Website privacy notice

This website (the “Site”) is operated by Mundipharma Research Limited (“Mundipharma Research”), also referred to in this Site as “we” or “us” or “our”. This Site is intended for use by members of the general public, healthcare professionals, partners and service providers.

Please read the following carefully.

Mundipharma Research takes the privacy of your personal data very seriously. In the event that you send us any of your personal data, we are committed to collecting, maintaining, and securing personal data about you in accordance with our internal data protection policies and local laws.

This Privacy Notice describes how we will process your information when you use this website, or otherwise provide personal data to us through the means described in this Privacy Notice. This Privacy Notice supplements other privacy notices that we may provide on our website or through other means from time to time when we process your information.

Please note this Privacy Notice does not cover any third party sites referred to or accessed using links or buttons on this Site. These third party sites may have their own terms and conditions and privacy policies. We are not responsible for the terms and conditions, privacy policy or content of any website referred to or accessed through this Site.

This Site isn’t intended for use by children (under 16 years old), however the legal representative of a child may exercise the rights set out in this Privacy Notice on behalf of the child.

To read more about how we use your personal data, please view the topic of interest below. A copy of this notice can be viewed and downloaded here. 

CONTENTS:

1) PERSONAL DATA COLLECTED USING THIS SITE
• Adverse Event Reporting
• Careers
• Website and Cookies
• Mobile Applications (Apps)
2) PERSONAL DATA COLLECTED THROUGH OUR BUSINESS OPERATIONS
3) PERSONAL DATA COLLECTED THROUGH SOCIAL MEDIA PAGES
4) PERSONAL DATA COLLECTED DURING OUR CLINICAL TRIALS
5) PERSONAL DATA COLLECTED FOR OTHER RESEARCH
6) PERSONAL DATA COLLECTED FROM OTHER SOURCES
7) THE BASIS FOR USING YOUR INFORMATION
8) SHARING YOUR PERSONAL DATA
9) LOCATION OF PERSONAL DATA WE COLLECT
10) TRANSMISSIONS USING THE INTERNET
11) DATA RETENTION
13) YOUR RIGHTS
14) DEFINITIONS

If you have any queries regarding this Privacy Notice, please contact us using the email address: [email protected]

This Privacy Notice is reviewed and updated from time to time. If we update the terms, we will provide notice through our home page, or by other means, so you can to review the changes. Please check back if you continue to use this Site or interact with Mundipharma Research.

1) Personal data collected using this site 

Mundipharma Research is the data controller for the purposes of using this Site. Mundipharma Research may collect personal data when you provide it to us, including:
• your name and other contact details
• records of your correspondence if you contact us, such as emails
• details of your use of this Site
• other technical data, such as IP address, browser type and operating system
• communications data, such as your preferences in receiving communications from us

The personal data you provide to us through this Site will be used for the following purposes:
• providing you with information and/or services
• understanding our business needs and improving our products and/or services
• communications regarding our products, therapy areas and/or services
• technical support, and to ensure that content from this Site is presented effectively for you and your computer or device

as well as the use(s) set out in the other Sections of this Privacy Notice.

We may also use your personal data to comply with applicable laws, or to perform a contract we have entered into with you, or other purposes for which you have given your consent. If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as paying you), or we may be prevented from complying with our legal obligations. In this case, we may have to cancel the provision of a product or service or other arrangement you have with us, but we will notify you if this is the case at the time.

Adverse Event Reporting

An adverse event can be any untoward medical occurrence in a patient or clinical trial subject administered a medicinal product. It includes an unfavourable and unintended sign, symptom, or disease, associated with the use of a medicinal product, whether or not considered related to the medicinal product.

If you experience an adverse event when using one of our products, click here to find out how you should report an adverse event.

Please note that healthcare professionals are required to report actual and suspected adverse events of their patients to us. We may also be provided with information about an adverse event that affected you by other third parties, such as nurses, pharmacists, lawyers, relatives or other members of the public.

Any personal data we receive regarding adverse events will be protected and kept confidential in line with our internal data protection policies and as well as local laws. The information provided will be used for the purpose of drug safety surveillance and to enable us to deal with your enquiry appropriately. It may be shared with health authorities and other third parties who are also responsible for drug safety surveillance. To learn more click here.

Any personal data received by health authorities and/or third parties will be processed in accordance with their own privacy policy.

Careers

The Careers section of this Site provides you with an opportunity to express an interest in a role being advertised. If you do express an interest, Mundipharma Research may use the details you provide to consider your application for the role. We may also keep hold of your details for future roles if you expressly consent to this. Please read our Candidate Privacy Notice for more information, which can be found here.

Website and cookies

When you visit this Site, Mundipharma Research automatically collects information by using cookies such as your browser type and operating system, websites you visited before and after visiting our websites, standard server log information, and Internet Protocol (IP) addresses.

