From time to time, just like many other companies, we collect or use personal data. In this privacy notice, we explain the:
- purposes we collect and use your personal data for;
- categories of personal data we collect for those purposes; and
- how we collect your personal data.
Importantly, we also tell you what your rights are in relation to the personal data we hold and what you can do to enforce them.
If you’d like, you can scroll down and read the whole policy. But you can also jump to the section you are interested in by clicking on one of the headings below.
- CATEGORIES OF PERSONAL DATA WE COLLECT
- HOW WE COLLECT YOUR PERSONAL DATA
- HOW AND WHY WE USE YOUR PERSONAL DATA
- YOUR CONSENT
- HOW WE WILL KEEP YOUR DATA SECURE
- HOW LONG WILL WE KEEP YOUR PERSONAL DATA FOR?
- WHO HAS ACCESS TO YOU PERSONAL DATA?
- DO WE TRANSFER YOUR PERSONAL DATA OUTSIDE OF EUROPE
- WHAT RIGHTS DO YOU HAVE?
- DIRECT MARKETING
- CONTACT US
- UPDATES TO THIS NOTICE
If this privacy notice doesn’t answer your questions, then get in touch with us using the contact details below.
At CSL Behring UK Limited (“we”, “us”, “CSL Behring”) we are committed to protecting your privacy. When you use our websites, we will collect certain information that can be used to identify you (“personal data”).
CSL Behring is the “data controller” of the personal data we collect. This means that we are responsible for decisions about the collection and use of personal data. It also means we are responsible for responding to your questions and requests in relation to the personal data we hold about you.
This privacy notice explains how we use the personal data we collect when you use our website. It also explains the rights you have in relation to your personal data.
2. CATEGORIES OF PERSONAL DATA WE COLLECT
We may collect the following types of personal data from you when you use our website:
- Contact details: this is information that allows us to contact you, such as your name, address, telephone numbers, email addresses and social media handles/user names.
- Demographic information: this is information about your background and which can help us identify you more precisely such as gender, citizenship, date of birth.
- Payment information, purchase and account history: if you are a healthcare professional/ provider or a distributor of products we will collect information about your account and business with us. This may include information such as credit/debit card details, bank account details, billing addresses and customer numbers, as well as records relating to the products and services which you have been purchased from us.
- Personal data in reports and notifications you submit to us: if you submit information to us about our products and services through our website, for example, through a suspected adverse event reporting form, we will collect any personal data you include within your report.
- Health data: if you submit healthcare data to us in relation to our products or services, we will collect any personal data and sensitive personal data you include.
- Records of your discussions with us: when you contact us using the contact options on the website (whether by email, phone, an online form or through social media (such as through Twitter or on Facebook), we may keep a record of the information you provide when doing this.
- How you use our website: we collect information about the pages you look at and how you use them.
- Location information: your smartphone or computer’s IP address may tell us your approximate location when you connect to our website (this will usually be no more precise than a country or city location).
3. HOW WE COLLECT YOUR PERSONAL DATA
We will collect personal data from a number of sources. These include:
- Directly from you: for example, we will collect personal data directly from you when you set up an account with us, purchase products or services from us, complete forms we provide to you, make a report or notification about our products or services or contact us by phone, email, or communicate with us directly in some other way (such as through social media).
- Our website: we will collect information we observe about the way you use our website.
- Third parties: we may collect personal data about you from third parties. This typically includes: credit reference agencies (if we believe this is necessary to facilitate your purchase of products or services from us), or healthcare professional/providers (in relation to your use of our products).
4. HOW AND WHY WE USE YOUR PERSONAL DATA
We collect and use your personal data for the purposes described in the below table.
|Purpose of processing||Categories of data typically processed for the purpose|
|Contact and communicate with you in relation to our business, products and services||All the personal data listed above|
|If you are a healthcare professional/provider or distributor of our products, we will use your personal data to manage your account with us, perform credit checks where this is necessary, take payment for our products and services and arrange delivery||Contact details
Payment information, purchase and account history
Records of your discussions with us
|If you contact us with any queries or complaints, we will use your personal data to help us respond to you||All the personal data listed above|
|In the course of investigating misuse of your account, fraud and debt collection||All the personal data listed above|
|To review our products and services, assess their safety and performance and to develop new products and services||All the personal data listed above|
|To perform online advertising||Payment information, purchase and account history
How you use our website
|To conduct market research||Contact details
Other personal data relevant to the market research being conducted
|To conduct direct marketing||Contact details
Purchase and account history
How you use our website
Any personal data you submit to us about products or services you are interested in
|For individuals to report Suspected Adverse events||Contact details
(Further information about our collection and use of personal data for this purpose will usually be provided by us in a specific Suspected Adverse Event Privacy Notice)
We will only use your personal data when the law allows us to. Most commonly, we will rely on the lawful grounds listed below when we use your personal data.
- Consent: if you have consented to the collection and use of your personal data.
- Contract: if we need to use your personal data to enter a contract between us. For example, where we enter a contract with you to provide you with our products or perform services.
- Legal obligation: if we need to comply with a legal obligation. For example, where we have a legal obligation to report suspected adverse events to our medicinal products.
- Vital interests: if our use of your personal data is needed to protect your vital interests or those of another person. For example, where there is a serious health risk to you or another person.
- Public interest: if our use of your personal data is needed in the public interest.
- Legitimate interest: if our use of your personal data is for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes carefully considered and specific purposes that enable us to enhance the services we provide, but which we believe also benefit our customers and ultimate consumers. It also includes the legitimate interest we have in assessing our products performance and safety and meeting our industry and regulatory obligations.
Sensitive personal data (such as health data) requires us to have additional legal grounds to collect and use it. Most commonly, we will rely on the lawful grounds listed below when we use your sensitive personal data.
- Consent: if you have given us your explicit consent to use your personal data.
- Vital interests: if our use of your personal data is needed to protect your vital interests or those of another person and you are incapable of giving your consent. For example, where there is a serious health risk to you or another person.
- Provision of health care: if your personal data are needed for the provision of health care or treatment.
- Public interest: if your personal data are needed in the public interest, such as protecting against serious threats to health and ensuring high standards of our medicinal products and related healthcare.