Why We Collect and Use Your Data Depending on the business contact we have with you and/or the company you are working for, we collect and use your data for the following purposes: Asses a potential business relationship and/or maintaining our business relationship with you or the company you are working for (including customer relationship management, supplier management, investor relations management) Vendor assessment and qualification (e.g., whether you and your organization meet certain quality and certification requirements) Procurement of products and services from you or the company you are working for Exchange of information related to existing contracts or possible contracts with you or the company you are working for Fulfill our contract with the company you are working for, including the enforcement of any rights we may have under such contract Fulfillment of compliance requirements related to a business transaction (e.g., conflict checks, business partner due diligence, sanction list screening, anti-money laundering laws, secure supply chain requirements, customs and export law requirements, tracing requirements for products) Manufacture, sell, provide and deliver products and services Marketing (e.g., informing you about products and services or related information) Assess and categorize which specific business needs match best with your abilities (e.g. when we look for a key opinion leader in a certain field or for specific products, the extent you belong to the group of scientific input providers, based on scientific or professional experience) or if you can, in your professional capacity, influence the use, purchase, ordering, prescribing or recommendation of Fresenius Kabi products, or affect tender decisions, formulary placement, award status or other preferential or qualifying status of Fresenius Kabi products in accordance with applicable law Collection of payments due to us including the re-financing of debts Assess your company’s financial solvency and credit risk Assess potential investments in Fresenius shares, a potential acquisition, divestiture or joint venture transaction with us or any Fresenius Kabi affiliate Improve our products and services Organize, secure and improve internal processes including communication, administration, research and IT Facilitate mergers, acquisitions and re-organizations
What Data We Collect and How We Do That We may collect and use your personal data in the following situations: Information you provide to us We collect your personal data when you contact us, order our products and services or enter into a contract with us for the supply of goods and services. Such personal data include: First and last name Gender Contact and address information, including address, e-mail address, phone number, fax number Country of residence Role and function in your organization Your areas of expertise Your profession and qualifications Information on the kind of a relationship you have with Fresenius Kabi Employer name and employer address Contact preferences Information we collect from other organizations Furthermore, we process data that is provided to us by contracted service providers, by competent authorities or obtained from publicly accessible trade registers or trade associations and other publicly available sources, including rating agencies, financial solvency and risk information and financial service agencies and institutions, government or supranational agencies, in particular tender authorities or procurement agencies, data brokers, websites, blogs and printed media. Such personal data include: First and last name Contact and address information (including address, e-mail address, phone number, fax number) Your company’s bank accounts Your profession and qualifications Professional identifiers Organizational details, affiliation details of your company Certifications and quality statements issued by your company’s officers, representatives or auditors Percentage of shares held Details related to public filings, trade registers and professional boards Details related to published transactions of your company including tenders and financial arrangements Previous interactions with Fresenius Kabi and any of our subsidiaries
Legal Basis for Processing Your Data Depending on the business contact we have with you and the purposes we collect and use your data, we process your personal data on one or more of the following legal bases: The processing of your personal data is necessary for the performance of a contract (to be) concluded between you and us (Art. 6.1 b GDPR) The processing of your personal data is necessary for us to comply with a legal obligation we are subject to (Art. 6.1 c GDPR). More specifically we are obliged to comply with laws on anti-money laundering, customs and export, secure supply chain requirements, product tracing requirements, statutory disclosure and notification requirements or similar compliance requirements that might require us to process certain of your personal data The processing is necessary for purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (Art. 6.1 f GDPR). These legitimate interests are: Investigate your interests for a potential business relationship and/or maintaining our business relationship with you or the company you are working for Fulfilling our contract with the company you are working for, including the enforcement of any rights we may have under such contract Gather information on knowledge management related to internal processes, products and services Development, optimization and improvement of our products and services Optimization of internal communication Optimization of administration Carrying out research work Organizational management Risk Management: safeguarding against e.g., financial / reputational risks Maintenance of the IT infrastructure, IT security, guarantee of IT support and the detection and correction of errors Complying with legal requirements outside the EEA Establishment, exercise or defense of legal claims You have given us your consent for the intended processing of your personal data (Art. 6.1 a GDPR) You can always withdraw your consent. You can withdraw your consent to all processing or for individual purposes of your choice. The withdrawal of consent will not affect the lawfulness of processing based on your consent before the withdrawal. You can withdraw your consent by sending an email to Local Data Privacy Advisor .
