Novartis acknowledges and respects the privacy of individuals.
Data controller of Personal data collected
Novartis Pharma AG (“Novartis”, “we”, “us”, “our”) will operate as data controller of the personal data you submit for the registration to the COPD Spotlight Webinars Portal.
Personal data collected
We will not process your personal data if we do not have a proper justification foreseen in the law for that purpose. Therefore, we will only process your personal data if we have obtained your prior consent.
We collect the personal data you have to provide in the registration form, such as your first name, last name, country of practice, medical profession and e-mail address (“Personal data”).
Purpose for collecting personal data and related use
We will use your personal data in order to allow you to register for the portal and watch the video recordings of the webcasts, to contact you and to send you info and any follow up communication related to this portal and its assets.
Who has access to your personal data and to whom are they transferred?
We will not sell, use, share, or otherwise distribute your personal data to third parties except as provided in this Privacy Notice.
We may share your personal data with the following third party:
DORIER SA, Rue du Pré-Bouvier 9, 1242 Satigny, Switzerland
Your personal data may also be transferred to other third parties who act for or on our behalf, for further processing in accordance with the purposes described above, including processing to enable services delivery, data management or technical support.
These third parties may be located in countries or territories that may not offer the same level of data protection as the country in which you reside. They have contracted with us to use your personal data solely for the agreed-upon purpose, and not to sell your personal data to third parties, and not to disclose it to third parties except as may be required by law, as permitted by us under this or as stated in this Privacy Notice.
If we transfer your personal data to external companies in other jurisdictions, we will make sure to protect your personal data (i) by applying the level of protection required under the local data protection/privacy laws applicable to Novartis and (ii) by acting in accordance with our policies and standards.
Your personal data can also be accessed by or transferred to any national and/or international regulatory, enforcement, public body or court where we are required to do so by applicable law or regulation or at their request.
Your personal information may also be shared with our Novartis affiliates as necessary to fulfill the purpose described above.
For intra-group transfers of personal data, the Novartis Group has adopted Binding Corporate Rules, a system of principles, rules and tools, provided by European law, in an effort to ensure effective levels of data protection relating to transfers of personal data outside the EEA and Switzerland.
How do we protect your personal data ?
We have implemented appropriate technical and organisational measures to provide an adequate level of security and confidentiality to your personal data.
The purpose thereof is to protect it against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing. Moreover, when handling your personal data, we:
- - only collect and process personal data which is adequate, relevant and not excessive, as required to meet the above purposes
The data is accessed and processed solely by the relevant personnel, under the responsibility of one of our representatives who is subject to an obligation of professional secrecy or confidentiality.
Your personal data will be stored for the duration 12 months.
What are your rights and how can you exercise them?
By accepting this form, you agree to all of the above. However, you may change your mind at any time and exercise the following rights in accordance and within the limits of the applicable law:
- -the right to access your personal data as processed by us and, if you believe that any information relating to you is incorrect, obsolete or incomplete, to request its correction or updating;
- -the right to request the erasure of your personal data or the restriction thereof to specific categories of processing;
- -the right to withdraw your consent covering the use of your personal data and cells at any time, without affecting the lawfulness of the processing before such withdrawal; and
- -the right to object, in whole or in part, to the processing of your personal data.
If you have a question or want to exercise the above rights, you may send an email to email@example.com with a scan of your identity card for identification purpose, it being understood that we shall only use such data to verify your identity and shall not retain the scan after completion of the verification. When sending us such a scan, please make sure to redact your picture and national registry number or equivalent on the scan.
If you are not satisfied with how we process your personal data, please address your request to our data protection officer at firstname.lastname@example.org, who will investigate your concern.
In any case, you also have the right to file a complaint with the competent data protection authorities, in addition to your rights above.