隱私權聲明 | Boehringer Ingelheim TW
隱私權聲明 Privacy Notice
本隱私權聲明說明 Boehringer Ingelheim International GmbH（以下簡稱「百靈佳殷格翰」、「我們」）如何蒐集並處理您透過本網站及社群媒體所提供的個人資料，以及蒐集與處理的目的。
目錄
1. 個人資料處理目的
1.3 Cookie 與相關資料處理（網站優化、分析、廣告）
1.5 社群媒體聲量觀測（Social Listening）
1. 個人資料處理目的
1.1 註冊與互動（網站及社群媒體）
當您在網站註冊、登入、參加培訓或活動，或傳送訊息給我們時，我們將處理您的資料以提供您所需服務。
當您透過 Instagram、LinkedIn 等社群平台參與活動、提出意見或詢問時，我們亦會處理相關資料。
處理依據為《一般資料保護規則》（GDPR）第 6 條第 1 項 b 款（履行契約所必要之處理）。
1.2 訪問紀錄（Log 資料）
當您造訪本網站時，系統會自動接收瀏覽器傳送的資料，例如 IP 位址、前一訪問網站、時間日期、顯示內容、瀏覽器與作業系統資訊等。此為提供網站服務所必要，日誌檔案原則上保存不超過 14 天。
處理依據為 GDPR 第 6 條第 1 項 b 款
1.3 Cookie 與相關資料處理（網站優化、分析、廣告）
我們使用 Cookie（即瀏覽器中儲存的小型文字檔）以及類似技術（例如像素標籤），以下統稱為「Cookie」。
1.3.1基本功能性Cookie
這些 Cookie 為網站提供基本功能所需，例如頁面導覽、登入安全區或語言設定。
此類 Cookie 依 GDPR 第 6 條第 1 項第 b 款進行處理，保存期間最長為一年。
1.3.2 網站優化與分析 Cookie
經您同意後，我們使用 Cookie 分析網站使用情形，以優化網站與服務。您可隨時透過左下角齒輪按鈕取消同意。
使用的第三方服務包括：
Adobe Analytics（Omniture）
Adobe Analytics 的 Cookie 可協助我們分析使用者流量與使用行為模式（但無法進一步識別個人身分），例如哪些頁面最常被瀏覽、使用者來源地區與停留時間等。此 Cookie 最長保存三年。
Adobe 為我們的資料處理者，在極少數情況下資料可能會傳輸至美國。針對此種情況，我們與 Adobe 簽訂了歐盟標準合約條款（EU SCC）以保障您的資料。
為保護您的身分，Adobe 收集的 IP 位址將經過去識別化處理，轉換為通用格式。
1.3.3 行銷 Cookie
若您同意，我們與合作夥伴將使用 Cookie，協助辨識您的瀏覽行為，並在其他網站上顯示更符合您興趣的廣告內容。
您可隨時透過左下角齒輪按鈕取消同意。
使用的服務如下：
Meta****像素追蹤
若您同意，我們將在您造訪網站時啟用 Meta 的像素工具，記錄您在網站上的行為（如點擊）與裝置資訊（如語言設定、IP 位址、廣告 ID 等）。
這些資料可能與您的 Meta 帳號連結，Meta 可據以於 Facebook、Instagram 或其他平台顯示相關廣告。
我們不會收到可識別您個人身分的資料，只會收到整體性的成效統計資料。
根據 GDPR 第 26 條規定，我們與 Meta 為共同資料控制者，詳細說明可見此協議： https://www.facebook.com/legal/controller dendum
若您想行使資料權利（如查詢、刪除），請直接聯絡 Meta Platforms Ireland。
Twitter（轉換追蹤碼）
若您同意，我們會在您造訪本網站時啟用 Twitter 的標籤工具（由 Twitter International Company 提供，地址：One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland）。
此標籤會回報您在網站上的操作行為，以及可供 Twitter 識別您的相關資料。
這些資料可讓 Twitter 知悉您造訪本網站、點擊的內容，或是否曾點選 Twitter 上導引至本網站的連結。Twitter 將可依據這些資訊推播與您興趣相關的內容，並可能將這些資料與您的 Twitter 帳號關聯，作為其內部用途使用。