An IP address is an assigned number, similar to a telephone number, which allows your computer to communicate over the Internet. We pool this information and may combine it with other information to produce anonymous, aggregated statistical information which is helpful to us in improving our products and/or services. This information includes:

• the total number of visits to our websites and mobile applications
• the number of visitors to each page of our websites and mobile applications
• the domain names of our visitors’ internet service providers

For detailed information on the cookies we use and the purposes for which we use them see our Cookie Policy by clicking here.

Mobile Applications (Apps)

From time to time we may use third party apps for business purposes. Please read the privacy policy linked to the app in order to understand how your personal data will be used.

2) Personal data collected through our business operations

As well as information collected from you through this Site, we may obtain personal data in other ways, such as by phone, email or in paper form during the course of our business operations. In most instances, Mundipharma Research is the data controller for such activities. This information could include:

• your name and other contact details
• records of your correspondence with us
• your billing and payment information if you are providing services to us

The personal data you provide to us will be used for the purposes of:

• administering a contract we have entered into with you
• providing you with information and/or services
• understanding our business needs and improving our products and/or services
• holding discussion forums, such as scientific advisory boards
• communications regarding our products, therapy areas and/or services

as well as the use(s) set out in the other Sections of this Privacy Notice.

We may also use your personal data to comply with applicable laws, or to perform a contract we have entered into with you, or other uses for which you have given your consent. If you fail to provide certain information when requested, we may not be able to perform the contract we have entered into with you (such as paying you), or we may be prevented from complying with our legal obligations. In this case, we may have to cancel the provision of a product or service or other arrangement you have with us, but we will notify you if this is the case at the time.

In addition to the personal data we receive directly from you, we may also receive personal information from our business contacts or from others (about themselves or about other individuals) during the course of our business operations. We will handle that information in accordance with this Privacy Notice.

If you are a healthcare professional who provides services to us, information regarding disclosure of payments for such services can be found here. Before we disclose such information on an individual basis, we will seek your written consent. You may withdraw your consent to disclosure on an individual basis.

Employees, contractors and workers who wish to find out more should request a copy of our Employee Data Privacy Notice.

3) Personal data collected through social media pages

Mundipharma Research have a LinkedIn social media page. LinkedIn is the data controller for the purposes of using their websites and services. Please ensure you check their privacy statement when using their services.

Mundipharma Research uses LinkedIn and may collect personal data from LinkedIn to facilitate recruitment to its business or an Associate’s business. As such, you may receive a communication from us via LinkedIn if you hold a LinkedIn account.

For further information regarding our use of candidate personal data for recruitment, please click here.

By participating in social sharing on our social media pages, you may disclose personal information about yourself. Any information you post or disclose in this way will become public information, and may be available to visitors to these pages and to the general public. You should be very careful when deciding to disclose your or any third party’s personal information, or any other information, on social medial pages or in any communications with us. You may also disclose personal information if you include third-parties in your electronic communications with us.

4) Personal data collected during our clinical trials

Before you participate in one of our clinical trials, you will be asked to read and sign an informed consent form. This form usually contains information about the type of personal data we will collect and how your personal data and any samples will be used during and after the clinical trial, including for future medical and pharmaceutical research activities.

We cannot enroll a patient, including a child, without the prior, verifiable consent of the patient, or his or her legal representative.

Please be aware that consent to participate in a clinical trial or research is not the same as consent to process personal data. Whilst you will be provided with information about the type of personal data that will be collected and how it will be used, if you consent to the research it is then assumed that personal data required to publish the results of that research and make medical use of the product being tested can be processed.

For further information about the use of data from our clinical trials, studies and research, please click here.

5) Personal data collected for other research 

There are many patient registries and databases which hold personal data, including health information. The registry and database owners are the data controllers of the personal data they collect. We have licenses to use patient registries and databases as part of our business operations so we can conduct research.

We may also use human samples collected by third parties from people whom have consented to their samples being used for research purposes.

There are certain exceptions as to when we or a third party whom we contract with needs to obtain consent to undertake research.

6) Personal data collected from other sources

We may collect personal data from other third parties whom act as data controllers. Where we are a data processor of that personal data, we will only use the personal data in accordance with the instructions of the data controller. Our contracts with such third parties require that they are legally able to provide the personal data to us. We may also collect personal data from public sources, for example, when we attend conferences or training events in order to stay in contact with you or to enquire about services for one or more of our therapy areas.

7) The basis for using your information

Before we process your personal data, we need a legal basis for doing so. Our internal records document this legal basis. In general, we will use your personal data using one or more of the following bases:

For legitimate business purposes: We may use your personal information to improve your experience of this Site, or the operation of our business.
To perform a contract to which you are, or will be, a party: We may need to process your personal information to perform the contract we have entered or will enter into with you (such as paying you).
To comply with our legal obligations: It is important to us that we are able to comply with laws, regulations and industry guidance. They affect the way in which we run our business and help us to make our products and services as safe as we can.
Where processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes: As a pharmaceutical company, we strive to improve patient healthcare through our research and development activities. To this end, we may sponsor or fund clinical trials and other forms of research, perform statistical analyses’ and archive the results which require processing of personal data. We must also use adverse event reports for monitor the safety of our products.
Where you have consented: We may need your consent, which must be freely given, specific, informed and unambiguous, to allow us to use your personal information for one or more of the purposes set out above. See the “Your Rights” section for information about the rights that you have if we process your information on the basis of your consent.

