At Chugai Pharma Europe Ltd (Chugai), we understand that protecting your privacy is very important. That’s why we have taken the necessary steps to meet worldwide data privacy requirements. We treat your personal data according to the laws of England and Wales and other applicable EU laws which regulate the collection, storage, process, access and transfer of personal data, including the UK Data Protection Act 2018 (“DPA2018”), the UK General Data Protection Regulation (“UK GDPR”) and the European General Data Protection Regulation (“GDPR”), and in accordance with our internal personal data management processes.

Chugai websites and online resources that display this Privacy and Cookie Policy (policy) and that ask for any personal information from you are committed to collecting, maintaining, and securing personal information about you in accordance with this policy, as well as applicable laws, rules and regulations. 

This policy applies to personal data collected from Chugai’s online resources and communications (such as websites, e-mail, apps, systems and other online tools) that display a link to this policy. This policy may also apply to personal data collected from offline resources and communications, in cases where such personal information is consolidated with personal information collected by Chugai online. This policy does not apply to third-party online resources to which Chugai’s website may link, where Chugai does not control the content or the privacy practices of such resources, please ensure you read relevant notices when accessing third party links.

In this policy ‘personal data’ means personal data as defined in the GDPR and refers to any information relating to you that can identify you either directly (e.g. name) or indirectly (e.g. an identification number). 

TABLE OF CONTENTS

• Who is the Data Controller
• How to Contact Us
• Information Collected
• How do we Collect your Personal Information
• How and Why we Use your Personal Information
• Complaints About Our Services and Products
• Retention Periods
• Your Legal Rights and Choices
• Security
• Use of Data
• Data Sharing and Transfer
• Technical Information and Cookie Policy
• Links to Other Sites
• Additional Information on Sections within this Websites
• Privacy Statement for Children
• Note to Users of Business or Professional Websites
• Updates to this Privacy and Cookie Policy

WHO IS THE DATA CONTROLLER OF YOUR PERSONAL DATA

In collecting and processing this personal data Chugai Pharma Europe Ltd together with the UK local affiliate Chugai Pharma UK Ltd, are the controllers of your personal data. When we say “Chugai”, “we”, “us” or “our”, this is who we are referring to. 

The registered company address is shared in the contact details below.

HOW TO CONTACT US 

Chugai has appointed a data protection officer (DPO) who can respond to any enquiries about our use of your personal data. If you have any questions about this policy, including any requests to exercise your legal rights, please contact the relevant DPO using the details set out below:

For Chugai Pharma Europe Ltd and Chugai Pharma UK Ltd

• Post: Mulliner House, Flanders Road, Turnham Green, London, W4 1NN UK
• e-mail: [email protected] 
• Phone: +44 (0)208 987 5600

Our UK companies have appointed our French local company as a data protection representative in the European Union (EU). If you are located in the EU, you can contact our EU representative, who can respond to queries. Please contact the EU representative at [email protected].

We only collect personal data about you if you choose to give it to us. We do not share any of your personal data with third parties for their own marketing use unless you explicitly give us permission to do so. Please review this policy to learn more about how we collect, use, share and protect information online.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

INFORMATION COLLECTED

Personal Information: You can choose to visit our website without providing any personal information; however, depending on your interactions with us this may restrict our relationship with you and/or we may not be able to provide the services you have requested. If you decide to provide your personal data, for example if you are required to register to use any part of our website, we may collect information such as:

• Basic information – name, address, date of birth, gender, prefix or title, usernames and passwords created within our systems
• Contact information – telephone number, mailing address, personal or business e-mail address or other information that allows us to contact you 
• Technical information – as described in the Technical Information and Cookie Policy section in this policy

HOW DO WE COLLECT YOUR PERSONAL INFORMATION

Directly from you when you:

• Access our websites, apps and systems and other online platforms
• Create an account and profile on one of our websites or online platforms 
• Submit a form or communication for support or to provide feedback
• Respond to surveys you may choose to participate in

HOW AND WHY WE USE YOUR PERSONAL INFORMATION

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.  However, we will normally collect personal information from you only where we have your consent to do so, where the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (for example network and information systems security).  In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person.

