Vifor Fresenius Medical Care Renal Pharma Ltd. Privacy Policy for myancavasculitis.com

Key takeaways

• What personal data we collect when you use our website

• What we do with your personal data

• How long we store your personal data and why

• Who may have access to your personal data

• Your rights around your personal data

What personal data do we collect and why?

We collect personal data including name, address, phone number, e-mail address and/or any other information that relates to an identified or identifiable natural person as follows:

• If you send us a question or other communication using the contact form on this website or one of the email addresses specified as contact points, we use that information to respond to your request;

• If you send us an adverse event report, we record, process and forward the information in accordance with our legal obligations.

We use aggregated data collected through this website for statistical purposes to help us to understand the use of our website and how we can improve it.

We use a website analytics service to track the use of the website using cookies. This service involves the collection and use of the IP (internet protocol) address of your computer or device. For more information see our cookie policy. The IP address will only be used to identify you in exceptional circumstances, such as for legal proceedings or criminal investigations.

The legal basis for the collection and use of your personal data is our legitimate interest in having a website which allows users to send queries and other communications. In relation to personal data concerning health received via this website in connection with the reporting of safety information, the legal basis is public interest in the area of public health.

With whom do we share your personal data?

If you send us a request through this website, we may share it internally or with other companies of the Vifor Pharma Group, to collect the information required to respond to your request. You can see the location of entities of the Vifor Pharma Group at http://www.viforpharma.com/en/about-vifor-pharma/global-presence

We work with third-party service providers who help us to collect and process safety information and/or who provide other services such as technical support or data hosting. These service providers may have access to your personal data in order to provide the services.

We may also disclose your personal data to:

• official authorities where applicable by law (e.g. reporting adverse events for pharmacovigilance), court order or other legal proceeding;

• our legal and other expert advisors;

• distributors, license partners or other companies with whom we collaborate for the purposes specified in this privacy notice.

These service providers and collaboration partners are legally bound to keep all personal information confidential and to use it only to perform the services for which we engaged them or to comply with legal pharmacovigilance obligations.

We could disclose your personal data to third parties in connection with the sale or transfer of all or part of our business, in which case we would require the third parties to treat those data in accordance with this privacy policy.

Some of the above-noted parties who receive your personal data as per this privacy policy may be located outside the country where you are located, including in countries whose data protection laws are not regarded by the competent authorities as providing an adequate level of protection for personal data. In such cases, we ensure that appropriate safeguards are in place to protect your personal data, such as EU standard contractual clauses. A copy of the EU standard contractual clauses may be obtained from our Data Protection Officer (GroupDPO@viforpharma.com).

How long do we store your personal data?

We store your personal data for as long as required to fulfill the purposes outlined in this privacy policy, unless a longer or shorter retention period is required or permitted by law. By law we must store your personal data relating to safety information for at least ten years after the medicinal product is no longer available.

What are your rights regarding your personal data?

You are entitled at any time to access your personal data that we have. To the extent legally permissible, you can request that your data be deleted, that errors be corrected or that processing of your personal data be restricted. You can also object to our processing your personal data.

If you would like to exercise your rights, please contact us as described in the section “How to contact us” below. Please note that applicable laws may prevent us from complying with requests to delete safety information or to restrict our processing of it.

You are entitled to lodge a complaint with the supervisory authority.

Links to other sites

We may provide links to other websites that we believe are useful and meet our high standards for information accuracy and utility. However, we cannot guarantee the standards or privacy policies of the websites to which we link. We are not responsible for the content of any website which is not owned by a Vifor Pharma Group company.

Personal data of children

This website is intended for adult use only, i.e. anyone 16 years of age or older. We do not knowingly collect personal data from anyone under the age of 16 through this website. We assume that any person who provides their personal data through this website is 16 years of age or older. If you would like to contact us about personal data that your child (under 16 years old) may have provided without your consent, please see the “How to contact us” section below. If we learn that we have collected any personal data from a child under the age of 16, we will take steps to delete such information promptly.

Updates to this privacy policy

We may update this privacy policy from time to time. In this case, we will post updated versions on this page. If we make significant changes to our privacy policy, we will display a prominent notice of the change on this website so that users are aware of the change. A revised privacy policy will apply only to personal data collected after its effective date (see below).

How to contact us

Please contact us if you have any questions about this privacy policy or if you wish to exercise your privacy rights to your personal data.

The “Controller” of the personal data:
Vifor Fresenius Medical Care Renal Pharma Ltd.
Rechenstrasse 37
CH-9014 St. Gallen
Switzerland
Tel. + 41 58 851 80 00

Our representative in the EU / EEA for data privacy purposes:
Vifor Pharma Deutschland GmbH
Baierbrunner Strasse 29
D-81379 Munich
Germany
dataprivacy_EEArep@viforpharma.com

Our Group Data Protection Officer:
GroupDPO@viforpharma.com
Vifor Pharma Management Ltd.
Flughofstrasse 61
P.O. Box
CH-8152 Glattbrugg
Switzerland
Tel. + 41 58 851 80 00
safety@viforpharma.com

Effective date: 19 January 2021