台灣:
法國施維雅藥廠.，台灣分公司（“我們”或“施維雅”）遵守 《個人資料保護法 》（以下簡稱“個資法”）。施維雅僅根據個資法收集和使用您的個人資訊（如適用）。
提供個人資訊或繼續與施維雅互動，即表示您同意根據本隱私政策收集、使用和披露您的個人資訊。是否向我們提供您的個人資訊由您自行決定。但是，如果您選擇不提供個人資訊或提供不完整的個人資訊，我們將無法為您提供施維雅產品和服務。
施維雅和施維雅集團致力於保護您個人信息的隱私，並通過以下方式實現：
- 合規性：遵守個資法。
- 治理：任命一名全球數據保護官、本地數據保護專員和合規輪替專員，他們負責隱私合規、提高認識並教育員工了解隱私規則。實施多項內部政策和程式，以確保施維雅集團內部遵守適用的隱私規則。
- 培訓：通過定期培訓，監控施維雅集團內部的隱私教育和合規性。
- 第三方合規：確保所有第三方的隱私合規 施維雅與代表我們處理您的個人資訊的第三方合作。
本隱私政策描述了施維雅收集的個人資訊（包括敏感資訊）的種類、使用目的以及您的個人資訊的管理方式。它還詳細說明瞭如果您想要訪問或希望更正我們持有的您的個人資訊，或者對我們對您的個人資訊的管理有任何疑問或投訴，如何與我們聯繫。
定義
- 個人資訊 是指可用於直接或間接識別您身份的資訊。它包括您的姓名、年齡、性別和聯繫方式等資訊。
- 處理是指對您的個人信息進行的任何操作，無論是否通過自動化方式，例如收集、記錄、組織、構建、存儲、改編或更改、檢索、諮詢、使用、通過傳輸、傳播或以其他方式提供、對齊或組合、限制、擦除或銷毀您的個人資訊
- 敏感資訊 是個人資訊的一個子集，包括與病史、醫療、家譜、性生活、健康檢查結果和犯罪記錄有關的資訊。
在本政策中，所有對個人資訊的引用均包括敏感資訊。
個人資訊的收集
作為醫藥產品的供應商，施維雅收集開展業務所需的合理個人資訊。我們可能收集的個人資訊類型如下所述，具體取決於您與我們的互動：
| 醫療保健專業人員 | 一般大眾 |
| · 身份資訊和聯繫資訊，例如您的姓名和業務聯繫方式· 關於我們產品和服務的評論
· 我們的銷售代表給您打電話時的詳細資訊 · 社交媒體帳戶和廣告（如果您在我們的社交媒體平臺上與我們互動） · 有關開立或填寫的處方的統計詳細資訊以及向我們請求的樣品的詳細資訊。 這些資訊是通過以下幾種方式收集的：直接聯繫、回應產品查詢、提供產品相關信息或服務、進行市場研究和從第三方供應商處購買此類資訊，以及根據臨床研究指南和監管要求進行臨床研究。 |
· 身份資訊和聯繫資訊，例如您的姓名和聯繫方式· 有關您的身體或心理健康以及就業詳情的資訊。
這些資訊是通過以下幾種方式收集的：回應您的詢問、參與施維雅的患者支持計劃、向您的醫療保健專業人員報告藥物警戒管理、通過招聘進行市場研究以及根據臨床研究指南和監管要求進行臨床研究。 |
| 服務提供者 | 經銷商 |
| · 身份資訊和聯繫資訊，例如您的業務和員工聯繫方式這些資訊是通過以下一些方式收集的：向施維雅提供服務、藥物不良反應通報管理以及完成盡職調查問卷。 | · 身份資訊和聯繫資訊，例如您的業務和員工聯繫方式這些資訊是通過以下幾種方式收集的：訂購施維雅的產品、藥物不良反應通報管理以及完成盡職調查問卷。 |
未經您的書面同意，施維雅不會收集敏感資訊。
施維雅將在合理可行的情況下直接從您那裡收集個人資訊。我們還可能從第三方收集個人資訊，例如：
- 施維雅為協助我們履行職能和活動而聘請的組織（如會議召集人）;
- 醫療保健提供者或同事;和
- 在線目錄供應商或客戶聯繫資料庫供應商。
施維雅可能會聘請第三方（如數據驗證供應商）向我們提供服務，其中可能包括代表我們處理和驗證個人資訊。
我們收集、持有、使用和披露個人資訊的目的
通常，施維雅出於以下目的收集、持有、使用和披露個人資訊：
- 一般銷售和行銷，以及提供有關施維雅產品和服務或您可能感興趣的第三方產品和服務的資訊;
- 管理我們的患者支持計劃和其他類似計劃;
- 策劃會議、活動和研討會，包括組織參加此類活動的旅行和住宿，並邀請演講者和出席者;
- 説明施維雅研究使用者的需求，並在更好地瞭解個人需求和用戶總體需求的情況下行銷其產品和服務;
- 根據臨床研究指南、監管要求和倫理原則進行臨床試驗和研究;
- 建立和管理醫療委員會，或獲取有關醫療、科學、臨床研究和患者相關問題的一般意見或出版物;
- 管理我們組織的會議、座談會、專家小組、網路研討會、研討會或其他類似計劃，您同意參加或參與這些活動，包括任何錄音管理、審查、開發和改進我們的業務和運營流程和系統;
- 管理、審查和解決任何監管、政府或其他醫療機構的事項、通知或要求（包括不良事件報告）;
- 招聘和管理人力資源需求和需求;
- 管理與施維雅的供應商和經銷商的關係;
- 與醫療保健專業人員的溝通和關係管理以及促銷和非促銷活動，包括互動（例如，通過我們的社交媒體帳戶和網站）、分析活動、合約管理、大型正式會議和一般會議管理以及資料庫;
