英国正版365医药

PRIVACY NOTICE

Edited on 15 Nov 2024

Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies (“Hengrui”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. Please read this Privacy Notice carefully as it contains important information on how and why Hengrui collects and processes your personal information through your use of this website.

Hengrui is the Controller of the personal data and has committed to comply with all applicable data protection legislations, including but not limited to, the Personal Information Protection Law of People's Republic of China 2021(PIPL), the General Data Protection Regulation EU 2016/679 (GDPR), Swiss Federal Act on Data Protection (FADP) and the Data Protection (Jersey) Law 2018 (PDJL).

This Privacy Notice aims to make sure that you understand what personal information is collected about you, how your personal information is used and how it is kept safe. The terms and definitions contained in this Notice shall be read and interpreted in the light of the provisions of the applicable data protection legislations.

THE USE OF OUR WEBSITE IMPLIES YOUR FULL AND UNRESERVED ACCEPTANCE OF THIS NOTICE, AS WELL AS OUR TERMS OF SERVICE. YOU ACKNOLEWDGE HAVING READ THE INFORMATION BELOW AND AUTHORIZE HENGRUI TO PROCESS, IN ACCORDANCE WITH THIS NOTICE, YOUR PERSONAL INFORMATION THAT YOU PROVIDE ON OUR WEBSITE.

1.What personal data do we collect?

We may collect and use your personal information in a variety of contexts, including when you participate in Hengrui research, take our drugs or therapies, or visit our websites or offices. Depending on your relationship or interactions with Hengrui, Hengrui may have collected and processed any of the following categories of personal information about you:

Categories	Examples	Information recipients
Identification information	First name, last name, initials, gender, age or date of birth, government-issued identification (e.g. identity card, driver’s license, passport or tax ID number), photographs, videos, sound recordings, language, or Hengrui-issued access cards and IT credentials.	• Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies; • Hengrui service providers; • Hengrui technology and security providers; • Hengrui business partners and collaborators; • Administrative, regulatory or judiciary authorities; • Advisors; and • Other third parties.
Contact details	Postal and/or email address, or phone number	• Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies; • Hengrui service providers; • Hengrui technology and security providers; • Hengrui business partners and collaborators; • Administrative, regulatory or judiciary authorities; • Advisors; and • Other third parties.
Commercial information	Records of Hengrui’s products or services prescribed, purchased, obtained or considered, payment information (amount invoiced and/or paid, bank details, payment method, billing address), or history of our relationship	• Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies; • Hengrui service providers; • Hengrui technology and security providers; • Hengrui business partners and collaborators; • Administrative, regulatory or judiciary authorities; • Advisors; and • Other third parties.
Professional information	Job title, employment status, educational information, professional qualifications and licenses, or work experience and professional networks, affiliates, programs and activities	• Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies; • Hengrui service providers; • Hengrui technology and security providers; • Administrative, regulatory or judiciary authorities; • Advisors; and • Other third parties.
Health, biometric and genetic information	Information about your medical conditions, treatments and any adverse events you may experience while taking our drugs or therapies	• Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies; • Hengrui service providers; • Hengrui technology and security providers; • Administrative, regulatory or judiciary authorities; • Advisors; and • Other third parties.
Geolocation	Geolocation information obtained from your device’s GPS, Bluetooth, IP address, or other location services/technology	• Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies; • Hengrui service providers; • Hengrui technology and security providers; • Administrative, regulatory or judiciary authorities; • Advisors; and • Other third parties.
Information related to your exchanges with Hengrui	Date and subject of your requests or exchanges with Hengrui’s services	• Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies; • Hengrui service providers; • Hengrui technology and security providers; • Administrative, regulatory or judiciary authorities; • Advisors; and • Other third parties.
Others	Other information needed for our relationship or interactions with you or as required by laws, our service providers or collaborators, such as the information you provide in connection with contracts and queries you make to us.	• Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies; • Hengrui service providers; • Hengrui technology and security providers; • Hengrui business partners and collaborators; • Administrative, regulatory or judiciary authorities; • Advisors; and • Other third parties.

2.Why do we use your personal data?