We Share Your Data We collaborate with other organizations to achieve our purposes. Therefore, we may send your personal data in parts or as a whole to other entities. Recipients are: Other Fresenius Group companies if such a transfer of personal data is required for the specific purpose . Service providers who process personal data on our behalf (such as IT-service providers who host the data or provide maintenance services) and have to follow our instructions on such processing. These service providers will not be allowed to use your personal data for other than our purposes Authorities, courts, parties in a litigation, or their delegated bodies, in case we are required to do so to meet any applicable law, regulation, legal process or enforceable governmental request, such as tax and customs authorities, and financial market authorities Professional advisors or auditors such as tax advisors, financial auditors, lawyers, insurers, banks and other external professional advisors in the countries we operate in Professional data and analytics providers such as IQVIA, Veeva, CDQ and Acxiom Another entity in the event of a change in ownership, a merger with, acquisition by, or sale of assets International data transfers We may send your personal data in parts or as a whole to Fresenius Group recipients or our service providers other international organizations in countries, which are not member states of the European Union, for the purposes listed above. We may send data to the following countries for which the European Commission has determined an adequate level of data protection to be in place that matches the level of data protection within the European Union for the following countries / international organizations in which Fresenius entities are located: Argentina, Canada, Japan, New Zealand, Switzerland or Uruguay. With regards to such international data transfers to third countries, for which the European Commission has not decided that an adequate level of data protection exists, we have provided appropriate safeguards in order to secure your personal data to a degree that equals the level of data protection in the European Union. These safeguards are: For the exchange of data within our company: our Binding Corporate Rules for Controllers For the exchange of data with our service providers and other international organizations: Standard Contractual Clauses that have been issued by the European Commission You can obtain a copy of these Standard Contractual Clauses and our Binding Corporate Rules, online, or upon request.
How Long We Retain Your Data Generally, we store your personal data for one of the following periods of time: As long as we have a duty to retain the data in line with applicable laws (e.g., because we are obliged to store the data for tax purposes) If there is no legal retention applicable, at least for the term of the contractual relationship with you or the company you are working for If we have a legitimate interest to process your personal data outside of such a contractual relationship, we process it for as long as we still have a legitimate interest in processing this data. The exact period depends on the company you are working for and your position in the company
Requests, Inquiries and Complaints Depending on the situation, you have certain rights regarding your personal data. You have the right to: Request access to your personal data Request rectification of your personal data Request erasure of your personal data Request the restriction of processing of your personal data Data portability Object on grounds specific to your situation You can exercise these rights online by using the data protection contact form.
Further Information for Specific Situations Requirements to provide personal data You may need to provide your personal data to us for the purpose of fulfilling a contract with you or the company you are working for, e.g., we might require your contact details if you are our business contact at a supplier. If you fail to provide your personal data, we might not be able to enter into the respective contractual relationship. Automated decision making An automated decision making (Art. 22 GDPR) occurs according to our obligation to conduct a sanction-control-procedure. This is also necessary for entering into, or performance of, a contract between you and us. The consequence of this can be the refusal to enter into a contractual relationship with you. Changes to this data protection statement As our collection and use of your data may change over time, we may also modify this data protection statement to always correctly reflect our data processing practices. We encourage you to review it from time to time.
Controller and Contact The controller and responsible entity for processing your personal data is the Fresenius Kabi legal entity contracting with you or otherwise: Fresenius Kabi Oncology Limited Echelon Institutional Area Plot No - 11, Sector - 32 Gurgaon - 122001 Haryana, India Contact
Why We Collect and Use Your Data We collect and use your data for the following purposes: Execute the contract with you, including payment transfers Maintain a database of HCPs with whom we already collaborated and/or may collaborate in the future Contact management and communicating with you Assess and categorize which specific business needs match best with your abilities (e.g. when we look for a key opinion leader in a certain field or for specific products, the extent you belong to the group of scientific input providers, based on scientific or professional experience Best practice sharing Fulfillment of our compliance requirements, such as those stemming from anti-corruption laws, anti-money laundering laws and other laws on economic crime, regulatory and pharmacovigilance and medicines laws, as well as disclosure requirements resulting from applicable laws and self-regulatory codes of conduct as a result of our membership in trade associations
What Data We Collect and How We Do That We may collect and use your personal data in the following situations:Information you provide to usWe collect your personal data depending on the different types of interaction you have with us. Such personal data includes: First and last nameGenderContact and address information, including address, e-mail address, phone number, fax numberCountry of residenceCurriculum vitae information, including information on your professional experience, your engagement with us and other companies, events you attended, publicationsPictures of youAudio-visual recordings of your voice, appearance and statements, if a presentation of yours is recordedYour areas of expertise and your areas of professional interest as an HCPInformation on payments made and benefits granted to youYour bank account numberYour tax identification numberContract entered between you and usPayments made, or benefits granted to youInformation we collect from publicly available sourcesBefore we enter in an interaction with you, we may collect information about you and your professional experience from publicly available sources, such as the internet, social media platforms, sanction lists and other online and print publications. Such data includes: First and last nameCurriculum vitae information, including information on your professional experience, your engagement with other companies, events you attended, publications etc.Business addressPictures and audio-visual recordings of you
Legal Basis for Processing Your Data Depending on the business contact we have with you and the purposes we collect and use your data, we process your personal data on one or more of the following legal bases: The processing of your personal data is necessary for the performance of a contract (to be) concluded between you and us (Art. 6.1 b, GDPR)The processing of your personal data is necessary for us in order to comply with a legal obligation we are subject to (Art. 6.1 c GDPR). More specifically we are obliged to comply with national and, if applicable, international laws and regulations relating to the fight against corruption, anti-money laundering anti-terrorism financing and other economic crime. We have to assess the appropriateness of the remuneration and other payments made and other support granted to you and are subject to certain documentation, publication and reporting obligations and therefore, can be obliged to disclose the remuneration paid or other support in kind availed to you as a speaker or other service provider, to your employer or to competent regulatory authorities, criminal prosecutors and other recipients responsible for the implementation of transparency rules upon request, or make such payments and in kind support available publicly. This includes particularly documentation, disclosure and reporting obligations in connection with medicines, medical devices and healthcare regulations, transparency laws, laws on anti-money laundering and self-regulatory regimes such as industry and patient codesThe processing is necessary for purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6.1 f, GDPR). These legitimate interests are: Maintenance of a database that contains all HCPs with whom we already collaborated or may collaborate in the future, to manage the interactions with you and other HCPsEstablishment, exercise or defense of legal claims You have given us your consent for the intended processing of your personal data (Art. 6.1 a GDPR) You can withdraw your consent at any time. You can withdraw your consent to all processing or for individual purposes of your choice. The withdrawal of consent will not affect the lawfulness of processing based on your consent before the withdrawal. You can withdraw your consent by sending an email to Local Data Privacy Advisor.