關於 Twitter 如何處理您的個人資料，請參閱其隱私權政策：
https://twitter.com/de/privacy
我們不會收到任何可識別您個人身分的資料，僅會取得匯總性統計數據，用於分析特定期間內使用者在 Twitter 平台上與我們的內容及廣告互動情形，以評估成效。
LinkedIn（Insight-Tag）
若您同意，我們會在您造訪本網站時啟用 LinkedIn 提供的 Cookie（由 LinkedIn Ireland 提供，地址：Wilton Plaza, Wilton Place, Dublin 2, Ireland）。
此 Cookie 標籤會將您在網站上的操作行為，以及可供辨識您身分的相關資料回傳給 LinkedIn。
這些資料可協助 LinkedIn 知悉您是否造訪過本網站、點擊過哪些項目，或是否曾點選 LinkedIn 上導向本網站的連結。LinkedIn 可能據此顯示與您興趣相關的內容，並可能將這些資訊與您的 LinkedIn 帳號連結，用於其自身目的。
如需瞭解 LinkedIn 如何處理您的資料，請參考其隱私權政策：
https://www.linkedin.com/legal/privacy-policy
我們不會收到任何關於您或其他 LinkedIn 使用者的個人資料，只會取得經整合後的統計資料，用以分析特定期間內使用者於 LinkedIn 平台上與我們廣告或內容的互動情形。這有助於我們評估廣告投放的成效。
1.4 社群媒體分析
我們的社群媒體合作夥伴（如 Meta、LinkedIn 等）會提供與我們社群帳號互動相關的統計與分析資料。這些資料為匿名化資訊，不包含使用者姓名或可識別個人身分的其他資訊。
透過這些分析服務，我們得以評估社群平台上的內容表現，進一步優化我們的社群營運策略與對外溝通。
本項資料處理的法律依據為 GDPR 第 6 條第 1 項第 f 款（正當利益）。
1.4.1 Meta
當我們處理您在 Facebook 與 Instagram 上與我們官方帳號互動所產生的資料時，我們與 Meta Platforms Ireland 屬於《一般資料保護規則》第 26 條所定義的「共同資料控制者（Joint Controller）」。因此，我們已與 Meta 簽訂相關的共同控制協議，內容可參閱以下連結：
https://www.facebook.com/legal/controller dendum
就此合作架構下的其他資料處理行為而言，Meta 為唯一資料控制者。若您希望行使查詢、刪除等個人資料權利（詳見「您的權利」章節），Meta Platforms Ireland 將負責處理您的相關申請。
1.4.2 LinkedIn
針對您在 LinkedIn 上與我們官方帳號互動所產生的資料，我們與 LinkedIn 同樣被視為 GDPR 第 26 條下的「共同資料控制者」。我們已與 LinkedIn 簽署共同控制協議，協議內容可參閱以下網址：
https://legal.linkedin.com/pages-joint-controller-addendum
後續所有關於您個人資料的處理，LinkedIn 為唯一負責的資料控制者。若您希望行使個人資料查詢、刪除等權利，請直接向 LinkedIn 提出申請。
1.5 社群媒體聲量觀測（Social Listening）
我們會主動搜尋與關注網路上（特別是社群媒體平台）與本公司業務有關的新聞、趨勢與討論內容。這些內容可能涉及百靈佳殷格翰本身，亦可能與其他企業、人物、產品，或與產業及社會相關的重要議題有關。例如，我們可能蒐集來自 Twitter 或 LinkedIn 使用者針對百靈佳殷格翰或特定行動（如多元共融倡議）的評論資料。
這些資訊可用於以下目的：
- 辨識並聯繫具影響力的意見領袖，例如部落客與社群創作者；
- 瞭解目前受到關注的議題，分析哪些主題獲得正面或負面回應，以及回應者所屬族群，據此調整我們的溝通策略並發掘潛在新議題。
