Allegria Therapeutics AG – Privacy Policy
Last update: 11 August 2026
Allegria Therapeutics AG (also “we“, “us“) is the operator of this website and describes in this Privacy Notice what it does with your personal data when you use this website and contact us via this website. We use the word “data” here interchangeably with “personal data“. “Personal data” means data relating to identified or identifiable individuals, which means that the relevant data, in combination with additional data, make it possible to draw conclusions about the identity of these individuals. “Processing” means any operation that is performed on personal data, such as collection, storage, use, alteration, disclosure and erasure.
When appropriate, we will provide a just-in-time notice to cover any additional processing activities not mentioned in this Privacy Notice. In addition, we may inform you about the processing of your data separately, for example in consent forms, terms and conditions, additional privacy notices, forms and other notices.
If you disclose data to us or share data with us about other individuals, we assume that you are authorized to do so and that the relevant data is accurate. When you share data about others with us, you confirm that. Please make sure that these individuals have been informed about this Privacy Notice. If you share data about third parties with us, we will assume that you are authorized to do so and that the data is accurate. Please make sure that these third parties have been informed about this Privacy Notice.
This Privacy Notice is aligned with the EU General Data Protection Regulation (“GDPR“) and the current and revised Swiss Data Protection Act (“DPA“). However, the application of these laws depends on each individual case.
1. Who is the controller for processing your data?
Allegria Therapeutics AG is generally the controller for the processing of personal data under this data protection declaration, unless we tell you otherwise in an individual case. There may also be constellations in which we are responsible for data processing together with third parties. In these cases, third parties process personal data either as independent controllers or, if they participate in determining the purpose or means of the processing, with us as joint controllers. If you have any questions about our responsibilities, the processing of your personal data or this Privacy Notice, please contact us:
Allegria Therapeutics AG
Aeschenvorstadt 48
4051 Basel
info@allegriatx.com
2. What data do we process and for what purposes?
When using this website and when you contact us through it, personal data may be processed. The most important categories include contact data (e.g. name and e-mail address), communication data (e.g. business communication content and the time of communication) and technical data. Technical data are, for example, IP addresses, information on the operating system or the time of the server request and individual identification codes (e.g. cookies and similar technologies; more detailed information on this can be found in section 7). The technical data generally do not allow any conclusions to be drawn about your identity. However, they can be linked to other data categories and thus potentially to you (e.g. in the context of user accounts, registrations and contract processing).
In individual cases, further categories of personal data may be processed.
With regard to the operation of this website, we process technical data in particular for the purposes of system administration, for the functioning of the website as such or certain functions, for the analysis and optimization of website use, relationship management, statistical and backup purposes. If you contact us, for example through the contact form on this website, we will also process your personal data, in particular contact and communication data, for the purposes of communicating with you, for compliance with any legal requirements, for safeguarding our rights and for internal company administration and support.
We do not carry out profiling or automated individual decisions for these purposes.
Please do not send us health data or other sensitive personal data through the contact form or by e-mail. If you do so nevertheless, we will process that information only as far as necessary to respond to you.
In many cases, you provide us with personal data yourself, for example when you contact us. However, we may also collect your personal data ourselves (e.g. technical data when you use this website) and, where permitted, collect it from publicly accessible sources (e.g. debt collection register) and from authorities or other third parties. Categories of data that are not collected from you are as follows: Information from public registers, correspondence and meetings with third parties, information relating to your professional functions and activities and information we need to contact and communicate with you.
3. On what basis do we process your data?
Insofar as the GDPR is applicable and we require a legal basis for the processing of personal data, we generally rely on one or more of the following legal bases, depending on the purpose of the processing:
Conclusion or performance of a contract: The processing is necessary in order to conclude or perform a contract with you or the entity you represent.
Compliance with a legal obligation: The processing is necessary in order to comply with a legal obligation to which we are subject.
Legitimate interests: The processing is necessary for our legitimate interests or those of a third party, in particular to carry out the processing operations for the purposes described in section 2 and for the disclosure of data in accordance with sections 4 and 5 and to achieve the related purposes. Our legitimate interests also include compliance with legal requirements where this is not already recognized as a legal basis by applicable data protection law (e.g. laws in the European Economic Area [EEA]). This also includes marketing our products and services, seeking to better understand our markets and safely and efficiently managing and developing our business, including its business activities.
Consent: Processing is based on your consent. In these cases, we will inform you separately about the processing purposes concerned. You can revoke your consent at any time with effect for the future, using the consent tool on our website where your consent relates to cookies or embedded content, or by notifying us; our contact details can be found in section 1. Once we have received notification of the withdrawal of consent, we will no longer process your data for the purpose or purposes for which you gave your consent, unless there is another legal basis for doing so. However, the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
In certain cases, other legal bases may apply. In this case, we will inform you separately.
4. Who do we disclose your data to?
We may disclose personal data to our contractual partners, to the extent that this is helpful for communicating with you and dealing with your enquiries.
