From time to time, just like many other companies, we collect or use personal data. In this privacy notice, we explain the:
Importantly, we also tell you what your rights are in relation to the personal data we hold and what you can do to enforce them.
If you’d like, you can scroll down and read the whole policy. But you can also jump to the section you are interested in by clicking on one of the headings below.
If this privacy notice doesn’t answer your questions, then get in touch with us using the contact details below.
At CSL Behring UK Limited (“we”, “us”, “CSL Behring”) we are committed to protecting your privacy. When you use our websites, we will collect certain information that can be used to identify you (“personal data”).
CSL Behring is the “data controller” of the personal data we collect. This means that we are responsible for decisions about the collection and use of personal data. It also means we are responsible for responding to your questions and requests in relation to the personal data we hold about you.
This privacy notice explains how we use the personal data we collect when you use our website. It also explains the rights you have in relation to your personal data.
We may collect the following types of personal data from you when you use our website:
We will collect personal data from a number of sources. These include:
We collect and use your personal data for the purposes described in the below table.
|Purpose of processing||Categories of data typically processed for the purpose|
|Contact and communicate with you in relation to our business, products and services||All the personal data listed above|
|If you are a healthcare professional/provider or distributor of our products, we will use your personal data to manage your account with us, perform credit checks where this is necessary, take payment for our products and services and arrange delivery||Contact details
Payment information, purchase and account history
Records of your discussions with us
|If you contact us with any queries or complaints, we will use your personal data to help us respond to you||All the personal data listed above|
|In the course of investigating misuse of your account, fraud and debt collection||All the personal data listed above|
|To review our products and services, assess their safety and performance and to develop new products and services||All the personal data listed above|
|To perform online advertising||Payment information, purchase and account history
How you use our website
|To conduct market research||Contact details
Other personal data relevant to the market research being conducted
|To conduct direct marketing||Contact details
Purchase and account history
How you use our website
Any personal data you submit to us about products or services you are interested in
|For individuals to report Suspected Adverse events||Contact details
(Further information about our collection and use of personal data for this purpose will usually be provided by us in a specific Suspected Adverse Event Privacy Notice)
We will only use your personal data when the law allows us to. Most commonly, we will rely on the lawful grounds listed below when we use your personal data.
Sensitive personal data (such as health data) requires us to have additional legal grounds to collect and use it. Most commonly, we will rely on the lawful grounds listed below when we use your sensitive personal data.
Under certain circumstances, where the legal basis for using your personal data is that you have provided your consent, you may withdraw your consent at any time. If you withdraw your consent, this will not make processing which we undertook before you withdrew your consent unlawful.
You can withdraw your consent by contacting us using the contact details listed below.
We have put in place appropriate security measures to prevent your personal data from being accidentally lost or used, accessed, altered or disclosed in an unauthorised way.
In addition, we limit access to your personal data by our employees and service providers, to individuals who need access to perform their job or provide a service to us.
They will only use your personal data on our instructions and are required to keep your personal data confidential.
We have put in place procedures to deal with suspected data security breaches and will notify you and any applicable regulators of breaches in accordance with relevant legal requirements.
We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data, whether we can achieve those purposes through other means and the applicable legal requirements.
In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.
We may share personal information with the following:
We do not disclose personal information except as set out above or where we have a legal obligation to do so, or we need to share information to assist with the investigation and prevention of crime. We may provide other third parties with statistical information and analytics but we will make sure that the information is aggregated and no one can be identified from this information before we disclose it.
In order to process your personal data for the purposes set out in this notice, we may transfer your personal data to third parties and other companies in our group which are based outside of the EU and EEA (“Europe”).
To ensure that your personal data are secure, we will only transfer your information to countries outside of Europe where we do so in accordance with the EU’s General Data Protection Regulation (“GDPR”). This requires that one of the following conditions applies:
Under certain circumstances you have the right to:
You can exercise your rights by using the ‘CSL rights portal’ by following this link: https://privacyinfo.csl.com/
Alternatively, you can contact us using the contact details at the end of this notice. We will always aim to help you when you wish to exercise your rights but in some instances we may have lawful grounds to reject your request.
We will investigate any request you make immediately and will respond to you within a month of your request. That period may be extended by us for a further two months where this is needed to help us respond properly (for example if the request is complicated for us to deal with and we need more time) but we will let you know the reasons for the delay.
If we decide to not take action on the request, we will inform you of the reasons for not taking action. If you do not agree with a decision we make in relation to a rights request or believe that we are in breach of data protection laws in Europe, then you can lodge a complaint with a data protection regulator in Europe.
If you are a healthcare professional or provider and, depending on the marketing preferences that you indicate to us at the time we collect your personal data, we may contact you via post, telephone or electronic methods with information about our products and services. You can opt-out by the options provided to you within our communications or by contacting us using the contact details at the end of this notice.
If you have any questions about how we process your personal data or want to exercise one of your rights, you can contact us using the details below: email@example.com
Or, via the CSL rights portal: https://privacyinfo.csl.com/
We may update this notice from time to time to reflect changes in the way we process personal data (e.g., if we implement new systems or processes that involve new uses of personal data) or to clarify information we have provided in the notice. Our changes will be in accordance with applicable data protection laws.
We recommend that you check for updates to this notice from time to time but we will notify you directly about changes to this notice or the way we use your personal data when we are legally required to do so.