Privacy Policy

GENESIS PHARMA (CYPRUS) LTD

June 3rd, 2019


Genesis Pharma (Cyprus) Ltd (referred to as ‘we’, ‘us’, ‘our’ “Genesis” or “Genesis Pharma”) respects your privacy and is committed to protecting and handling your data in an open and transparent manner and in compliance with the applicable laws, including Regulation 2016/679/EU (GDPR).

This Privacy Policy applies to Genesis Pharma (Cyprus) Ltd and its subsidiaries:


  • Genesis Biopharma Romania SRL
  • Genesis Pharma Bulgaria EOOD
  • Genesis Pharma Adriatic d.o.o.

For the purposes of this Privacy Policy, the terms “personal data”, “data” and “personal information” are used to refer to any information relating to you that identifies or may identify you, either directly or indirectly, such as your name, contact details and identification data (e.g. passport number). Moreover, the term “processing” is used herein to collectively refer to actions such as the collection, retention, use, disclosure, transfer, deletion or destruction of personal data.


1. Who we Are

Genesis Pharma (Cyprus) Ltd is a pharmaceutical company registered in Cyprus (Reg.No. C107632) with mission to ensure that patients in the countries we operate have direct access to innovative biopharma therapies. Registered office and head offices at:


Anastasio Megaro

Athalassas Ave & I. Hadjiiosif Corner

4th Floor, Office 402

2024 Strovolos, CYPRUS

Tel: 00357 22769946

Fax: 00357 22769978


And with subsidiaries located in Romania, Bulgaria and Croatia.

Identity and contact details of the Controller and the Data Protection Officer

Controller:


Genesis Pharma (Cyprus) Ltd

Anastasio Megaro

Athalassas Ave & I. Hadjiiosif Corner

4th Floor, Office 402

2024 Strovolos, CYPRUS

Tel: 00357 22769946

Fax: 00357 22769978


or its subsidiaries:


Genesis Biopharma Romania SRL,

Calea 13 Septembrie nr.90,

Office No. 1.04, 1st floor

District 5, Bucharest

050726

Romania

Tel: +40 (0) 21 403 40 74

Fax:+40(0) 21 403 40 75


Genesis Pharma Bulgaria EOOD

INTERPRED-World Trade Center Sofia

36 Dragan Tsankov Blvd.

Office 702, 7th Floor

1040 Sofia,

Bulgaria

Tel: +359 2 969 3227

Fax:+359 2 969 3228


Genesis Pharma Adriatic d.o.o.

Zadarska 80, 10000 Zagreb, Croatia

Tel: +385 1 5530011

Fax: +385 1 5530011


DPO:

 Mr. Charalampos Kamarinopoulos, Data Protection Officer, tel: 00357 22769946, email: dpo@genesispharmagroup.com 


2. Collection and processing of personal data

We collect and process personal data from different sources:

  • Directly provided from you to our employees in the frame of our business relationship and/or a contractual relationship,
  • Directly from you because you have requested information or showed interest about our products,
  • Directly from you because of information provided related to our products,
  • Lawfully collected and processed from publicly available sources (directories, events, public presentations, conferences, specialty associations etc.)

3. Purpose of the processing and the legal basis for the processing

Your personal data may be processed by the Company in its capacity of Data Controller in accordance with the GDPR and the local data protection law for at least one of the following reasons (Legal Basis):

  • To execute a contract,
  • To comply with a legal and/or regulatory obligation,
  • To Safeguard our legitimate or third-party interests, respectively Data and/or information are processed under this ground for reasons pertaining to business and/or commercial interests, taking into consideration the necessity of such action and your interests, fundamental rights and freedoms, for example:

(a) monitoring and assessing compliance with the company’s policies and procedures;

(b) ensuring the smooth operation and security of our IT system;

(c) safeguarding our records and documents, for example through data and record management;

(d) Pursuing and/or defending claims in judicial and/or regulatory proceedings;

(e) Protecting our Intellectual Property rights;

(f) Preventing or detecting crimes and fraud by for example establishing video surveillance (CCTVs), with the observance and within the limits of the applicable legislation;

(g) Transferring, assigning and/or sale of any or all of our rights, titles or interests under any agreement between you and us;

(h) ensuring the operation, evaluation and improvement of our business;

  • You have provided your consent


4. Categories of personal data

Personal data is data which can be used to identify you. This may include Name, Surname, Address, Phone number, mobile phone number, email, Specialty, Institution and job function, ID/Passport number etc.

Sensitive personal data is information related to any of the following: racial or ethnic origin, political opinions, religious beliefs, trade union membership, health, sex life, criminal offences and convictions.


5. Minors’ Data

We understand and respect the importance of protecting the privacy of minors. We may process the personal data of minors only with the prior authorisation and/or consent of their parents or legal guardians or as otherwise required or permitted by law.


6. Any recipient or categories of recipients of the personal data

In order to execute contractual obligations, compliance purposes or legal obligations and to safeguard legitimate interests, data may be provided to several departments in the company and in companies, members of the Genesis Pharma Group. In relation to the above obligations and purposes, data may be communicated to other companies, such as:

  • To any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary as a matter of applicable law or regulation,
  • payroll companies,
  • banking and other financial institutions executing payments,
  • accounting services companies,
  • third party service providers,
  • medicinal product manufacturers/suppliers,
  • IT and “Cloud Computing” service providers,
  • travel agencies and conference organizers,
  • professional service providers,
  • companies that perform tasks on our behalf.