The reason why we collected your information decides how we process it. Depending on your relationship and/or interactions with Hengrui, as well as, applicable legislations and our own procedures & requirements, Hengrui may process your personal information for the following reasons:

Purpose	Examples	Legal ground
Managing your contact requests	• To contact you • To answer your questions	Legitimate interest of Hengrui to manage its contact requests
Managing the personal and contractual relationship with you	• To develop or manage our relationship or interactions with you or your employer or affiliated organization • To comply with our contractual and payment obligations • To process your privacy and other requests or complaints	Depending on your relationship with Hengrui: • to take steps prior to entering into an agreement or • performance of the relevant agreement or • comply with legal and regulatory obligations to which Hengrui is subject
Improving the products, services and programs of Hengrui	• To determine eligibility for, facilitate supply, administration and management of, to track progress and outcomes regarding certain products, services and programs • To manage Hengrui’s research and development, collaboration and market research efforts	Legitimate interest of Hengrui to improve its products, services and programs
Sending communication that might interest you	• To send you transactional, administrative and marketing communications regarding Hengrui business and medical activities (including products, services, programs and events of Hengrui). You can opt-out of these communications by the methods described in the YOUR RIGHTS Section of this policy.	Legitimate interest of Hengrui to develop its business activities (with your consent, if required by applicable law)
Providing educational and awareness information	• To provide you educational information, including providing information about certain health conditions and disease states, our products, programs and services	Legitimate interest of Hengrui to enhance the education and awareness about health conditions and disease states
Managing Hengrui’ events or programs	• To register you • To manage the event or program depending on the participants • To send you communications about the event or program • If applicable, to record Hengrui‘s events or programs	Legitimate interest of Hengrui to develop its business activities (with your consent, if required by applicable law)
Improving the websites and their services, as well as your user experience on the websites	• To evaluate and improve the websites and their services e.g. to track the popularity of certain pages of the websites, the success of our email notifications, traffic levels on the websites and other usage data • To take steps designed to protect and enhance the security of the websites	Legitimate interest of Hengrui to improve the Sites and their services, as well as your user experience on the Sites
Pre-litigation or litigation management	• To take action against any identified breach • To manage any dispute or litigation	Legitimate interest of Hengrui in defending its rights and interests
Compliance with legal and regulatory obligations	• To comply with legal and regulatory obligations (e.g., in connection with regulatory submissions or complying with regulatory obligations relating to drug development, safety and transparency reporting, and for monitoring, investigating and enforcing compliance with our policies and legal and regulatory requirements) • To process your requests to exercise your rights	Legal and regulatory obligations to which Hengrui is subject
Other	• For other everyday business purposes such as payment processing and accounting, product development, safeguarding Hengrui property, contract management, archiving, website administration, fulfilment, analytics, fraud prevention and corporate governance, the potential sale or merger of some or all of the company, reporting and legal compliance.	Legitimate interest of Hengrui or legal and regulatory obligations to which Hengrui is subject

3.How do we collect your data?

You directly provide Hengrui with most of the data we collect. We collect data and process data when you:

• Register online or place an order for any of our products or services.
• Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
• Use or view our website via your browser’s cookies. (For more information on cookies and other data collection technologies, please read the Cookies Policy applicable to the website you are accessing.)

4.How long will we keep your personal information?

We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of meeting any legal, accounting or reporting requirements.

5.Data sharing

We may transfer your personal data to our associated entities and service providers to the extent necessary in order to achieve the purpose we collected the data for. We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not sell, trade, or rent your personal data to third parties.

Some of our associated entities and service providers may be located outside China and/or other country where Hengrui’s branch/(es) is located. In this case, your personal data may be transferred outside of those regions and Hengrui will take steps to ensure personal data is kept secure and treated in accordance with this privacy notice. In the absence of an adequacy decision, we will implement appropriate safeguards, including where relevant by entering into appropriate standard contractual clauses with the receiving party outside of China and/or other country where Hengrui’s branch(es) is located.

6.How do we protect your data?

Hengrui has in place appropriate security measures to ensure the security and integrity of your personal information and treats your personal data in a confidential manner. We limit access to your personal information to those individuals who have a business need to access it to protect your personal information from unauthorized access and disclosure.

We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.

7.Automated decision-making

You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless we have a justification for doing so and we have notified you.

8.Your rights

Under certain laws such as GDPR, PDJL, FADP, PIPL or China’s Cybersecurity Law (including thoes implementing regulations and national standards), you may have the following rights with respect to your personal information to:

Be informed	You have the right to know how your Personal Information is collected and used.
Request access	You may ask to receive a copy of your Personal Information in a commonly used format. You have the right to know whether we process Personal Information about you, and if we do so, to access certain data we hold about you and certain information about how we use it and who we share it with.
Request correction	You are entitled to ask us to rectify, by completing or correcting, all or certain information held about you which appears incomplete or inaccurate.
Request erasure	You have the right to ask us to delete or remove your Personal Information where there are no longer legitimate grounds to continue to process it.
Request restriction of processing	You have the right to ask that the use of your Personal Information is restricted, or even “frozen”, to leave you the possibility to exercise other rights. Your Personal Information shall not be used anymore but must be kept by us during this period.
Request data portability	You may ask that your Personal Information is transferred to another data controller.
Object to processing	You have the right to object to the processing where we are relying on legitimate interest as legal basis.
Withdraw consent	When you have given your consent for the processing of your Personal Information (e.g. email alerts), you can withdraw it at any time without justification as long as the processing is covered by GDPR and other applicable laws and regulations. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purposes you originally agreed to, unless we have another legitimate basis for doing so in law.

