Privacy Policy
PREAMBLE
The purpose of this Personal Data Protection Policy is to inform you about how we STALLERGENES GREER and our affiliates use and manage your personal data for all data processing carried out in connection with our business relationships and activities. This policy includes in particular the collection and processing of your data via the site https://www.stallergenesgreer.com/.
STALLERGENES GREER is fully aware of the importance of privacy and of protecting personal data in the digital age and undertakes to ensure adequate protection of personal data with regard to all persons with whom it has a relationship in strict compliance with the Privacy Act 1988 (Cth), as amended and including the Australian Privacy Principles.
This includes all processing activities performed with respect to individuals with whom we have relationships in the course of our business and business relationships, including:
Users of our products and services, including users of our websites and applications;
Representatives of our contractual partners and business partners; and
Candidates for our recruitment operations.
The purpose of this policy is to help you understand:
The purposes: the reasons and objectives for which we process your personal data;
The basis: what legal basis justify the processing of your personal data
From where and from which sources we collect your personal data
The kinds of personal data that we process; The authorised parties to whom we may disclose your personal data;
What security measures the group has put in place to protect your personal data;
For how long we keep your personal data and what is our approach to defining its retention period;
What your rights are and how you can exercise them and
How to contact us.
This policy may be modified by us over time, in particular to adapt it to changes in applicable law or our internal practices. These changes will appear on this page. We recommend that you consult this policy regularly.
In any event, we undertake to comply with the following two (2) key principles:
You remain in control of your personal data;
Your data is processed transparently, confidentially and securely.
ARTICLE 1. IDENTITY & CONTACT DETAILS OF THE APP ENTITY
The data controller is Stallergenes Australia Pty Ltd, located Suite 2408 - 4 Daydream Street, Warriewood NSW 2102, Sydney, Australia (STALLERGENES GREER).
Your data may be shared between STALLERGENES GREER and its affiliates.
If you have any questions about the handling and use of your personal data, please contact us via:
The different forms and features on our site https://www.stallergenesgreer.com/.
Via the Data Protection Officer - email to dpo.gdpr@stallergenesgreer.com.
ARTICLE 2. DETAILS OF OUR DATA PROTECTION OFFICER
Our Data Protection Officer is responsible for overseeing STALLERGENES GREER’s compliance with applicable laws and regulations and is here to respond to all your requests relating to your personal data, including the exercise of rights.
You can contact the Data Protection Officer by email to dpo.gdpr@stallergenesgreer.com.
If you wish to make a complaint about how your personal data has been handled, please refer to the “Complaints” section of this policy for more information.
ARTICLE 3. DATA COLLECTION & ORIGIN
We may collect your personal data through various means, including: Directly from you: with regard to the data that you send us via different media, including surveys, during registration or the use of an application, and any other direct or indirect interaction with our group. For example, this may be data you provide to us when you register for events we support, when you submit an application online or when you send us a request for information, etc.
Indirectly
Data that we automatically collect, for example, when we monitor your interactions with our websites, platforms, applications and services, particularly via cookies.
Data we collect in accordance with applicable law from public sources, including data published by you on various media.
Data that we lawfully obtain from third parties, for example when we need to confirm your contact details. If we need to collect personal information about you from a third party, we will ensure the information is still collected lawfully and is necessary for our activities, and we will take reasonable steps to notify you of the collection as required by Australian Privacy Principle 5/,
In all cases, we will inform you of the purposes for which your data is collected by us via the various online data collection forms, your customer account or via our Cookie Management Policy.
ARTICLE 4. PURPOSES & LEGAL BASIS OF PROCESSING
We will only use your personal information for the purpose for which it was collected (the primary purpose), or for a secondary purpose that is directly related to the primary purpose and within your reasonable expectations.
Your data is collected and processed for:
Managing our websites and applications
Legal basis:
Our legitimate interest in ensuring the best performance and quality of our site and applications;
Your consent when you register;
This processing covers:
Provision of secure access to our online services, platforms and applications;
Management of your online accounts to provide you with or verify your access rights, in particular through passwords, password recovery hints, security questions and information, identity documents provided by the State, health professional numbers, data related to driving licences and passports;
Presentation of our products and offers that are tailored;
Staff recruitment
Legal basis:
Our legitimate interest in meeting our personnel needs,
This processing covers:
Carrying out the recruitment operations required to find a candidate with the skills required for a given job,
Powering the company’s CV database.
Pharmacovigilance
Legal basis:
Compliance with the legal and regulatory obligations in force and, in particular, the legal obligations relating to pharmacovigilance and the monitoring of potential product side effects
Pharmacovigilance covers:
Monitoring of side effects on patients treated with STALLERGENES products and detection of the link between consuming the product and the side effects;
Management of contacts, by STALLERGENES, with the notifier (patient, member of an approved patients association, health professionals, member of a health authority), with the person or the health professional who monitored the person presenting the side effect to be interviewed to obtain further details about the reported side effect;
Product safety and improvement, Risk-benefit assessment for each product
Security,
Crisis management,
The implementation of preventative operations and investigations,
Carrying out of administrative formalities, records, statements or audits
Medical information
Legal basis:
Your consent to process your order;
Contractual: when you are already a STALLERGENES customer
Medical information covers:
Management of responses to your questions concerning product characteristics, their use or regulations;
Patient support,
Provision of support to health services;
Management of patient participation;
Provision of prescription information;
Email campaigns
Legal basis:
Your consent when this is required by the regulations in force, in particular as regards marketing and cookies
Email campaigns covers:
Creation of email campaigns;
Distribution of newsletters;
Responding to requests from authorities
Legal basis:
Execution of requests from relevant official authorities in accordance with applicable law
Processing for responding to requests from the authorities covers:
Responses to requests from administrative or judicial authorities in accordance with applicable law;
Responses to court orders, injunctions or any other decision of a judicial or administrative authority.
