PRIVACY POLICY

Last update: June 2020

Besins Healthcare (UK) Ltd. (“We”) is committed to protecting your personal data and to respecting your privacy. We collect and further process personal data pursuant to applicable law, including Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or “GDPR”).

This Privacy Policy explains the reason for the processing of your personal data, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data.

This Privacy Policy applies only for personal data collected through (your use of) this website. If you have questions on personal data that you may have communicated to us through any other channel, please see How can you contact us? below.

Which personal data may we collect and further process?

For most of the pages that make up this website, we may collect information that does not directly identify you such as:

  • the server you are logged onto,
  • the geographic location of the ISP you use,
  • the type of browser you use,
  • your date and time of access
  • website requesting access
  • your language settings
  • your IP address (“IT Information”).

IT Information is obtained through cookies. A cookie is a small file of letters and numbers that is downloaded on to your computer when you visit a website. You can find the list of the cookies we use in our Cookie Settings.

In some cases, in order to contact us, you may have to enter other personal data such as your first name, your name, your phone number, your address and/or your e-mail (“Contact Details”).

Children and other sensitive personal data

We do not collect sensitive personal data pertaining to racial or ethnic origin, sexual orientation, political opinions, religious or philosophical beliefs, health or trade union membership on this website.

We do not knowingly collect or use any personal data from children (we define “children” as minors younger than 18) on this website. We do not knowingly allow children to communicate with us or use any of our online services. If you are a parent and become aware that your child has provided us with information, please contact us using one of the methods specified below (see below “How can you contact us”), and we will work with you to address this issue

If a possibility to contact us through this website is available, this should not be used by you to seek medical advice or report adverse events. If you have a question on our product, we strongly recommend that you contact your doctor. If you want to report an adverse event, please contact your doctor or go to: https://yellowcard.mhra.gov.uk/

What is the purpose of processing?

We process your IT Information for the purpose of measuring user frequency and traffic on our website. That will allow us to better understand how our website is used and how it is useful to the public, and to improve it in accordance with such use. You can find more details on the specific purpose of each cookie in our Cookie Settings.

We process your Contact Details exclusively for the processing of your specific request.

What is the legal ground of processing?

Save as for cookies which are strictly necessary for this website to function, the processing of your personal data occurs only if you consent to it.

You have the right to give or to withdraw your consent at any time. For IT Information, this can be done easily by changing your cookies preferences in the Cookies Settings. For your Contact Details, please see below “How can you contact us”.

How long do we keep your data?

Unless otherwise requested by law, we keep your Contact Details as long as reasonably necessary to process your specific request, i.e. until there has been a final outcome in relation to the case raised by your request.

Unless otherwise requested by law, we keep your IT Information as long as mentioned in our Cookie Settings.

With whom do we share your personal data?

Your personal data can be accessed by a restricted number of our employees who are trained about the importance of privacy and how to handle and manage personal data appropriately and securely.

Depending on the content of your request, we may share your personal data to our affiliated entities and/or to third parties. We will only use third parties providing sufficient guarantees to implement appropriate technical and organisational measures in such a manner that processing will meet the requirements of applicable law and ensure the protection of your rights.

These service providers will mostly be located in countries within the European Union and/or third countries which ensure an adequate level of protection, including Switzerland and the United States of America (in that case, within the privacy shield framework). In the event of a transfer to countries which may offer a lower level of data protection, we enter into data transfer agreements based on the standard contractual clauses for international data transfers as approved by the European Commission.

What are your rights?

To the extent permitted by applicable law (including GDPR), you have the right to ask us:

  • for copies of your personal data (“right of access”)
  • to rectify information you think is inaccurate, and to complete information you think is incomplete (“right to rectification”)
  • to erase your personal information in certain circumstances (“right to erasure”)
  • to restrict the processing of your information in certain circumstances (“right to restriction of processing”)
  • to object to the processing of your personal data (“right to object”)
  • to receive your personal data in a structured, commonly used and machine readable format and to (have) transmit(ted) your personal data to another organization (“data portability”)

Unless if your request is manifestly unfounded or excessive, you are not required to pay any charge for exercising your rights. Unless as otherwise prescribed by applicable law, we have one month to respond to you.

How can you contact us?

We work to high standards when it comes to processing your personal information. If you have questions, queries or concerns, or if you want to exercise one of the rights listed above, please contact us at DataPrivacyUK@besins-healthcare.com and we will respond. Alternatively, you may send a letter to the following address:

Besins Healthcare (UK) Ltd.
Lion Court
25 Procter Street
Holborn
London WC1V 6NY
United Kingdom

Complaints

If you remain dissatisfied, you can lodge a complaint with the competent supervisory authority. In the United Kingdom, the Information Commissioner’s Office (ICO) is the independent authority set up to uphold information rights in the public interest, promoting openness by public bodies and data privacy for individuals. If you want to lodge a complaint, this can be done here: https://ico.org.uk/make-a-complaint/

How will you know whether we have updated this Privacy Policy?

If we change its privacy practices, an updated version of this Privacy Policy will reflect those changes and we will notify you of such changes by updating the effective date at the top of this Privacy Policy. Without prejudice to your rights under applicable law, we reserve the right to amend this Privacy Policy from time to time to reflect technological advancements, legal and regulatory changes and good business practices.

BHUK/2020/072 – Date of Preparation: September 2020