Professional data, such as:

• Full name
• Professional address
• Contact details
• Medical specialty
• Name of your practice or workplace
• Medical Identification Number
• Name and job title of clinic and nursing staff
• Any other data that you choose to provide to us`

We use your professional data for the following purposes:

• Planning our interactions with you, according to our legitimate interests to promote our business interests and inform you about our products (Art. 6 (1) (f) GDPR)
• If necessary, sending information material by post in accordance with these interests (Art. 6 (1) (f) GDPR)
• Sending drug safety-relevant information (e.g. Dear Doctor Letter) in order to comply with applicable regulations (Art. 6 (1) (c) GDPR)
• If you wish to access restricted content for Healthcare Professionals, in order to ensure that you are authorized to access such content in line with applicable regulations (Art. 6 (1) (c) GDPR)

In general, we will process your professional data only for as long as you practise as an active healthcare professional and your medical specialty is of relevance for us, unless there is a legal obligation to process these data beyond that period or if we claim a legitimate interest. Under certain circumstances, you also have the right to object to the processing of your data.

Interaction information and professional interests, such as:

• Full name
• Contact details
• Medical specialty
• Name of your practice or workplace
• Date of the interaction
• Name of the products and indications that have been discussed
• General information about the patient population
• Information about giving a sample (if applicable)
• Scientific/medical/ professional fields of interests
• Membership in medical associations
• Publications (including postings and announcements in social media channels)
• Your interest in a contractual collaboration (lectures, events, medical education, consultancy)
• Information about your product/information interests or about the prescription of our products in your practice
• Documentation of the consent ("opt-in") allowing us to reach out to you by digital means
• Your activities on our websites and online presences (e.g. viewed pages, visits on our social media profiles, received newsletters, clicks on our online advertisements, emails opened, etc)
• Technical information about your device when you visit our websites, social media or similar digital channels, such as your IP address, device type, device and advertising identifiers, browser type and version, and other standard server log information
• Your interaction channels of preference
• Any other voluntary information you provide

We use interaction information and information about your professional interests for the following purposes:

• Planning our interactions with you, according to our legitimate interests to promote our business interests and inform you about our products (Art. 6 (1) (f) GDPR)
• Sending customized marketing and other communications to you, based on the creation of a profile considering your preferences and interests as communicated to us or as a result of the tracking of your behaviour across online and offline sources, if you provide your consent (Art. 6 (1) (a) GDPR) or, when applicable, based on our legitimate interests (Art. 6 (1) (f) GDPR) to provide our customers with tailored information about our products or other educational or scientific content
• Analysing the effectiveness of our different campaigns and assessing if they meet the predefined goals, evaluating the effectiveness and impact of our marketing material and analysing how to best optimize our resources and design the customer experience, if you provide your consent (Art. 6 (1) (a) GDPR) or, when applicable, in accordance to our legitimate interests (Art. 6 (1) (f) GDPR) to structure and organize our commercial and marketing efforts
• To respect our legal obligations to document HCP interactions, for example, if we provide a product sample to you and we are legally required to keep this information for a certain period of time (Art. 6 (1) (c) GDPR)
• To offer you contractual cooperation or participation in projects sponsored by us, or to invite you to events that might be of interest to you, if you have given your consent to establish communications with you by digital means when required (Art. 6 (1) (a) GDPR), or according to our legitimate interests to promote our business interests and inform you about our products (Art. 6 (1) (f) GDPR)

Information related to adverse events, medical information enquiries and product quality complaints, such as:

• Your name, profession, contact data
• The circumstances of the event/enquiry/complaint itself
• Any other data that you report about individuals that experience these events (e. g. patients), such as name or initials, age, gender, details of our products that were applied as well as other information regarding the circumstances of the event 

Information about adverse events, medical information enquiries and product quality complaints is processed for the following purposes:

