Data Protection Information
This data protection information is also available in German.
1. Subject of this data protection information
We are pleased about your interest in our internet presence and our offers on these web pages. The protection of your personal data (hereinafter referred to as “data”) is of great and very important concern to us. In the following we would therefore like to inform you in detail about which data is collected during your visit to our website and the use of our offers there and how this data is processed by us. Furthermore, we would like to inform you about the rights you are entitled to and the technical and organisational protective measures we have taken with regard to the processing of your data.
2. Name and address of the data controller and service provider
The responsible person with regards to GDPR and at the same time service provider within the meaning of the General Data Protection Regulation (“GDPR”) is Daiichi Sankyo Europe GmbH (hereinafter also referred to briefly as “Daiichi Sankyo” or “we”), Zielstattstrasse 48, 81379 Munich, Germany.
If you have any questions or comments about this data protection information or data protection in general, please send them to the following e-mail address: ue.oyknas-ihciiad@noitcetorP-ataD
You can contact Daiichi Sankyo’s data protection officer as follows:
Daiichi Sankyo Europe GmbH
Data Protection Officer
Zielstattstrasse 48, 81379 Munich, Germany
3. Collection and use of your data
The extent, type and use of your data will differ depending on whether you visit our website only to access information, or use services offered by us or log into a protected area for health care professionals (HCP):
a. Informational use
For the informational use of our website it is generally not necessary for you to provide personal data.
Rather, in this case we collect and use only those of your data that your Internet browser automatically transmits to us. These are in particular the following:
- date and time of access to one of our Internet pages
- your browser type
- the last page you visited
- the transferred data volume and the access status (file transferred, file not found, etc.) as well as
- your IP address.
The data is stored in log files on the server generally up to 14 days for security purposes unless, in individual cases, a longer storage period is necessary, e.g., for investigating security incidents. Except for the IP address, we only process this data in non-personal form during an informational visit. This is done in order to enable you to access and use the website and to be able to check whether our websites are optimally displayed to you. The processing is carried out on basis of our legitimate interests in order to be able to display our website to you reliably and as trouble-free as possible. The data arising during the informational use including your IP address are stored in order to ensure the operation of the website and to be able to react to problems. A personal evaluation of the data does not take place. Only statistical evaluations of the use of the website are made, as described further below in this data protection notice.
b. Use of the contact form
If you would like to contact us via our contact form, we collect the following data from you:
- Title *
- First name *
- Surname *
- e-mail address *
- business concern
- street address
- town
- ZIP CODE
- nation
- phone
- telefax
- Subject *
- Question/ concern *
- Department *
- Attachments/Files
c. Use of the subscription form
If you would like to contact us via our contact form, we collect the following data from you:
- e-mail address *
Mandatory Information
We use this data to forward your inquiry to the department responsible at our company and to be able to answer it by e-mail or, if necessary, by telephone or post. In addition, we can use your details to personalize our response and provide you with specific information for your business.
We process the captcha request to verify that it is a real request and not a “login robot” or automated spam requests. Your entry there will only be used for this check and will not be stored.
If your inquiry relates to an existing contractual relationship with you or if you are interested in concluding a contract, e.g. with regard to a consultant activity, the data processing is carried out on the basis of the necessity of the processing the data for performing a contract.
Otherwise, the data will be processed on the legal basis of our legitimate interests to be able to answer your inquiry with the information relevant to you by our internal department. The data processing of the captcha query is in our interest in order to prevent automated logins via logon robots or spam requests. We store the data collected via the contact form for processing and answering the respective inquiry.
d. Data processing of reports of adverse reactions
As a pharmaceutical company Daiichi Sankyo and its affiliated companies must adhere to local statutory obligations to monitor the safety of all their pharmaceutical products on the market. The monitoring and assessment of potential adverse reactions in relation to the use of our products is called pharmacovigilance. In this context we may collect and further process Personal Data of the individuals who suffered the suspected adverse reaction (“Patients”) as well as the treating physician of the Patient or any other HCPs, or third parties, e.g., a family members of the Patient, who report the adverse reaction event to us (altogether referred to as “Reporting Persons”).
If you, as a Reporting Person, report adverse reactions directly to Daiichi Sanko Europe GmbH – which is possible, e.g., via phone or email, please see for details here – we will collect and further process Personal Data about the Patient and the Reporting Person, in particular, the following data categories:
- Patient: initials of the first and last name of the patient, date of birth, gender, height, weight, information on the suspected medication (including information on the brand name of the drug, daily dose, dose form, the duration of the therapy, interacting drugs), the course of the adverse reaction (including the duration, the severeness and the outcome of the adverse reaction), concomitant medication, relevant concomitant diseases and medical history (including information on previous and current pregnancies);
- Reporting Person: profession, name, address and contact information (including telephone / fax number and email address).
If you, as a Reporting Person, report adverse reactions, e.g. by email or phone, to one of our national subsidiaries in Europe – you can find a full list of our subsidiaries here – (“Daiichi Sankyo Subsidiaries”), the above data of the Patient and the Reporting Person will be collected and further processed by the respective Daiichi Sankyo Subsidiary to which you report to and which will act as separate and individual controller. Please refer to the respective data protection notice of the relevant Daiichi Sankyo Subsidiary to obtain further information on how they collect and process your Personal Data in this regard. The Daiichi Sankyo Subsidiary will submit a report about adverse reaction in pseudonymized form to us. This means that we do not receive any Personal Data, such as names or contact details, that could be used to directly identify the Patient or the Reporting Person without the use of additional information. The additional information which would allow us such re-identification is stored securely by the Daiichi Sankyo Subsidiary without us having access to it.