We Share Your Data Weecollaborate with other organizations to achieve our purposes. Therefore, we may send your personal data in parts or as a whole to other organizations. This applies particularly to payment and other financial data and contract data that will be accessible only to a very limited number of recipients who have a need to know the data for the fulfillment of their tasks, subject to any disclosure obligations. Such recipients are: Other Fresenius Group companies if such a transfer of personal data is required for the specific purpose, or that may be interested in working with you .Service providers which process personal data on our behalf (e.g. for hosting or maintenance services) and have to follow our instructions on such processing; these service providers will not be allowed to use your personal data for other than our purposesCompetent regulatory authorities, criminal prosecutors and other recipients responsible for the implementation of transparency rules as well as criminal laws and administrative lawsAuthorities, courts, parties in a litigation to the extent required to meet any applicable law, regulation, legal process or enforceable governmental requestThe general public, to the extent we are obliged to publicly disclose payments made to you and other benefits provided to you, e.g. meals, travel and lodging as well as other hospitality. Where there is no statutory legal basis for public disclosure including the identity of the recipient, you may choose to withhold your consent to such disclosure, and we would then disclose the payments and benefits on an anonymous aggregated basisProfessional advisors or auditors, such as tax advisors, financial auditors, lawyers, insurers, banks and other external professional advisors in the countries in which we operateInternational data transfersWe may send your personal data in parts or as a whole to Fresenius Group recipients or our service providers other international organizations in countries, which are not member states of the European Union, for the purposes listed above. We may send data to the following countries for which the European Commission has determined an adequate level of data protection to be in place that matches the level of data protection within the European Union in which Fresenius entities are established: Argentina, Canada, Japan, New Zealand, Switzerland or Uruguay. With regards to such international data transfers to third countries, for which the European Commission has not decided that an adequate level of data protection exists, we have provided appropriate safeguards in order to secure your personal data to a degree that equals the level of data protection in the European Union. Safeguards used are: For the exchange of data within our company: our Binding Corporate Rules for Controllers For the exchange of data with our service providers and other international organizations: Standard Contractual Clauses that have been issued by the European Commission You can obtain a copy of these Standard Contractual Clauses and our Binding Corporate Rules online, or upon request.
How Long We Retain Your Data The personal data related to your interactions with us will be deleted ten years after the completion of the last interaction with you, unless we are legally required to retain the data.
Requests, Inquiries and Complaints Requirements to provide personal dataYour personal data is required to make the website accessible to you and to be able to follow up on your inquiry.If you do not provide your personal data, the website will not work, and we may not be able to respond to or properly process your request.Changes to this data protection statementAs our collection and use of your data may change over time, we may also modify this data protection statement to always correctly reflect our data processing practices. We encourage you to review it from time to time.Depending on the situation you have certain rights regarding your personal data. You have the right to:Request access to your personal dataRequest rectification of your personal dataRequest erasure of your personal dataRequest the restriction of processing of your personal dataData portabilityObject on grounds specific to your situationYou can exercise these rights online by using the data protection contact form.
Further Information for Specific Situations Requirements to provide personal dataYour personal data is required to make the website accessible to you and to be able to follow up on your inquiry.If you do not provide your personal data, the website will not work, and we may not be able to respond to or properly process your request.Changes to this data protection statementAs our collection and use of your data may change over time, we may also modify this data protection statement to always correctly reflect our data processing practices. We encourage you to review it from time to time.
Controller and Contact The controller and responsible entity for processing of personal data is:Echelon Institutional AreaPlot No-11, Sector - 32GurgaonPin code - 122001Haryana, India Contact