Privacy Notice
Last revision: September 06, 2023
This information is intended to explain what type of personal data we collect, from what sources and for what purposes.
Identity and contact data of the data controller
The data controller is F. Hoffmann-La Roche Ltd, Grenzacherstrasse 124, CH-4070 Basel, Switzerland.
For this reason, the representative for the Caribbean, Central America and Venezuela (CCAV) of F.Hoffmann-La Roche Ltd is Roche Servicios S.A, a company domiciled in Heredia, Costa Rica.
You can contact us as data protection and administration managers via email at: [email protected]
Minors
Our processing activities described in this Privacy Notice are not designed or intended to collect Personal Data from children under the age of 18 unless explicitly advertised in the platform. We do not knowingly collect any Personal Data on this site from anyone under the age of 18 without the prior, verifiable consent of a parent or guardian. Such parent or guardian may have the right, upon request, to view the information provided by the child and require that it be deleted. Moreover, all minors should seek their parent’s or guardian’s permission prior to using or disclosing any Personal Data on this website or online resource.
Purposes and legal basis of the treatment
This table outlines each website. Related processing activity in greater detail and provides information on the categories of information collected for each activity as well as the legal basis of processing each of these activities.
| Purpose | Categories of Personal Data | Legal Basis Attention |
|---|---|---|
| Requests or Inquiries. We may use the information you provide to us to take steps to respond to your request, for example, you may submit a request for medical information, inquire about a product, subscribe to one of our mailing lists, or create an account. and/or profile on Roche portals or websites. |
| We collect and process Personal Data based on Roche's legitimate business purposes to respond to your request. For jurisdictions outside of the EU/EEA where legitimate interest does not apply, consent is relied upon to collect and process such Personal Data. If a report is required, we may process Personal Data to comply with our legal obligations. |
| Completion of Transactions and fulfillment of contractual obligations. We may collect Personal Data to fulfill the services you have requested, for example registering and using an account, to administer and manage your registration and participation in Roche events, to fulfill business relationships with you, including payment processing, notifying you of your order status and any order status issues. |
| This processing is necessary for the performance of a contract with you. If you do not provide such data when requested, we may not be able to enter into a contract with you or may have to cancel the order/contract requested by you. |
| Manage business relationships with you. We collect and process Personal Data to facilitate Roche's decision-making when it comes to identifying appropriate therapeutic area experts for its various medical and/or scientific engagements and collaborations (including speakers at internal or external medical educational events, advisory boards, training, etc.) ) or to prepare for our meetings and interactions with you. We may combine the Personal Data you provide us with other information collected through our websites and online resources, Roche's offline records, and information provided to us by third parties. This processing activity involves creating a profile about you in order to manage business relationships with you, to select the most appropriate therapeutic area experts and to prepare for meetings and interactions with you. You can object to this processing activity at any time using the contact details described in the list of Data Controllers. If you opt out of this processing activity, Roche will not be able to have a consolidated view of your professional and scientific commitments or personalize our interactions with you. No automated decisions are made that produce legal effects or significantly affect in a similar way. |
| We collect and process Personal Data on the basis of Roche's legitimate interest to select the most appropriate therapeutic area experts to participate in Roche events, collaborations, meetings and related activities. For jurisdictions outside of the EU/EEA where legitimate interest does not apply, consent is relied upon to collect and process such Personal Data. |
| Manage and personalize communication with you We collect and process your Personal Data to verify your username and password, to send you a welcome email, website updates, information about Roche programs, products and services, notices about relevant medical conditions and treatments or other information that respond to the data you provide to us. We may communicate with you by post, telephone, email, social media platforms or other channels. We may combine the Personal Data you provide us with other information collected through our websites and online resources, Roche's offline records, and information provided to us by third parties. This processing activity involves creating a profile about you, your preferences, experience, collaborations, and how you have interacted with us in the past to understand your interest, needs, and preferences in our products and services so that we can better serve you. and communicate with you. You can object to this processing activity at any time using the contact details described in the list of Data Controllers. If you opt out of this processing activity, Roche will not be able to send you information tailored to your interests and preferences. No automated decisions are made that produce legal effects or significantly affect in a similar way. |
| To manage, personalize and send certain communications (for example, direct marketing communications), Roche processes your Personal Data based on your consent or where permitted by applicable data protection laws based on Roche's legitimate interest. To personalize communication with you, Roche processes Personal Data based on Roche's legitimate interest. We may also collect and process your data to fulfill a contractual obligation. |