If we ask you to provide personal information to comply with a legal requirement, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not as well as the possible consequences if you do not provide your personal information.

The following is a list of the ways that we may use your personal information, and the reason we rely on for doing so:

Further information regarding the processing of personal information that we undertake can be found below and in our Data Protection section, however, if you have questions about, or need further information, concerning the legal basis on which we collect and use your personal information, please contact us using the contact details provided in this policy.

COMPLAINTS ABOUT OUR SERVICES AND PRODUCTS

When we receive a regulatory complaint from a person, we create a file containing the details of the complaint, which may include the identity of the complainant.  It may contain health related information. We will only use the personal information we collect to process the complaint.

We will keep personal information contained in complaint files in line with our retention policy as well as legal obligations. Statutory retention obligations remain unaffected. It will be retained in a secure environment and access to it will be restricted according to the “need to know” principle.

RETENTION PERIODS

We retain personal information we collect from you where we have a genuine business need to do so, for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements. There are also statutory retention obligations we have to adhere to.

YOUR LEGAL RIGHTS AND CHOICES

You have several choices regarding your use of our website. You could decide not to submit any personal data at all by not entering it into any forms or data fields on our website and not using any available personalised services. If you choose to submit personal data, you have the right to see and correct your data at any time. Certain parts of our website may ask for your permission for certain uses of your information and you can agree to or decline those uses.

If you opt-in for particular services or communications, such as an e-newsletter, you will be able to unsubscribe at any time by following the instructions that may be included in communications or contacting us as described in ‘How to contact us’. If you decide to unsubscribe from a service or communication, we will work to process this request without delay, although we may require additional information in order to do so.

You have the right to:

• Request access (Art. 15 GDPR) to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you.
• Request correction (Art. 16 GDPR) of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
• Request erasure of your personal data (Art. 17 GDPR). This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
• Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
• Request restriction of processing (Art. 18 GDPR) of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
• Receive notification (Art. 19 GDPR) when exercising your right to correction, erasure and restriction.
• Request the transfer (Art. 20 GDPR) of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
• Object (Art. 21 GDPR) to your data processing regarding a particular situation. 
• Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
• Not to be subject to a decision based solely on automated processing, including profiling, (Art. 22 GDPR) which produces legal effects concerning him or her or similarly significantly affects him or her.
• To lodge a complaint with a supervisory authority (Art. 77 GDPR)

If you wish to exercise any of these rights, contact the relevant DPO by using the details under the How to Contact Us section of this policy.

No Fee is Usually Required

You will not have to pay a fee to access your personal data (or to exercise any of the other rights).  However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What We May Need from You

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights).  This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time Limit to Respond

We try to respond to all legitimate requests within one month.  Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests.  In this case, we will notify you and keep you updated.

Right to Complain to the Supervisory Authority

You have the right to make a complaint at any time to the relevant supervisory authority for data protection issues. We would, however, appreciate the chance to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.

SECURITY

Chugai uses technology and security precautions, rules and other procedures to protect your personal data from unauthorised access, improper use, disclosure, loss or destruction. To ensure the confidentiality of your data, Chugai uses industry standard firewalls and password protection. It is, however, your personal responsibility to ensure that the computer you are using is adequately secured and protected against malicious software, such as trojans, computer viruses and worm programs. You are aware of the fact that without adequate security measures (e.g. secure web browser configuration, up-to-date antivirus software, personal firewall software, no usage of software from dubious sources) there is a risk that the data and passwords you use to protect access to your data, could be disclosed to unauthorised third parties.

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our website, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.

USE OF DATA

Chugai, including the subsidiaries, divisions and groups worldwide and/or the companies we hire to perform services on our behalf will use any personal information you choose to give us to comply with your requests. We will retain control of and responsibility for the use of this information. Some of this data may be stored or processed at computers located in other jurisdictions, whose data protection laws may differ from the jurisdiction in which you live. In such cases, we will ensure that appropriate protections are in place to require the data processor in that country to maintain protections on the data that are equivalent to those that apply in the country in which you live.

