The collection and use of personal data, where LEO Pharma records your personal data on our website for certain commercial purposes is described in this privacy notice.
Personal data submitted on our website will be kept confidential and will only be used for the purposes specified in this Privacy Notice or as otherwise set out in the services on the Web-site.
This privacy notice ensures compliance with articles 12-14 of Regulation (EU) 2016/679 (General Data Protection Regulation).
We are the data controller - how do you contact us?
LEO Pharma A/S is the data controller for processing of the personal data we have received about you or that you have provided to us. You will find our contact information below.
LEO Pharma A/S
Industriparken 55, DK-2750 Ballerup, Denmark
Tel +45 4494 5888
CVR No. 56759514
Mail: leo.corporate@leo-pharma.com
Contact information on the Data Protection Officer
If you have any questions about our processing of your personal data, you are always welcome to contact our Data Protection Officer. You can contact our Data Protection Officer in the following ways:
- By e-mail: dpo@leo-pharma.com
- On the phone: +45 4494 5888
- By letter: LEO Pharma A/S, Industriparken 55, 2750 Denmark, c/o Data Protection Officer
Information we may collect
You may browse the website without providing any personal data, however, certain features require that you provide us with additional information about you such as when signing up for our mailing list. In such cases, we may ask you to provide us with certain personal data.
In addition, our servers automatically collect certain information about visits to our website such as, but not limited to, the Internet browser you are using, the type of computer operating system you are using and the domain name or IP address from which you are linked to this website.
Purpose and legal basis for processing your personal data
We register your personal data for the following purposes:
Purpose:
- To manage your relationship with LEO Pharma
- To send you educational information about disease and therapy areas
- To send you promotional information about our products
Re 1: GDPR, art. 6(1)(f): Legitimate interests
Re 2 and 3: GDPR, art. 6(1)(a): Explicit consent
Legitimate interests:
To ensure that your personal data is updated and correct and your relationship with LEO Pharma is coherent in both parties interest.
- To offer you to receive educational information about disease and therapy areas and promotional information about our products.
- To administer the website and our business including statistical analysis to understand who uses the website and how and to better understand needs and interests of visitors and users in order to improve the Website
- To contact you via email if you have requested this
- To comply with applicable laws, regulations or codes of practice
- Other LEO Pharma entities, which means other LEO Pharma subsidiaries.
- Data processors, who LEO Pharma partner with to handle data on our behalf.
To prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online.
The employees who have access to personal data have been trained to handle such data properly and in accordance with our security protocols and strict standards of confidentiality. Although we cannot guarantee against any loss, misuse, unauthorized disclosure, alteration or destruction of data, we take appropriate measures to try to prevent such unfortunate occurrences. You understand that your personal data will be made accessible:
- To third parties providing technical support (e.g., hosting services)
- To third party service providers assisting us (e.g. on sending communications to you)
- To any governmental, administrative, judicial or regulatory authority to co-operate in proceedings, inquiries and investigations by such authorities or to comply with any legal or regulatory requirements.
Your personal data is primarily stored within the European Economic Area (“EEA”).
However, we may share your personal data to LEO Pharma affiliates located outside the EEA.
An overview of all LEO Pharma entities is available at www.leo-pharma.com. Where your personal data is transferred outside EEA, a data transfer agreement has been put in place. By contacting the Data Protection Officer, you may obtain a copy of the agreement.
Retention of your personal data
For e-mails from dermxonline.org that you have signed up to, we keep your personal data for up to 2 years after our latest communication with you.
In all instances, you may at any time opt-out to receiving the services. In such instances, we will not keep your personal data after you have discontinued the services.
The right to withdraw consent
You have the right to withdraw your consent at any time. You can do this by contacting us on the contact details listed above. If you choose to withdraw your consent, it does not affect the legality of our processing of your personal data based on your prior consent and until the date of withdrawal. If you withdraw your consent, therefore, it will not be effective until this date.
Your rights
You have several rights in relation to our processing of information about you pursuant to the General Data Protection Regulation. If you want to use your rights, please contact us.
Right to see information (Access)
You are entitled to gain access into the information that we are processing about you.
Right to rectification (correction)
You have the right to have incorrect information about yourself corrected.
Right to deletion
In certain instances, you have the right to delete information about you before the time of our ordinary general deletion.
Right to limit processing
In certain instances, you have the right to limit the processing of your personal information. If you are entitled to limited processing, in future, we may only process the information - except for storage - with your consent or for the purpose of determining, enforcing or defending legal claims, or for protecting a person or important social interests.
Right to object
You may, in certain cases, have the right to object to our or legitimate processing of your personal information. You can also object to processing your information for direct marketing.
Complain to Danish supervisory authority
You are entitled to file a complaint with the Danish supervisory authority (Datatilsynet), if you are dissatisfied with the way we process your personal information. You will find Datatilsynet’s contact information at https://www.datatilsynet.dk/english/