domains. These cookies are often third-party cookies which are not solely controlled by us. For example, advertising cookies may be used to share personal data with advertisers to make advertisements more relevant to you or to allow you to share certain pages with social networks.

To indicate your preferences, navigate to Cookie Preferences at the bottom of our website.

We process your personal data for the following specific purposes:

• to enable the technical and functional management of our websites and to ensure information security;
• to assess, analyze, and improve our products, services and websites, and
• to track your browsing behavior, to personalize content and to provide a more convenient experience for you.

If and to the extent local applicable laws or regulations require a specific legal basis for the processing of personal data, we rely on the following legal bases (unless otherwise specified in Section 11 (Local Specific Privacy Information)):

• our legitimate interest, for those cookies that we use for functional or essential technical purposes and for purely analytical purposes that have a very limited impact on your privacy, or
• your consent, where legally necessary under applicable laws. By providing your consent, you allow us to place certain types of cookies on your device and to process your personal data. This helps us show you advertisements and relevant information tailored to your interests, as well as to analyze campaigns and engage with specific target audiences.

How can you manage your cookies? 
After you accept or decline cookies on your first visit to our website through our cookie banner, you can subsequently update your preferences by clicking on “Cookie Preferences” at the bottom of the browser window.

You can also update your browser settings to block cookies, receive a notification at the same moment a cookie is placed on your device, or delete all stored cookies on your device. These changes can be implemented through your browser settings (often found under “Help” or “Internet Options”). Please see the relevant link below for more information specific to your selected browser type:

• Firefox
• Chrome
• Safari
• Microsoft Edge

For other browsers, please consult the documentation that your browser manufacturer provides.

To limit third party advertising cookies, you can turn off most of these cookies by visiting the following links (but be aware that not all the companies listed on these sites place cookies on our website domains):

• Your Online Choices
• Network Advertising Initiative (NAI)
• Digital Advertising Alliance

You can opt out of the specific Google Analytics Adverting Features we use through your Google Ads Settings, ad settings for mobile apps, by installing the Google Analytics opt-out browser add-on, or by any other available means (e.g., the NAI’s consumer opt-out listed above). For more information on the privacy practices of Google, please visit the Google Privacy & Terms page at policies.google.com/privacy.

Your personal data may be shared by us internally and externally. When third parties are given access to your personal data, we take required contractual, technical and organizational measures to ensure that your personal data is shared to the extent it is legitimate and necessary for the defined purposes.

We may share your personal data with the following categories of recipients:

Charles River Legal Entities

Personal data may be stored and processed in any country where we have facilities or provide services to achieve the purposes set out in this Privacy Notice. Your personal data will be disclosed on a need-to-know basis.

Business Partners

We may disclose your personal data to our global business partners. These include parties involved in the production and execution of orders and other services we provide to you, such as distribution and logistics partners.

Service Providers

We may disclose your personal data to third parties who provide or perform services on our behalf, including but not limited to, cloud storage and software providers, parties who maintain our facilities and parties that provide us with professional services. We have processes in place to assess such third-party service providers to ensure compliance with Charles River’s privacy and data protection policies.

Government and Law Enforcement Agencies

We may disclose your personal data to government bodies, supervisory authorities, law enforcement agencies, or other third parties if we believe this to be necessary or appropriate to:

• comply or respond to a claim, order, investigation, or lawful request;
• protect our (intellectual property) rights, and the (intellectual property) rights and safety of our employees, customers, partners, or others; or
• to investigate or respond to a security threat or any other activity that we consider illegal or unethical.

Disclosures are based on our legitimate interests or the legitimate interests of others (as in the case of responding to a legal claim), or to comply with a legal obligation (as in the case of a valid and lawful request for information from a government or law enforcement agency).

Legitimate Business Reasons

If we are involved in an actual or prospective audit, bankruptcy, merger, acquisition, reorganization, sale of assets or similar situation, your personal data may be transferred to a third party, to the extent required or permitted by law.

If your personal data will be transferred between different jurisdictions, we take the required measures to ensure that your personal data is adequately safeguarded.

Should your personal data be transferred to a country that does not benefit from a formally recognized adequate level of protection, allowing for the free flow of such personal data between different jurisdictions, we will ensure that any legally required safeguards are put in place. This may for example be done through EU Standard Contractual Clauses (SCCs) or similar contractual arrangements recognized in the applicable jurisdictions.

To accommodate data transfers within the Charles River group, we operate under an Intra-Group Data Processing Agreement governed by appropriate contractual data transfer safeguards.

We retain your personal data for as long as necessary to fulfill the purposes mentioned in this Privacy Notice, including for any legal, accounting, or reporting purposes which may require us to retain your personal data in accordance with statutory retention periods.

To determine and document the appropriate retention periods, we have considered several factors, such as the statutory retention period to which we are subject, the purposes for which your personal data were initially collected and the amount, nature and sensitivity of the personal data.

We are ISO/IEC 27001 certified which is a globally recognized standard for information security management. In addition, we have implemented reasonable technical, physical, and organizational measures to protect your personal data against accidental or unlawful destruction, or accidental loss, damage, alteration, unauthorized disclosure, or access.

