HIPAA Privacy Policy / Notice of Privacy Practices

Effective Date: February 13, 2026

‍

THIS NOTICE DESCRIBES HOW MEDICAL INFORMATION ABOUT YOU MAY BE USED AND DISCLOSED AND HOW YOU CAN GET ACCESS TO THIS INFORMATION. PLEASE REVIEW IT CAREFULLY.

‍

Atanis Biotech is committed to obtaining, maintaining, using and disclosing patient protected health information in a manner that protects patient privacy. We urge you to read this Notice of Privacy Practices (“Notice”) carefully in order to understand both our commitment to the privacy of your protected health information and your rights.

‍

This Notice describes how we may use and disclose your protected health information to carry out treatment, payment or health care operations and for other specified purposes that are permitted or required by law. This Notice also describes your rights with respect to your protected health information. “Protected health information” or “PHI” is information about you, including basic demographic information, that may identify you and that relates to your past, present or future physical or mental health or condition and related health care services.

‍

We are required to follow the terms of this Notice. We reserve the right to change our practices and this Notice as and to the extent permitted by law and to make a new Notice effective for all PHI we maintain. Any new Notice will be available upon your request and will be posted on our website.

‍

Atanis Biotech’s Responsibilities

‍

  • Atanis Biotech is required by law to maintain the privacy and security of your PHI.

‍

  • Atanis Biotech will let you know if a breach occurs that has compromised the privacy or security of your PHI.  If your PHI is involved in a breach, we will notify you promptly and within 60 days, as required by law.

‍

  • Atanis Biotech is required to comply with this Notice and make this Notice available to you.

‍

  • Atanis Biotech will not sell or license your PHI to third parties.

‍

  • Atanis Biotech will not use or disclose your PHI other than as described in this Notice unless you tell Atanis Biotech we can in writing. If you tell Atanis Biotech we can, you may change your mind at any time by contacting Atanis Biotech in writing.

‍

Examples of How We Use and Disclose Protected Health Information About You

‍

We may use or disclose your PHI without specific authorization or permission for certain purposes, including:

‍

  • to provide and coordinate the treatment and services you receive. 

‍

  • to others for purposes of billing and receiving payment for treatment and services that you receive. 

‍

  • In order to support our operations. 

‍

How else can we use or disclose your PHI

‍

Atanis Biotech may further use or disclose PHI, as permitted under HIPAA in the following ways:

‍

  • For public health and safety issues.

‍

  • For research: Researchers may be given limited access to your PHI remotely or on-site at Atanis Biotech so that they can develop research projects and identify patients who may potentially qualify to participate in research studies. Other uses or disclosures of your PHI for research purposes are permitted without authorization when your PHI is in the form of a limited data set or once an institutional review board or privacy board has reviewed the research proposal, determined whether you need to provide specific consent for the research use of your PHI and established protocols to ensure the privacy of your information, or determined that the researcher will be provided only with information that does not identify you directly.

‍

  • As required by law: We will disclose your PHI when required to do so by federal, state, or local law.

‍

  • To respond to organ and tissue donation requests,

‍

  • At the request of a coroner, medical examiner or funeral director.

‍

  • To respond to workers’ compensation, law enforcement, the FDA, and other government requests.

‍

  • To respond to lawsuits and legal actions,

‍

Other Uses and Disclosures of PHI

‍

  • You may revoke this authorization in writing at any time. Upon receipt of the written revocation, we will stop using or disclosing your PHI, except to the extent that we have already taken action in reliance on the authorization.

‍

Additional Safeguards and Protections

‍

  • Certain health information, such as mental health, genetic, reproductive health, HIV, or other sensitive data, may be subject to additional protections under federal or state law. We will comply with the most stringent applicable laws.

‍

Cross-Border Handling of Information

‍

  • Some PHI may be securely transmitted to our Swiss laboratory for testing. PHI remains protected under HIPAA at all times and is encrypted in transit and at rest.

‍

Your Health Information Rights

‍

This section explains your rights to your PHI and some of Atanis Biotech’s responsibilities  under HIPAA,

You have the right to:

  • Receive an electronic or paper copy of your PHI.  You can ask to see or get an electronic or paper copy of the portions of your medical record and other PHI we have about you.  

‍

  • Ask to correct your PHI.  If you feel that PHI we maintain about you is incomplete or incorrect, you may request that we amend it. 

‍

  • Request confidential communications.  You have a right to request to receive communications of PHI by alternate means or at alternate locations. For instance, you may request that we contact you about medical matters only in writing or at a different residence or post office box. We will accommodate all reasonable requests.

‍

  • Ask to limit the PHI Atanis Biotech uses or discloses.  You have the right to request additional restrictions on our use or disclosure of your PHI for treatment, payment or health care operations activities, or to individuals involved in your care.  We are not required to agree to those restrictions unless the disclosure is not required by law, and you paid for the service in full out of pocket.

‍

  • Receive a list of certain disclosures of your PHI by Atanis Biotech.  You have the right to receive an accounting of the disclosures we have made of your PHI. The right to receive an accounting is subject to certain exceptions, restrictions, and limitations. Your request must specify the time period for which you would like an accounting, but this time period may not be longer than six years, and a shorter period may apply for some disclosures.

‍

  • Receive a paper copy of this privacy Notice.  You may request a copy of our current Notice at any time.

‍

  • Choose someone to act on your behalf as it relates to your PHI.  If you have given someone medical power of attorney or if someone is your legal guardian, that person can exercise your rights and make choices about your PHI.  We will verify that the person has this authority and can act for you before we take any action.

‍

  • Report a Problem. If you believe your privacy rights have been violated, you can file a complaint with Atanis Biotech’s Privacy Officer. You may also submit a written complaint to the Office for Civil Rights of the U.S. Department of Health and Human Services (contact information below). There will be no retaliation for filing a complaint.

‍

Centralized Case Management Operations 

U.S. Department of Health and Human Services 

200 Independence Avenue, S.W. 

Room 509F HHH Bldg. 

Washington, D.C. 20201

‍

Contact Information

‍

If you have questions, would like additional information about our privacy practices or exercise your rights, you may contact Atanis Biotech’s Privacy Officer at:

‍

Atanis Biotech AG 

Attention: Privacy Officer 

Freiburgstrasse 251

3018 Bern

Switzerland

Email: info@atanis-biotech.com

Phone: +41 77 414 04 97

CLIA # 99D2331750

‍

FAST-PASE® has been evaluated across clinical samples in our validated allergen panel. Performance data, including published studies, are available on our Publications page.

Based on unpublished data from over 10,000 patient samples tested over the past decade.