8) Sharing your personal data

Mundipharma Research limit access to your personal data to those employees, agents, contractors, professional advisers (such as lawyers, bankers, auditors, accountants and insurers), service providers (such as the design and host contractor for this Site), Associates and other third parties who have a business need to know. If they are a data processor, they must only process your personal data on our instructions and they are subject to a duty of confidentiality.

We may need to share your personal information with a government authority, regulator or to otherwise comply with the law.

We may also disclose your personal data to third parties:
• if Mundipharma Research is under a duty to disclose or share your personal information in order to comply with any legal obligation
• in the event that Mundipharma Research sells, buys, merges or reorganises any business or assets, in which case Mundipharma Research may disclose your personal information to the prospective acquirer of such business or assets
• if Mundipharma Research or substantially all of its assets is acquired by or merged with a third party, in which case personal data held by Mundipharma Research may form part of the transferred or merged assets

Mundipharma Research does not sell, rent, or trade personal data it collects with third parties. Any third parties to with whom Mundipharma Research shares personal data are not permitted to sell, rent, or trade such personal data.

We have put in place appropriate security measures to prevent your personal information from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

9) Location of personal data we collect

Some of the personal data collected using this Site and third party sources may be stored or processed by our Associates and carefully selected third parties using computers and servers located in other countries, including by means of cloud computing. Such computers and servers may be located both inside and outside of Europe, where data protection laws may differ from the country you live in. We are only permitted to transfer personal data outside of the European Economic Area where there is a legal basis for the transfer – for example, (A) the country of the recipient(s) ensures an adequate level of protection, (B) an international arrangement means the transfer can take place (such as the US EU privacy shield), (C) suitable contractual protections are in place (including European Commission-approved Standard Contractual Clauses), (D) we have obtained your express consent to such transfer, or (E) the transfer is necessary for important reasons of public interest. In any event, Mundipharma Research will ensure suitable security measures are in place to protect your personal data.

10) Transmissions using the internet 

Unfortunately, the transmission of information via the Internet is not completely secure. Although Mundipharma Research will use reasonably commercial efforts to protect your personal data, we cannot guarantee the security of your data transmitted using the Internet. Anything you send by email or using the Internet is at your own risk. Once Mundipharma Research has received your personal data, we will secure your information in accordance with our security procedures and controls to try to prevent unauthorised access, alteration or loss.

11) Data retention

We will retain your personal data in accordance with our Record Retention Policy. Generally, we will only retain personal data for the period necessary to fulfil the purposes for which the Personal Data was collected, unless a longer retention period is required or permitted by law or we have justifiable reasons for doing so.

12) Automated decision making

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making, unless we have a lawful basis for doing so and we have notified you.

13) Your rights

You have the right at any time to request information about the personal data processed by us, and to verify its accuracy and, if necessary, correct it. Under certain circumstances, you have right to restriction of processing of your personal data, right to erasure of your personal data, and right to data portability, subject to exceptions. You also have the right to object to the processing of your personal data where we process it on the basis of our legitimate interests, except when it is processed:

• for scientific or historical research purposes or statistical purposes, and it is necessary for the performance of a task carried out for reasons of public interest, or
• on the basis of a compelling legitimate interest which override the interests of the individual, or
• in order to establish, exercise or defend legal claims

If you have provided consent for us to process your personal data, you have a right to withdraw your consent to future processing of your personal data with limited exceptions. The withdrawal of consent shall not affect any processing based on consent before its withdrawal.

Mundipharma Research has assigned a data protection officer responsible for overseeing our compliance with EU data protection law, which you may contact at [email protected]; or c/o the Data Protection Officer, Mundipharma Research Limited, Unit 194 Cambridge Science Park, Milton Road, CB4 0GW in case of any questions or concerns regarding the processing of your personal data. Please explain your relationship and/or interactions with us, as well as the specifics of your query when contacting us.

If you are unhappy with how we process your personal data, you have a right to complain to the UK Information Commissioner’s Office (“ICO”). We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

14) Definitions

Associates” means any organisation within the Mundipharma network of independent associated companies.

data controller” means the company or organisation that, alone or jointly with others, determines the purpose and means of processing personal data. It is responsible for the protection of personal data that it collects and processes.

data processor”, means the company or organisation that processes personal data on behalf of the data controller.

personal data” means any information relating to an identified or identifiable natural person.

 

This Privacy Notice was last updated on 06 November 2018.