The information that you provide to us, will be helpful for us to better understand your needs and how we can improve our products and services. It helps us also to personalise certain communications with you about products and/or services that you might find interesting. We may use this data in order to provide information to an individual who has agreed to receive information from us. We may also use the data in aggregate form with no personally identifiable information in order to provide analysis internally and to share with others when appropriate.

DATA SHARING AND TRANSFER

Chugai shares personal data about you with various outside companies or agents working on our behalf to help fulfil business transactions (such as providing customer services) and to help fulfil business operations such as customer communications about our products, services and offers including market research, conducting analytics, marketing and website optimisation.

In addition, we may share personal data that we collect from you with our company’s headquarters, subsidiaries and affiliates globally or store that data with them. All these companies and agents are required to comply with applicable data protection laws.

We may also disclose personal data for these purposes:

(a) in connection with the sale, assignment or other transfer of the business of the website to which the data relates;

(b) to respond to appropriate requests of legitimate government agencies or where required by applicable laws, court orders, or government regulations; or

(c) where needed for corporate audits or to investigate or respond to a complaint or security threat.

No Third-Party Direct Marketing Use: We will not sell or otherwise transfer the personal data  you provide to us to any third parties for their own direct marketing use unless we provide clear notice to you and obtain your explicit consent for your data to be shared in this manner.

TECHNICAL INFORMATION AND COOKIE POLICY

When you interact with our website, we may collect technical information as described below:

Aggregate Information: such as statistical or demographic data. Aggregated data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your usage data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

Browse Public Pages on our Websites

If you browse public pages on our website, i.e. content that you can access without being logged in to an account you may have with us, we collect and process only non-sensitive information about you.  In particular, we will not collect any health-related information about you when you browse public pages on our websites. We will however process your personal information to the extent required to deliver the public content you request from us, for example to format it for your browser.  We will also process your personal information to meet our legitimate interests to protect the security of our website systems, and to measure the audiences for the various types of content provided.

To do this, we use:

• Automatically Collected Information: We automatically receive certain types of information whenever you interact with us on our website and in some e-mails, we may send each other. Automatic technologies we use may include, for example, web server logs/IP addresses, cookies, web beacons and third-party application and content tools. These technologies may be updated from time to time to reflect new functionalities that are available.

• Web Server Logs/IP Addresses: An IP address is a number assigned to your computer whenever you access the internet. All computer identification on the internet is conducted with IP addresses, which allow computers and servers to recognise and communicate with each other. Chugai collects IP addresses to conduct system administration and report aggregate information to affiliates, business partners and/or vendors to conduct site analysis and website performance review. We may also collect information about your computer operating system and browser type, for system administration. This is statistical data about our users’ browsing actions and patterns and does not identify any individual.

• Tracking Technologies: On certain web pages or e-mails, Chugai and/or our suppliers may utilise a common internet technology called a “web beacon” (also known as an “action tag” or “clear GIF technology”). Web beacons help analyse the effectiveness of websites by measuring, for example, the number of visitors to a website or how many visitors clicked on key elements of a website. Web beacons, cookies and other tracking technologies do not automatically obtain personally identifiable information about you. Only if you voluntarily submit personally identifiable information, such as by filling in an online form e.g. when registering or sending e-mails, or opening or clicking on emails that you have received from us, can these automatic tracking technologies be used to provide further information about your use of the website and/or interactive e-mails to improve their usefulness to you.

• Services: We may provide services (based on third party applications and content tools) on certain pages of the website such as Google Maps. These third parties may automatically receive certain types of information whenever you interact with us on our website using such third-party applications and tools.