We may also disclose personal data to third parties whose services we use (e.g. IT service providers, hosting providers, management consultants and professional advisors). In particular, this website is hosted by cyon AG (Basel, Switzerland), which processes technical data such as server access logs (IP address, date, time, requested page and browser information) on our behalf as our processor, in order to operate and secure the website. In general, these service providers process personal data as processors.
In individual cases, we also disclose personal data to other third parties for their own purposes (e.g. in the case of a legal obligation to disclose to a public authority).
We may also disclose personal data in connection with financing rounds, due diligence exercises, licensing arrangements, research collaborations or a sale of the company or of parts of its business. In these cases, we disclose only what is necessary and require the recipient to keep the data confidential.
5. Will your data be disclosed abroad?
We may also disclose personal data to third parties who are not located in Switzerland. Your data may therefore be processed in the EEA but, in exceptional cases, in any country in the world. If you load the video embedded on our website (see section 8), technical data is also transferred to Vimeo.com, Inc. in the United States (certified under the Swiss-U.S. Data Privacy Framework). The countries in question may not have laws that protect your personal data to the same extent as in Switzerland or the EEA. If a recipient is located in a country without adequate legal data protection, we will contractually oblige the recipient to comply with data protection insofar as it is not already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exceptional provision, for example in connection with legal proceedings abroad, where the disclosure is necessary to perform a contract, where you have given your consent, or where you have made the data generally accessible and have not objected to their processing.
6. How long do we process your data?
We process and store your personal data for as long as our processing purposes, the legal retention periods and our legitimate interests require or storage is technically necessary. If there are no legal or contractual obligations to the contrary, we delete or anonymize your data after the storage or processing period has expired as part of our normal processes.
7. Do we use cookies and similar technologies and how can they be disabled?
On our website, we use cookies and similar technologies with which we and third parties engaged by us can recognize you during your use and possibly also track you over several visits. Cookies and similar technologies are used for this purpose. Cookies of third-party providers are only set once you have consented (see section 8).
Cookies are files that are automatically stored on your device when you visit our website. Cookies contain a unique identifier (ID) that allows us to distinguish visitors from each other, but usually without identifying them. Depending on their intended use, cookies contain other information that may relate to the pages visited and the length of time a page was visited. We use both session cookies, which are deleted again when the browser is closed, and permanent cookies, which remain stored for a certain period after the browser is closed (usually between a few days and three years) and are used to recognize website visitors on a subsequent visit.
Where we ask for your consent to cookies, you can change or withdraw your choice at any time using the consent tool on our website. You can configure your browser settings to block certain cookies or similar technologies or to delete existing cookies and other data stored in the browser. You can also integrate software into your browser that blocks tracking by certain third parties. You can find more detailed information on this on the help pages of your browser (usually under the keyword “data protection”). Please note that the functionality of our website may be limited if you block cookies and similar technologies.
8. Social media and embedded content
On our website, we link to our company page on LinkedIn, as well as to the personal LinkedIn profiles of individual team members. For the purpose and scope of the data collection and the further processing and use of the data by the social networks, as well as your rights and setting options in this regard, please refer to the data protection information of the respective social networks.
We embed video content from third-party providers, in particular Vimeo, on our website. When you visit a page containing such embedded content, a connection to the provider’s servers may be established, which may allow the provider to receive technical data such as your IP address and browser information and to set cookies. These providers process data as independent controllers. For information on their data processing practices and your options in this regard, please refer to Vimeo’s privacy policy at https://vimeo.com/privacy.
9. What rights do you have?
To help you control the processing of your personal data, you have the following rights in relation to our data processing, depending on the applicable data protection law:
The right to request information from us as to whether and what data we process from you;
The right to have us correct data if it is inaccurate;
The right to request erasure of data;
The right to object to our further processing of your data (provided that we may continue processing where justified);
The right to request that we provide certain personal data in a commonly used electronic format or transfer it to another controller;
The right to withdraw consent, where our processing is based on your consent;
The right to receive, upon request, further information that is helpful for the exercise of these rights.
If you wish to exercise your rights, you can write to us at the contact details mentioned in section 1. In order to prevent abuse, we need to identify you (e.g. by means of a copy of your identity card if identification is not possible otherwise).
Please note that in certain cases these rights may be restricted, excluded or made dependent on the fulfilment of certain conditions. We will inform you about this in individual cases.
If you do not agree with the way we handle your rights or with our data protection practices, please let us know. You can also lodge a complaint with the competent supervisory authority if you have doubts about the lawfulness of the processing of your personal data. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC), who can be contacted here: https://www.edoeb.admin.ch/en/contact-2. lawfulness of the processing of your personal data. The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC), who can be contacted here: https://www.edoeb.admin.ch/en/contact-2.
10. Can we update this Privacy Notice?
This Privacy Policy does not form part of any contract with you. We may change this Privacy Notice at any time without notice. The version published on our website is the current version.