我們主要透過關鍵字搜尋方式蒐集這些資料，尤其是在社群媒體平台上的公開發言、評論或互動（例如貼文、留言、推文等）。若這些資訊為公開內容，即使為個人資料，我們亦可依法加以使用。
我們亦可能委託資料處理服務商與合作夥伴協助蒐集與分析這些資料。
本項資料處理依據為 GDPR 第 6 條第 1 項第 f 款（正當利益）。
1.6 藥物安全監控（Pharmacovigilance）
作為一家藥品公司，百靈佳殷格翰有義務執行藥物安全監測（pharmacovigilance）相關工作，包括對藥品可能引起的副作用或其他問題進行偵測、評估、分析與預防。為履行此一法定義務，我們需處理部分個人資料，這些資料可能直接或間接識別特定個人（例如病患與通報者）。
我們可能處理以下類型的個人資料：
通報者資訊：
- 姓名（或縮寫）與聯絡資訊（例如地址、電子郵件信箱、電話號碼）、職業（如醫師、藥師等）
病患資訊（報告對象）：
- 縮寫（不會紀錄全名）、性別、年齡／出生日期／年齡層級
- 涉及的不良反應相關產品資訊（例如使用方式、批號）
- 不良反應事件的具體內容：發生經過、病程與結果、開始與結束日期、是否首次使用、是否有合併用藥或其他疾病、事件嚴重程度、病患與／或通報人對於該事件與產品間可能因果關係的看法
我們會要求聯絡方式，以便後續可與通報者聯繫，取得更完整與高品質的不良事件資訊。若通報者不願提供聯絡資料，可於姓名欄位填寫「Privacy」字樣。
我們處理此類資料的目的包括：(i) 分析該不良事件；(ii) 與通報者聯繫以取得更多資訊；(iii) 將該事件資料與我們全球藥物安全資料庫中其他事件進行彙整與比對（由 Boehringer Ingelheim International GmbH 營運管理）；(iv) 向全球主管機關報告相關藥物安全資訊。
所回報的個人資料僅會使用於上述目的。處理該類個資（包含敏感資料）的法律依據為：GDPR 第 9 條第 2 項第 i 款、德國《聯邦資料保護法》第 22 條第 1 項第 c 款，以及 GDPR 第 49 條第 1 項第 e 款（如涉及歐盟以外之資料傳輸）。
我們依法必須保存相關藥物安全資料，保存期限為該產品市場許可有效期間加計至少十（10）年，即便該產品已停止在某一國家銷售，仍需保留該資料。
1.7 其他資料處理目的
在必要情況下，我們也可能基於下列目的處理您的個人資料：
- 為實現我們的正當利益（依 GDPR 第 6 條第 1 項第 f 款），例如：
(i) 完成企業交易（如公司重整、資產移轉或合併）；
(ii) 保護、主張或捍衛我們的權利、財產與合法利益；
- 為確保遵守法律義務、法院命令，或其他主管機關具法律效力之決定（依 GDPR 第 6 條第 1 項第 c 款）；
- 作為履行契約或法定義務所必須的資料處理（依 GDPR 第 13 條第 2 項第 e 款）。
2. 個人資料的揭露與移轉
我們可能在特定情況下，將您的個人資料提供或揭露給第三方，具體情形說明如下：
2.1 向主管機關通報與依法維權
為了遵守法律所規定的通報義務，或為了保障我們自身或第三方的合法權益，我們可能依法將您的個人資料揭露給權利人、法律顧問、法院或主管機關（例如：關於疑似藥品不良反應的強制性通報）。
2.2 委託資料處理服務提供者（Processor）
我們可能委託第三方服務提供者協助處理您的個人資料，並確保該等服務提供者僅能根據我們的書面指示、在我們的監督與控制下、且依據本隱私權政策進行資料處理作業。
2.3 百靈佳殷格翰關係企業
作為全球企業集團的一部分，我們會與其他百靈佳殷格翰關係企業合作處理資料（例如於藥品安全監測流程中協助分析及處理不良反應報告）。
這些關係企業將依本隱私權政策所載目的處理資料，並根據 GDPR 第 26 條規定，視為「共同資料控制者」（Joint Controller）。
2.4 提供予第三方
若您事前同意，我們可能會將您的資料提供給具有自主資料處理責任的合約合作對象（例如 LinkedIn 或 Twitter）。這些第三方將根據其自身的目的與責任處理您的資料，使用範圍僅限於本政策中所載明之用途。
2.5 其他藥廠合作夥伴
在百靈佳殷格翰產品的藥品安全監測義務所需情況下，我們可能會與其他具有共同推廣、共同配銷或授權關係的藥品公司分享與藥品安全相關的資訊，這些資訊可能包含個人資料。