• Cookies: A cookie is a piece of information that is placed automatically on your computer’s hard drive when you access certain websites. Cookies help to provide you with a good experience when you browse our website and also allow us to improve our website. The cookie uniquely identifies your browser to the server. Cookies allow us to store information on the server to help make the web experience better for you and to conduct site analysis and website performance review. Most web browsers are set up to accept cookies, although you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. Note, however, that some portions of our website may not work properly if you refuse cookies.

We use the following cookies:

• Strictly necessary cookies. These are cookies that are required for the core functionality and operation of our website. They include cookies that enable security, network management, and accessibly (such as language). You may disable theses by changing your browser settings, but this may affect how our website works.
• Analytical/performance cookies. These cookies allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily. These cookies do not collect information that identifies a visitor. All information that these cookies collect is aggregated and therefore anonymous. This website uses Matomo Analytics to collect this information.  Matomo Analytics uses cookies to help us analyse how users use the public content on our website.  The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Matomo on servers in the European Union. Matomo Analytics Cookies may exist for up to one year, if you do not delete them earlier. We have agreed with Matomo’s data processing agreement to ensure they operate Matomo Analytics on our behalf.  We also use the IP-anonymisation feature of Matomo Analytics. Matomo will use this information on our behalf for the legitimate interest-based purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.  
• Functionality cookies. These are used to recognise you and your preferences when you return to our website. This enables us to remember choices you make and personalise our content for you.

Chugai automatically places strictly necessary cookies in its websites, but we will never place other types of cookies without your consent, and you will be prompted to accept or refuse those.

For more detailed information about the cookies we use, click the ‘cookie’ icon available in the footer of this website.

Managing Cookies: You can choose to accept or decline cookies, except for strictly necessary cookies, on our website(s) by selecting your preferences in our cookie banner or by managing your preference at any time via the ‘cookie’ icon available in the footer of this website. Alternatively, if you wish to prevent cookies from tracking you anonymously as you navigate our website, you can reset your browser to refuse all cookies or to indicate when a cookie is being sent.

All browsers allow you to fine-tune cookie settings and determine which ones to accept and which to disable or delete. Your browser can also notify you when you receive new cookies. Please consult your browser’s ‘help’ section for more information on adjusting your cookie settings.

Cookies allow you to take advantage of some of our website’s essential features, so we recommend you leave them turned on. If you block or otherwise reject cookies the website may not function correctly, and you may not be able to access restricted parts of the website that require you to log in.

For more general information about cookies and their management visit: http://www.allaboutcookies.org

LINKS TO OTHER SITES 

Our website may, from time to time, contain links to and from the websites of our affiliates or to third-party websites, plug-ins and applications that may offer useful information to our visitors. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies or those linked websites. Insofar as we offer links, we assure that no violations of applicable laws were recognisable on the linked websites at the time the links were created.  However, we have no influence on other providers’ compliance with data protection and security regulations.  When you leave our website, we encourage you to read the privacy policy of every website you visit before you submit any personal data to these websites.

ADDITIONAL INFORMATION ON SECTIONS WITHIN THIS WEBSITE

If you access a section within this website which is governed by particular provisions relating to privacy that differ from those stated in this privacy policy, you will be made aware of this and such provisions defining how your data will be treated will be made available to you on the page on which the personal data is collected.

PRIVACY STATEMENT FOR CHILDREN

Our websites are directed at an adult audience. We do not collect any personally identifiable information from anyone we know to be under the age of sixteen (16) without the prior, verifiable consent of his or her legal representative. Such legal representative has the right, upon request, to view the information provided by the child and/or to require that it be deleted.

NOTE TO USERS OF BUSINESS OR PROFESSIONAL WEBSITES

If you have a business or professional relationship with Chugai, we may use information you submit on our website to fulfil your requests and develop our business relationship with you and the entities you represent. We may also share such information with third parties acting on our behalf.

UPDATES TO THIS PRIVACY AND COOKIE POLICY

We keep this Privacy and Cookie Policy under regular review, and we will place any updates on this website in response to changing legal, technical or business developments. We encourage you to periodically review this page for the latest information on our privacy practices.