| Obligation of transparency: Roche may be required to disclose Transfers of Value to healthcare professionals and healthcare organizations as advised or required by applicable local, regional and global rules and regulations and industry best practices and standards. |
| We collect and disclose your information for our legitimate interest in improving the
transparency in the interactions between industry and healthcare professionals and healthcare organizations, or to comply with our transparency legal obligations. In other cases, we will collect and process this information based on your consent. |
| Follow-up and Monitoring of Adverse Events and Pharmacovigilance. Some specific parts of our platform may collect Personal Data related to adverse events or other activities related to pharmacovigilance. This information is very important for public health and will be used for the detection, evaluation, understanding and prevention of adverse events or other problems related to medicines. For more information on how we use and disclose personal data for these purposes, please see the Roche Privacy Notice for Pharmacovigilance, Medical Information and Product Complaints posted on the Roche website. |
| We collect and process Personal Data for these purposes to comply with our legal obligations and we may need to report the data to regulatory authorities. |
| To run, maintain and improve our websites, platforms and products. We use this information to protect, maintain, and improve our websites, network systems, and other assets. |
| We process this information based on your consent to run, maintain, secure and improve our websites, platforms, products and services. For troubleshooting, product development and technology purposes, we process your personal data if we deem it necessary for our legitimate interests. |
Categories of personal data processed
We may collect the following personal data:
Contact: includes your name, professional email address, phone number, employing health care organization.
Professional information: includes your biographical information (CV), professional society memberships, affiliations/profession, title, therapeutic area, qualifications or experience, education, and scientific/medical activity.
Value transfer: includes the nature, value and date of any financial/non-financial transfers made to you by Roche.
Interaction Information: includes professional interactions between Roche and you, records of your collaborations, registration and participation in the Roche event or related activity, clinical trials in which you participated or served as an investigator.
Profile data: Includes information about your contact and product preferences, languages, marketing preferences, qualifications or experience, collaborations, posts, posts, demographics, comments, and interests.
Technical and usage data: includes your online user ID, IP address, geographic information, viewing data, other information related to your use of, and interactions with, our websites, applications, emails, and advertisements.
Recipients of personal data and international data transfers
Recipients of your data may be Roche affiliates around the world, including countries with different privacy standards than your country. Our Roche affiliates will use the data for the same purposes as us, and we may also share the personal data with third parties.
A list of Roche's subsidiaries is available in the “Roche Financial Report in Subsidiaries and Associates List Section”, which can be found in the Investors section of Roche. www.roche.com. Roche may transfer personal data in a geographic region that imposes different privacy obligations than your country of origin. This means that your Personal Data may be sent to a country with less restrictive data protection laws than the level of protection provided for the Caribbean, Central America and Venezuela, for which we guarantee that the transfer of the data and its due Protection will be carried out according to the specific Law of Costa Rica and its due regulations established for such purposes.
Storage Period of Your Personal Data
The period of time for which we will store your personal data will differ depending on the purpose for which we have collected and are processing your data. In most cases, we will retain data for three (3) years after our last interaction with you. However, we may keep your data for a longer period of time if we are required by law to keep your data, for example due to tax laws or accounting requirements.
Information about your rights
Your personal data is protected by the Law for the Protection of the Person Against the Treatment of Personal Data of Costa Rica; accordingly, you have the right to request information about the personal data that has been stored and processed by Roche.
In addition, you may rectify, update, cancel and/or delete your personal data at any time, for which you will have to make the request through the person responsible for the processing of your personal data at Roche.
In the event that you believe or have the impression that our data processing does not comply with the Costa Rican Law for the Protection of Persons Against the Treatment of Personal Data, you have the right to file a complaint with the responsible supervisory authority.
Data sources
Roche uses different methods and channels to collect personal data from and about you, including:
Directly from you;
Direct interactions with you, including information obtained from you through physical or virtual meetings, collaborations, services, feedback, requests, inquiries, surveys, etc.;
Automated information collected through our websites and online sources;
Third parties or publicly available sources, including third-party websites, social media, magazines, and platforms.
Updates to this Privacy Notice
From time to time, we may revise this Privacy Notice. Any such changes to this Privacy Notice are reflected on this page. Roche recommends that you review this Privacy Notice regularly for changes. The date this notice was last revised is at the top of this notice.