1. What Personal Information do we process and for which purposes?
Most of our services do not require any form of registration, allowing you to visit our site without telling us who you are. However, some services may require you to provide us with Personal Information, which may include your direct identifiers, such as name, birth date, e-mail address, mailing address or telephone number. We may collect and use Personal Information to provide you with products or services, to bill you for products and services you request, to market products and services which we think may be of interest to you, or to communicate with you for other purposes which are evident from the circumstances or about which we inform you when we collect Personal Information from you.
Personal Information used for website usage analytics:
We may collect and process information about your visit to this website, such as the pages you visit, the website you came from and some of the searches you perform. Such information is used by us to help improve the contents of the site and to compile aggregate statistics using our site for internal, market research purposes. In doing this, we may install Cookies that collect the domain name of the user, your internet service provider, your operating system, and the date and time of access. A cookie ("Cookie") is a small piece of information, which is sent to your browser and stored on your computer’s hard drive. Cookies do not damage your computer. You can set your browser to notify you when you receive a Cookie, this will enable you to decide if you want to accept it or not. We may also use external service providers to help us collect and process the information described in this section.
Occasionally, we may use internet tags (also known as action tags, single-pixel GIFs, clear GIFs, invisible GIFs and 1-by-1 GIFs) and Cookies at this site and may deploy these tags/Cookies through a third-party advertising partner or a web analytical service partner which may be located and store the respective information (including your IP-address) in a foreign country. These tags/Cookies are placed on both online advertisements that bring users to this site and on different pages of this site. We use this technology to measure the visitors' responses to our sites and the effectiveness of our advertising campaigns (including how many times a page is opened and which information is consulted) as well as to evaluate your use of this website. The third-party partner or the web analytical service partner may be able to collect data about visitors to our and other sites because of these internet tags/Cookies, may compose reports regarding the website’s activity for us and may provide further services which are related to the use of the website and the internet. They may provide such information to other parties if there is a legal requirement that they do so, or if they hire the other parties to process information on their behalf. If you would like more information about web tags and Cookies associated with on-line advertising or to opt-out of third-party collection of this information, please visit the Network Advertising Initiative website http://www.networkadvertising.org
You may prevent or stop the installation and storage of Cookies by you browser settings by downloading and installing the free Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout?hl=en. If you do not accept Cookies, you may not be able to fully experience all functions of our website.
Google may transfer this information to third parties if required to do so by law or if a third party processes the information on Google's behalf.
By using our website, you consent to the processing of any Personal Information that Google collects about you in the manner and for the purposes described above.
2. Who has access to your Personal Information and to whom are they transferred?
Also, Personal Information may be disclosed to a third party if we are required to do so because of an applicable law, court order or governmental regulation, or if such disclosure is otherwise necessary in support of any criminal or other legal investigation or proceeding here or abroad.
The Personal Information we collect from you may also be processed, accessed, or stored in countries outside Canada. Such countries may offer a different level of protection of Personal Information. If we transfer your Personal Information to external companies in other jurisdictions, we will make sure to protect your Personal Information by applying the level of protection required under applicable data privacy laws.
For intra-group transfers of Personal Information, Novartis has adopted Binding Corporate Rules, a system of principles, rules, and tools, provided by European law, that ensures effective levels of data protection relating to transfers of Personal Information outside the EEA and Switzerland. Read more about the Novartis Binding Corporate Rules.
3. How do we protect your Personal Information?
To ensure the security and confidentiality of Personal Information that we collect online, we use data networks protected, inter alia, by industry standard firewall and password protection. In the course of handling your Personal Information, we take measures reasonably designed to protect that information from loss, misuse, unauthorized access, disclosure, alteration or destruction and against other unlawful forms of processing
4. How long do we store Personal Information?
We will only retain your Personal Information for as long as necessary to fulfil the purpose for which it was collected or to comply with legal or regulatory requirements.
5. What are your rights and how can you exercise them?
Whenever we process Personal Information, we take reasonable steps to ensure that your Personal Information is kept accurate and up-to date for the purposes for which it was collected. We will provide you with the ability to exercise the following rights under the conditions and within the limits set forth in the law :
If you wish to contact us regarding the use of your Personal Information, please email us at [email protected] or reach out to us at the contact information stated in the Contact us section below. If you have provided consent, you may withdraw consent. You may also request to access your Personal Information as processed by us, or ask for correction, where applicable.
By contacting us, please note the name of the website related to your request, your relationship and/or interactions with us (as applicable), as well as the specifics of the information you would like us to provide.
We do not currently respond to web browser “do not track” signals or other mechanisms that provide a method to opt out of the collection of information across websites or other online services.
Any request to delete Personal Information will be subject to the ethical and legal obligations to which we are bound with respect to document reporting, storage and retention. We may take reasonable steps to verify your identity before giving you access to your Personal Information or making corrections thereto.
If you wish to contact us regarding our use of your Personal Information or you wish to exercise your data privacy rights, please email us at [email protected] or at 110, de Lauzon Street, Boucherville, Quebec, J4B 1E6. If you contact us, please include the following information in your email, so that we may efficiently respond to your request and so that we may identify you and the subject of your request:
the name of the website your inquiry is referring to;
your relationship and/or interactions with us (as applicable); and
the specifics of the information you would like us to provide or you want us to take action upon.
Binding Corporate Rules (“BCR”)
Binding Corporate Rules, so called “BCR”, are the system of privacy principles, rules and tools based on European Law that govern data privacy at Sandoz. BCR represent today’s best practice to meet the European Economic Area’s (“EEA”) data protection requirements for the transfer of Personal Information within a Group of companies.
To be legally effective, the BCR have to be approved by EEA Data Protection Agencies. You may find more information on BCR on the official European site.