Privacy notice
for British healthcare professionals
(HCPs)

Last Update 21/04/2023
(Applicable from 07/04/2025)

The company Angelini Pharma UK-I Limited. (hereinafter "Angelini" or "Controller"), pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation, hereinafter referred to as the “GDPR”), provides You with the following information on the processing of your personal data, in your capacity as a healthcare professional (HCP).

  1. Identity and contact details of the Controller and Data Protection Officer (DPO)
    The Controller is Angelini Pharma UK-I Limited., with registered office atNapier House, 24 High Holborn WC1V 6AZ London , email: privacy.UK-I@angelinipharma.com.
    The Controller has appointed a Data Protection Officer (DPO), who can be contacted directly at the following addresses: Data Protection Officer - DPO c/o Angelini Pharma UK-I Limited., Napier House, 24 High Holborn WC1V 6AZ London email: dpo.uk-i@angelinipharma.com.

  2. Purposes and legal basis of the processing
    Your personal data will be processed, in compliance with the law in force, in a fair, lawful and transparent manner for the purposes set out below and according to the following prerequisites of lawfulness (legal bases of the processing).
Purpose of the processing Legal basis of the processing
a) Carrying out and managing the personalized medical-scientific information visits to clinics, doctor's offices and hospital facilities where You carry out your professional activity, according to your activity, interests, needs, preferences and your interaction with us (that is, based on Your profiling) [personalized medical-scientific information visits]. The processing of your personal data for this purpose is based on the legitimate interest of the Controller (art. 6.1.f, GDPR) in personalized medical-scientific information visits.
Upon your request, the Controller may provide You with information on the evaluation of this legitimate interest carried out by the Controller.
You may exercise your right to object to this activity at any time by notifying the Controller or, if You are an Angelini iD registered user (see below), You can edit directly Your “privacy preferences” within the Angelini iD dedicated section.
b) Remote communications (email, SMS, web-based/online communications, paper mail and non-automated telephone calls, communications via social networks such as Facebook, Instagram and LinkedIn) concerning medical-scientific information, including invitations to take part, as learner, in congresses, conventions or medical-scientific meetings, personalized according to your activities, interests, needs, preferences, and your interaction with us (that is, based on Your profiling) [personalized medical-scientific information communications]. The processing of your personal data for this purpose requires your consent (art. 6.1.a, GDPR).
You may withdraw your consent at any time by using the appropriate link at the foot of each email and SMS communication or by contacting the Controller or, if You are an Angelini iD registered user (see below), You can edit directly Your “privacy preferences” within the Angelini iD dedicated section.
c) Remote communications (email, SMS, web-based/on-line communications, paper mail and non-automated telephone calls, communications via social networks such as Facebook, Instagram and LinkedIn) concerning non-medical-scientific information, personalized according to your activities, interests, needs, preferences, and interaction with us (that is, based on Your profiling) [personalized non-medical-scientific information communications]. The processing of your personal data for this purpose requires your consent (art. 6.1.a, GDPR).
You may withdraw your consent at any time by using the appropriate link at the foot of each email and SMS or by contacting the Controller or, if You are an Angelini iD registered user (see below), You can edit directly Your “privacy preferences” within the Angelini iD dedicated section.
d) Carrying out of market research and surveys about products, services and activities of the Controller (communicated or carried out face to face, by email, SMS, web-based/on-line platforms, paper mailing, non-automated telephone calls and social networks such as Facebook, Instagram and LinkedIn) [market research and surveys]. The processing of your personal data for this purpose requires your consent (art. 6.1.a, GDPR).
You may withdraw your consent at any time by using the appropriate link at the foot of each email and SMS communication or by contacting the Controller or, if You are an Angelini iD registered user (see below), You can edit directly Your “privacy preferences” within the Angelini iD dedicated section.
e) Proper and comprehensive management of your request (for example, a request for information or assistance, an unsolicited request for medical-scientific information or a request to receive free samples of pharmaceutical products) [management of your requests]. The processing of your personal data for this purpose is necessary for the execution of a contract or the execution of pre-contractual measures (herein intended as a "legal relationship" established between You and the Controller following a possible request from you) (art. 6.1.b, GDPR).
f) Proper and comprehensive management of your possible participation in congresses, conventions or medical-scientific meetings organized by the Controller (held face to face or in remote/online) [management of congresses, conventions or medical-scientific meetings]. The processing of your personal data for this purpose is necessary for the execution of a contract or the execution of pre-contractual measures (proper and comprehensive management of your participation in congresses, conventions or medical-scientific meetings organized by the Controller) (art. 6.1.b, GDPR).