- 藥物不良反應和醫療管理，包括維護與我們產品相關的醫療查詢、投訴和不良事件或不良反應報告的記錄，並根據需要將其報告給相關監管機構，例如食品藥物管理署;
- 對我們的服務提供者進行盡職調查;
- 管理、規劃和安排醫療保健專業人員與我們之間的會議，包括我們的銷售代表;
- 深入瞭解施維雅的產品在實踐中是如何處方和使用的;和
- 為市場研究目的生成客戶名單;
- 如適用，遵守我們報告價值轉移的透明度義務;
- 解決任何法律和/或商業投訴或問題;和
- 執行與我們業務相關的任何其他職能和活動。
為了實現上述目的，施維雅可能會向以下個人或組織披露個人資訊：
- 施維雅法國總部及其子公司，包括美國的子公司;
- 我們在日本的許可合作夥伴及其子公司;
- 維護和驗證我們公司資料庫的第三方數據驗證供應商。請注意，此類第三方數據驗證供應商可能會收集此類個人資訊並將其披露給其客戶，例如其他製藥公司;
- 我們的代理商和服務提供者，如郵遞公司、會議召集人和供應商;
- 我們的專業顧問;
- 醫療保健專業人員;
- 由個人授權或負責個人的人員，包括其代理人和顧問;
- 台灣境內或境外的政府機構，包括監管機構;以及
- 法律授權或要求我們向其披露資訊的其他方。
施維雅是一家全球性組織，業務遍及五大洲，業務、資訊技術系統、管理結構和流程均跨越國界。因此，施維雅有時需要將個人資訊傳輸給與最初提供信息的國家/地區位於同一國家/地區的其他施維雅實體或第三方，並將個人資訊存儲在可能託管在其他國家/地區或可從其他國家/地區訪問的資料庫中。
任何在臺灣境外傳輸個人信息的行為都將遵守《個人資料保護法》中與跨境數據流動相關的要求。
施維雅採取一切合理努力，確保作為施維雅服務提供者處理或獲取個人資訊的任何第三方遵守
我們的產品和服務範圍、我們的職能和活動，以及我們的簽約服務提供者的職能和活動，可能會隨著時間的推移而發生變化。
行銷
施維雅可能會不時使用個人資訊與您聯繫（包括通過郵件、電話、簡訊或電子郵件），以提供有關施維雅、我們的產品和服務或第三方的產品或服務的促銷材料。
如果您不希望收到營銷資訊，您可以按照相關通信中規定的退出說明或使用下面列出的詳細資訊聯繫我們的隱私官，以請求不接收此資訊。
數據品質、存儲和安全性
施維雅可能會將我們持有的個人資訊紙本文件，或電子檔案存儲在我們的資訊技術系統中。
在個資法要求的範圍內，施維雅將採取合理措施：
- 將您的個人資訊的收集限制在與收集和處理目的相關的必要範圍內;
- 確保我們收集、使用和披露的個人資訊是準確、完整和最新的;
- 僅出於施維雅或施維雅集團的法律和業務保留要求保留您的個人資訊，並以允許您識別身份的形式保留，其時間不得超過處理您個人資訊的目的所需的時間;
- 保護我們持有的個人資訊免遭濫用和丟失，以及未經授權的訪問、修改或披露，並採取合理措施確保與施維雅合作並代表我們處理您的個人資訊的任何第三方遵守與施維雅相同或至少同樣嚴格的安全措施;和
- 在法律允許的情況下，銷毀、永久去標識化或擦除您的個人資訊，這些資訊不再需要用於 個資法 允許的任何目的。
如果您認為我們持有的有關您的任何個人資訊已成為數據洩露的物件，或以其他方式被非法訪問、使用或披露，您應立即通知我們，以便我們採取適當措施確保其安全。
個人資訊的存取和更正
您有權：
- 存取您的個人資訊以檢查/審查或獲取其副本： 根據您是患者、候選人、供應商還是其他人，您的個人資訊可能會直接或通過醫療保健專業人員或您指定的其他人披露給您
- 更正和更新您的個人資訊
- 刪除您的個人資訊
- 要求我們停止收集、處理或使用您的個人資訊
- 行使您的數據可移植性權利：
- 反對：
- 提出投訴： 關於您的個人資訊的使用，
使用下面列出的詳細資訊聯繫我們的隱私官。
在某些情況下，施維雅可能不允許您存取或更正您的個人資訊，在這種情況下，施維雅將依法向您提供做出此決定的理由。
投訴程式
如果您對施維雅處理您的個人（包括敏感）資訊有任何投訴，或者您認為施維雅的行為違反了個資法，您應以書面形式提出投訴，並將其發送給我們的個資法專員（詳情如下）。
個資法專員將在 收到投訴後一個月內（視個案的複雜程度而定）評估投訴，並將結果通知您。如果個資法專員確定投訴是有效的，將採取適當的措施來補救違規行為。
個資法專員將保留所有投訴的記錄並每年對其進行審查，以發現可能的系統性問題，同時協助尋找可以改進施維雅隱私實踐的方法。
聯繫施維雅
如果您對施維雅收集或處理個人資訊的方式有任何疑慮或投訴，或者您希望行使上述與您的個人資訊有關的任何權利，請通過電話聯繫施維雅個資法專員：（02） 2568 1380，書面形式：法國施維雅藥廠台灣分公司，10459 台北市中山區松江路168號3樓或發送電子郵件至：dataprivacy.tw@servier.com
隱私政策的變更
施維雅保留隨時更改隱私政策的權利，更新後的版本將發佈在本網站上。
Hong Kong:
