Data Protection Notice
Thank you for visiting www.biotest.com the website of Biotest U.K Ltd. (hereinafter “Biotest”), thus showing your interest in our organization, products and Web pages.
We attach great importance to the protection of your privacy when using our Web pages; the purpose of this statement is to inform you how your data is processed by Biotest.
1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA.
Biotest (U.K.) Ltd.
First Floor, Park Point, 17 High Street, Longbridge, Birmingham, B31 2UQ
is the entity responsible for all personal data that you provide to us in the context of our existing business relationship or for the purpose of starting a business relationship.
2. CATEGORIES OF PERSONAL DATA COLLECTED BY US
We may collect and process the following categories of personal data in particular:
- Contact details such as full name, position, business address, work phone number, work mobile phone number, work fax number and work email address, mobile device unique identifier and the IP address of your computer if you use our online services.
- Professional information such as specialisations and areas of expertise of healthcare professionals.
- Payment data, such as needed for processing payments (especially in connection with contractual payment obligations) and for fraud prevention, including bank account details.
- Further business information necessarily processed in a business or other contractual relationship with Biotest or voluntarily provided by you, such as orders placed, purchases, services, any kind of procurement processes and other business activities, product feedback, and other information that you provide us with in the context of a business relationship or that result from it.
- Information about your preferences and interests, which we obtain from web tracking or analysis technologies, especially when using our website or from products or other services that we offer online (e.g. content that we make available for download). For example we may collect information about what content you download from our website and what content you viewed or clicked on in what way.
- Information that we obtain from public sources, databases, and from credit reporting agencies.
- Information that we are entitled to collect in order to fulfil our legal and/or regulatory, in particular pharmacovigilance, obligations, which may include information about legal disputes or legal proceedings that you or people you are in a business relationship with are involved in, or information about interactions with you that could be relevant from an antitrust perspective.
- Special categories of personal data. In connection with the registration for and provision of access to an event or seminar, we may ask for information about your health for the purpose of identifying and being considerate of any disabilities or special dietary requirements you may have. Any such information will be used only with your consent. If you do not provide any such information about disabilities or special dietary requirements, we will not be able to take any respective precautions.
- Details of your visits to our premises
3. FOR WHICH PURPOSES WE USE YOUR PERSONAL DATA.
We will only process your personal data for the following purposes ("Permitted Purposes"):
- Planning, performing, managing and administering your contractual relationship (or the contractual relationship of your organisation) with Biotest Group, e.g. by performing business transactions and orders of products or services, as part of all procurement processes by Purchasing, among other things processing associated payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries, and providing support services or providing other services which you or your organisation have ordered or requested, or which Biotest has ordered or requested from you.
- Informing and advising within an existing business relationship through similar or associated products or services of Biotest, provided this is permitted under the applicable law.
- We use personal data of medical professionals, depending on their interests and the nature of our collaboration, possibly also in the context of managing and ensuring our drug safety (pharmacovigilance), carrying out research and development projects, e.g. clinical studies, for informing, inviting to and documenting expert panels and advisory boards and other events, and to manage medical queries.
- Maintaining and protecting the safety of our products, services and websites or other systems, preventing and identifying security risks, fraudulent or other criminal or illegal activities.
- To comply with our legal or regulatory obligations. For example, this can include storing sales documents for tax purposes or sending legally required communications and other notifications, compliance screenings or recording obligations (e.g. based on competition law, export law, trade sanctions and embargo regulations or to prevent white-collar crime or money laundering). In this regard, we may be obliged to check your contact or identity data against relevant sanction lists and confirm your identity in case of a possible match, record information about the collaboration with you if this could be relevant under anti-trust law, and notify the competent supervisory authorities, law enforcement agencies or other competent authorities, or support their investigations.
- Settling disputes, fulfilling our contractual agreements and justifying, exercising, or defending legal claims.
- If you have expressly given us your consent or there is another legal basis, we can use your personal data for the following purposes as well:
- Communicating with you through the communication channels in which you have agreed to be kept up to date about the latest announcements, offers and other information about products, technologies and services of Biotest (including marketing newsletters), and events and projects of Biotest;
- To implement the transparency regime of the UK ABPI Code of Practice for the Pharmaceutical Industry (“the ABPI Code”) by publishing the asset benefits paid to health professionals and other relevant decision makers on our website or on Disclosure UK.
- Administering and carrying out marketing campaigns, market analyses, or other promotional measures or events or
- Profiling and automated processing: We collect information about your preferences on the basis of your activities when you use our websites and any products, downloadable content (e.g. downloading images, documents, information) or other services we offer to you online. On the basis of this information (e.g. which content is downloaded, clicked or viewed for how often and how long), we create a user profile to personalise and foster the quality of our communication and interaction with you (for example, by way of newsletter tracking or website analytics). The logic behind our profiling activities is to identify areas which may be useful or otherwise of interest for you and to inform you about such areas in a more effective and targeted way. The algorithms used apply this logic and automatically deliver the targeted content or information to you.