該等合作藥廠將僅依據我們的指示、在我們監督與控制下、並依本隱私權政策進行資料處理。
2.6 社群外掛與第三方內容
我們的網站並未內嵌任何社群媒體外掛工具，亦不會在您造訪本網站時自動將資料傳送給社群媒體服務供應商（例如 Social Plugins）。
若網站中有導向第三方社群媒體（如 YouTube、Meta 等）的連結，僅當您主動點擊該連結時，相關資料（如您的 IP 位址、瀏覽時間、頁面網址，或裝置中的 Cookie 資訊等）才會被傳送至該第三方平台。
2.7 資料移轉至歐盟以外地區
我們的主管機關、服務提供者、商業合作夥伴以及百靈佳殷格翰關係企業等，皆有可能於歐盟以外地區處理個人資料。針對此類跨境資料移轉，我們將依據歐盟法規採取適當保護措施，以確保資料保護水準符合要求。這些措施通常包括歐盟執委會公告之標準合約條款（EU Standard Contractual Clauses），或其他經認可之適當保護機制。
若您希望取得相關合約副本，可透過本聲明所載聯絡方式洽詢我們的資料保護長（Data Privacy Officer）。
3. 資料保存期間
百靈佳殷格翰將依據資料處理之目的，於必要期間內保存您的個人資料。通常，此一期間係為提供您所申請或使用之服務所需的期間。
舉例而言，若您註冊了使用者帳號，我們將保存您的登入資訊、職業別、姓名等資料，直到您主動刪除帳號為止。
此外，在某些情況下，我們亦有法定義務延長保存資料的期間，以符合適用的法規或法定保存要求。
針對特定資料處理目的，我們已另行訂定明確的保存期限。
4. 您的權利
您擁有以下與個人資料相關的權利：
- 查詢百靈佳殷格翰是否正在處理您的個人資料，並請求取得相關資訊；
- 在特定情況下，您有權要求刪除、更正或限制對您個人資料的處理；
- 於符合條件時，要求將您的個人資料以一般通用格式轉移給您本人或第三方；
- 向資料保護主管機關提出申訴；
- 如資料已無處理必要，或缺乏合法處理依據，您可要求刪除該筆個人資料；
- 隨時對僅基於百靈佳殷格翰「正當利益」所進行的個人資料處理行為提出異議（依 GDPR 第 6 條第 1 項第 f 款）。在此情況下，除非百靈佳殷格翰能證明其利益優先於您的權利，我們將停止該資料處理行為；
- 您可於任何時間拒絕將您的個人資料用於直接行銷用途，且無須進行利益衡量程序。
若您曾對資料處理提供同意，您可於任何時間撤回該同意。撤回僅對未來產生效力，並不影響撤回前資料處理的合法性。
5. 聯絡方式與問題
若您對本隱私權聲明內容，或我們如何使用您的個人資料有任何疑問，歡迎透過以下方式與我們聯繫：
Boehringer Ingelheim International GmbH
資料保護長（Data Protection Officer）收
地址：Binger Strasse 173, D-55216 Ingelheim am Rhein, Germany
電子郵件： datenschutz@boehringer-ingelheim.com
若您對我們的資料處理方式仍有疑慮，亦可向任何資料保護主管機關提出申訴。百靈佳殷格翰的主要監管機關為：
萊茵蘭**-**普法茲邦資料保護與資訊自由專員
地址：Hintere Bleiche 34, 55116 Mainz, Germany
電子郵件： poststelle@datenschutz.rlp.de
6. 隱私權聲明之修訂
我們可能會不定期更新本隱私權聲明。最新版本將公布於本網站，一經發布即視為生效。
*最近一次更新日期：2022年9月*
Privacy Notice
This Privacy Notice describes how and for which purposes Boehringer Ingelheim International GmbH (hereafter “Boehringer Ingelheim”, “we”, “our”, “us”) processes the personal data we collect about you through this website and social media.
