Preface
In order to be able to execute Orly Pharma’s obligations as a wholesaler in medicines, Orly needs personal information from you, such as your name, the pharmacy or the hospital where you work and the address and financial details of it in the event that you purchase a product or products with us or that you supply products to us. These data are processed by us, collected, used and stored. We do this in accordance with the law, the General Data Protection Regulation (GDPR) and any further applicable legislation. How this works, we explain below.
Why do we collect data?
We process your personal data in order to be able to execute and administer your employees’ rights as well as possible. To be able to process personal data there must be a basis.
The bases for processing your personal data are:
• your permission to do so, which we ask you if you make a request for information or a request to contact you, or place an order in our webshop;
• the execution and settlement of an agreement when you purchase a product or products from us or supply products to us.
In addition, your personal data may occasionally be processed on the grounds of a legitimate interest, for example when this is necessary for the execution of the day-to-day operations of Orly Pharma, or the execution / fulfillment of specific obligations / agreements.
From whom and how do we receive and process the data?
We process the personal data of the following persons:
• the contacts of customers and suppliers of Orly Pharma;
• the Orly Pharma employees.
Which data do we collect?
We only process personal data relevant to our normal business processes.
We process at least the following personal data:
– name;
– email address;
– company details of the pharmacy or hospital where you work;
– financial information from the pharmacy or hospital where you work, if necessary for ordering or delivering products.
What rights do you have with regard to the data we have about you?
By law you have rights that you can use against organizations that process your personal data.
This concerns the:
– right to access the data;
– right to rectification (adjustment);
– the right to delete data (also known as the ‘right to be forgotten’);
– right to restriction of processing;
– right of transferrability
– right of objection.
For example, if you want to know which of your personal data we have in our administration, you can appeal to the right of access.
If you are of the opinion that we have not correctly recorded certain personal details of you, or that personal or company data must be modified or added, you can appeal to the right of rectification.
When we process your personal data on the basis of your consent, you can always revoke this consent. You do this in the same way as you have granted permission. Then we stop the data processing as quickly as possible.
You can appeal to these rights. If you want to use your rights, please contact us. Submit your appeal to one of your rights always in writing or by email. You will always receive a message from us.
To whom do we provide your data?
If legally necessary, your personal data will be provided to various recipients. To whom , and which personal information is provided depends on the situation and the respective legal obligation. This may concern:
– Authorities such as the Dutch health inspection, Inspectie Gezondheidszorg en Jeugd (IGJ), and the Dutch Data Protection Authority (AP);
– Tax authorities.
How do we protect your data?
Your personal data must be properly secured. To Orly Pharma this is a very important topic. We therefore take technical and organizational measures to protect your personal data. For example, measures against (cyber) crime, destruction, loss or other unlawful processing. The measures taken meet at least the general requirements that are set for information security. We periodically evaluate the measures taken and adjust them if necessary. Furthermore, we have made agreements both internally and with external parties about the confidentiality and security of your personal data.
Processing outside the European Union
Only in exceptional cases can your personal data be processed by an organization in a country outside the European Union. In that case, appropriate additional measures will be taken at all times that comply with the European standards for securing personal data on the basis of the GDPR.
How long do we keep the personal data?
We process your personal data with the aim of executing and administering your request for information, product order(s) or -deliveries as well as possible. As long as we need your personal data for this purpose, we keep your personal data.
In addition, we adhere to the statutory retention periods. If we no longer need your personal data for the purpose for which your data was collected and no statutory retention period applies, we will stop processing your personal data and will delete the collected personal data.
Cookies
This website uses cookies. There are different types of cookies. Functional cookies are necessary cookies for the Orly Pharma website to work properly. We always place these cookies, they have no impact on your privacy. Orly Pharma does not use analyzing cookies.
Complaint
If you have a complaint about the processing of your personal data, you can contact us. Orly Pharma has established a complaint procedure that guarantees correct handling of your complaint. After having gone through the internal complaints procedure, you can submit a complaint to the Dutch Data Protection Authority if you do not agree with our response.
Questions
If, after having read this privacy statement, you still have questions or comments about how we handle your data, or you would like to excercise one of the above rights, please contact us.
Amendments
Orly Pharma reserves the right to change this privacy statement. We encourage you to read the privacy statement regularly. The last update of the privacy statement took place on 22-05-2018.
