1. Information regarding processing of your personal data
The purpose of this privacy notice is to provide information on how your personal data may be collected and processed when you visit this website, if you create an account at this website, and/or if you request further information or otherwise contact Camurus through this website. This privacy notice also provides information on how your personal data may be collected and processed if you have requested to receive promotional materials or other information from Camurus.
Camurus respects your privacy and duly protects your personal data. All processing of personal data is carried out in accordance with the UK Data Protection Act 2018, which incorporates the General Data Protection Regulation (the “UK GDPR”). The following describes how we collect, process and share your personal data.
2. What personal data will be processed?
If you create an account at this website or otherwise contact us through this website, we may also process your name, contact details and other information you provide including but not limited to location, hospital or organisation, speciality, professional registration number and work e-mail.
If you have consented to receive promotional materials about new offers and deals regarding our products or other information from Camurus, either through this website, our opt-in consent form, or separately (e.g. at a conference or other event), we will process your name, contact details and information necessary to confirm that you are a healthcare professional eligible to receive promotional materials about a medicinal product. This includes receiving third party identity data from data brokers, aggregators or relevant healthcare authorities in order to verify your identity where relevant and/or screen for fraud.
We process your personal data in order for us to send information and materials to you or to contact you as requested by you. We may also process your personal data to be able to manage our (potential or actual) relationship (e.g. invite you to future events).
3. What are the purposes and legal grounds for processing your personal data?
We process your personal data in order to make the website available to you and to improve, develop, and enhance the usability of the website. We may also process your personal data to enable you to create an account on this site, or to interact with you if you contact Camurus through this website. Furthermore, your personal data may also be processed for the purpose of providing you promotional materials and other information as requested by you.
The processing of your personal data for the purposes stated above is based on our legitimate interest to make the website available to you and to improve, develop and enhance the usability of the site as well as our legitimate interest to enable you to create an account on this site, or to provide you with information and materials or otherwise interact with you. The personal data which is processed is of simple nature and the processing is limited to the purposes stated above. Based on these factors, we have performed a balance of interest assessment and have concluded that our legitimate interest outweighs your potential interest in not having your personal data processed for these purposes. You are always entitled to object to this assessment. You can read further about your rights below.
4. Who has access to your personal data? For how long is it stored?
We have implemented appropriate technical and organisational measures to protect your personal data against loss, unlawful access, alteration, unauthorised disclosure and any other unlawful forms of processing. The number of persons with access to your personal data is limited. Only individuals associated with Camurus that need to process your personal data in accordance with the purposes above will have access to your personal data.
We may share your information with other companies within the Camurus group or with third parties working as consultants for Camurus only if necessary for the purpose stated herein. We may also share your personal data with our IT-suppliers.
Your personal data will not be transferred to a country outside of the UK and/or EEA except in cases where you contact us with a request to exercise your rights under paragraph 5 of this Privacy Notice.
Data transfers will take place outside the UK but within the EEA to Sweden, only if it is necessary for us to fulfil the purpose of our processing stated herein. When transferring personal data to countries outside the UK, Camurus will take reasonable efforts and security measures necessary to keep your information secure, and Camurus is responsible to ensure that the transfer takes place in accordance with applicable laws. The receiving entity responsible for processing such transferred data is Camurus AB, Reg. No. 556667-9105, whose registered office is Ideon Science Park, SE 223 70 Lund, Sweden.
Information from enquiry forms will be held until the relevant enquiry has been completed and no further responses are received for a reasonable period. We retain complaints data for a period of up to 6 years after resolution of the complaint, and subscription or marketing requests are retained until you inform us that you no longer wish to receive the subscription or marketing material.
Your personal data will only be stored as long as the purpose for which it is kept exists and as long as permitted or required under applicable laws and regulations and will be securely deleted or destroyed after expiry of the retention period.
5. What are your rights?
Camurus Limited, Reg. No. 10571011, whose registered office is The Officers’ Mess Business Centre, Royston Road, Duxford, Cambridgeshire, CB22 4QH (“Camurus“) is the controller of your personal data. This means that Camurus is responsible for your personal data being processed correctly and in accordance with applicable laws. If you have any questions about this Privacy Notice, how we handle your personal data, or would like to exercise any of your rights, please contact us by e-mail at firstname.lastname@example.org or by post at the address above.
You have the following legal rights in relation to your personal data:
- Right to be informed – You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and what your rights are. This is why we are providing you this Privacy Notice.
- Right of access – You have the right to obtain access to your personal data we process and certain other information (similar to that provided in this Privacy Notice). This is so you are aware and can check that we are using your information in accordance with Data Protection Laws. You may ask for:
- A copy of your information;
- Details of the purpose for which it is being processed;
- Details of the recipients or classes of recipients to whom it is or could be disclosed, including if they are overseas and what protections they have in place;
- The period for which it is held (or the criteria which determines this);
- Any information available about the source of the data; and
- Whether we carry out any automated decision-making or profiling, and where we do information about the logic involved and the outcome or consequences of that decision or profiling.
To help us find the information, please give us as much information as possible about the type of personal data you would like to see.
- Right to rectification– You are entitled to have your information corrected if it is inaccurate or incomplete. If you would like us to do this, please contact us.
- Right to ask us to stop contacting you with direct marketing– You can ask us to stop contacting you for direct marketing purposes. If you would like to do so, please contact us. Alternatively, you can also click the ‘unsubscribe’ button at the bottom of the email newsletter. It may take up to 7 days for this to take place.
- Rights in relation to automated decision making– Camurus does not make use of automated decision making when processing your data, so this right is not applicable in relation to this privacy notice.
- Right to erasure– This is also known as the ‘right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your information where:
- You do not believe that we need your data in order to process it for the purposes set out in this Privacy Notice;
- If you had given us consent to process your data, you withdraw that consent and we cannot otherwise legally process your data;
- You object to our processing and we do not have any legitimate interests that mean we can continue to process your data; or
- Your data has been processed unlawfully or have not been erased when it should have been.
- Right to restrict processing– You have rights to ‘block’ or suppress further use of your information. When processing is restricted we can still store your information, but may not use it further. You may request that we stop processing your personal data temporarily if:
- You do not think your data is accurate. We will start processing again once we have checked whether or not the data is accurate;
- The processing is unlawful but you do not want to erase your data;
- We no longer need the personal data for our processing, but you need the data to establish, exercise or defend legal claims; or
- You have objected to the processing because you believe that your interests should override the company’s legitimate interests.
- Right to data portability– You have rights in certain circumstances to obtain and reuse your personal data for your own purposes across different services.
- Right to object to processing– You have the right to object to certain types of processing, including processing based on our legitimate interests and processing for direct marketing
- Right to withdraw consent– If you have given your consent to anything we do with your personal data, you have the right to withdraw your consent at any time (although if you do so, that does not mean anything we have done with your personal data with your consent up to that point is unlawful).
You can exercise these rights free of charge, by contacting email@example.com. We will respond to any rights that you exercise within a month of receiving the request unless the request is particularly complex, in which case we will respond within three months.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
Please be aware that there are exceptions and exemptions that apply to some of these rights, which we will apply in accordance with the Data Protection Laws.
It is important that you ensure you have read this Privacy Notice. If you do not think that we have processed your data in accordance with this Privacy Notice, you should let us know as soon as possible. You also have the right to complain to the UK Information Commissioner’s Office. Information about how to do this is available on its website at www.ico.org.uk.
UK-NPR-2200121 Dec 2022