Content
1. PURPOSES OF DATA PROCESSING
1.1 Registration, communication (website and social media channels)
1.3 Use of cookies and related data processing (website optimization, analysis, advertising)
1.4 Analysis of the use of our social media offerings
2. TRANSFER OF PERSONAL DATA](/content/tw/yinsiquanshengming#2/index.html)
2.1 Reporting obligations to regulatory authorities and enforcement of rights
2.2 Service provider (Processor)
2.3 Boehringer Ingelheim companies
2.5 Other Pharmaceutical Companies
2.6 Social plugins and third-party content
2.7 Data transfer to recipients outside the EU
3. RETENTION PERIODS](/content/tw/yinsiquanshengming#3/index.html)
4. YOUR RIGHTS](/content/tw/yinsiquanshengming#4/index.html)
5. CONTACT AND QUESTIONS](/content/tw/yinsiquanshengming#5/index.html)
6. CHANGES TO THIS PRIVACY NOTICE](/content/tw/yinsiquanshengming#6/index.html)
1. PURPOSES OF DATA PROCESSING
1.1 Registration, communication (website and social media channels)
We process your data in order to provide you with the services on our websites, for example when you register, log in, participate in training courses and events or send us messages.
We also process your data when you participate in campaigns on our social media channels (Instagram, LinkedIn etc.) or send us inquiries or comments.
The legal basis is Art. 6 (1) b) GDPR.
1.2 Log data
When you visit the website, we receive log data sent by your browser (e.g., IP address, previous website visited, time and date, displayed contents, information regarding the browser and operating system). Collecting log data is technically required to enable you to use our website (the legal basis is Art. 6 (1) b) GDPR). The log files will be stored for as long as necessary for the respective purpose, in principle no longer than 14 days.
1.3 Use of cookies and related data processing (website optimization, analysis, advertising)
We use cookies (small text files placed on your browser) and similar Technologies such as pixel tags (hereinafter referred to as “Cookies”).
1.3.1 Essential Cookies
Essential Cookies are necessary for the website to function properly by providing basic features such as page navigation, access to secure areas of the website or language settings. Legal basis is Art. 6 (1) b) GDPR We store these essential Cookies for up to one year.
1.3.2 Website optimization and analysis
Based on your consent, we set Cookies and analyze how you're using our websites. This way, we collect information about how well certain services are received and we can adjust and improve them as well our websites.
You may withdraw your consent at any time. To do so, please click on the existing button (wheel icon) on the bottom left hand.
With your consent, we use the following services:
Adobe Analytics (Omniture)
Cookies from Adobe Analytics allow us to analyze all traffic and usage patterns of individual users (without further identification) or groups (e.g., which services are used how often, how frequently do users return, how long do they stay, which websites and which region are users coming from). This cookie is stored for up to three years.
Adobe Analytics is a service of Adobe Systems Software Ireland Limited. Adobe acts as our processor. In exceptional cases, data may be transferred to the U.S. Therefore, we concluded the EU Standard Contractual Clauses with Adobe in the U.S.
To protect your identity, the IP address collected by the Cookies is shortened and replaced with a generic IP address.
1.3.3 Marketing Cookies
If you consent, we use Cookies that allow us and our partners to follow users to other websites in order to show ads that are more relevant to the individual user.
You may withdraw your consent at any time. To do so, please click on the existing button (wheel icon) on the bottom left hand.