9.Exercising your rights

If you have any question or request about the Privacy Notice, the ways in which Hengrui collects and uses your personal information described above, your choices and rights regarding such processing, or wish to exercise your rights under applicable data protection laws, you may do so by contacting us as follows:

- By sending an email to data.privacy@dmexhibit.com

If we do not fulfil your request, you will be provided with the reason(s) for such decision.

10.Children Privacy

We do not knowingly collect any personal information from or about children under 16 years old through our websites. If you have reason to believe that a child under the age of 16 has provided us personal information through our website, please contact us, and we will endeavour to delete, without undue delay, that information.

11.Pharmacovigilance, Enquiries and Product Quality Complaints Privacy

Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches/subsidiaries (“Hengrui”, “we”, “us”, “our”) as the personal information processor respect your privacy and are committed to protecting your personal information. This Privacy Statement (“this Statement”) aims to inform you how Hengrui collects and processes your personal information for pharmacovigilance-related activities, medical information inquiries, and product quality complaints, based on but not limited to, the Personal Information Protection Law of People's Republic of China 2021(PIPL), the General Data Protection Regulation EU 2016/679 (GDPR), Swiss Federal Act on Data Protection (FADP) and the Data Protection (Jersey) Law 2018 (PDJL).

In the context of pharmacovigilance, Hengrui has established a pharmacovigilance system in accordance with applicable laws and regulations, to conduct post-marketing adverse drug reaction monitoring, proactively collect, track, and analyze suspected adverse drug reaction information, and promptly take risk control measures for drugs with identified risks. In order to collect and record post-marketing safety reports and pharmacovigilance information, Hengrui needs to collect the following personal information of patients and reporters to promptly and efficiently address drug risks.

• Patient：name, patient number, gender, date of birth, age (group), contact information, ethnicity, race, nationality, lifestyle, physiological indicators (height, weight), medical history (personal medical history, family medical history), medication/medical device records, allergy history, diagnosis and treatment records, laboratory and examination records, hospitalization records, surgical and anesthesia records, nursing records, reproductive information, adverse event information or description (adverse event – severity, adverse event – onset to first treatment time, adverse event – outcome, adverse event – end date, adverse event – factors contributing to resolution/improvement, adverse event – causality, patient status, mortality information), event investigation records, evaluation conclusions, control measures
• Reporter：name, gender, contact address, phone number, employer, department, occupation, position, identity, profession, email address, reporter type, relationship with the patient

Please note that the information highlighted in bold above belongs to sensitive personal information. We need this information for the purposes stated above, but it is expected that the processing of such sensitive personal information will not have a negative impact on your rights and interests.

In addition, in international drug development collaborations, in order to promptly exchange and transmit drug safety data collected within China with relevant drug development partners, promoting international collaborative drug development and continuous management of drug safety risks; and simultaneously, to comply with the applicable pharmacovigilance regulatory requirements globally and submit drug safety data collected within China to the relevant drug regulatory authorities to comply with the applicable good pharmacovigilance practices, Hengrui needs to provide your personal information to overseas entities, as detailed below:

• Name of the overseas recipient: HENGRUI SG PTE. LTD
• Contact information of the overseas recipient: +65 60503608
• Personal information provided to the overseas recipient:
- - Patient: initials, patient number, date of birth, age/age group, gender, race/ethnicity, nationality, lifestyle, height, weight, medical history, allergy history, adverse event information or description (adverse event – severity, adverse event – onset to first treatment time, adverse event – outcome, adverse event – end date, adverse event – factors contributing to resolution/improvement, adverse event – causality, patient status, mortality information), event investigation records, evaluation conclusions, control measures, diagnosis and treatment records, medication/medical device records, laboratory and examination records, hospitalization records, surgical and anesthesia records, nursing records, reproductive information
- - Reporter: first name, full name or initials, contact address, identity, profession, employer, department, occupation, position, phone number, email address, reporter type, relationship with patient
• Means of exercising rights against the overseas recipient: Directly contact the overseas recipient, or send emails to the following address: data.privacy@dmexhibit.com
• Obtaining separate consent: Your separate consent will be obtained at the time you provide information to Hengrui through our service hotline or the adverse reaction reporting mailbox.
• Means by which overseas recipients process personal information: They store, use, analyze, and further process the personal information of patients and reporters to achieve the aforementioned purposes of processing personal information overseas. Simultaneously, overseas recipients will also implement personal information security measures to safeguard the security of exported personal information.
• Retention period following the export of personal information: 10 years after the cancellation of the drug registration certificate