g) Proper and comprehensive management of pharmacovigilance reports [pharmacovigilance]. The processing of your personal data for this purpose is a legal obligation (art. 6.1.c, GDPR).
h) Fulfilment of legal obligations. In certain circumstances the regulation obliges us to use Your personal data (for example, for an administrative/accounting/tax nature or to inform you of any data breach regarding Your data and of the measures taken to address them [legal obligations]. The processing of your personal data for this purpose is a legal obligation (art. 6.1.c, GDPR).
i) Proper and comprehensive management of Your registration to the Angelini information system (referred to as “Angelini iD”) and use of the related services. The system allows, in particular, to: (i) verify remotely the subjective requirements of the registered user (status as a healthcare professional); (ii) provide the registered user with unique credentials to the Angelini website Reserved Areas and so, to use the related content and services; (iii) enable the registered user to update, if applicable, the information reported in the user profile (in particular, contact details); (iv) edit at any time, the “privacy preferences” (that is, the choices on the different personal data processing purposes on behalf of Angelini that foresees Your consent or Your right to object) [registration to Angelini iD and use of related services]. Your personal data processing for these purposes is necessary for the execution of a contract or the execution of pre-contractual measures (reference is made to the conditions of the contract regulating the registration to the Angelini iD and the use of the related contents and services (art.6.1.b, GDPR).
j) Proper and comprehensive management of the reserved areas of Angelini website (so called “Reserved Areas” or individually “Reserved Area”) accessible to Angelini iD registered users including the use of the related contents and services [management of the Reserved Areas and use of the related contents and services]. The processing of your personal data for this purpose is necessary for the execution of a contract or the execution of pre-contractual measures (reference is made to the conditions of the contract regulating the use of the related contents and services in the Reserved Areas accessible to the Angelini iD registered users) (art. 6.1.b, GDPR)
k) Personalization of the content in the Angelini websites Reserved Areas, accessible only to Angelini iD registered users, in accordance with Your interests, needs, preferences, activities and Your interaction with us (that is based in Your profiling) [personalization of the Reserved Area content] Your personal data processing for these purposes is based on the Controller’s legitimate interest (art 6.1.f, GDPR) of the personalization of the content in the Angelini website Reserved Area.
Upon your request, the Controller may provide You with the information on the Controller’s assessment of said legitimate interest.
You may exercise the right to object to this activity by notifying the Controller or by editing your “privacy preferences” within the Angelini iD dedicated section.
  1. Profiling
    The personalization of the medical-scientific information visits, medical-scientific information communications and non-medical-scientific communications as well as the contents of Reserved Areas (purposes referred to in paragraph 2, letters a, b, c and k) is carried out by us on the basis of an analysis of your data relative to interests, needs, preferences, activities and your interaction with us (this is termed “profiling”).
    We believe that profiling adds value to our relationship with you, insofar as it allows us to visit you and send you or show you communications and contents that take your profile into account and, therefore, may be of greater interest, more use or better appreciated by you.
    The information we use to do this is, in particular: professional qualification, professional order; specialization; graduation year; date of birth; any position held in hospitals and outpatient clinics; data relating to medical-scientific information visits and interest shown; information you have supplied voluntarily; answers you have provided directly to the medical-scientific representative or through filling in specific questionnaires/forms, such as area of greatest interest or main professional activity, assessment of the products of the Controller under the scope of therapeutic choices; answers you have given during market research and surveys carried out on our products, services and activities; your opinion about us and our products, services and activities; participation in our events; interaction with our communications and contents; information on the use of and how to use the contents and services present on the Angelini websites and web platforms.
    We use different tools to collect and process this information, including (where applicable) analytical and profiling cookies, as well as similar tracking technologies (such as, for example, web beacons). The data collected using these technologies includes: IP address, information on the device used and data acquired by means of the browser or device used (as unique identifier of the device and operating system), information on the conduct adopted during on-line browsing or use of digital contents and services, as well as statistical data. For other categories of personal data mentioned above, we do not collect this data through these tools.
    For detailed information on the use of cookies and similar tracking and analytical technologies on the specific Angelini web platforms and websites and to give consent to their use, please refer to the specific “cookie policy” given on said Angelini websites and web platforms.

