Thank you for visiting a Roche Web site or interacting with us.
At Roche, we understand that protecting your privacy is very important and that information about your health is particularly sensitive. That’s why we have taken the necessary steps to meet worldwide data privacy requirements. We treat your “personal information” (any identifiable information about you, including health information) according to our Roche Global Privacy Notice, and to the laws of the EU, Switzerland and other applicable local laws which regulate the storage, process, access and transfer of personal data.
Roche is committed to collecting, maintaining, and securing your personal information in accordance with this policy, as well as applicable laws, rules and regulations. This policy applies to all personal information Roche collects about you.
We only collect personal information about you if you choose to give it to us. Please review this policy to learn more about how we collect, use, share and protect your personal information.
Unless explicitly stated otherwise, this policy also applies to F. Hoffmann-La Roche Ltd or F. Hoffmann-La Roche Ltd websites.
Use of Data
Data Sharing and Transfer
Links to Other Sites
Access and Correction
Additional Information on Web Sites
Note to Users of Business or Professional Web Sites
Updates to Privacy Statement
How to Contact Roche
There are two general methods that Roche uses to collect your personal information:
Roche will collect your personal information directly from you. However, Roche may also collect personal information from other sources including:
- agents and service providers (such as customer relationship management service providers and third party service providers); and
- publicly available sources including directories, listings and the internet.
The types of personal information we may collect will vary depending on your interaction with Roche. However, Roche will only collect information that is necessary for Roche to track and manage its interaction with you or for the purposes set out in this policy. The information may include:
- your contact details and other information collected when you register with Roche;
- any messages or comments you submit to us through email; or
- any other information you provide to Roche during your interaction with Roche.
When you visit our Web site, we may collect your personal information (such as name, address, telephone number, e-mail address or other identifying information) only when you choose to submit it to us. We may also collect your health information when you submit your response to our questions or surveys.
Aggregate information: In some cases we may remove personal identifiers from your personal information you provide to us and maintain it in an aggregate form. We may combine this information with other information that we hold to produce anonymous, aggregated statistical information (e.g. number of visitors, originating domain name of the Internet Service Provider), which is helpful to us in improving our products and services. Once your personal information is anonymised, it may no longer be capable of identifying, or being re-linked, to you.
Automatically Collected Information
We automatically receive certain types of information whenever you interact with us on our Web sites and in some e-mails we may send each other. Automatic technologies we use may include, for example, Web server logs/IP addresses, cookies and Web beacons.
Web Server Logs/IP Addresses
An IP address is a number assigned to your computer whenever you access the Internet. All computer identification on the Internet is conducted with IP addresses, which allow computers and servers to recognize and communicate with each other. Roche collects IP addresses to conduct system administration and report aggregate information to Roche’s affiliates, subsidiaries, business partners and/or vendors to conduct site analysis and Web site performance review.
On certain Web pages or e-mails, Roche may utilize a common Internet technology called a "Web beacon" (also known as an "action tag" or "clear GIF technology"). Web beacons help analyse the effectiveness of Web sites by measuring, for example, the number of visitors to a site or how many visitors clicked on key elements of a site.
Web beacons, cookies and other tracking technologies do not automatically obtain personal information about you. Only if you voluntarily submit personal information to Roche, such as by registering or sending e-mails, can these automatic tracking technologies be used to provide further information to Roche about your use of the Web sites and/or interactive e-mails to improve their usefulness to you.
You have several choices when providing your personal information to Roche. You may decide not to submit any personal information at all by not entering it into any forms or data fields on our Web sites and not using any available personalized services. Certain Web sites or online tools may ask for your permission for certain uses of your personal information and you can agree to or decline those uses. If you choose not to provide your personal information or provide incomplete or inaccurate information, then Roche may not be able to provide you with information and/or access to services that may be of use or interest to you.
As described above, if you wish to prevent cookies from tracking you anonymously as you navigate our Web sites, you can reset your browser to refuse all cookies or to indicate when a cookie is being sent.
By choosing to provide or submit your personal information to us, you consent to the terms of this policy.
Roche uses technology and security precautions, rules and other procedures to protect your personal information from unauthorized access, improper use, disclosure, loss or destruction. To ensure the confidentiality of your personal information, Roche also uses industry standard firewalls and password protection. It is, however, your personal responsibility to ensure that the computer you are using is adequately secured and protected against malicious software, such as trojans, computer viruses and worm programs. You are aware of the fact that without adequate security measures (e.g. secure web browser configuration, up-to-date antivirus software, personal firewall software, no usage of software from dubious sources) there is a risk that your personal information and the passwords you use to protect your personal information, could be disclosed to unauthorized third parties.
Some of your personal information collected may be stored or processed at computers located in other jurisdictions, such as the United States, whose data protection laws may differ from New Zealand’s. In such cases, we will ensure that appropriate protections are in place to require the data processor in that country to maintain protections that are equivalent to the security requirements that apply in New Zealand.