Servier Hong Kong Limited (“we,” “us” or “Servier”) complies with the Personal Data (Privacy) Ordinance. Servier only collects and uses your personal information in accordance with the PDPO, as applicable.
By providing personal information or continuing to engage with Servier, you consent to your personal information being collected, used and disclosed in accordance with this privacy policy. It is at your discretion whether to provide your personal information to us. However, if you choose not to provide personal information or provide incomplete personal information, we will not be able to provide you with Servier products and services.
Servier and the Servier Group is committed to protecting the privacy of your personal information and does so through:
- compliance: compliance with the PDPO.
- governance: appointment of a global data protection officer, local data protection officers and compliance relays who are responsible for privacy compliance and raising awareness and educating employees on privacy rules. Implementation of numerous internal policies and procedures to ensure compliance of applicable privacy rules within the Servier Group.
- training: monitoring privacy education and compliance within the Servier Group through regular training.
- third party compliance: ensuring privacy compliance from all third parties Servier works with which process your personal information on our behalf.
This privacy policy describes the kinds of personal information (including sensitive information) that Servier collects, the purposes for which it is used, and how your personal information is managed. It also gives details of how to contact us if you want access to or wish to correct your personal information held by us or have any queries or complaints about our management of your personal information.
Definitions
- Personal information means information that can be used to directly or indirectly identify you. It includes information such as your name, age, gender and contact details.
- Processing means any operation performed on your personal information, whether or not by automated means, such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of your personal information.
