Website privacy notice

This website (the “Site”) is operated by Mundipharma International Limited (“Mundipharma”), also referred to in this Site as “we” or “us” or “our”.

Please read the following carefully.

Mundipharma takes the privacy of your personal data very seriously. In the event that you send us any of your personal data, we are committed to collecting, maintaining, and securing personal data about you in accordance with our internal data protection policies and local laws.

This Privacy Notice describes how we will process your information when you use this website, or otherwise provide personal data to us through the means described in this Privacy Notice. This Privacy Notice supplements other privacy notices that we may provide on our website or through other means from time to time when we process your information.

Please note this Privacy Notice does not cover any third party sites referred to or accessed using links or buttons on this Site. These third party sites may have their own terms and conditions and privacy policies. We are not responsible for the terms and conditions, privacy policies or content of any website referred to or accessed through this Site.

This Site isn’t intended for use by children (under 16 years old), however the legal representative of a child may exercise the rights set out in this Privacy Notice on behalf of the child.

To read more about how we use your personal data, please click on the topic of interest below.

CONTENTS:

PERSONAL DATA COLLECTED USING THIS SITE
- Website and Cookies
THE BASIS FOR USING YOUR INFORMATION
SHARING YOUR PERSONAL DATA
LOCATION OF PERSONAL DATA WE COLLECT
TRANSMISSIONS USING THE INTERNET
DATA RETENTION
AUTOMATED DECISION MAKING
OUR RIGHTS
DEFINITIONS

If you have any queries regarding this Privacy Notice, please contact us via e-mail: data.privacy@mundipharma.com.

This Privacy Notice is reviewed and updated from time to time. If we update the terms, we will provide notice through our home page, or by other means, so you can to review the changes. Please check back if you continue to use this Site.

1) PERSONAL DATA COLLECTED USING THIS SITE

Mundipharma is the data controller for the purposes of using this Site. Mundipharma may collect personal data when you provide it to us, including:

your name and other contact details
records of your correspondence if you contact us, such as emails
details of your use of this Site
other technical data, such as IP address, browser type and operating system
communications data, such as your preferences in receiving communications from us

The personal data you provide to us through this Site will be used for the following purposes:

providing you with information and/or services
understanding our business needs and improving our products and/or services
communications regarding our products, therapy areas and/or services
technical support, and to ensure that content from this Site is presented effectively for you and your computer or device

as well as the use(s) set out in the other Sections of this Privacy Notice.

We may also use your personal data to comply with applicable laws or other purposes for which you have given your consent.

Website and cookies

When you visit this Site, Mundipharma automatically collects information using cookies such as your browser type and operating system, websites you visited before and after visiting our websites, standard server log information, and Internet Protocol (IP) addresses.

An IP address is an assigned number, similar to a telephone number, which allows your computer to communicate over the Internet. We pool this information and may combine it with other information to produce anonymous, aggregated statistical information which is helpful to us in improving our products and/or services. This information includes:

the total number of visits to our websites and mobile applications
the number of visitors to each page of our websites and mobile applications
the domain names of our visitors’ internet service providers.

For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy.

2) THE BASIS FOR USING YOUR INFORMATION

Before we process your personal data, we need a legal basis for doing so. Our internal records document this legal basis. In general, we will use your personal data using one or more of the following bases:

For legitimate business purposes: For example, we may use your personal information to improve your experience of this Site, or the operation of our business.
To comply with our legal obligations: It is important to us that we are able to comply with laws, regulations and industry guidance. They affect the way in which we run our business and help us to make our products and services as safe as we can.
Where processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes: As a pharmaceutical company, we strive to improve patient healthcare through our research and development activities. To this end, we may sponsor or fund clinical trials and other forms of research, perform statistical analyses’ and archive the results which require processing of personal data. We must also use adverse event reports to monitor the safety of our products.
Where you have consented: We may seek your consent, which must be freely given, specific, informed and unambiguous, to allow us to use your personal information for one or more of the purposes set out above. See the “Your Rights” section for of this Privacy Notice information about the rights that you have if we process your information on the basis of your consent.

