Privacy Policy

Information Notice for Healthcare Professionals:

This notice describes how Mundipharma Pty Limited and its network of independent associated companies (referred to here as "Mundipharma", "we" or "us") use your personal data.

Contents

• Personal data we collect
• Sources of personal data
• Use of your personal data, and the basis for such use
• Sharing your personal data
• Data retention
• Your rights
• Contacting us

Personal data we collect

We may collect the following information about you:

• Contact details such as your name, professional title, email address, user names, phone numbers
• Professional details such as data included in your CV, information about your qualifications, expertise, jobs, employers, professional affiliations, medical practitioner number or government issued ID, service and performance metrics, and scientific publications
• Communication records such as emails and call notes with our staff and representatives
• Information regarding your preferences, speciality, interests, experiences, memberships and thought leadership, including your responses to surveys that you participate in
• Information about your visits to our Sites, including the type of browser and operating system that you use, access times, pages viewed, URLs clicked on, your IP address and the page you visited before navigating to our Sites, and login credentials
• Information about your interactions with our emails (using web beacons), such as whether an email was opened, clicked on or sent to spam, forwarded, and time stamps of these actions.
• Device information, such as your IP address, device ID, device attributes and location information
• Certain information from your social media account where you have chosen to connect your social media account with your account with us

Sources of personal data

We collect personal data directly from you when you communicate with us and our representatives, and interact with our websites and other digital platforms (each, a “Site”). We also collect personal data from various public and private sources:

• Private and public registers and directories of healthcare professionals
• Third party data enrichment providers, such as Veeva and IQVIA
• Third party medical advertising sites such as WebMD’s Medscape website
• Published journals and event materials
• Websites of healthcare organisations used by you or your employers or associations affiliated with your employers

We may combine information that we have collected from various sources, including the information that you have provided to us, and use it for the purposes described below.

Use of your personal data, and the basis for such use

We use your personal data to operate our business and manage our relationship with you. We only process data where we have a legal basis for doing so. The table below outlines the different purposes for which we process your personal data, and the legal bases we rely on:

If you do not provide the personal data requested, we may be unable to provide you with access to certain Sites or services, and we may not be able to enter into a contract with you.

Webinars: Sometimes we record remote meetings and events so that others have the benefit of viewing them or where we need to show who was in attendance. If an event is being recorded we will notify you in advance. You may have the option of sharing your image and audio during the session. If you choose to do so, this will also be captured in the recording. Some events may also feature Q&As. If you submit Q&As, your identity and comments may be published to others and form part of the recording.

Cookies and other technologies: A cookie is a small text file sent to your computer when you visit a website. Cookies perform various tasks, such as letting you navigate between pages efficiently, storing your preferences and generally improving your experience of our website. For more details please see our Cookies Policy.

Third-Party Advertising and Online Behavioral Advertising:  We may advertise our products and services on third-party websites that use Adtech, for example real time bidding and online behavioral advertising, which link to our Sites. If these third-party advertisers use personal data for their own purposes, they should identify themselves to you and let you know about how they are using your personal data.

Other purposes:  There may be other purposes for which we use your personal data, and a separate information notice will be available about this use. For details in relation to reporting adverse events and transparency reporting, please see the information notices located on our Sites. More information about our data processing activities can be found in the privacy notice(s) on our Sites.

Sharing your personal data

We share your personal data with Mundipharma companies located inside and outside the United Kingdom and European Economic Area who provide IT support and other services such as HR, Finance and Corporate Communications, as well as to the following recipients:

• Our agents, service providers and business partners where they have a need to know for the purposes of providing services to Mundipharma, such as:
  • Events and marketing agencies;
  • Technology suppliers who help with the hosting, development, management and support of our online platforms and services, for example Veeva Inc., OneTrust, SpotMe, IQVIA, and Salesforce Inc;
  • Providers of healthcare professional databases, where we need to confirm and have agreed to assist them with the accuracy of your personal data;
  • Healthcare service providers who work with us;
  • Suppliers managing adverse event reports or product complaints;
• Government authorities, regulators and other public bodies;
• el público general en el contexto de nuestras obligaciones de transparencia;
• The general public in the context of our transparency obligations;
• Our legal advisors, auditors, accountants, lenders, insurers, consultants and others providing similar services;
• Another corporate, partnership or other commercial enterprise (and their advisors) in the context of a business transfer, asset purchase or change in ownership of relevant Mundipharma entities.

International transfers: Where we transfer personal your personal data from Australia, we will use suitable measures, such as standard contractual clauses and (where appropriate) supplementary measures, to protect your personal data being shared outside of your country to countries that do not offer a suitable level of protection. We may need to share your personal data with a government authority, regulator or to otherwise comply with our legal obligations.

Data retention

We will retain your personal data in accordance with our records retention policy. In general, we will retain it for a minimum of 7 years after a transfer of value has been made to you in case of any legal proceedings or investigations. We will only retain personal data for the period required to fulfil the purposes for which the personal data was collected, unless a longer retention period is required or permitted by law or we have justifiable reasons for doing so.

Your rights

The controller for your information is Mundipharma Pty Limited.

You have the following rights:

• To ask about the processing of your personal data;
• To request a copy of your personal data, its correction and/or deletion;
• If you have provided consent for us to process your personal data, you may withdraw it with limited exceptions. The withdrawal of consent shall not affect any processing based on consent before its withdrawal;
• If you provided your personal data for a contract or with your consent, or it is processed by automated means, you can also request receipt or transmission of your personal data to another organisation in a machine-readable form;
• You can object to the processing where the processing is for direct marketing purposes, a task in the public interest, or for our legitimate interests. This right is not absolute;
• In certain cases you can request a restriction on the processing of your personal data, for example where your wish to verify the accuracy of your personal data or where you object to the processing.

If you would like to exercise any of these rights, you can get in touch with using the contact information in the “Contacting us” section of this notice.

If you are unhappy with how we process your personal data, you can complain to your local supervisory authority. In Australia, this is the Office of the Australian Information Commissioner oaic.gov.au. We would, however, appreciate the chance to deal with your concerns, so please contact us in the first instance.

Where you successfully request deletion or restriction rights, or object to or withdraw consent for our processing of your personal data for certain purposes, we may not be able to continue offering certain services to you or have a contractual relationship with you. We may be able to continue to process your personal information to the extent required or where otherwise permitted by law, for example to register your request to opt out of communications or in connection with our regulatory obligations, such as adverse effect reporting.

Contacting us

You may contact Alexa Hooper or Ellen Fenton at data.privacy@mundipharma.com or unsubscribe@mundipharma.com.au in case of any questions or concerns regarding the processing of your personal data, including where you would like to exercise any of your rights. To help us efficiently deal with your request, it would be helpful if you could state in your communication your relationship and/or interactions with us, as well as the specifics of your query when contacting us.

Direct marketing:  Whilst we aim to only send relevant information, you can choose to change your preferences or opt out of our mailing lists at any time by following the instructions at the bottom of the email, or, where you have an online account with us, by following the instruction on Mundipharmapro.com.

This information notice is reviewed and updated from time to time.

Last updated:14/4/2023

JOB CODE: AU-CRM-2400002 | Prepared: Aug 2024