All appointed data processors processing personal data on our behalf are contractually bounded to comply with the GDPR Article 28, as well as with all other applicable requirements.


7. Details of transfers to third country and safeguards

Your personal data may be transferred to third countries outside the EEA to fulfill a contractual obligation or a legal obligation or based on your consent given to us to do so. Third parties acting as Data Processors in third countries are obligated to comply with the GDPR and to provide appropriate safeguards in relation to the transfer of your data, on the basis of either an adequacy decision issued by the European Commission pursuant to Article 45 of the GDPR, or contractual obligation or other appropriate safeguards pursuant to Article 46 of the GDPR. You may obtain a copy of the above by contacting Genesis Pharma or any of its subsidiaries at the contact details mentioned further above in this Policy.


8. Retention period and/or criteria used to determine the retention period

Data are processed both in paper and electronic forms and are stored into the company system in line with the applicable laws, including the aspects pertaining to data security and confidentiality, and according to the principles of fair and lawful processing. Your Data shall be stored only as long, as strictly necessary to fulfil the goals for which they were collected; in any case, the criterion used to determine the length of the storage period takes into due account the need to comply with any relevant legal requirements, and the need to manage the Company’s records. We may store your data even after the end of our relationship, but only for as long as necessary to fulfil contractual and legal obligations. We update and maintain our databases to ensure your Data are always correct and accurate.


9. To exercise your rights

a) Receive access to your personal data. In order to receive a copy of your personal data you can contact Genesis Pharma at the provided in this Policy contact information.

b) Request rectification/correction of the personal data we hold about you. This enables you to correct the data we keep about you.

c) Request erasure of your personal information (right to be forgotten). This enables you to request the erasure of your personal data if there is no legitimate reason for us continuing to process it.

d) Object to processing of your personal data where we are relying on a legitimate interest and there is something specific about you that makes you want to object to processing. If you lodge an objection, we will no longer process your personal data unless we can demonstrate the legitimate grounds for the processing which override your interests, rights and freedoms.

e) Object to processing of your personal data, for direct marketing purposes. This also includes profiling for direct marketing purposes - If you object to processing for direct marketing purposes, then we shall stop the processing of your personal data for such purposes.

f) Request the restriction of processing of your personal data. This enables you to ask us to restrict the processing of your personal data, i.e. use it only for certain things, if: it is not accurate, it has been used unlawfully but you do not wish for us to delete it, it is not relevant any more, but you want us to keep it for use in possible legal claims, you have already asked us to stop using your personal data but you are waiting us to confirm if we have legitimate grounds to use your data.

g) Data portability, request to receive a copy of your personal data in a machine-readable format that is structured and commonly used and transfer the data to another organization. You also have the right to have your personal data transferred directly by Genesis to other organizations of your choice.


10. The right to withdraw consent at any time

When we process your data based on your consent, you have the right to withdraw you consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn or revoked by you.


11. The right to lodge a complaint

If you have exercised any of your data protection rights and your request has not been adequately addressed by us, you have the right to:

  • Complain by contacting Genesis Pharma at the provided in this Policy contact information.
  • Filing a complaint to the applicable competent supervisory authority.

12. Where the provision of personal data is part of a statutory or contractual requirement or obligation

For the purpose of entering into a business relationship you must provide your personal data which are necessary for the execution of a business relationship and the performance of our contractual obligations.

Please note that failure to provide us with the required data may forbid us from entering into a business relationship.


13. The existence of automated decision making, including profiling

In general, we do not conduct automated individual decision-making during our professional activities.

In some cases we may conduct automated processing of personal data to evaluate certain personal aspects (profiling) necessary for the performance or entering into a contract, for example in the following cases:

  • Invitations to conferences and scientific meetings;
  • Selection based on the specialty when introducing a new drug on the market;

14. Processing for marketing purposes and profiling

We may use your personal data to inform you about our products and services based on your explicit consent, and in some cases on our legitimate interest.

You have the right to object at any time to the processing of your personal data for marketing purposes, which includes profiling, by contacting Genesis Pharma or the DPO of the company at dpo@genesispharmagroup.com


15. Cookies

Genesis website uses small files known as cookies for better user experience and technical reasons, for more information please check our cookie policy.


16. Data Security

Genesis Pharma is committed in safeguarding the privacy of the personal data and/or information you share with Genesis Pharma. The company applies procedures as for the personal data provided to the extent possible being processed confidentially and securely. The data processing is conducted solely by persons who follow the present Privacy Policy.


17. Changes to this Privacy Policy

We may modify this Privacy Policy from time to time in order to reflect our current practices and/or in accordance with any changes in the applicable legal framework. For every amendment of the present we will update the revision date at the top of the page. You can be accordingly informed of the Privacy Policy in force by visiting Genesis Pharma website and/or contacting any of our offices.


The present Privacy Policy is effective as of June 3rd 2019.