3) SHARING YOUR PERSONAL DATA

Mundipharma limits access to your personal data to those employees, agents, contractors, professional advisers (such as lawyers, bankers, auditors, accountants and insurers), service providers (such as the design and host contractor for this Site), Associates and other third parties who have a business need to know. If they are a data processor, they must only process your personal data on our instructions and they are subject to a duty of confidentiality.

We may need to share your personal information with a government authority, regulator or to otherwise comply with the law.

We may also disclose your personal data to third parties:

if Mundipharma is under a duty to disclose or share your personal information in order to comply with any legal obligation;
in the event that Mundipharma sells, buys, merges or reorganises any business or assets, in which case Mundipharma may disclose your personal information to the prospective acquirer of such business or assets;
if Mundipharma or substantially all of its assets is acquired by or merged with a third party, in which case personal data held by Mundipharma may form part of the transferred or merged assets.

Mundipharma does not sell, rent, or trade personal data it collects with third parties. Any third parties to whom Mundipharma shares personal data are not permitted to sell, rent, or trade such personal data.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

4) LOCATION OF PERSONAL DATA WE COLLECT

Some of the personal data collected using this Site and third party sources may be stored or processed by our Associates and carefully selected third parties using computers and servers located in other countries, including by means of cloud computing. Such computers and servers may be located both inside and outside of Europe, where data protection laws may differ from the country you live in. We are only permitted to transfer personal data outside of the European Economic Area where there is a legal basis for the transfer – for example, (A) the country of the recipient(s) ensures an adequate level of protection, (B) an international arrangement means the transfer can take place (such as the US EU privacy shield), (C) suitable contractual protections are in place (including European Commission-approved Standard Contractual Clauses), (D) we have obtained your express consent to such transfer, or (E) the transfer is necessary for important reasons of public interest. In any event, Mundipharma will ensure suitable security measures are in place to protect your personal data.

5) TRANSMISSIONS USING THE INTERNET

Unfortunately, the transmission of information via the Internet is not completely secure. Although Mundipharma will use reasonable commercial efforts to protect your personal data, we cannot guarantee the security of your data transmitted using the Internet. Anything you send by email or using the internet is at your own risk. Once Mundipharma has received your personal data, we will secure your information in accordance with our security procedures and controls to try to prevent unauthorised access, alteration or loss.

6) DATA RETENTION

We will retain your personal data in accordance with the data protection laws. Generally, we will only retain personal data for the period necessary to fulfil the purposes for which the personal data was collected, unless a longer retention period is required or permitted by law or we have justifiable reasons for doing so.

7) AUTOMATED DECISION MAKING

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

8) YOUR RIGHTS

You have the right at any time to request information about your personal data processed by us, and to verify its accuracy and, if necessary, correct it. Under certain circumstances, you have right to restriction of processing of your personal data, right to erasure of your personal data, and right to data portability, subject to exceptions. You also have the right to object to the processing of your personal data where we process it on the basis of our legitimate interests, except when it is processed –

for scientific or historical research purposes or statistical purposes, and it is necessary for the performance of a task carried out for reasons of public interest, or
on the basis of a compelling legitimate interest which override the interests of the individual, or
in order to establish, exercise or defend legal claims.

If you have provided consent for us to process your personal data, you have a right to withdraw your consent to future processing of your personal data with limited exceptions. The withdrawal of consent shall not affect any processing based on consent before its withdrawal.

In case of any questions or concerns regarding the processing of your personal data please contact us data.privacy@mundipharma.com; or c/o Legal and Compliance, Mundipharma International Limited, Unit 196 Cambridge Science Park, Milton Road, Cambridge, CB4 0AB in case of any questions or concerns regarding the processing of your personal data. Please explain your relationship and/or interactions with us, as well as the specifics of your query when contacting us.

If you are unhappy with how we process your personal data, you have a right to complain to the relevant data protection authority. We would, however, appreciate the chance to deal with your concerns before you approach any such authority, so please contact us in the first instance.

9) DEFINITIONS

“Associates” means any organisation within the Mundipharma network of independent associated companies.

“data controller” means the company or organisation that, alone or jointly with others, determines the purpose and means of processing personal data. It is responsible for the protection of personal data that it collects and processes.

“data processor”, means the company or organisation that processes personal data on behalf of the data controller.

“personal data” means any information relating to an identified or identifiable natural person.

Date of Preparation: 21 December 2018.