Depending on the applicable laws, you may have the following rights related to the processing of your personal data:

• the right of access and right to know your personal data;
• the right to correct or update your personal data;
• the right to delete your personal data;
• the right to restrict the use of your personal data;
• the right to object to the processing of your personal data and to decisions based solely on automated processing;
• the right to transfer your personal data;
• the right to revoke given consent; and
• the right to opt-out of sale and sharing of your personal information.

You also have the right not to be discriminated against for exercising these rights.

We maintain an online platform through which you can easily make use of your rights. All data subject right requests will be submitted to our Privacy Team. If you would like to make a data subject right request, you must submit your request by clicking the button below.

Individual Rights

To help protect your privacy and maintain security, Charles River will take steps to verify your identity before granting you access to your personal data or acting on your request. If you wish to submit a request, you will be asked to verify your email address and your identity. Your identity will be verified through a manual process according to which we will cross-check several data elements with you directly by asking a series of questions. You will receive further instructions about the abovementioned verification steps once your request is submitted.

An authorized agent may submit a request on your behalf. The agent must prove their identity and establish that they are authorized to act on a user's behalf by submitting a notarized Power of Attorney or Affidavit.

Note that your data subject rights are not absolute and may be limited in certain circumstances. Should we be unable to honor your data subject right request, we will explain why we are not able to (fully) fulfill your request.

Our websites, products and services are not intended or designed to attract or engage with minors. Where personal data from minors is knowingly collected, we will collect explicit consent from their legal guardian prior to such processing, to the extent required by applicable laws.

Local privacy and data protection laws vary significantly across the world. This Privacy Notice therefore describes how we handle your personal data on an overall level. However, our privacy practices may be subject to applicable laws in the places in which we operate. In line therewith, we have prepared specific information below considering local laws which may apply to the processing of your personal data by us, depending upon your location.

United States

For California consumers, the following applies in line with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act of 2020 (CPRA).

• We collect the personal data described in this Privacy Notice. For California consumers, personal data includes the following categories of (sensitive) personal information defined in the California Consumer Privacy Act (CCPA):
  • Identifiers such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.
  • Commercial information, including records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
  • Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a consumer's interaction with an internet website application, or advertisement.
  • Audio, electronic, visual, or similar information.
  • Professional or employment-related information.
  • A consumer's account log-in, financial account, debit card, or credit card number, password, or credentials allowing access to an account.
  • Inferences drawn from the personal information listed above, such as user interests and preferences.
• To the extent applicable, California consumers have the right to limit the use or disclosure of their sensitive personal information.
• California consumers may also choose to submit their data subject right request by calling our toll-free number at 877.CRIVER.1
• California and other states allow users to opt out of the “sale” or “sharing” of their personal information. “Sale” means disclosing personal information to a third party for money or value. “Sharing” means disclosing personal information to a third party for targeted advertising. Charles River shares personal information for personalized advertising on its websites or other properties. This may be considered “sale” or “sharing” under the law. You can opt-out of this by submitting your request to opt-out here.
• We do not knowingly sell or share (for cross-context behavioral advertising) the personal information of consumers under 16 years of age.

The People’s Republic of China
(for the purpose of this Privacy Notice only, excluding Hong Kong SAR, Macau SAR and Taiwan)

The data controller of your personal data is the Charles River entity with which you have business relations.

The following categories of personal data constitutes your sensitive personal data: credit card or bank details, and other categories of sensitive personal data that you provided to us (e.g. dietary wishes or disabilities). We request your separate consent to the processing of such sensitive personal data and will take enhanced protection measures to protect it.

“Legitimate interest” is not a legal basis available under the Chinese data protection laws. To process your personal data for the purposes described in Section 3 above, we may rely on the following legal basis: (i) our need to form or perform a contract to which you are subject, or to take pre-contractual steps at your request; (ii) our need to comply with legal obligations to which we are subject; or (iii) your consent.

Among the third parties with which we share your personal data as described in Section 5 above, (i) some are entrusted data processors that process your personal data on our behalf in accordance with our instructions. We are responsible for their processing activities; while (ii) the others are separate data controllers having their independent purposes and means of processing your personal data. They are responsible for their own processing activities. We request your separate consent to sharing your personal data with such separate data controllers.

We may transfer your personal data outside of China as described in Section 6 above. We request your separate consent to transfer your personal data with such overseas recipients.

Quebec, Canada

Under Quebec's Act Respecting the Protection of Personal Information in the Private Sector (L.R.Q., c. P-39.1), individuals have the right to access and rectify their personal information held by our organization. They also have the right to: (i) withdraw their consent to the processing of their personal information, (ii) request that any computerized personal information collected from them be communicated to them in a commonly used technological format as well as to any person or body authorized by law to collect such information, and (iii) lodge a complaint regarding the processing of their personal information with the Commission d’accès à l’information. Under certain circumstances, individuals residing in Quebec whose personal information we process may also have the right to request that we cease disseminating this information, or that we de-index or re-index, as the case may be, any hyperlink providing access to their personal information.

Should you wish to exercise these rights or have any questions or concerns about the collection, use, or disclosure of your personal information, please submit your request per the instruction in Section 9 above.

We are committed to protecting the privacy and confidentiality of your personal information in accordance with the provisions of this Act. For further details about our data handling practices, including the types of personal information we collect, the purposes for which we use this information, and the third parties with whom we may share this information, please refer to this Privacy Notice.