Roche may collect, use and disclose to third parties (located in both New Zealand and overseas) your personal information to perform our business activities and functions, and to provide the best possible quality of customer service to you, including:
- to contact you and send you electronic communications in relation to Roche’s products and services that you may be interested in;
- to administer educational meetings or programs;
- to update you on medical congress, events and news;
- to conduct relevant market research;
- to fulfil our regulatory and legal obligations;
- to maintain your contact details in our records;
- to monitor the safety and efficacy of our products;
- to fulfil your requests;
- for purposes in connection with the sale, assignment or transfer of the business or the Web site to which the personal information relates;
- to respond to appropriate requests of legitimate government agencies; and
- where needed for corporate audits or to investigate or respond to a complaint or security threat.
Your personal information, will be used by Roche to better understand your needs and how we can improve our products and services. It helps us also to personalize certain communications with you about our services and promotions that you might find interesting. For example, we may analyse the gender or age of visitors to Web sites about a particular medication or disease state, and we may use that analysis of aggregate data internally or share it with authorised third parties.
Some of the circumstances in which we may use and disclose your personal information include:
- where Roche has notified you about the disclosure at the time of supply or where it is permitted under any agreement (written or oral) with you;
- where it is necessary to provide you with a service or good which you have requested;
- where required for the ordinary operation of our business, such as for conference organising, marketing, data processing, medical research and associated printing and mailing. We will only provide your personal information to reputable third parties and then only on a confidential basis where we are satisfied on reasonable grounds that those third parties will protect your personal information in compliance with New Zealand privacy laws and the Roche Global Privacy Notice. These activities may involve the export of your personal information overseas;
- where it is necessary for support services to be provided in relation to our business activities (our service providers will be required to comply with the same security standards that have been adopted by Roche);
- undertaking adverse event reporting and other pharmacovigilance activities in accordance with our regulatory obligations. Adverse event reports and pharmacovigilance related information will be made to Medsafe and other relevant authorities. This is an important part of our responsibility to detect, assess, understand and prevent adverse events and other medicine-related problems;
- to companies related to Roche for the same kinds of purposes as listed in this policy;
- to another company for the purpose of ensuring continuity of product supply and/or service if the supply of the product or service has been transferred to that company; and
- where we consider the law requires it, or in response to any court order or demand by law enforcement authorities.
We will hold your personal information for as long as it is required for the purposes for which the information was provided to Roche.
Roche may share your personal information with our affiliates, subsidiaries, divisions and groups worldwide and will use your personal information to comply with your requests and to perform the purposes in this policy. We will retain control of and responsibility for the use of your personal information by our affiliates, subsidiaries, divisions and groups.
No Third-Party Direct Marketing Use. We will not sell or otherwise transfer your personal information to any third parties for their own direct marketing use unless we provide clear notice to you and obtain your explicit consent for your personal information to be shared in this manner.
E-mail a Friend or Colleague. On some Roche Web sites, you can choose to send a link or a message to a friend or colleague referring them to a Roche Web site. E-mail addresses you may provide for a friend will be used to send your friend information on your behalf and will not be collected or used by Roche or other third parties for additional purposes. Please only provide your friend’s email address if you have your friend’s consent to do so.
To request access to or correction of your personal information held by Roche or its affiliates or subsidiaries, please contact Roche’s Privacy Officer at [email protected].
Your request should detail your name, contact details, your former name or alias, if any, and the personal information you believe Roche may hold about you. You do not have to provide a reason for requesting access. Where Roche holds information that you are entitled to access, we will endeavour to provide you with a suitable range of choices as to how you may access it (e.g. emailing or mailing it to you by post). In any event, Roche will acknowledge receipt of your request within a reasonable period of time and a response to your request within 20 working days after the day on which Roche receives the request.
If you believe that your personal information that Roche holds is incorrect, incomplete or inaccurate, then you may request that we amend it. We will consider if your personal information requires amendment. If Roche does not agree that there are grounds for amendment, then we will add a note to the relevant personal information stating that you disagree with it and the correction you sought.
In the unlikely event that Roche suffers a data breach (such as unauthorised access to your personal information), Roche may be required by privacy laws to notify you and the New Zealand Privacy Commissioner about the data breach. Notifications are required if the breach constitutes a “notifiable privacy breach”. This will depend on the nature of the breach and its impact. Generally, a “notifiable privacy breach” is a breach that is likely to result in serious harm to the affected individual.
If a Web site has particular provisions relating to privacy that differ from those stated here, those provisions will be disclosed to you on the page on which personal information is collected.
If you opt-in to receive particular services or electronic communications from Roche, such as an e-newsletter, you will be able to unsubscribe at any time by following the instructions included in each communication. If you decide to unsubscribe from a service or communication and your personal information was not given to us for any other purpose other than to receive the particular service or communication that you now wish to unsubscribe from, then we will work to remove your personal information promptly, although we may require additional information from you before we can process your request.
If you have a business or professional relationship with Roche, we may use information you submit on our Web sites, including sites intended specifically for business and professional users to fulfil your requests and develop our business relationship with you and the entities you represent. We may also share such information with third parties acting on our behalf.
From time to time, Roche may revise this policy. Any changes to this policy will be promptly communicated on this Web site. Continued use of our Web sites after notification of the amended policy indicates your consent to the collection, use and disclosure of your personal information in accordance with the amended policy. The effective date of this policy is 1 December 2020.
Any questions about this policy, or any complaint regarding the treatment of your privacy by Roche, please contact Roche’s Privacy Officer at [email protected].
If you believe your privacy has been breached or is not satisfied with how your concerns have been handled by us, you can also contact the Privacy Commissioner.