Please note: Under the European General Data Protection Regulation (Article 21 (2)) you have the right to object to the use of your personal data for direct marketing purposes, including the profiling described above. Please refer to "Your rights" below for further explanation of your rights and how to exercise them.
With regard to marketing-related types of communication (i.e. emails and phone calls), we will where legally required provide you with such information only after you have opted in and provide you the opportunity to opt out if you do not want to receive further marketing-related types of communication from us.
We will not use your personal data to make automated decisions that affect you or to create profiles in any way other than that described above.
The legal bases for processing of your personal data are set forth in Article 6 of the European General Data Protection Regulation. Depending on the above permitted purposes for which we use your personal data, the processing is either necessary for the performance of a contract or other business agreement with Biotest or for compliance with our legal obligations or for purposes of legitimate interests pursued by Biotest or third parties, always provided that such interests are not overridden by your interests or fundamental rights and freedoms. In addition, the processing may be based on your consent where you have expressly given that to us.
4. HOW WE COLLECT AND USE YOUR PERSONAL DATA.
We will typically collect your personal data directly from you when you interact with us, e.g. when you visit our website, communicate with us in relation to our products and services, submit an order, or participate in our customer surveys.
Where legally permissible, we may also obtain your personal data from third parties. In particular, we maintain information about the specialisation of healthcare professionals (especially doctors and pharmacists) for information and advice purposes with the help of OneKey. OneKey is provided and maintained by IQVIA Holdings (UK) Ltd of 210 Pentonville Road, London, N1 9JY. If you transmit your data to us directly or we receive it in another way, the data is not automatically stored in the OneKey database. IQVIA may receive a notice from us and then contact you directly to record or update your data. You can opt out of IQVIA recording your data at any time or contact the data protection officer at IQVIA. Of course you can also notify us at any time if you no longer wish to receive further information from us (see further details about this below)
5. WHERE WE PROCESS YOUR PERSONAL DATA
Biotest is a globally operating enterprise. In the course of our business activities, we may transfer your personal data also to recipients in countries outside the European Economic Area (“third countries”), in which applicable laws do not offer the same level of data protection as the laws of your home country. When doing so we will comply with applicable data protection requirements and take appropriate safeguards to ensure the security and integrity of your personal data, in particular by entering into the EU Standard Contractual Clauses. You may contact us any time using the contact details below if you would like further information on such safeguards.
6. HOW WE PROTECT YOUR PERSONAL DATA
We maintain physical, electronic and procedural safeguards in accordance with the technical state of the art and legal data protection requirements to protect your personal data. These safeguards include implementing specific technologies and procedures designed to protect your privacy, such as secure servers, firewalls and SSL encryption. We will at all times comply with applicable laws and regulations regarding the confidentiality and security of personal data.
7. WHO WE SHARE YOUR PERSONAL DATA WITH
We may share your personal data as follows:
- With our affiliates within Biotest Group worldwide if and to the extent required for the Permitted Purposes and legally permitted. In such cases, these entities will then use the Personal Data for the same purposes and under the same conditions as described above. Please refer to our website (https://www.biotest.com/de/en/company/biotest_at_a_glance_/global_locations.cfm)
- for a list of Biotest Group affiliates with contact details.
- We may also instruct service providers (so called data processors) within or outside of Biotest Group, domestically or abroad (e.g. shared service centres or cloud providers), to process personal data for the Permitted Purposes on our behalf and in accordance with our instructions only. Biotest will retain control over and will remain fully responsible for your personal data and will use appropriate safeguards as required by applicable law to ensure the integrity and security of your personal data when engaging such service providers.
- With courts, law enforcement authorities, regulators or attorneys if legally permitted and necessary to comply with a legal obligation or for the establishment, exercise or defence of legal claims.
- With credit reference agencies and other companies for use in credit decisions, for fraud prevention and to collect debts.
- We share information about the specialisation of healthcare professionals (especially doctors and pharmacists) with IQVIA Holdings (UK) Ltd for information and advice purposes.
- We may also share your personal data with third parties if we sell or buy any business or assets, in which case we may disclose personal data to the prospective seller or buyer of such business or assets, along with its professional advisers. If Biotest or substantially all of its assets are acquired by a third party, personal data held by us about customers and other contacts will be one of the transferred assets.
- Otherwise, we will disclose your personal data only when you direct or give us permission, when we are required by applicable law or regulations or judicial or official request to do so, or when we suspect fraudulent or criminal activities.
8. HOW LONG WE STORE YOUR PERSONAL DATA.
We will hold your personal data as long as required to provide the services, products or information you have requested and to carry out and administer our business relationship with you. If you have asked us not to communicate with you, we will hold this information as long as required to comply with your request. We are also legally required to keep certain types of personal data for certain periods under applicable law (e.g. due to retention obligations under commercial or tax laws). Your personal data will be promptly deleted when it is no longer required for these purposes.