The pharmacovigilance department at Daiichi Sankyo Europe GmbH will medically assess and evaluate the information on the potential adverse events obtained to identify the necessary next steps to ensure compliance with applicable pharmacovigilance rules and company procedures, e.g., where necessary, notifying the adverse event to the competent drug safety authorities and relevant institutions.
In both cases, i.e. where you report the adverse reaction directly to us (Daiichi Sankyo Europe GmbH) or to a Daiichi Sankyo Subsidiary which submits the report to us (as described above), we will forward and store the report with the adverse reaction in pseudonymized form for internal documentation purposes in our global Daiichi Sankyo Safety Database which is operated by Daiichi Sankyo Co. Ltd. (“DSJ”) and hosted on servers in the USA. As a rule, the pseudonymized reports will be stored in the Daiichi Sankyo Safety Database for a period of at least 10 years after the expiration of the marketing authorization for the product to which the adverse reaction report relates.
Daiichi Sankyo Europe GmbH, the Daiichi Sankyo Subsidiaries and DSJ process the Reporting Person’s and Patient’s Personal Data exclusively for processing to the extent necessary to fulfill their legal obligations, for reasons of public interests in the area of public health, in particular to ensure high standards of quality and safety in healthcare and medicinal products, and to safeguard their legitimate interests (ensuring compliance with legal pharmacovigilance requirements and asserting, exercising and defending our legal claims). This includes the processing of data for the internal documentation, review and support of the adverse reaction case, including the review of any claims.
e. Data processing in case of medical enquiries
If you contact Daiichi Sankyo to enquire about product information in the medical field, Daiichi Sankyo stores the personal data which you provided at the time of contact. To ensure we are dealing with an HCP, this data includes your name, professional details and contact data as well as the date and time of this contact. The purpose of this storage is to be able to respond to your medical enquiry.
You will find the name and contact data for Daiichi Sankyo Subsidiaries as well as contact data for their respective Data Protection Officers in the respective data protection notice of the contacted Daiichi Sankyo Subsidiary. You can find a full list of Daiichi Sankyo Subsidiaries here.
The legal basis for such data processing is our legitimate interests in operating our business, in particular in ensuring the effective and lawful processing of medical inquiries in line with regulatory standards and to improve our products and services. The data is deleted when the specific enquiry is no longer relevant from any conceivable perspective. In general, this will occur 10 years after the expiration of the marketing authorisation for the medicine to which the enquiry relates or earlier, should you request deletion
4. Involvement of service providers and transfer of data to third parties
Your data will be passed on to technical service providers supporting us (e.g. website hosting and support) for the provision of this website and for the aforementioned purposes, which we have of course carefully selected and commissioned in writing.
These service providers are bound by our instructions and are regularly checked by us.
Otherwise, your data will only be passed on to other third parties if expressly stated in this data protection declaration or if we are legally obliged to do so.
5. International transfers of Personal Data
Some of the service providers we share your data with are located outside the EU or the UK. Further, as described above under section 3.d., we share certain data in the context of pharmacovigilance with DSJ which is located in Japan and hosting the data in the Daiichi Sankyo Safety Database in the USA. For data transfers to Japan we rely on the EU adequacy decision for Japan. With regard to the data transfers to recipients in third countries which do not benefit from an adequacy decision, we have implemented appropriate safeguards in the form of the execution of the EU Standard Contractual Clauses, as approved in the UK, and where necessary, supplementary measures, with each recipient to ensure an adequate level of data protection as required by applicable data protection laws.
6. Your rights
You have the right to request confirmation from us whether personal data relating to you is processed; if this is the case, you have a right of access to this personal data and the information specified in Art. 15 GDPR.
You have the right to request us to correct any incorrect personal data concerning you and, if necessary, to complete incomplete personal data without delay (Art. 16 GDPR).
You have the right to request us to delete personal data relating to you immediately if one of the reasons listed in Art. 17 GDPR applies in detail, e.g. if the data is no longer required for the purposes pursued (right of deletion).
You have the right to request us to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have filed an objection to the processing, for the duration of our examination.
You have the right to object at any time for reasons arising from your particular situation to the processing of personal data concerning you, which is carried out on the basis of Art. 6 para. 1 sentence 1 e) or f) GDPR. We will then no longer process the personal data unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR).
You have the right to revoke your consent to us at any time with effect for the future (right of revocation).
You have the right to receive from us the data concerning you that you have provided to us in a structured, common and machine-readable format. You can also transfer this data to other locations or have it transferred by us (right to data transferability).
Please contact us to exercise your rights: ue.oyknas-ihciiad@noitcetorP-ataD.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR (Art. 77 GDPR). In Bavaria, the competent supervisory authority is: Bavarian State Office for Data Protection Supervision, P.O. Box 606, 91511 Ansbach, www.lda.bayern.de.
7. Data security
We also use technical and organizational security measures to protect personal data that is collected, in particular against accidental or intentional manipulation, loss, destruction or against the attack of unauthorized persons. Our security measures are continuously improved in line with technological developments.
When using our website, your personal data is encrypted using SSL/TLS technology to prevent access by unauthorized third parties.