• Information related to adverse events (in particular, contact data from you as a reporter), is processed in order to investigate events and follow-up with you in order to gain additional information, if needed. We prepare reports (which may be translated into other languages) based on the information you provide that are shared with health authorities, our group entities and any concerned business partners worldwide in order to analyse and investigate specific events and define required actions. The processing of these data is necessary for compliance with a legal obligation to which we are subject according to Art. 6 (1) (c) GDPR, and art. 9 (2) (i) GDPR (processing is necessary for reasons of public interest in the area of public health, on the basis of Union or Member State law). More information can be found on the link: https://www.grunenthal.com/en/footer-links/data-protection-notice
• Information related to medical enquiries is processed in order to answer the inquiry and maintain our medical information database up to date. The legal basis for the processing of your personal data is our legitimate interest to follow-up on enquiries and provide a Medical Information service in line with applicable laws (Art. 6 (1) (f) GDPR)
• Information about product quality complaints is processed in order to evaluate, classify and assess the product complaint, to follow up on your request and to maintain this information in our database. The processing of your personal data is necessary in order to comply with a legal obligation (Art. 6 (1) (c) GDPR). If data about a patient is reported, the legal basis is Art. 9 (2) (i) GDPR.

In general, information about adverse events is stored in our systems at least 10 years after the respective product has been withdrawn from the market.

Information in relation to medical enquiries or product quality complaints will be kept for 3 years, unless we are legally obliged to keep the data for a longer period or for as long as we can claim a legitimate interest

Information about contractual relationships, such as:

• Full name, (professional) address, country, workplace, VAT number or bank account details
• Contract documentation
• Fees
• Invoices, payment documentation, travel expense reports
• Employer authorizations obtained for hospital doctors
• Documentation of the services provided
• Invitations to events
• Covered event costs, travel expenses
• Documentation of participation in events
• If you participate in Market Research and similar projects, the answers you provide (although, in general, we will not be able to attribute these answers to you)
• If you are an investigator interested in participating, or who participates, in Clinical Studies where we are the sponsor, or a member of the site staff, information such as full name, telephone number, email address, professional experience including your area of specialisation and qualifications, job history, recruitment and enrolment rates, the types of trials or studies you are interested but also experienced in,  your participation and general experience in past and current trials and studies, interests -also financial- you may have, experience of staff / team, available resources, location, lab equipment, or other specific settings required for a specific clinical trial

Information about contractual relationships is processed for the following purposes:

• Generally, for pre-contractual measures and for the execution of the contract with us (Art. 6 (1) (b) GDPR).
• The data might also be processed to disclose payments according to applicable laws or codes of practice of the pharmaceutical industry, based on your consent (Art. 6 (1) (a) GDPR) or in order to comply with a legal obligation (Art. 6 (1) (c) GDPR). This depends on the country where you have your professional address 
• To document our contractual relationships with you based on our legitimate interests to demonstrate compliance with applicable anti-corruption and similar legislation and to assess any reputational, legal and financial risks that the business relationship could expose Grünenthal to (Art. 6 (1) (f) GDPR) The insights you provide in relation to your participation in (Scientific) Market Research and similar projects are processed to answer the specific project questions based on your consent (Art. 6 (1) (a) GDPR)
• Data about investigators (and members of site staff) interested in participating in Clinical Studies are processed for the purposes of assessing the potential and suitability  for participating in a trial or study according to our legitimate interests to select suitable candidates to conduct the specific trials or studies (Art. 6 (1) (f) GDPR), or with your consent (Art. 6 (1) (a) GDPR). In addition, if you effectively participate in any such studies, we are legally required to process your personal data in accordance with applicable laws (Art. 6 (1) (c) GDPR). In such case, your data might be further processed insofar as this is necessary to continue the research and development in case we cease to pursue the Study (Art. 6 (1) (f) GDPR) 

In general, the information that is strictly necessary for the execution of the contract will be processed for as long as we are required to keep it according to tax law requirements (i.e. 10 years).

Any other information will be kept for as long as our business relationship lasts, we can claim a legitimate interest, we are legally obliged to, we can claim a legitimate interest or as long as your consent remains valid (e. g. we will stop processing your personal data if you withdraw your consent).