  2. Categories of data processed
    The Controller will process the following categories of personal data concerning You:
    • name and surname, profession, status (i.e. whether or not You have ceased professional activities), OneKey ID (i.e. identification code used by the database of IQVIA Commercial GmbH & Co. KG and affiliates, see paragraph 5 below);
    • data necessary for your correct identification as healthcare professional (HCP), in particular your tax code and, if not sufficient to identify You correctly, additional verification information such as profession, specialization, entity/structure, business address and telephone number;
    • if an Angelini iD registered user (purpose referred to in paragraph 2, letter i), also username and password
    • for the access to the Reserved Areas or single Reserved Area (purposes referred to in paragraph 2, letter i )the data necessary or connected to the use of contents and services present in each Reserved Area (that can be dedicated to specific user’s category), such as any specialization, whether or not You are a trainee specialist and the relevant specialty, as well as the personal data You have shared in the Reserved Area;
    • contact data, such as email, telephone number, postal address of the clinic, doctor's office or hospital environment where You practice your profession;
    • data related to interests, needs, preferences, activities and interaction with us (for the purposes pursuant to paragraph 2, letters a, b, c and k) (for a detailed list of data used for “profiling”, see paragraph 3 above);
    • any personal data You may have supplied during market research and surveys (for the purpose pursuant to paragraph 2, letter d);
    • personal data You use for any request (in particular name and surname, postal address or email address) and any other personal data You may have given in your communication or as may be necessary to handle your request (for the purpose pursuant to paragraph 2, letter e);
    • identification data, such as tax code and the data contained in the identification document (number of the identification document, place and date of birth, residence address, photograph, etc.) in case of your participation in congresses, conventions or medical-scientific meetings organized by the Controller (for the purpose referred to in paragraph 2, letter f), as well as any voice recorded or image of your signature affixed at the bottom of this privacy notice to document the reading by You and any consents given by You (for the purpose referred to in paragraph 2, letter h);
    • any other data necessary for the fulfillment of legal obligations (purposes referred to in paragraph 2, letters g) and h) such as, in particular, VAT number.

  3. Source of data
    Your personal data will be obtained by the Controller:
    • directly from You and your interaction with us;
    • from sources accessible to the public (in particular, professional registers);
    • from private databases of third parties, in particular, of the company IQVIA Commercial GmbH & Co. KG and its affiliates (whose privacy notice can be consulted on the following web page https://www.iqvia.com/about-us/privacy/privacy-policy);
    • from official websites of your own or of the clinics and hospitals in which You carry out your profession;
    • from social networks such as Facebook, Instagram (both owned by “Meta Platforms Ireland Ltd.”) and LinkedIn (“LinkedIn Ireland Unlimited Company”) with which You may be registered. The privacy notice of Facebook is available for consultation at https://www.facebook.com/policy.php, that of Instagram at https://help.instagram.com/519522125107875 and that of LinkedIn here https://www.linkedin.com/legal/privacy-policy;
    • from third parties (in particular, from your colleagues or from the clinics and hospitals in which You carry out your profession).

