Website visitor’s personal data: If you are a visitor on this Website, we process your browser’s type and version, the operating system you use, the website from which you are visiting us (referrer URL), webpage(s) you are visiting on our Website, the date and time of accessing our Website, and internet protocol (IP) address.

Analytics data: If you are a visitor on this Website, we process logins, pages viewed, and documents downloaded.

Newsletter subscription data: If you opt in to receive the newsletter, we process your title, first name, last name, e-mail address, professional field and country of residence.

Healthcare professional’s data: if you are a healthcare professional accessing as an authenticated user, you are requested to fill in your credentials, like e-mail, function, BIG of RIZIV details, gender, name, organization and password (your unique key and status of confirmation). These details are required to access the content behind the login.

Adverse effect notification data: we do not process any personal data relative to any adverse effect notification on this Website. The related data will be forwarded to Infarama bvba ([email protected], Ringlaan 39, 1853 Strombeek-Bever , Belgium,  +32 11 31 26 16) in order to comply with our pharmacovigilance obligations under applicable law. We ask you to not provide any personal data related to adverse effect notification on this Website.

We will collect your personal data:

• when you directly provide us with your personal data (e.g. when you contact us via email);
• when we receive personal data from third parties (e.g. personal data received from regulatory authorities or service providers);
• when personal data is collected automatically (e.g. your browser information in relation to the use of the Website).

We will use your personal data for the purposes of

Website operation: we process your personal data for the regular operation of this Website and to improve its performance.

Newsletter subscription: we process your personal data in order to send you newsletters if you opt in to receive such newsletters. You have the right to withdraw your consent to the processing of your personal data for the purpose of these newsletters at any time.

Answer your request or establish and manage the relationship with you: we process your personal data in order to answer a question you may ask us and to manage our relationship with you

Meeting subscription: we process your personal data in order to manage your subscription for meetings if you opt in to attend such meetings. You have the right to withdraw your consent to the processing of your personal data for the purpose of these newsletters at any time

To process your personal data, we rely on the legal bases below:

• Your freely given, specific consent provided to us. You, as a data subject have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal
• The processing of your personal data is necessary for the performance of a contract with you.
• The processing of your personal data is based on our legitimate interest.
• The processing of your personal data is based on a legal obligation.

We will retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, whether we can achieve those purposes through other means and the applicable legal requirements. To this extent, please consider that we will anonymize your personal data as much as possible so that it can no longer be associated with you.

We will process and store personal data in relation with your visit of our Website for 6 months after your visit.

We will not disclose any of your personal data to third parties, any external bodies or organizations, except as set out below.

We can engage third party vendors to provide services to us and share your personal data with such third parties as well as with legal, financial and other advisors and consultants that assist us. Nonetheless, in such a case, we will always ensure the protection, security and confidentiality of your personal data, for example by concluding a confidentiality and non-disclosure agreement. We can also share your personal data with governmental or administrative authorities.

Some of the third parties with whom we share your personal data are located outside the EEA. In such case, we will rely on appropriate safeguards to protect your personal data.

You, as a data subject, have certain rights in relation to the personal data we process about you. Please note that some of these rights may not be absolute and your rights can be restricted, for example, in order to protect the rights of another individual:

1. Right of access and information: You have a right to ask whether or not we have collected personal data about you and request information on the processing of your personal data by us.
2. Right to rectification: You have the right to request the rectification of inaccurate personal data, or to complete personal data that is incomplete, on request.
3. Right to erasure (right to be forgotten): You have the right to request the erasure of your personal data.
4. Right to restriction of processing: You have the right to request the restriction of processing of your personal data.
5. Right to data portability: You may have the right to receive your personal data that we have collected, in a structured, commonly used and machine-readable format to transmit those data to another entity without hindrance from us.
6. Right to object: You have the right to object to the processing of your personal data for any reason relating to your situation.
7. Right not to be subject to automated decision-making or processing: You have te right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
8. Right to complain: If you consider that your data protection rights have been infringed, you can contact the data protection authority to file a complaint.

• You can contact the Dutch data protection authority at:
  Autoriteit Gegevensbescherming,
  PO Box 93374,2509 AJ Den Haag,
  the Netherlands
  (+31) – (0)70 – 888 85 0
• You can also contact the competent data protection regulatory authority located in the European Union’s relevant Member State where your habitual residence, place of work or place of the alleged infringement is.

Recordati has appointed a data protection officer, whom you may also contact at: [email protected]