9. YOUR RIGHTS.
Subject to certain legal conditions, you may request access to, rectification, erasure or restriction of processing of your personal data. You may also object to processing or request data portability. In particular you have the right to request a copy of the personal data that we hold about you. If you make this request repeatedly, we may make a charge for this. Please refer to Articles 15-22 of the EU General Data Protection Regulation for details on your data protection rights.
If you have given us your consent for the processing of your personal data, you can withdraw your consent at any time with future effect, i.e. the withdrawal of the consent does not affect the lawfulness of processing based on the consent before its withdrawal. In case consent is withdrawn, we may only further process the personal data where there is another legal ground for the processing or we are legally obliged to do so.
For any of the above requests, please send a brief description of your personal data concerned stating your name, customer number or other identification number (if applicable) as proof of identity to the contact address below. We may require additional proof of identity to protect your personal data against unauthorised access. We will carefully consider your request and may discuss with you how it can best be fulfilled.
If you have any concerns about how your personal data is handled by us or wish to raise a complaint on how we have handled your personal data, you can contact us at the contact address below to have the matter investigated. If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law you can complain to the Information Commissioner’s Office.
10. WEB SERVER LOGS.
We evaluate those Web Server logs for statistical purposes on a regular and anonymous basis in order to ascertain which pages of our website are visited. Thereby, we can get a more precise idea as to the use of our website. This is generally referred to as “Web statistics” and it enables us to optimise our services. In addition, we may use that information in cooperation with your Internet provider and/or public authorities in the event of a misuse of the system to locate the originator of such misuse.
11. IP ADDRESSES.
This website uses Internet Protocol (IP) addresses. An IP address is a number assigned to your computer by your Internet provider to provide you with access to the Internet. IP addresses are used as a part of the Web Server log data referred to above. To this end, IP addresses will, however, be shortened, or anonymised, by us so that we are unable to derive the names of persons from the IP address.
12. WEB BEACONS.
Some of our Web pages use so-called “web beacons” - also referred to as “single-pixel GIFs” - or measurement codes that render it possible to prepare Web Server logs. A web beacon is a graphic image on a Web page or in an email that renders it possible to track the visited pages. That information is automatically gathered in a Web Server log when you visit our Web pages. The Web Server automatically recognises certain data such as your IP address, the date and time of your visits, the pages on our website visited by you, the website visited by you before, the browser (e.g., Internet Explorer) and operating system (e.g., Windows 7) used by you, as well as the domain name and address of your Internet provider (e.g., AOL).
Please note that your refusal to create cookies on your computer may result in certain restrictions in visits of Web pages of Biotest or in your no longer being able to access certain parts of this website (or linked Web pages).
14. GOOGLE ANALYTICS.
This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and facilitate an analysis of the use of the website by you. The information regarding the use of the website by you generated by the cookie will normally be transmitted to a server of Google in the USA and will be stored there. In the event of an activation of the IP anonymisation on this website, however, your IP address will be shortened before by Google within the Member States of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and be shortened there. Google will use such information on behalf of the operator of this website to analyse your use of the website, to compile reports on the website activities and to provide to the website operator other services relating to the website and Internet use.
The IP address transmitted by your browser through Google Analytics will not be combined with other data by Google. You can prevent the storage of cookies by setting your browser software accordingly; we hereby inform you, however, that you may in such case be unable to use all functions of this website in full. You can also prevent the collection and processing by Google of the data (including your IP address) relating to your use of the website generated by the cookie by downloading and installing the browser plug-in available through the following link.
Please note that the transmission of data through the Internet is not secure and that there exists the danger of third parties intercepting and using the data. You are free to provide us with your data by mail or over the phone at any time to the following address or under the following phone number, respectively:
Biotest UK Ltd
First Floor, Park 17 Point,High Street, Longbridge, Birmingham, B31 2UQ
Tel:+44 121 733 3393
16. IF I AM UNDER 16 YEARS OLD.
If you are under 16, please make sure that you obtain your parent/guardian’s permission prior to providing us with any of your personal data. Persons under the age of 16 are not permitted to provide us with their personal data without such consent.
17. LINKS TO OTHER WEBSITES
This website also contains links to other websites, to which, however, the guidelines and procedures set out herein do not apply. May we ask you to visit those websites directly to obtain information regarding data protection, safety, the collection of data and the provisions relating to data transmission. Biotest may not be held liable for any actions taken from, or the contents of, those websites.
18. FURTHER QUERIES/INFORMATION REGARDING YOUR DATA
Should you have any further questions regarding the data protection by Biotest (in particular, if you wish to know the data existing about you, the recipients of the data, or the purpose of its storage), please send your query to the following address:
Biotest UK Ltd
First Floor, Park Point, 17 High Street, Longbridge, Birmingham, B31 2UQ
Tel:+44 121 733 3393
as of April 2020