  4. Nature of the provision
    The provision of your personal data for personalized medical-scientific information visits (purpose referred to in paragraph 2, letter a) is merely optional: failure to provide or opposition to their processing would make it impossible for You to receive personalized medical-scientific information visits from the Controller at the clinics, doctor's offices and hospital facilities where You carry out your professional activity, based on profiling.
    The provision of your personal data for the personalized communication of medical-scientific information (purpose referred to in paragraph 2, letter b) is merely optional: failure to provide it would make it impossible for You to receive personalized remote communications from the Controller (email, SMS, web-based/online communications, paper mail, non-automated telephone calls, and communications via social networks such as Facebook, Instagram and LinkedIn) concerning medical-scientific information, including invitations to take part, as learner, in congresses, conventions or medical-scientific meetings, based on profiling.
    The provision of your personal data for personalized non-medical-scientific information communications (purpose referred to in paragraph 2, letter c) is merely optional: failure to provide it would make it impossible for You to receive personalized remote communications from the Controller (email, SMS, web-based/online communications, paper mail, non-automated telephone calls, and communications via social networks such as Facebook, Instagram and LinkedIn) concerning non-medical-scientific information, based on profiling.
    The provision of your personal data for market research and surveys (purpose referred to paragraph 2, letter d) is optional only: failure to provide such would make it impossible for You to take part in market research and surveys about products, services and activities of the Controller and express your opinion on them.
    The provision of your personal data for the management of your requests (purpose referred to in paragraph 2, letter e) is a necessary requirement for the Controller to be able to respond to your request: failure to provide it would make it impossible for You to see your request fulfilled (in particular, to receive a response to a request You make for information or assistance, an unsolicited request for medical-scientific information or a request for free samples of pharmaceutical products).
    The provision of your personal data for the management of congresses, conventions or medical-scientific meetings (purpose referred to in paragraph 2, letter f) is a contractual obligation: failure to provide it would make it impossible for You to participate in congresses, conventions or medical-scientific meetings organized by the Controller (held face to face or in remote/online).
    The provision of your personal data for pharmacovigilance (purpose referred to in paragraph 2, letter g) and for the fulfilment of legal obligations (purpose referred to in paragraph 2, letter h) is compulsory as it derives from legal provisions.
    The provision of Your personal data for registration to Angelini iD and the use of the related services (purposes referred to in paragraph 2, letter i) constitutes a contractual obligation: failure to provide it would result in Your inability to register with Angelini iD, use the related services and, therefore, access the Angelini's websites Reserved Areas.
    The provision of your personal data for the management of the reserved areas and use the related contents and services (purpose pursuant to paragraph 2, letter j) is a contractual obligation: failure to provide such would make it impossible for You to use the contents and services within the Reserved Areas or of the single Reserved Area.
    The provision of Your personal data for the personalization of the content within the Reserved Areas (purpose pursuant to paragraph 2, letter k) is merely optional: failure to provide such or objection to their processing would make it impossible for You to use personalized contents within the Reserved Areas.

  5. Processing methods
    Your personal data processing will be carried out mainly with computer tools, with logic strictly related to the purposes of processing and, in any case, with methods and procedures suitable to ensure the security and confidentiality of the data.
    In particular, Your possible consents (that is, Your choices regarding the purposes in paragraph 2, letters b, c and d), as well as Your willingness to register with Angelini iD (purposes in paragraph 2, letter i), where given by means of computerized tools, will be considered acquired only at the end of the relevant computerized procedure (so-called "double opt-in").

  6. Categories of recipients of personal data
    For the purposes indicated above (paragraph 2), your personal data may be communicated:
    • to persons authorized by the Controller to carry out personal data processing operations (employees or collaborators of the Controller);
    • to the Processors appointed by the Controller (for all purposes: providers of computer, technological and telematic services, including data storage and management, technical security measures and technological infrastructure; for legal obligations: providers of services for the management and storage of documentation; for personalized medical-scientific information visits, for personalized medical-scientific information communications, for personalized non-medical-scientific information communications and for market research and surveys: companies carrying out market research and marketing activities; companies specialized in data analysis; for the management of medical-scientific congresses, conferences or meetings: event organization companies);
    • to other data controllers (for pharmacovigilance: national and European medical and pharmaceutical agencies, other pharmaceutical companies, including companies of the Angelini Pharma Group, tied to the Controller by license contracts and distribution agreements for pharmaceutical products or in the case of transfer of marketing authorizations for the pharmaceutical product; for the management of your requests: couriers and dispatch companies; for the management of medical-scientific congresses, conferences or meetings: travel agencies, transport companies such as airlines, railways, etc., hotels; conference and convention centers, banking operators, event organizers sponsored by the Controller; for compliance with legal obligations: registered and expert accountants; for remote communications: suppliers of telecommunication and web-based/on-line communication services, social networks such as Facebook, Instagram and LinkedIn).
    Your data may also be transmitted in accordance with the law to tax authorities, police forces and judicial and administrative authorities, for the assessment and prosecution of crimes, prevention and protection from threats to public security, to allow the Controller to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.

