Information notice for patients advocate

When you are collaborating with SERVIER as representative of a patient association, patient advocate, expert, your personal data may be also processed for the performance of your agreement. In such cases, your personal data may be also processed in relation to security management when visiting SERVIER’s premises.

Your personal data may be collected and processed by SERVIER for one or more following purposes:

• Relationship management with you as patient expert/advocate/representative including interactions, contractual relationships management;
• Security of visitors and premises (in case you visit SERVIER’s premises) including access management of premises and car park as well as video surveillance system management.

Your personal data processed by SERVIER will only be accessible by a limited list of recipients on a need to know basis or where required by law. Thus, the main categories of recipients will be SERVIER’s authorized employees and departments acting within their scope of activities including but not limited to:

• Medical Affairs Department;
• Security service and the General Services Department for issues related to the use and the security of the premises (premises and car park access management);
• The Safety service for video surveillance system management;
• Information Technology Department where necessary.

SERVIER also uses third party providers and partners (e.g. hosting providers, travel agencies, hotels, air carriers etc.) who may also access to your personal data in order to provide their services. Finally, SERVIER may communicate some of your personal data to the competent relevant authorities.

Your personal data may be transferred to other SERVIER entities and to third-parties providers which may be located inside or outside the EEA, including in the countries which do not have the same level of protection of personal data as in the EEA, in particular for hosting and IT support purposes. In such cases, SERVIER ensures that such transfers are carried out in compliance with the applicable data protection laws and regulation. Data transfers to other SERVIER entities are covered by the Group’s Binding Corporate Rules submitted to the CNIL, French Data Protection Authority, for approval in December 2017 whereas transfers to third-party providers outside the EEA are secured through appropriate contractual guarantees such as the EU Commission’s Standard Contractual Clauses or an adherence to the Privacy Shield for transfers to the USA where applicable. You may request and receive copy of such documents.

Your personal data collected by SERVIER are kept in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed. More specifically,

• the images of the video surveillance system are kept for 30 days;
• the data related to security of visitors and premises are kept no longer than 3 months.

As a data subject, you have the right at any time to request from SERVIER as far as permitted by applicable laws and regulations, access to and rectification of your personal data. On legitimate grounds, you are also entitled to request a restriction of the processing of your personal data or to object to such processing.

Finally, you are entitled to lodge a complaint with the Data Protection Authority, related to SERVIER’s compliance with the applicable data protection laws and regulation.

Data protection contacts

	ROLE	NAME	CONTACT DETAILS
Data Protection Contact	to ask questions and exercise your rights	SERVIER Local DPO: protectiondesdonnees@servier.com	Name, address, e-mail address as mentioned on the documentation provided by SERVIER (ICF, information notice…)
Data Controller	responsible of the use of your personal data	L’Institut Servier	Name, address, e-mail address as mentioned on the documentation provided by SERVIER (ICF, information notice…)
Local/National Data Protection Authority	to lodge a complaint	Commission Nationale de l’Informatique et des Libertés (CNIL)	Name, address, e-mail address as mentioned on the documentation provided by SERVIER (ICF, information notice…)