Privacy Notice for Customer Communication

1. Categories of personal data, purposes and legal basis for data processing and categories of recipients

Your personal data will be collected and processed:

• for the marketing communication and purposes chosen by you in the consent form (e.g. send you information about our products and services via email);

The collection and processing of your personal data will take place:

• based on your consent (Art. 6 (1) (a) of the EU General Data Protection Regulation);

The processing of your personal data will take place:

• until you withdraw your consent (which may be anytime, with effect for future processing) or object to a use of your personal data for marketing purposes (please use the below contact details to withdraw your consent or object to a use of your personal data).

To personalize the marketing communication with you and to provide you with more relevant information we (based on your choices and explicit consent)

a) rely on the information provided by you, your choices and the interests you indicated (identify and apply correlations) when you gave your consent, and

b) measure your interaction with email communication we send you by registering through cookies or similar technologies such as "pixel tags" if you had opened the email or visited a linked website that was provided to you in our emails. If you turn off cookies, we are only able to detect an anonymous website visit. For more details on the use of cookies, please refer to the cookies notice we are providing on each of our websites. 

For the personalization, your personal data will be combined with data already collected regarding your interests.

Providing your personal data is voluntary and not necessary to enter into a contract with us. If you do not provide your personal data, our ability to process your personal data for the purposes selected by you, in particular, to contact you by the means selected by you and personalize marketing communication, will be limited or excluded.

2. Data Protection Officer

The contact details of our data protection officer are as follows:

Regional Lead Privacy and Data Protection
Philipp – Reis – Straße 2
65795 Hattersheim
Germany
E-post: Privacy@cslbehring.com 
Webportal: https://privacyinfo.csl.com/

3. Categories of recipients

To process your data for the purposes chosen by you CSL Behring uses service providers (e.g. hosting, IT-support and/or maintenance providers).

The following service providers are used:

• Veeva Systems, Inc.

4. Storage duration and erasure

Your personal data will be stored by CSL Behring and/or our service providers in accordance with applicable data protection law to the extent necessary for the purposes set out in this Privacy Notice.

If CSL Behring no longer requires your personal data for the above-mentioned purposes the personal data will be deleted from our systems or anonymized in line with our data retention and deletion policy, unless CSL Behring is legally obligated to retain your personal data pursuant to e.g. tax or trade law or for accounting or auditing purposes.

We will retain your personal data up to one year after the last contact with you on the basis of the consent form. As far as legally permissible or required, we restrict the processing of your data instead of erasing it (e.g. by restricting access to it). This applies in particular to cases where we may still need the data for the performance of contract or for the assertion of or defense against legal claims. In these cases, the duration of the restriction of processing depends on the respective statutory limitation or retention periods. The data will be erased after the relevant limitation or retention periods have expired.

5. Your rights

Pursuant to applicable data protection law you may have the following rights (which might be limited under the respective applicable national data protection law). To exercise your rights please contact us as stated above. In addition to the below rights, you also have the right to lodge a complaint with a data protection supervisory authority:

a) Right of access: You may have the right to obtain from us confirmation as to whether or not personal data concerning you is processed, and, where that is the case, to request access to the personal data. The access right includes - inter alia - the right to be provided with information on the purposes of the processing, the categories of personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access.

b) You may in connection with the right of access have the right to obtain a copy of the personal data undergoing processing. For further copies requested by you, we may charge a reasonable fee based on administrative costs. 

You may have the right to obtain a copy of the personal data undergoing processing. For further copies requested by you, we may charge a reasonable fee based on administrative costs.

c) Right to rectification: You may have the right to obtain from us the rectification of inaccurate personal data concerning you. Depending on the purposes of the processing, you may have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

d) Right to erasure ("right to be forgotten"): Under certain circumstances, you may have the right to obtain from us the erasure of personal data concerning you and we may be obliged to erase such personal data.

e) Right to restriction of processing: Under certain circumstances, you may have the right to obtain from us restriction of processing your personal data. In this case, the respective data will be marked and may only be processed by us for certain purposes.

f) Right to data portability: Under certain circumstances, you may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you may have the right to transmit those data to another entity without hindrance from us.

g) Right to object: Under certain circumstances, you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data by us and we can be required to no longer process your personal data.

Moreover, if your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your personal data will no longer be processed for such purposes by us.