  7. Data retention period
    We store your personal data for a limited period of time, different depending on the purpose of processing. After this period, your data will be permanently deleted or in any case made anonymous in an irreversible way.
    Your personal data will be stored in compliance with the terms and criteria specified below:
    • for personalized medical-scientific information visits (purposes referred to in paragraph 2, letter a), until the exercise of your right to object, which can be done at any time by contacting the Controller or, if you are an Angelini iD registered user, by editing directly Your “privacy preferences” within the dedicated Angelini iD section and, in any case, for a maximum period of 5 (five) years from the last medical-scientific information visit or until we know that You no longer practice the medical-healthcare profession;
    • for personalized medical-scientific information communications (purpose referred to in paragraph 2, letter b), until the withdrawal of your consent or the exercise of your right to object, which can be done at any time by using the appropriate link at the foot of each email and SMS communication or by contacting the Controller or, if you are an Angelini iD registered user, by editing directly Your “privacy preferences” within the dedicated Angelini iD section and, in any case, for a maximum period of 5 (five) years from the time You have given your consent or until we known that You no longer practice the medical-healthcare profession; During the computerized consent acquisition procedure, the assessment of your status as a healthcare professional will last a maximum of 30 (thirty) days, in case of lack of verification within the said timeframe, Your personal data for this purpose will be deleted from our database and Your consent acquisition will be deemed unsuccessful. The computerized consent acquisition procedure foresees in particular on your behalf a click on the confirmation link received by email (called “double opt-in”). In case of uncomplete computerized consent acquisition procedure within 45 (forty-five) days from the receipt on your behalf of the email containing the link, Your personal data for this purpose will be deleted from our database and the consent acquisition will be deemed unsuccessful;
    • for personalized non-medical-scientific information communications (purpose referred to in paragraph 2, letter c) until the withdrawal of your consent or the exercise of your right to object, which may take place at any time by using the appropriate link at the foot of each email and SMS communication or by contacting the Controller or, if You are an Angelini iD registered user, by editing directly your “privacy preferences” within the dedicated Angelini iD section and, in any case, for a maximum period of 5 (five) years from the time You have given your consent. During the computerized consent acquisition procedure, the assessment of your status as a healthcare professional will last a maximum of 30 (thirty) days, in case of lack of verification within the said timeframe, Your personal data for this purpose will be deleted from our database and Your consent acquisition will be deemed unsuccessful. The computerized consent acquisition procedure foresees in particular on your behalf a click on the confirmation link received by email (called “double opt-in”). In case of uncomplete computerized consent acquisition procedure within 45 (forty-five) days from the receipt on your behalf of the email containing the link, Your personal data for this purpose will be deleted from our database and the consent acquisition will be deemed unsuccessful;
    • for market research and surveys (purpose referred to in paragraph 2, letter d) until the withdraw of your consent or the exercise of your right to object, which can take place at any time using the appropriate link at the foot of each email and SMS communication or by contacting the Controller or, if you are an Angelini iD registered user, by editing directly Your “privacy preferences” within the dedicated Angelini iD section and, in any case, for a maximum period of 5 (five) years from the time You have given your consent. During the computerized consent acquisition procedure, the assessment of your status as a healthcare professional will last a maximum of 30 (thirty) days, in case of lack of verification within the said timeframe, Your personal data for this purpose will be deleted from our database and the Your consent acquisition will be deemed unsuccessful. The computerized consent acquisition procedure foresees in particular on your behalf a click on the confirmation link received by email (called “double opt-in”). In case of uncomplete computerized consent acquisition procedure within 45 (forty-five) days from the receipt on your behalf of the email containing the link, Your personal data for this purpose will be deleted from our database and the consent acquisition will be deemed unsuccessful;