Professional whistleblowing
Legal basis:
Compliance with applicable and regulatory obligations
This document covers the reporting and processing of professional whistleblowing]
ARTICLE 5. TYPES OF DATA PROCESSED
We collect and hold a range of personal data, depending on your relationship with us and the purpose of your interaction. The mandatory or optional nature of the personal data requested and the possible consequences of a failure to reply to you are specified during its collection.
Some of the personal data we collect may be “sensitive information” for the purposes of the Privacy Act 1988 (Cth), such as health or medical information. We will process sensitive information only where required or authorised by law, after having first collected your consent.
These types of data are collected and used for the purposes described in the table below. We take reasonable steps to ensure that the personal data we hold is accurate, up-to-date, complete, and relevant to the purposes for which it was collected.
Purpose | Types of Data |
For managing our websites and applications | Identity and contact details (such as your name, address, phone number, email address) |
For staff recruitment | Identity and contact details, information contained in the CV, photo, family situation, motivation for application and information you may provide during the recruitment process. |
For pharmacovigilance | Identity, contact details, date of birth, medical representatives or employees and reporting medical representatives, local case number and international case number, medical history of the patient (patient pathway) and their family medical history, product used, nature of side effect(s) |
For medical information | Patient identity, telephone number, customer number, pathology (general description for transmission to pharmacovigilance). |
For email campaigns | Identity, contact details, French Medical Council registration number for health professionals |
For responding to requests from authorities | All data making it possible to respond to a court order, injunction or any other decision of a judicial or administrative authority |
For professional whistleblowing | Identities, duties and contact details of the whistleblower; facts reported, information gathered as part of the process of verifying the reported facts; report on verification of operations, whistleblowing follow-up, login data |
ARTICLE 6. RECIPIENTS OF YOUR DATA
Within the limits of their respective powers and for the purposes set out in Article 4, we may share your personal data with:
Authorised Personnel of STALLERGENES GREER and its affiliates, including personnel of our marketing, production, sales, administrative, logistics and IT departments responsible for managing potential and existing customer relationships and those responsible for monitoring (including pharmacovigilance), who require access to the data to perform their duties;
STALLERGENES GREER’s partners including healthcare professionals and organisations, distributors, other members of the pharmaceutical industry and the health sector.
Third party service provided engaged by STALLERGENES GREER, including:
Hosting providers
Analytics and database solution providers
Email solution providers
Electronic messaging service providers
CRM solution providers
Archiving providers
Telephone solution companies and service providers
Database companies
Please note that your data is not sold to third parties.
ARTICLE 7. DATA SECURITY AND RETENTION PERIOD
We take the security of your personal information seriously. STALLERGENES GREER has implemented measures to safeguard personal data we hold from misuse, interference, loss, and unauthorized access, modification or disclosure. We also require our employees and contractors to maintain the confidentiality of personal information.
We retain personal data for only as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal or regulatory obligations. Once personal data is no longer required for any lawful purpose, and we are not legally required to retain it, we will take reasonable steps to destroy the data securely or de-identify it.
ARTICLE 8. YOUR RIGHTS
You are able to exercise the rights that will be granted under the applicable data protection legislation.
To this end, we hereby inform you that you are entitled to:
access personal data we hold about you;
request corrections of your personal data in the event that it is inaccurate, irrelevant or misleading;
request the deletion of your personal data in the situations provided for by Australian Privacy Principle 11.
withdraw your consent to the processing of your personal data, without this affecting the lawfulness of the processing, when your personal data has been processed and collected on the basis of your consent
If you wish to exercise any of these rights, please contact us via this contact form, by sending an email addressed to dpo.gdpr@stallergenesgreer.com , or by sending a letter to STALLERGENES GREER addressed to Suite 2408/4 Daydream St, Warriewood NSW 2102, Australia , with proof of identity.
We will take the necessary steps to respond as quickly as possible.
You may also submit a complaint to the relevant personal data protection authority regarding the processing of your personal data. Although we recommend that you contact us first, if you wish to exercise this right, you are free to lodge a complaint directly with the OAIC online, by mail, fax or email. For more information, please visit the OAIC website at oaic.gov.au.
ARTICLE 9. CONNECTION DATA AND COOKIES
On our website and on our mobile application, we use login data (date, time, web address, visitor's Internet Protocol (IP) addresses, page viewed) and cookies (small files saved on your computer) to identify you, remember your visits, in particular relating to the pages consulted, to analyse the audiences of our website and our mobile application and offer you promotional offers and advertisements targeted according to your browsing habits, your needs and your relevant centres.
You may consent, refuse or choose the type of cookies that you agree to store on your devices by visiting our Cookie Policy.