- Sensitive information is a subset of personal information and may include information with regard to biometric data, identity card numbers,, as well as other categories of sensitive personal data, as applicable from time to time..
In this policy all references to personal information include sensitive information.
Collection of personal information
As a provider of pharmaceutical products, Servier collects personal information reasonably necessary to carry out its business. The types of personal information we may collect are described below, depending on your interaction with us:
| Healthcare Professional | Member of the public |
| · identifying and contact information such as your name and business contact details
· comments regarding our products and services · details during calls made by our sales representatives to you · social media accounts and handles if you interact with us on our social media platforms · statistical details regarding prescriptions given or filled and details of samples requested from us. This information is collected through some of the followings ways: direct contact, in response to product queries, in connection with providing product related information or services, conducting market research and purchasing such information from third party providers and conducting clinical research in accordance with clinical research guidelines and regulatory requirements. |
· identifying and contact information such as your name and contact details
· information about your physical or mental health and employment details. This information is collected through some of the followings ways: responding to your queries, participation in Servier’s patient support programs, reporting from your healthcare professional for pharmacovigilance management, conducting market research through recruitment and conducting clinical research in accordance with clinical research guidelines and regulatory requirements. |
| Service Provider | Wholesaler |
| · identifying and contact information such as your business and employee contact details
This information is collected through some of the followings ways: providing services to Servier, reporting for pharmacovigilance management and completing due diligence questionnaires. |
· identifying and contact information such as your business and employee contact details
This information is collected through some of the followings ways: ordering Servier’s products, reporting for pharmacovigilance management and completing due diligence questionnaires. |
Servier will collect personal information directly from you where it is reasonable and practicable to do so. We may also collect personal information from third parties such as:
- organizations that Servier engages to assist us to carry out our functions and activities (such as conference organizers);
- healthcare providers or colleagues; and
- online directory providers or providers of customer contact databases.
Servier may engage third parties such as data verification providers to provide services to us, which may include processing and validating personal information on our behalf.
Purposes for which we collect, hold, use and disclose personal information
Generally, Servier collects, holds, uses and discloses personal information for the following purposes:
- general sales and marketing and providing information about Servier products and services or those of third parties which may be of interest to you;
- to manage our patient support programs and other similar programs;
- to plan conferences, events and seminars including to organise travel to such events and accommodation and invite speakers and attendees;
- to help Servier research the needs of its users and to market its products and services with a better understanding of individual needs and the needs of users generally;
- to conduct clinical trials and research in accordance with clinical research guidelines, regulatory requirements and ethical principles;
- to establish and run medical boards or to acquire general opinions or publications on medical, scientific, clinical research and patient related issues;
- administering conferences, symposia, expert panels, webinars, seminars or other similar programs organized by us, which you agree to participate in or be involved with, including any recordings; manage, review, develop and improve our business and operational processes and systems;
- manage, review and resolve any regulatory, government or other medical authority matters, notifications or requirements (including adverse event reporting);
- to recruit and manage human resourcing requirements and needs;
- manage relationships with Servier suppliers and vendors;
- communication and relationship management and promotional and non-promotional activities with healthcare professionals including interactions (e.g., through our social media accounts and websites), profiling activities, contract management, congress and meetings management and databases;
- pharmacovigilance and medical management which includes maintaining a record of medical queries, complaints and adverse event or adverse reaction reports relating to our products and reporting these to relevant regulatory bodies, such as the Therapeutic Goods Administration, as may be required;
- to conduct due diligence with respect to our service providers;
- managing, planning and arranging meetings between healthcare professionals and us, including our sales representatives;
- to gain insights in to how Servier’s products are prescribed and used in practice; and
- generating customer lists for the purposes of market research;
- if applicable, complying with our transparency obligations to report transfers of value;
- resolve any legal and/or commercial complaints or issues; and
- perform any of our other functions and activities relating to our business.
In order to carry out the above purposes, Servier may disclose personal information to persons or organizations such as:
- Servier Head Office in France and its subsidiaries including those based in the US;
- our in-licensed partner in Japan and its subsidiaries;
- third party data verification providers who maintain and verify our company databases. Please note that such third-party data verification providers may collect and disclose such personal information to their clients such as other pharmaceutical companies;
- our agents and service providers such as mailing houses, conference organizers and suppliers;
- our professional advisors;
- healthcare professionals;
- persons authorized by or responsible for the individual, including their agents and advisors;
- government agencies including regulatory authorities, within or outside of Hong Kong; and
- other parties to whom we are authorized or required by law to disclose information.