    • for the management of your requests (purpose referred to in paragraph 2, letter e) for a period of 10 (ten) years from the proper and comprehensive handling of your request;
    • for the management of congresses, conventions or medical-scientific meetings (purpose referred to in paragraph 2, letter f) for a period of 10 (ten) years from the conclusion of the congress, convention or medical-scientific meeting organized by the Controller, in which You attended;
    • for pharmacovigilance (purpose referred to in paragraph 2, letter g) as long as the medical product is authorised and for at least 10 (ten) years after the marketing authorisation has expired;
    • for the fulfilment of legal obligations (purpose referred to in paragraph 2, letter h) for a maximum period of 10 (ten) years from the end of the calendar year in which the Controller has fulfilled the legal obligations;
    • for the Angelini iD registration and use of the related services (purpose referred to in paragraph 2, letter i), if registered user, until (i) deletion of your Angelini iD account, that You can request at any time by contacting the Controller, or until (ii) loss of Your subjective requirements needed for the service use, and anyway, until (iii) possible service termination on behalf of the Controller. During the computerized consent acquisition procedure, the assessment of your status as a healthcare professional will last a maximum of 30 (thirty) days, in case of lack of verification within the said timeframe, Your personal data will be deleted from our database for this purpose and the acquisition of Your consent will be deemed unsuccessful. The computerized consent acquisition procedure will be completed after a click on your behalf on the activation link received by email, by inserting your tax code and after having chosen the password. In case of uncomplete computerized consent acquisition procedure within 45 (forty-five) days from the receipt on Your behalf of the first email containing the activation link, the registration will be deemed unsuccessful and Your personal data will be deleted from our database for this purpose;
    • for the management of the Reserved Areas and use the related contents and services (purpose referred to in paragraph 2, letter j) until (i) deletion of your Angelini iD account, which You may request at any time by contacting the Controller or until (ii) loss, by yourself, of the subjective requirements needed to use the content of the service within the Reserved Areas or the single Reserved Area and, in any case, until (iii) cessation of the (Reserved Areas or the single Reserved Area) by the Controller;
    • for the personalization of the Reserved Areas (purpose referred to in paragraph 2, letter k) until (i) the exercise of your right to object that you can request at any time by contacting the Controller or by editing directly Your “privacy preferences” within the dedicated section of the Angelini iD, or until (ii) deletion of your Angelini iD account that you can request at any time by contacting the Controller or using the dedicated function within the Angelini iD or until (iii) loss of your subjective requirements needed for the use of the content and services within the Reserved Areas or single Reserved Area and, until (iv) possible termination/closure of the Reserved Areas or single Reserved Area by the Controller.
      • For technical reasons, the cessation of the processing and the consequent cancellation or anonymization of your personal data will take place within 30 (thirty) days from the terms indicated above.
      This is without prejudice to cases in which storage for a later period is required for any litigation, requests by the competent authorities or in accordance with applicable legislation.

