Novartis – General Privacy Notice for Meetings, Congresses and Events and Virtual Platforms

You are seeing this Privacy Notice because Novartis Pharma AG, Lichtstrasse 35, CH-4056 Basel, Switzerland +41 61 324 11 11 is processing information about you which constitutes “personal data” and Novartis AG considers the protection of your personal data and privacy a very important matter.

Novartis AG is responsible for the processing of your personal data as it decides why and how it is processed, thereby acting as the “controller”. It may exercise this responsibility alone or jointly with other company(-ies) in the Novartis group, acting as “co-controller(s)”, In this Privacy Notice, “we” or “us” refers to Novartis AG.

We invite you to carefully read this Privacy Notice, which sets out in which context we are processing your personal data and explains your rights and our obligations when doing so. Should you have any further question in relation to the processing of your personal data, we invite you to contact the Global Data Privacy Officer, Novartis Pharma AG, Lichtstrasse 35, CH-4056 Basel, Switzerland, email: global.privacy_office@novartis.com.

1. What information do we have about you?

This information may either be directly provided by you, by our business partners (i.e. the legal entity for whom you work), by third parties or be obtained through trusted publicly available sources (such as PubMed, Clinical Trials.gov, congress websites or university websites), having obtained your consent to provide us with such personal data where necessary under applicable law. We collect various types of personal data about you, that may include:

  • your general and identification information (e.g. name, first name, last name, email, country);
  • your function (e.g. title, specialty).
If you intend to provide us with personal data about other individuals (e.g. your colleagues), you must provide a copy of this Privacy Notice to the relevant individuals, directly or through their employer.

2. For which purposes do we use your personal data and why is this justified?

2.1 Legal basis for the processing

We will not process your personal data if we do not have a proper justification foreseen in the law for that purpose. Therefore, we will only process your personal data if:

  • we have obtained your prior consent;
  • the processing is necessary for our legitimate interests and does not unduly affect your interests or fundamental rights and freedoms.

2.2 Purposes of the processing

We always process your personal data for a specific purpose and only process the personal data which is relevant to achieve that purpose. In particular, we process your personal data for the following purposes:

  • register with a profile to confirm you as an HCP, because the content on the website is limited to health care professionals, in adherence with regulations in Europe

Note: In order to ensure that the content from ONCOTALKS.EU remains up to date, user-oriented and comprehensive, this website employs Google Analytics, a web-analysis tool from Google Inc. ("Google") that enables us to optimize our Services for you. Google Analytics uses cookies that track your preferences during your visit to our websites. This allows us to simplify navigation, for example, thereby helping us to make the site more user-friendly. The information that is generated in this process (including the IP address) is anonymized, making personal identification impossible. An evaluation for reporting purposes is carried out only after the anonymization process. The data, generated by this Cookie are usually transferred and stored on a server in the USA. As a user of our websites, you always have the option of disabling cookies in your browser settings. Most browsers allow cookies as a default setting. Should you change this setting, this may disrupt certain functions of our websites. Furthermore, you can prevent Google's acquisition and processing of the information that is generated by the cookie and concerns your activity on the website (including your IP address) by downloading and installing a browser plug-in. In this process, your IP-Adress is in a first step reduced to Countries in the European Union or other Countries in the European Economic Community. The actual link to the tool is: http://tools.google.com/dlpage/gaoptout?hl=de Further information on the terms of use and the privacy options of Google are available on: http://www.google.com/analytics/terms/de.html

3. Who has access to your personal data and to whom are they transferred?

We will not sell, share, or otherwise transfer your personal data to third parties other than those indicated in this Privacy Notice.

In the course of our activities and for the same purposes as those listed in this Privacy Notice, your personal data can be accessed by, or transferred to the following categories of recipients, on a need to know basis to achieve such purposes:

  • our personnel (including personnel, departments or other companies of the Novartis group);
  • our suppliers and services providers that provide services and products to us;
  • any third party to whom we assign or novate any of our rights or obligations.
The above third parties are contractually obliged to protect the confidentiality and security of your personal data, in compliance with applicable law.

Your personal data can also be accessed by or transferred to any national and/or international regulatory, enforcement, public body or court, where we are required to do so by applicable law or regulation or at their request.

The personal data we collect from you may also be processed, accessed or stored in a country outside the country where Novartis Pharma AG is located , which may not offer the same level of protection of personal data.

If we transfer your personal data to external companies in other jurisdictions, we will make sure to protect your personal data by (i) applying the level of protection required under the local data protection/privacy laws applicable to Novartis AG (ii) acting in accordance with our policies and standards and, (iii) for Novartis AG located in the European Economic Area (i.e. the EU Member States plus Iceland, Liechtenstein and Norway, the "EEA"), unless otherwise specified, only transferring your personal data on the basis of standard contractual clauses approved by the European Commission or the Swiss Federal Data Protection and Information Commissioner respectively.

For intra-group transfers of personal data the Novartis Group has adopted Binding Corporate Rules, a system of principles, rules and tools, provided by European law, in an effort to ensure effective levels of data protection relating to transfers of personal data outside the EEA and Switzerland. Read more about the Novartis Binding Corporate Rules by clicking here

How do we protect your personal data?
We have implemented appropriate technical and organizational measures to provide an adequate level of security and confidentiality to your personal data. These measures take into account:

  1. the state of the art of the technology;
  2. the costs of its implementation;
  3. the nature of the data; and
  4. the risk of the processing.

The purpose thereof is to protect it against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing. Moreover, when handling your personal data, we:

  • only collect and process personal data which is adequate, relevant and not excessive, as required to meet the above purposes; and
  • ensure that your personal data remains up to date and accurate.
For the latter, we may request you to confirm the personal data we hold about you. You are also invited to spontaneously inform us whenever there is a change in your personal circumstances so we can ensure your personal data is kept up-to-date.

4. How long do we store your personal data?

We will only retain your personal data for as long as necessary to fulfil the purpose for which it was collected or to comply with legal or regulatory requirements. Personal data we hold in our database about you will be stored for 12 months after your last interaction with us.

5. What are your rights and how can you exercise them?

You may exercise the following rights under the conditions and within the limits set forth in the law:

  • the right to access your personal data as processed by us and, if you believe that any information relating to you is incorrect, obsolete or incomplete, to request its correction or updating;
  • the right to request the erasure of your personal data or the restriction thereof to specific categories of processing;
  • the right to withdraw your consent at any time, without affecting the lawfulness of the processing before such withdrawal;
  • the right to object, in whole or in part, to the processing of your personal data;
  • the right to object to a channel of communication used for direct marketing purposes; and
  • the right to request its portability, i.e. that the personal data you have provided to us be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format without hindrance from us and subject to your confidentiality obligations.

If you have a question or want to exercise the above rights, you may send an email to global.privacy_office@novartis.com or a letter at Global Data Privacy, Novartis Pharma AG, Lichtstrasse 35, CH-4056 Basel, Switzerland who will investigate your request.

6. How will you be informed of the changes to our Privacy Notice?

Any future changes or additions to the processing of your personal data as described in this Privacy Notice will be notified to you in advance through an individual notice or through our usual communication channels (e.g. via our internet websites).