We use the following services of third-party providers:
Meta marketing pixel
If you consent, we activate a pixel from Meta Platforms Ireland when you visit our website. (Meta Platforms Ltd., 4 Grand Canal Square, Dublin 2, Ireland).
The pixel reports to Meta Platforms Ireland which actions you have performed on our website as well as data by which you may be identified by Meta Platforms Ireland (including information regarding app/browser, language setting, time, IP address, advertising ID).
This data allows Meta Platforms Ireland to see that you visited our website, your clicks on our website or if you clicked on a link on Facebook or Instagram that connects you to our website. This allows Meta to show you interest-based ads on Facebook, Instagram or other websites. Meta may link this data to your user account and use it for its own purposes. For information how Meta Platforms Ireland processes your data please check https://www.facebook.com/about/privacy.
We do not receive any data about you or other users of Meta Platforms Ireland, but only statistics that show us, aggregated for all users and only for a certain time period, how they interacted with our offers and ads on other platforms of Meta Platforms Ireland (Facebook, Instagram). This helps us to determine which of our ads were successful and which ones were not.
For the transfer of data collected from the pixel, we and Meta act as so called " Joint Controller" according to Art. 26 GDPR. We have therefore concluded a separate agreement that you can find here: https://www.facebook.com/legal/controller dendum. For any further processing of your data, Meta is the sole controller. If you wish to exercise your rights to information, deletion, etc. (see section "Your Rights"), Meta Platforms Ireland is responsible for their fulfillment as part of our Joint Controllership.
Twitter (Conversion Tag)
If you consent, we activate a Twitter tag when you visit our website (Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland).
The tag reports to Twitter what actions you have taken on our website as well as data by which you may be identified.
This data allows Twitter to see that you have visited our website, what you have clicked on and if you clicked on a link on Twitter that connects you to our website. This allows Twitter to show you interest-based content. Twitter can link this data to your user account and use it for its own purposes. For information how Twitter processes your data please check https://twitter.com/de/privacy.
We do not receive any data about you or other Twitter users, but only statistics that show us, aggregated for all users for a certain time period, how they interacted with our offers and ads on other platforms of Twitter. This helps us to determine which of our ads were successful and which ones were not.
LinkedIn (Insight-Tag)
If you consent, we activate a LinkedIn Cookie when you visit our website (LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland).
The tag reports to LinkedIn what actions you have taken on our site as well as data by which you may be identified.
With the data LinkedIn can see that you have visited our website, what you have clicked on and if you clicked on a link on LinkedIn that connects you to our website. This allows LinkedIn to show you interest-based content. LinkedIn can link this data to your user account and use it for its own purposes. For information how LinkedIn processes your data please check https://www.linkedin.com/legal/privacy-policy.
We do not receive any data about you or other LinkedIn users, but only statistics that show us, aggregated for all users for a certain time period, how they used our offers and ads on other platforms of LinkedIn. This helps us to determine which of our ads were successful and which ones were not.
1.4 Analysis of the use of our social media offerings
Our social media partners (Meta, LinkedIn etc.) provide us with statistics and analyses on the use of our social media offerings. These statistics do not contain any names or other information about individual users. With the help of these services we can analyze and improve our social media activities. The legal basis is Art. 6 (1) f) GDPR.
1.4.1 Meta
When processing data on our online presences on Facebook and Instagram, we and Meta Platforms Ireland act as so called "Joint Controller" according to Art. 26 GDPR. We have therefore concluded a separate agreement that can be found here: https://www.facebook.com/legal/controller dendum. For any further processing of your data, Meta is the sole controller. If you wish to exercise your rights to information, deletion, etc. (see section "Your Rights"), Meta Platforms Ireland is responsible for the fulfillment of your rights as part of our Joint Controllership.
1.4.2 LinkedIn
When processing data on our online presences on LinkedIn, we and LinkedIn act as so called "Joint Controller" according to Art. 26 GDPR. We have therefore concluded a separate agreement that can be found here https://legal.linkedin.com/pages-joint-controller-addendum. For any further processing of your data, LinkedIn is the sole controller. If you wish to exercise your rights to information, deletion, etc. (see section "Your Rights"), LinkedIn is responsible for the fulfillment of your rights as part of our Joint Controllership.
