This information is meant to explain to you what kind of data we collect from what sources and are used for which purposes.
Identity and contact details of the data controller
F. Hoffmann-La Roche Ltd, Grenzacherstrasse 124, CH-4070 Basel, Switzerland, email: [email protected] (“Roche”) is data controller.
In the event that your personal data is covered by the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”): EU representative of F. Hoffmann-La Roche Ltd is Roche Privacy GmbH, Emil-Barell-Str. 1, D-79639 Grenzach-Wyhlen.
Please direct any questions and requests related to this information to F. Hoffmann-La Roche Ltd, Global Privacy Office, Grenzacherstrasse 124, CH-4070 Basel, Switzerland, email: [email protected].
Purposes and legal basis for processing
Your personal data is collected and used for purposes of authenticating and authorizing access to and enable you to use the Roche MS Studies portal in order to provide you with the most relevant content and documents related clinical studies that you are part of.
We collect and process your data on the basis of the performance of a contract with you.
Categories of personal data processed
We collect the following types of data to ensure you have access to the study(ies) that you are a part of, including: Name, Email, Country, Site #, Study, and Role. We also collect this data in order to respond to your queries entered into the portal contact page. This data is also used to authenticate your access and process password updates. We may also collect certain information about the ways you have interacted with the portal in order to understand your interest in the portal and how it can best serve you.
Recipients of personal data
Recipients of your data may be Roche’s affiliates around the world including in countries with privacy standards different from those in your country. Our Roche affiliates will use the data for the same purposes as we do. A list of Roche’s affiliates is available in the current annual report which can be found in the Investors section of www.roche.com.
Additional information in case your data is covered by GDPR: Regarding the exchange of data within the Roche Group, contracts containing the EU Standard Contractual Clauses according to EU Commission decisions of 27 December 2004 (2004/915/EC) and 05 February 2010 (C(2010) 593) constitute appropriate and suitable safeguards to ensure compliance with GDPR.
Data processor for the (web based) Roche MS Studies Portal system is 9431-4077 Quebec Inc (operating under AXON Communications “AXON”) (Legal Entity), we ensure compliance with GDPR through contracts containing the EU Standard Contractual Clauses.
Further, data processor for service and support is AXON (Legal Entity).
Storage period
We store your personal data for up to five (5) years following our last interaction with you. We may, however, maintain your data for a longer period of time if we are required by law to maintain your data.
Information about your rights if your data is covered by GDPR
Provided your personal data is covered by GDPR, please note that you have the right to request from Roche access to and rectification of your personal data as well as the right to data portability, if applicable, or erasure or restriction of processing of your personal data. Erasure or restriction of processing is only possible if and to the extent the processing of personal data is based on consent or legitimate interest. If data processing is based on consent, kindly note that you have the right to withdraw your consent at any time, however, without affecting the lawfulness of processing based on consent before its withdrawal. For sending us a note to exercise your right to withdraw consent, please see contact details in the section “Identity and contact details of the data controller” above.
To avoid that your data is entered in the systems again after your request for erasure, in your interest and for us to comply with GDPR we may keep your name and e-mail address with a flag “Don’t contact anymore” in our systems.
In the event you have the impression that our data processing is non-compliant with GDPR: You are entitled to lodge a complaint with the responsible supervisory authority.
Cookies and Other Web Trackers
Our websites and online resources also collect other basic information about you which may not directly identify you, but which may correspond with you or a particular device. We use some of this information to allow our websites to run, as well as to learn more about how our websites and online resources are used and to otherwise improve and administer the site. We also use this information to enable us to deliver information tailored to your interests and preferences, based on your use of the site. For example, we may collect the IP Address assigned to your computer by your internet service provider. This address may change each time you connect to the internet (a “dynamic” IP address), or it may remain the same (a “static” IP address). In most cases, this information is collected automatically, for our legitimate business interests. In some jurisdictions, we ask for your consent before collecting this information, in which case you will be presented with a choice as to whether you wish to allow the collection and use of this type of information. Please see our Cookie Notice for more information.
Data Sources
For purposes of the Roche MS Studies portal, personal data is provided to AXON from Roche.