The overseas recipients may need to further provide the relevant personal information to other overseas recipients, which typically include: (1) overseas regulatory authorities; (2) third-party cooperating companies such as overseas licensees of drug marketing rights; (3) third-party publications; (4) third-party conference organizations; and (5) Hengrui’s overseas affiliates (please refer to the list of overseas affiliates below).

HENGRUI'S OVERSEAS AFFILIATED COMPANIES:

HENGRUI SG PTE. LTD， HONGKONG AOMEI HEALTH MANAGEMENT LIMITED， ZHANHENG INTERNATIONAL CO. LTD， LUZSANA BIOTECHNOLOGY INC， REISTONE BIOPHARMA (HK) LTD， RETROLEAD(HK) BIOPHARMA CO., LTD， HENGRUI (USA) LTD， HENGRUI THERAPEUTICS INC， REISTONE BIOPHARMA INC， RENASCENT BIOSCIENCES LLC， LUZSANA BIOTECHNOLOGY EUROPE AG， HENGRUI SPAIN THERAPEUTICS SL， HENGRUI NETHERLANDS THERAPEUTICS B.V.， HENGRUI EUROPE BIOSCIENCES AG， CADIASUN PHARMA GMBH， HENGRUI POLAND THERAPEUTICS SP. Z O.O.， ATRIDIA PTY LTD， HENGRUI MEDICAL JAPAN CORP， HR BIO HOLDINGS LIMITED， REISTONE BIOPHARMA(CAYMAN) LTD， RETROLEAD(CAYMAN)BIOPHARMA CO., LTD， CONCORDIA GLOBAL INVESTMENTS LTD

In addition to the pharmacovigilance context, if the information you provide relates to safety enquiries regarding medicinal products of Hengrui, we will record and use your name, phone number, identification information, email address, address, employer, position, and medication information for the purpose of subsequent provision of medical knowledge and medication guidance.

Hengrui will strictly follow the requirements of domestic and foreign regulators and laws and regulations to properly store and use the collected personal information, and will retain your personal information for the shortest necessary period as required by laws and regulations. We will comply with all applicable laws, regulations, and industry best practices in the cross-border transfer of personal information, and we will always comply with the strictest requirements if the rules differ from jurisdiction to jurisdiction.

We are committed to taking appropriate technical and management measures to protect your personal information from unauthorized access, or any disclosure, alteration or loss. We promise to take appropriate measures to protect your personal information, so that the processing of your sensitive personal information will not have a significant adverse impact on your personal rights and interests. We will keep your personal information for the shortest necessary period in accordance with the requirements of laws and regulations.

You have the right to be informed and the rights of access, copying, correction, supplementation, deletion, withdrawal of consent, and restriction of processing regarding your personal safety information. You can contact us to request access, copy, correction, supplementation, or deletion of your personal information held by us, or to withdraw your consent to the processing of certain types of personal information. If the request results in Hengrui or its related companies violating its obligations under applicable laws, regulations, or codes of conduct, your request may not be fully satisfied, however, you can still request us to prohibit further use of your personal information. Hengrui has appointed a data protection officer to oversee Hengrui's compliance with relevant laws and regulations on personal information protection, and if you have any questions regarding Hengrui's collection and processing of your personal information and your personal rights and interests, you can send an email to data.privacy@dmexhibit.com to seek support from Hengrui's data protection officer.

12.Third party website and hyperlinks

This website may provide links to other websites as a service to our website’s visitors. These are websites we believe may have helpful information. However, Hengrui does not endorse and is not responsible for the content and the privacy notices of third-party websites. Similarly, Hengrui does not have any control over information you may choose to provide to those websites.

13.Changes to this Notice

Hengrui reserves the right to modify this Privacy Notices at any time. Then, we ask you to check this Notice regularly to ensure you are aware of the most recent version. We will notify you if we make any material changes to this Notice, which we may do by posting a message on our websites.

14.Contacts

Jiangsu Hengrui Pharmaceuticals Co., Ltd., No. 7 Kunlunshan Road, Economic and Technological Development Zone, Lianyungang, Jiangsu, China

You may contact us at any time if you have questions or concerns about this Privacy Notice or our practices. Please send an email to data.privacy@dmexhibit.com.