medac Pharma Privacy Policy

Background

This privacy policy sets out how medac Pharma LLP uses and protects any personal data, that it collects and processes, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

medac Pharma LLP is committed to ensuring that all personal data is held securely and only in line with an identifiable lawful basis for processing as set out by the UK GDPR and the Data Protection Act 2018.

How to contact us

If you have any queries concerning your personal information or any questions on medac Pharma’s use of the information, please contact:

info@medacpharma.co.uk

OR

Quality, Compliance and Medical Affairs Director

medac Pharma LLP

Scion House

Stirling University Innovation Park

Stirling

FK9 4NF

United Kingdom

The Principles of UK GDPR recognised and adhered to by medac Pharma LLP

• Lawfulness, fairness and transparency of data held
• Purpose (of data held) limitation
• Data (held) minimisation
• Accuracy (of data held)
• Storage (of data) limitation
• Integrity and confidentiality (security) of data held
• Accountability (of data held)

What information does medac Pharma collect that is considered personal data?

General – Healthcare professionals

medac Pharma LLP will contract with organisations in the healthcare sector for the provision of services related to the products offered by medac Pharma LLP and its affiliates.  Where we do that, we will collect information about the employees of such organisations, namely:

·       Contact name

• Contact job title
• Contact work email address
• Contact work phone number
• Contact work address
• Information about fees and expenses paid
• Bank account information for payment purposes

Why does medac Pharma process this personal data?
Personal data that is collected about you, in your capacity as a member of staff for your employer or company (or a partner in your partnership), is held for the purposes of communicating with you in a work capacity about the delivery of medac Pharma’s services. It allows medac Pharma to provide you with awareness about its existing products and arrange meetings with you. It also allows medac Pharma to inform you about new products and training, courses and conferences.

If you provide medac Pharma LLP with consultancy services, we collect your personal data for the purposes of administering our contract with you and for naming you as a contributor in papers, at conferences, in presentations and in articles and to pay you (or your company or partnership) for services.

Medical information – enquiries, complaints, adverse reactions

When you contact medac Pharma with a query or complaint about a product or to register an adverse reaction, we will process some of your personal data.

1.      When a query or complaint is made

• Name
• Contact data
• Nature of the query or complaint
• Where the query or complaint is made by a healthcare professional or other third party on behalf of the patient we will also collect minimal patient identifier information about the patient involved

Why does medac Pharma process this personal data?
This information is stored so that the query or complaint can be responded to or in the event that it is needed for a follow up on the query or complaint.

2.      When an adverse reaction is reported

Where contact is made by a patient:

• Name
• Contact data
• Gender
• Date of birth/age/age group
• Nature of the reaction

Where contact is made by a healthcare professional or other third party on behalf of the patient:

• Name of healthcare professional/person reporting
• Contact data of healthcare professional/person reporting
• Nature of the reaction
• Initials of the patient
• Gender of the patient
• Date of birth/age/age group of patient

Why does medac Pharma process this personal data?
This information is stored so that a response can be given or in the event that a follow up on the adverse reaction is required.

Event and course registration and participation

When you register for a medac Pharma LLP event, your information will be used for the purposes of managing the event such as (but not limited to): the creation of delegate lists, to inform you of event details and to contact you after the event for feedback.

Information that may be taken:

• Name
• Contact information (email, phone, address)
• Job title
• Dietary requirements (if applicable)
• Access requirements (if applicable)

Supplier information

For the purposes of dealing with and paying suppliers medac Pharma stores information such as bank details and company address. The main contact for the supplier may also be stored including first name, last name and company email and company phone number.

What is medac Pharma’s lawful basis for processing this personal data?

Under data protection law, we can only use your personal data if we have a proper reason for doing so.

This will be for one of the following reasons:

• To comply with our legal and regulatory obligations;
• For our legitimate interests or those of a third party;
• For the performance of our contract with you or to take steps at your request before entering into a contract, for example where we enter into contracts with Healthcare organisations;
• For the establishment, exercise or defence of legal claims or proceedings; or
• Where you have given consent.

A legitimate interest is when we have a business or commercial reason to use your information, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own.

We may process special category personal data for the following reasons:

• Where processing is necessary for reasons of public interest in the area of public health; and/or
• Where you have given your explicit consent.

There may be additional reasons which will be notified to you where they apply.

When we refer to special category data we mean information such as race or ethnicity, religious beliefs, sexual orientation, marital status and health. In the case of medac Pharma the principal form of special category data we process will be information relating to health.

Sharing your data
We routinely share personal data with:

1.      medac GmbH for the purposes of its reporting obligations regarding pharmacovigilance and other product quality and safety information to the  Medicine and Healthcare products Regulatory Agency, European Medicines Agency and other regulatory bodies. The sharing of details will include information about the adverse reaction but only limited personal data.

2.      Third parties we use to help us run our business such as technology, IT and cloud providers, professional advisors and support services.

We only allow those organisations to handle your personal data if we are satisfied they take appropriate measures to protect your personal data.

We or the third parties mentioned above occasionally also share personal data with:

·       Disclosure UK, (an industry-led initiative administered by the Association of the British Pharmaceutical Industry to increase transparency) for the purposes of providing information about the payments made by medac Pharma LLP to healthcare professionals and any companies related to such healthcare professionals under any consultancy agreement.  This information will include the name of the healthcare professionals, the name of their employing organisations and the fees and expenses of such healthcare professionals/organisations which medac Pharma LLP has covered;

·       project delivery partners for the purposes of delivering an event or course. The information shared about attendees will be limited to that necessary for the particular course or event;

• our and their external auditors, eg in relation to the audit of our or their accounts, in which case the recipient of the information will be bound by confidentiality obligations;
• our and their professional advisors (such as lawyers and other advisors), in which case the recipient of the information will be bound by confidentiality obligations;
• law enforcement agencies, courts, tribunals and regulatory bodies to comply with our legal and regulatory obligations;
• other parties that have or may acquire control or ownership of our business (and our or their professional advisers) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency—usually, information will be anonymised but this may not always be possible. The recipient of any of your personal data will be bound by confidentiality obligations.

medac Pharma LLP will not otherwise share your personal information unless we have your consent or are required by law to do so.

Your rights under the GDPR further explained and how medac Pharma ensure they are met