Privacy Notice – Pharma Division

Your personal information will be processed only for the purpose of dealing with your enquiry, complaint or adverse event report.

Your personal information that you have provided to us, which may include: your name; gender; home address; age and date of birth; email address; phone number(s) and special categories of personal information including medical diagnostic data; prescription data; other health related information provided by you and relationship to a person.

Any personal information about you that we process is provided by you.

Processing of personal information about you is required so that we can comply with our legal obligation to monitor and report adverse events.

Furthermore, processing of personal information about you for the purpose of responding to your enquiry or investigating your complaint is based on our legitimate interest as we would not be able to respond to your enquiry without processing your personal information.

We will retain your personal information for the period required by law stated in the contract with each Marketing Authorization (“MA”) holder.

Your personal information will be accessible only by authorized CAP employees.

Your personal information may be transferred to countries outside the European Economic Area. We would like to reassure you that we will put in place appropriate protection measures to make sure that your personal data remain adequately protected and are treated in line with the relevant regulation.

CAP may share your personal information with collaborators following appropriate due diligence, in accordance with CAP’s policies and procedures, and under a written agreement which commits the suppliers to appropriate safeguards in relation to the handling of your personal information (including in relation to maintaining confidentiality of your personal information and implementing appropriate technical and organizational security measures).

CAP will take appropriate legal, organizational and technical measures to protect your data consistent with applicable privacy and data security laws.

You may be entitled to:

• request information regarding the processing of your personal information, including to be provided with a copy of your personal information;

• request the correction and/or deletion of your personal information, or object to the processing of your personal information;

• request the restriction of the processing of your personal information;

• request receipt or transmission to another organization, in a machine-readable form, of the personal information that you have provided to CAP; and

• complain to your local supervisory authority if your privacy rights are violated, or if you have suffered as a result of unlawful processing of your personal information.

Where you are given the option to share your personal information with us, you can always choose not to do so. If you object to the processing of your personal information, we will respect that choice to the extent this would not prejudice our ability to meet our legal obligations.

If you would like to exercise your rights, please let us know by getting in touch using the contact details below.

If you have exercised any or all of your data protection rights and still feel that your concerns about how we use your personal
data have not been adequately addressed by us, you have the right to complain by contacting us at dpo@papaellinas.com.cy.