  8. Transfer of personal data outside the EU/EEA
    Your personal data may be transferred in countries outside the European Union (EU) or the European Economic Area (EEA) that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).
    The transfer of your personal data to countries that do not belong to the European Union and that do not ensure adequate levels of protection will be performed only after conclusion between the Controller and the recipient of the data of specific agreements, containing safeguard clauses and appropriate safeguards for the protection of your personal data which are so-called "standard model clauses", also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of an agreement between You and the Controller or for the management of your requests.
    It is possible to contact the Controller or the DPO at the contact details above indicated (paragraph 1) to request the complete and updated list of the transfers to countries outside the UE/SEE, as well as to be aware of the specific safeguards put in place and to request a copy, if necessary.

  9. Data subject rights
    The data subject, i.e. You, may exercise, in relation to the processing of the data described herein, the rights provided for by the applicable legislation on the protection of personal data, including the right to:
    • have confirmation as to whether or not personal data concerning You are being processed and, if so, to obtain access to the data and related information (in particular, the purposes of the processing; categories of personal data processed; recipients or categories of recipients to whom the data have been or will be communicated; the period of retention of the data or the criterion for determining it; the existence of the rights to rectify or delete the data or to limit or oppose the processing; the right to lodge a complaint with a supervisory authority; the origin of the data; the possible existence of an automated decision-making process, including profiling and, in such cases, significant information on the logic used and the importance and expected consequences of such processing for the data subject; the appropriate safeguards in case of transfer of personal data outside the EU/EEA), as well as a copy of such personal data provided that this does not harm the rights and freedoms of others (right of access);
    • obtain the rectification of your personal data, i.e. to obtain the correction, modification or updating of any inaccurate or no longer correct data, and to obtain the integration of incomplete personal data, including by providing a supplementary statement (right to rectification);
    • request the deletion of your personal data when, in particular, (i) they are no longer necessary with respect to the purposes for which they were collected or processed, or (ii) You have withdrawn your consent on which the personal data processing is based and there is no other legal basis for their processing, or (iii ) Your personal data have been processed unlawfully, or (iv) Your personal data must be deleted in order to comply with a legal obligation, or, finally, (v) You have objected to their processing (see below "right to object") and there is no prevailing legitimate reason allowing the Controller to proceed with the processing in any case (right to be forgotten). Cancellation may not be carried out if, in particular, the processing is necessary for the fulfilment of a legal obligation or for the ascertainment, exercise or defense of a right in court;
    • obtain the restriction of the processing of your personal data, i.e. that the Controller retains such data without being able to use them. This right can be exercised only when, in particular, (i) You contest the accuracy of your personal data, for the period necessary for the Controller to verify the accuracy of such data, or (ii) the processing of the data is unlawful and You request the restriction of their use, rather than their deletion, or (iii) although the Controller no longer needs them for the purposes of processing, the personal data are necessary for You to ascertain, exercise or defend a right in court or (iv) You have opposed their processing (see below "right to object"), pending verification of whether the legitimate reasons of the Controller prevail over those of the data subject (right to restriction);
    • obtain from the Controller your personal data processed on the basis of your consent or a contract, in a standard format, as well as that they are transferred, where technically possible, directly to a third party indicated by You (right to data portability);
    • withdraw your consent at any time, if previously given for the processing of your personal data, without affecting the lawfulness of processing based on consent before its withdrawal. You may revoke your consent by using the appropriate link at the foot of each email and SMS communication or by contacting the Controller or, if You are an Angelini iD registered user, editing directly Your “privacy preferences” within the dedicated Angelini iD section (withdrawal of consent).
    In addition, You as data subject also have the right to object:
    • object at any time, for reasons related to your particular situation, to the processing of your personal data for personalized medical-scientific information visits, for personalized medical-scientific information communications, for personalized non-medical-scientific information communications, for market research and surveys and for the personalization of the Reserved Area content. You can exercise Your right to object by contacting the Controller or, if you are an Angelini id registered user, editing directly the “privacy preferences” within the dedicated Angelini iD section. In case of exercise, on your behalf, of the right to object, the Controller will refrain from further processing Your personal data unless it demonstrates the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a legal claim.

    To exercise these rights, You may contact the Controller at any time, by writing to Angelini Pharma UK-I Limited, Napier House, 24 High Holborn WC1V 6AZ London or at the email address privacy.UK-I@angelinipharma.com or by writing to the Data Protection Officer (DPO) c/o Angelini Pharma UK-I Limited., Napier House, 24 High Holborn WC1V 6AZ London, or to the email address dpo.uk-i@angelinipharma.com.
    If You are an Angelini iD registered user, You can update at any time Your email address, request to delete Your Angelini iD account and edit Your “privacy preferences” ( that is Your choice in respect of the purposes pursuant to paragraph 2, letters a, b, c, d, e and k) within the Angelini iD.

  10. Complaint
    If You believe that your personal data has been processed unlawfully, You have the right to lodge a complaint with the data protection authority (in the UK this is the Information Commissioner’s Office)

  11. Changes to this notice
    The constant evolution of our activities could lead to changes in the characteristics of the processing of your personal data described above. As a result, this privacy notice may be subject to changes and additions over time, which may also be necessary in relation to new legislation on the protection of personal data.
    In the event of significant changes to this notice, we will notify You accordingly.