1.5 Social Media Listening
We search and follow news, trends, and developments on the internet, especially on social media, that are important to us. This can be news and statements about our or other companies, persons, products, or general business relevant topics. For example, we may collect data on how users on Twitter and LinkedIn comment on Boehringer Ingelheim as a company or on specific campaigns, such as inclusion.
We us this information to:
- identify and contact key players, such as bloggers and influencers.
- understand which topics are relevant, which are positively received, which are negatively received and by which groups; with this information we can adapt our communication and identify new topics.
We collect such data in particular by keyword searches on the internet, especially on social media platforms or by following publicly available expressions of opinion, statements or other interactions (tweets etc.). Such data may also be personal data if they are publicly available. We also use processors and other partners for collecting and analyzing this data. The legal basis is Art. 6 (1) f) GDPR.
1.6 Pharmacovigilance
As a pharmaceutical company Boehringer Ingelheim is required to carry out certain activities related to the detection, assessment, understanding and prevention of adverse effects or any other medicine related problem, also known as pharmacovigilance obligations. The pharmacovigilance obligations require us to process certain information, which may allow us to directly or indirectly identify a person, i.e. the patient and/or the reporter of the adverse event (personal data).
We may need to process following personal data:
About the reporter:
- Full name, initials, and contact details (which may include your address, e-mail address and phone number), profession (e.g., physician, pharmacist).
About the patient (subject of the report):
- Initials (as provided) never the patient’s name; gender; age / date of birth / age group;
- Details related to the Boehringer Ingelheim product suspected to cause the reaction, such as administration information, batch number;
- Further details related to the adverse event: What did exactly happen?; course and outcome of the adverse event, start and end date, first-time user?, information on concomitant medications and/or diseases; seriousness of the event; view of patient and/or reporter on possible causal relationship between Boehringer Ingelheim product and adverse event;
The contact information is requested to enable us to follow-up with the reporter to gain high quality and complete information on adverse events. If the reporter does not wish to provide his contact details to Boehringer Ingelheim or authorities, the reporter can enter “Privacy” in reporter's names field.
We may process your personal data to: (i) analyze the reported adverse event; (ii) contact the reporter for further information; (iii) collate and analyze the information about the adverse event with information about other adverse events received by Boehringer Ingelheim worldwide through our global pharmacovigilance database which is operated by Boehringer Ingelheim International GmbH; and (iv) report pharmacovigilance relevant information to health authorities worldwide.
Reported personal data will be used solely for these purposes. Legal basis for processing pharmacovigilance relevant personal data, including special categories of personal data, is Art. 9 (2)(i) GDPR in connection with Section 22 (1)(c) German Federal Data Protection Act, and furthermore in connection with Art. 49 (1) (e) GDPR for transfers outside the EU.
We are legally obliged to archive pharmacovigilance related information which may include your personal data for the time period of the market authorization plus at least further ten (10) years after the marketing authorization has expired in any country where the relevant Boehringer Ingelheim product was placed on the market.
1.7 Further purposes
If necessary, we process your personal data for additional purposes:
- satisfying our legitimate interests (Art. 6 (1) f) GDPR), including the following:
(i) to complete a corporate transaction (e.g., corporate restructuring, sale or assignment of assets, merger);
(ii) to protect, enforce and defend our rights, property and interests;
ensuring compliance with legal obligations, court orders or other binding decisions of public authorities (Art. 6 (1) c) GDPR).
as a contractual/statutory requirement according to Art. 13(2) e) GDPR.
2. TRANSFER OF PERSONAL DATA
We may share and/or disclose personal data with third parties:
2.1 Reporting obligations to regulatory authorities and enforcement of rights
In order to comply with legal reporting obligations, to protect our rights and/or the rights of third-parties, we may share and disclose personal data to rights holders, consultants, courts and competent authorities in accordance with legal provisions (e.g., mandatory reports in respect of a suspected adverse event).
