Privacy notice for Health Care Professionals

Introduction

AbbVie SA/NV (”AbbVie” or ”we”) [privacyoffice@abbvie.com; Avenue Einstein 14, 1300 Wavre] is a Belgian biopharma company which develops and markets pharmaceutical products and delivers patient oriented solutions. AbbVie is part of a global group, focused on developing leading treatments and innovations worldwide. At AbbVie, we take great care in processing personal data in compliance with applicable laws. We only collect and use the information necessary to achieve the purposes described below. Within the meaning of applicable data protection law, AbbVie is the personal data controller.

Personal data that we collect about you and why

We may collect personal data about you from a variety of sources, including directly from you e.g., in your CVs, resumes or other documents or forms provided by you to AbbVie and indirectly e.g. from the organisation where you work, from publicly available sources, online, other databases and websites to participate in AbbVie-sponsored or supported initiatives, such as AbbVie-sponsored clinical research and development activities, or in other contexts.

AbbVie may collect and use some or all of the following categories of personal data:

personal details, such as your name, age, gender and contact details;
professional details, such as your place of practice, job title, the medical field in which you are active, your professional qualifications and scientific activities (such as previous clinical trial experience, and participation in past or pending research studies with AbbVie and other companies), publication of academic or scientific research and articles, and membership in associations and boards;
financial details, such as payment-related information, including tax identification number; and
details of interactions with us, such as what kind of meetings we have held, topics discussed, your knowledge of and questions you have had on our business and products, what kind of material we have displayed to you and any feedback that you have provided, as well as your opinions and routines on prescribing, routines regarding your patients and diagnosis, and similar information.

Your personal data will be processed by AbbVie in our customer databases for the following purposes:

managing our relationship with you, including planning, organizing and reviewing any collaboration with you, and contacting you;
helping ensure that we provide you with information that is relevant given your expertise, interests and preferences;
complying with applicable laws and regulations (e.g., in connection with pharmacovigilance).

The legal basis for this processing are our legitimate interest in maintaining and optimizing a relationship or connection with you, performance of a contract with you or involving you, compliance with a legal obligation and, where relevant, your consent. You are not required by law or by a contract to provide your personal data to AbbVie. However, in order to maintain our relationship with you, AbbVie needs to process your personal data.

Sharing your personal data

AbbVie may share your personal data with others, from time to time, in connection with the purposes described in this notice. In particular, we may make your personal data available to:

AbbVie Inc. as our parent company as a data controller and other affiliates within the AbbVie group (e.g. in the case of shared regional or global databases) and companies with whom we may partner in connection with proposed or actual AbbVie projects, such as shared research initiatives;
third party companies that supply goods or services to AbbVie such as legal counsel, auditors and IT service suppliers and depending on the types of services such third parties may either act on behalf of AbbVie as a service provider or independently as a data controller;
other third parties pursuant to a court order, to protect the interests of AbbVie, or where otherwise required by law or legal process; and
actual or prospective purchasers of AbbVie businesses in the event of a sale, merger or acquisition.

Sharing your personal data as described above may involve transferring it to countries, including countries outside of the European Union (EU) / European Economic Area (EEA), whose data protection and privacy laws may not be equivalent to, or as protective as, those that exist in your country of residence. To ensure an adequate level of data protection is provided, AbbVie has entered into the AbbVie Inter-affiliate Data Transfer Agreement with AbbVie Inc. and its affiliates, which incorporates the EU model contract for data transfers to controllers, which covers all personal data transfers between AbbVie affiliates worldwide to ensure an adequate level of protection for any transferred data. A copy of this agreement can be obtained by sending an email to privacyoffice@abbvie.com.

Where AbbVie uses service providers that have access to personal data, it requires such service providers to protect your data and to process your personal data in accordance with this data protection notice and for no other purpose. Any transfers of personal data to third parties outside the EU will be done in compliance with the international data transfer restrictions that apply under EU data protection laws, including, where appropriate, through the use of EU model contracts for data transfers to processors.

Securing and retaining your personal data

AbbVie will take appropriate technical and organisational security measures to protect your personal data consistent with applicable privacy and data security laws. When AbbVie retains a third-party service provider, that provider will be carefully selected and required to use appropriate measures to protect the confidentiality and security of personal data. AbbVie retains your personal data only for as long as we continue to have a relationship with you, unless a longer retention period is required or permitted by law.

Your rights

You may contact AbbVie to request access to personal data that we process about you and that we correct inaccurate data and complete any incomplete data. In accordance with the conditions and requirements of applicable law, you may object to our processing your personal data and request that we erase personal data about you, restrict processing of such data, and transmit your personal data to you or another data controller.

If you have declared your consent regarding certain collecting, processing and use of your personal data, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal. Please contact us as stated below to withdraw your consent.

To exercise your rights, contact AbbVie’s EU Data Protection Officer (DPO) and/or submit your privacy inquiry please go to abbvie.com/contactus.html and select “Privacy Inquiry” or via postal letter to Mainzer Straße 81, 65189 Wiesbaden, Germany (attention: EU DPO). If AbbVie will not be able to provide the requested data or fulfil your request, you will be provided with reasons for such decision. In addition, you are entitled to lodge a complaint with your local data protection authority.

If you have also consented to direct marketing but no longer want to receive any direct marketing via email, SMS/MMS, fax, and telephone, you also need to withdraw your consent as explained in the message you received or by contacting us here privacyoffice@abbvie.com.

To learn more about AbbVie’s privacy practices, please refer to our general online privacy notice here.

ZINC - AbbVie sa/nv - BEGEN180222