Kowa Pharmaceutical Europe Co. Ltd. here after referenced as ‘the Company’.
This notice explains how information about you is processed and stored.
The Company can be contacted as follows:
By post: GDPR Compliance Responsible Person, Kowa Pharmaceutical Europe Co. Ltd, 105 Wharfedale Road, Winnersh Triangle, Wokingham, Berkshire, RG41 5RB.
By phone: +44 (0) 118 922 9000
The information we gather
The Company gathers certain information about you. When we do so we are subject to applicable data protection law and we are responsible for that personal information as a data controller for the purposes of those laws. Information about you is also used by our affiliated entities and group companies, including Kowa Company Limited, Kowa Pharmaceutical Europe AG, Kowa Holdings Europe AG, Kowa Pharmaceutical Europe Co. Ltd. German Branch, Kowa Pharmaceutical Europe GmbH, Kowa Research Institute Inc., Kowa Pharmaceuticals America Inc. (our ‘group companies’).
In this notice, references to ‘we’ or ‘us’ means the Company and our group companies.
Information that we gather about you may include without limitation your name, contact details and other information you provide to us when you submit an enquiry to us via our website. This may include medical information if you choose to provide it to us.
We may also obtain information about you from third parties, such as our group companies, service providers and agents.
We have appropriate security measures in place to prevent personal information from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal information to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality.
We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
The legal basis for processing
Processing will take normally take place based on our legitimate interests. This includes where we are carrying on or may carry on business with your employer, or where you submit an enquiry to us via our website. There is a limited privacy impact on you, and we think that you will expect that we will process your data in this way.
If you have entrusted us with any medical information about you, the processing will take place based on your informed consent. Where you have given consent to any data processing, you have the right to withdraw that consent at any time.
Alternatively, processing may also take place where it is required for the performance of a contract between us or to take steps before entering into a contract, or where we need to comply with a legal obligation.
Information about third parties
Information we process as described in this notice may also include information about third parties whose details you supply to us.
Systems used to process data
We gather information directly from you and also via our websites and other technical systems. These may include, for example, our:
Cookies
When you use our websites we may gather information about you through Internet access logs, cookies and other technical means. ‘Cookies’ are text files placed on your computer to collect Internet log information and user behaviour information. These are used to track website usage and monitor website activity and for other data processing reasons set out below.
Presently, we only use a functional cookie on our websites. This cookie is essential for parts of the website to operate as it is used to determine the language used by the website visitor to ensure appropriate content is provided. You may delete and block all cookies from the website, but this feature will not then work.
Reasons for processing
We process information about you for the following reasons:
- to provide our services;
- to respond to enquiries and requests;
- compliance with legal, regulatory and corporate governance obligations and good practice;
- gathering information as part of investigations by regulatory bodies or in connection with legal proceedings or requests;
- ensuring business policies are adhered to;
- operational reasons, such as recording transactions, training and quality control;
- ensuring the confidentiality of commercially sensitive information;
- security vetting, investigating claims, complaints and allegations of criminal offences;
- statistical analysis;
- preventing unauthorised access and modifications to systems;
- marketing our business and those of our group;
- analysing purchasing preferences and improving services; and
- providing customer services
Disclosures and exchange of information and transfers outside the UK and EEA
We may disclose and exchange information with our group companies, credit reference agencies, service providers, representatives and agents, as well as with law enforcement agencies and regulatory bodies for the above reasons.
Information may be held at our offices and those of our group companies, service providers, representatives and agents as described above. Information may be transferred internationally to Japan and other countries around the world, including those without data protection laws equivalent to those in the UK or EEA, for the reasons described above. We have security measures in place to seek to ensure that there is appropriate security for information we hold including those measures detailed in our information security and data protection policies, which are available on request. International data transfers outside the UK or European Economic Area are protected by Standard Contractual Clauses where the country to which data is transferred is not deemed to provide an adequate level of protection under applicable data protection law.
If you would like further information please contact us by using the contact details given above. We will not otherwise transfer your personal data outside of the UK or EEA or to any organisation (or subordinate bodies) governed by public international law or which is set up under any agreement between two or more countries.
Retention periods
Your data will be held in accordance with the Company’ retention policy, which is available on request. There are a wide range of retention periods that may be relevant to you, but we will not retain data that is not accurate, relevant, up to date and actively useful to us.
Your rights
You have a number of important rights, which can be exercised free of charge. You have the right to request:
- access to your personal information and to certain other supplementary information that this Privacy Notice is already designed to address;
- require us to correct any mistakes in your information which we hold;
- require the erasure of personal information concerning you in certain situations;
- receive the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to a third party in certain situations;
- object at any time to processing of personal information concerning you for direct marketing;
- object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you;
- object in certain other situations to our continued processing of your personal information; and
- otherwise restrict our processing of your personal information in certain circumstances.
Where you have given consent to any data processing, you have the right to withdraw that consent at any time. We will not do anything with your data not outlined in this notice.
Further enquiries
For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the General Data Protection Regulation. You have the right to lodge a complaint at any time with a supervisory authority, this may be where you work, normally live or where any alleged infringement of data protection laws occurred. In the UK, the supervisory authority is the Information Commissioner at ico.org.uk/concerns/ or by telephone: +44 (0) 303 123 1113 for further information about your rights and how to make a formal complaint.
If you would like to exercise any of these rights, please contact us in writing (see above), providing enough information to identify you and let us know which information to which your request relates.
If you are not satisfied with any complaint you have with us, you also have the right to make a complaint to the Information Commissioners Office, which is the supervising authority in the UK in relation to data processing.
We may change this privacy notice from time to time. The latest version will always be available on our websites.