2.2 Service provider (Processor)
We engage service providers to process your personal data for the purposes described in this privacy policy. These service providers process the data only on our behalf, according to our instructions, under our control and in accordance with this privacy policy.
2.3 Boehringer Ingelheim companies
As part of a global group of companies, we involve other Boehringer Ingelheim companies that support us with data processing (e.g., as part of our pharmacovigilance obligations to analyze and process a reported adverse event). These group companies process the data exclusively for the purposes stated in this privacy policy as Joint Controller according to Art. 26 GDPR.
2.4 Transfer to third parties
We transfer data to contractual partners who process data under their own responsibility and for their own purposes (e.g., LinkedIn or Twitter, if you have given your consent). The data is transferred solely for the purposes described in this Privacy policy.
2.5 Other Pharmaceutical Companies
We may share pharmacovigilance related information which may include personal data with other pharmaceutical companies who are co-marketing, co-distribution, or other license partners of a Boehringer Ingelheim group of companies, where pharmacovigilance obligations for a Boehringer Ingelheim product require such exchange of safety information; these companies process the data only on our behalf, according to our instructions, under our control and in accordance with this Privacy Policy.
2.6 Social plugins and third-party content
We have not implemented any tools, by which information is automatically transferred to the provider of social media services when you visit our website (Social Plugins).
Any forwarding to social media providers such as YouTube, Meta, etc. takes place exclusively via link, so that data about your visit to our services (e.g., IP address, time, URL) or data available on your end device (e.g. Cookie information) is only transmitted to the respective providers when the link is consciously used.
2.7 Data transfer to recipients outside the EU
Authorities, service providers, business partners and Boehringer Ingelheim companies may process personal data outside the EU. In these cases, we ensure an adequate level of data protection to comply with European law (usually through EU standard contractual clauses published by the European Commission or, if necessary, other appropriate safeguards). You can request a copy of the contract that implements the appropriate protection of personal data by contacting our Data Privacy Officer using the contact details set out below.
3. RETENTION PERIODS
Boehringer Ingelheim will store your personal data as long as it is necessary for the respective purposes, which is usually to provide the services you have requested. This means for example, that we store your user account data (login, profession, name etc.) until you delete it. In some cases, we are obliged to store your data for longer in order to comply with statutory retention periods.
We have specified retention periods for certain processing purposes.
4. YOUR RIGHTS
You have the right to:
request information about your personal data processed by Boehringer Ingelheim;
in justified cases, request deletion, rectification or restriction of the processing of your personal data;
in certain circumstances, request transfer of your Personal Data to you or another person in a commonly utilizable format;
file a complaint with a data protection authority;
request the deletion of your Personal Data if they are no longer necessary for the purposes of processing or there is no legal ground for their further processing.
object to processing of your Personal Data at any time as far as such processing is only based on Boehringer Ingelheim’s legitimate interest (Art. 6 (1) f) GDPR). In this case, we will not process such personal data any longer, unless the interests of Boehringer Ingelheim prevail. You can object to the use of data for direct marketing purposes at any time without a weighing of interests.
Should you have given your consent to the processing of your personal data, you can withdraw it at any time with effect for the future; such withdrawal will not affect the lawfulness of the processing until such withdrawal.
5. CONTACT AND QUESTIONS
If you have any questions about this Privacy Notice or about how we use your personal data, please contact us at the following address:
Boehringer Ingelheim International GmbH
– Data Protection Officer –
Binger Strasse 173, D-55216 Ingelheim am Rhein, Germany
E-Mail: datenschutz@boehringer-ingelheim.com
If you still have questions or concerns regarding data processing, you can also contact any supervisory authority. The responsible authority for Boehringer Ingelheim is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34, 55116 Mainz, Germany
E-mail: poststelle@datenschutz.rlp.de
6. CHANGES TO THIS PRIVACY NOTICE
We may update this Privacy Notice from time to time. Updates of our Privacy Statement will be published on this website. Any amendments become effective upon publication on our Website.
Last updated: September 2022