Who is Responsible for Your Personal Data
This website is operated by AstraZeneca UK Limited and is a result of a collaboration between AstraZeneca UK Limited (“AstraZeneca”), and Merck Sharp & Dohme (UK) Limited (“MSD”).
In this Privacy Notice, ‘’We’’, ‘’Us’’ and ‘’Our’’ refers to both AstraZeneca group companies and MSD group companies.
We determine the purposes and manner in which your personal data is collected, used and/or disclosed. Personal data is managed by AstraZeneca in line with its own global privacy standards and is managed by MSD in line with its own global privacy standards.
We take the privacy and security of your personal data very seriously. This Privacy Notice outlines the categories of personal data we may collect about you and how we may use it.
We may change this Privacy Notice from time to time. We will notify you of any changes where we are required to do so.
What Information Do We Collect and How Do We Use It?
If you register to use this website, complete an online form, or send us an email (e.g. to obtain email updates or ask us to send you further information and/or to send you invitations to participate in scientific meetings, promotional events, cooperation opportunities and surveys), then we collect, verify and process the following information from you:
- Contact details including your name, professional address and telephone number
- Email address
- Country of residence
- Address*
- Telephone number*
- Occupation (for example, if you are a Healthcare Professional seeking information about our products)
- Technical information about your device, such as your IP address, device type, device and advertising identifiers, browser type and version, and other standard server log information
- Other personal data you choose to provide to us
Such information will be provided by you and may be supplemented by us from publicly available information or data brokers where appropriate. It is used by us in our legitimate interests to administer the website, register you for any services you have signed up to and respond to any queries or requests for information you may have.
Occasionally, we may obtain sensitive personal data about you, for example, if you voluntarily provide information about your physical or mental health, as part of a request for information. In this case, we use such information only to respond to your inquiry and if applicable, to provide you additional guidance (e.g. to inform you of your right to submit an adverse event report). By providing us with your sensitive personal data, you consent to us processing this data for the purposes set out in this Privacy Notice or any collection notice provided to you.
*Information to be collected by AstraZeneca UK Limited only
In the event you use this website, or complete an online form, or send us an email to report an adverse event you have experienced whilst taking an AstraZeneca or MSD product, please review the adverse event reporting notice for your relevant country to get further information on how we process your personal data in relation to adverse events, available via:
AstraZeneca product: https://aereporting.astrazeneca.com
MSD product: (0208 154 8000) or via https://www.msdconnect.co.uk/
Cookies and Do-Not-Track Signals
We may also collect information about how you use the website using cookies (and other similar technologies), as part of improving the content and functionality of the website. For more information about the use of cookies please see the cookie notice on the webpage. We do not respond to Do-Not-Track Signals.
Aggregate Information
We use aggregate information, which does not identify individuals, to monitor customer traffic patterns to the website and particular pages, as well as site usage, in order to help us improve the design and layout of the content.
Who Will Have Access To Your Personal Data?
Your personal data may be transferred to other AstraZeneca or MSD group companies. We may also share categories of your personal data listed above with certain service providers or third parties such as: IT providers for the purposes of system development and technical support; auditors and consultants to verify our compliance with external and internal requirements; statutory bodies, law enforcement agencies and litigants, as per a legal reporting requirement or claim; and a successor or business partner to either AstraZeneca or MSD or a member of the AstraZeneca or MSD group in the event that it sells, divests or sets up a collaboration/joint venture for all or part of its business.
How do We Store Your Data
We will store your personal data for a number of years in accordance with local laws and each company´s Document Retention Policy. For more information on AstraZeneca's internal Document Retention policy you may go to www.astrazenecapersonaldataretention.com. Where MSD have had an interaction with you this will be retained for 3 years after our last interaction. Information may be retained for longer if we have a legal or regulatory obligation or where we have a legitimate interest to do so.
International Transfer
Our entities and third parties may be based anywhere in the world, which could include countries that may not offer the same legal protections for personal data as your country of residence. Irrespective of which country your personal data is transferred to, We would only share your personal data under a strict ‘need to know’ basis and under appropriate contractual restrictions (such as Binding Corporate Rules or EU Standard Contract Clauses). You may request a copy of AstraZeneca’s Binding Corporate Rules and/or AstraZeneca’s EU Standard Contract Clauses by contacting AstraZeneca at privacy@astrazeneca.com. MSD have implemented appropriate security and compliance mechanisms to ensure your personal information is protected as required and your rights are respected; such as Binding Corporate Rules (BCRs) or EU approved data protection contractual clauses. More information on these measures and your rights provided by these can be obtained by contacting the Global Privacy Office
Binding Corporate Rules
AstraZeneca has ensured compliance with some of its legal obligations in relation to personal data by creating a set of ‘Binding Corporate Rules’ (BCRs). The BCRs set out its data privacy commitments in respect of personal data that is transferred internationally.
You can find out more about AstraZeneca’s commitments here. The BCRs and any rights arising under them do not apply to personal data originating in the U.S.A.
How We Protect Your Information
We have in place appropriate privacy and security policies which are intended to ensure, as far as reasonably possible, the security and integrity of all Our information, including your personal data.
More information on how AstraZeneca complies with its data privacy obligations can be found in its internal global privacy standards, and more information on how MSD complies with its data privacy obligations can be found here.
What are Your Rights
You may contact AstraZeneca at www.astrazenecapersonaldataretention.com and MSD with the contact details laid out below at any time to request information on how we process your personal data, access to the personal data we hold about you, to correct any mistakes or to request deletion of the same or withdraw your consent to certain types of processing of your personal data. If such a request places us or our affiliates in breach of our obligations under applicable laws, regulations or codes of practice, then we may not be able to comply with your request, but you may still be able to request that we block (i.e. right to object) the use of your personal information for further processing. Subject to applicable law, you may also have a right to data portability to another data controller under certain circumstances which would involve the sharing of your data with the controller in an electronic format. Subject to applicable law, you can exercise these rights for free.
Both AstraZeneca and MSD have each assigned a data protection officer responsible for overseeing compliance with EU and UK data protection laws. In case of any questions or concerns regarding the processing of your personal data you may contact Us using the following details:
AstraZeneca: at privacy@astrazeneca.com or by mail at the Global Data Protection Officer, AstraZeneca Middlewood Court, Silk Road, Macclesfield, Cheshire SK10 2NA.
MSD: at msdukdpo@msd.com or you can submit a request using our Data Subject Rights Form.
If the processing of your personal data is covered by EU or UK law, you can also lodge a complaint with the corresponding data protection supervisory authority in your country of residence. You can find the relevant EU supervisory authority name and contact details under https://edpb.europa.eu/about-edpb/board/members_en and the UK data protection supervisory authority’s contact details under https://ico.org.uk/global/contact-us/.
Opting Out Of Further Communications From Us
If you have elected to receive information about any of AstraZeneca or MSD’s products or services, or those of other AstraZeneca or MSD companies and wish to opt-out of receiving such information, then you can do so by sending an email to the respective company. For AstraZeneca please email privacyrequests@astrazeneca.com and for MSD please email msdukdpo@msd.com or you can submit a request using our Data Subject Rights Form. You should clearly state on all communications: your name, username (if any), registration details (if any) and the name of this website.