Servier is a global organization, with a presence on five continents, and businesses, IT systems, management structures and processes that cross borders. As such, it is sometimes necessary for Servier to transfer personal information to other Servier entities or third parties, in the same country as or in countries other than the country in which it was initially provided, and store personal information in databases that may be hosted in or accessible from other countries.
Any transfer of personal information outside Hong Kong will comply with the requirements of the PDPO that relate to transborder data flows.
Servier takes all reasonable endeavors to ensure any third parties who process your personal information on our behalf comply with the
Our range of products and services and our functions and activities, as well as those of our contracted service providers, may change over time.
Marketing
From time to time, Servier may use personal information to contact you (including by mail, telephone call, text message or email) to provide promotional material about Servier, our products and services or the products or services of third parties.
If you do not wish to receive marketing information, you can request not to receive this information by following the opt out instructions set out in the relevant communication or contacting our Privacy Officer using the details set out below.
Data quality, storage and security
Servier may store personal information that we hold in hard copy documents or as electronic data in our IT systems.
To the extent required by the PDPO, Servier will take reasonable steps to:
- limit the collection of your personal information to what is necessary in relation to the purposes for which it is collected and processed;
- make sure that the personal information that we collect, use and disclose is accurate, complete and up to date;
- retain your personal information only for the legal and business retention requirements of Servier or the Servier Group and in a form which permits your identification for no longer than is necessary for the purposes for which your personal information is processed;
- protect the personal information that we hold from misuse and loss and from unauthorized access, modification or disclosure and take reasonable steps to ensure that any third parties who Servier works with which process your personal information on our behalf comply with the same or at least as stringent security measures as those applied by Servier; and
- where permitted by law, destroy, permanently de-identify or erase your personal information that is no longer needed for any purpose that is permitted by the PDPO.
If you believe that any of the Personal Information we hold about you has been the subject of a data breach or has otherwise been unlawfully accessed, used or disclosed, you should notify us immediately so that we can take appropriate steps to ensure its security.
Access to and correction of personal information
You have the right to:
- access your personal information to check/review or have a copy thereof: depending on whether you are a patient, candidate, vendor or otherwise, your personal information may be disclosed either to you directly or through a healthcare professional or another person designated by you
- rectify and update your personal information
- erase your personal information
- object: at any time of the Processing, free of charge and without having to state legitimate grounds, to the Processing of your personal information for the purposes of direct marketing (including profiling to the extent that it is related to such direct marketing)
- lodge a complaint: regarding the use of your personal information,
by contacting our Privacy Officer using the details set out below.
There are some circumstances where Servier may not allow you to access or correct your personal information, in which case Servier will provide you with the reasons for this decision. You are entitled to object to a refusal decision in accordance with law.
Complaints procedure
If you have a complaint about Servier’s handling of your personal (including sensitive) information, or you believe Servier has acted in a manner that has breached the PDPO, you should put your complaint in writing and send it to our Privacy Officer (details set out below).
The Privacy Officer will assess the complaint and advise you of the outcome within one month (subject to the level of complexity of the case) after the complaint was received. If the Privacy Officer determines that the complaint was valid, appropriate action will be taken to remedy the breach.
The Privacy Officer will keep a record of all complaints and review them annually for possible identification of systemic problems and to assist in finding ways in which Servier’s privacy practices can be improved.
You also have the right to file a complaint with the Privacy Commissioner for Personal Data, if you consider that the Processing of your personal information contravenes a requirement under the Personal Data (Privacy) Ordinance. Before lodging a complaint to the supervisory authority, we encourage you to contact our Privacy Officer using the details set out below.
Contact Servier
If you have any concerns or complaints about the manner in which personal information is collected or handled by Servier, or you wish to exercise any of your rights as described above in relation to your personal information, please contact the Servier Privacy Officer in writing: Servier Hong Kong Limited, Suites 4308-09, Tower 1, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong or by email: dataprivacy-hong-kong@servier.com
Changes to our Privacy Policy
Servier reserves the right to change the privacy policy at any time and the updated version will be posted on this website.