PRIVACY NOTICE
In this Privacy Notice "AstraZeneca" refers to AstraZeneca Pharmaceuticals LP and AstraZeneca LP, and "Amgen" refers to Amgen Inc., and Amgen USA Inc. For the purpose of this Privacy Notice, "We", "Us" or "Our" refers to AstraZeneca and Amgen.
AstraZeneca and Amgen take the privacy and security of your personal information very seriously. This Privacy Notice outlines the categories of personal information We may collect about you and how We may use it.
We may change this Privacy Notice from time to time. We will notify you of any changes where We are required to do so.
This Privacy Notice applies to the online or digital activities (the "Site") and digital services ("Services") in which it is posted or linked.
Note that this website is directed towards users who reside in the United States of America (USA). It is not our intent to gather personal information from individuals residing out of the United States of America.
What Information Do We Collect and How Do We Use It?
If you register to use this website, or complete an online form, or send Us an email (eg, to obtain email updates or ask Us to send you further information and/or to send you invitations to participate in scientific meetings, promotional events, cooperation opportunities and surveys), then We may collect and use personal information about you such as:
- Identifiers – such as your name, postal address, email address, country of residence, address, telephone number or other similar identifiers
- Professional or Employment-Related Information – such as your occupation (eg, if you are a Healthcare Professional seeking information about our products)
- Health Insurance Information – including your insurance policy number or subscriber identification number, any unique identifier used by a health insurer to identify you, or any information in your application and claims history
- Financial information – including your bank account number, credit or debit card number, or other financial information
- Medical Information – including any information in possession of or derived from a healthcare provider, healthcare service plan, pharmaceutical company, or contractor regarding your medical history, mental or physical condition, or treatment
- Commercial Information – including records of personal property, products or services you purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
- Internet or other Network Activity Data – technical information about your device, such as your IP address, device type, device and advertising identifiers, browser type and version, and other standard server log information
- Geolocation Data – your precise geolocation data, with your permission, when you visit or interact with our Site or Services
- Electronic and Sensory Data – audio, electronic, visual or similar information (eg, a recording of a customer service call)
- Inferences – drawn from any of the information listed above to create a profile about your preferences, characteristics, psychological trends, preferences, predispositions, behavior, attitudes, intelligence, abilities, and (eg, predictions about your preferences or tendencies)
- Other – other personal information you choose to provide with Us
Such information will be provided by you and may be supplemented by Us from publicly available information, social media platforms, and other third parties. It is used by Us to administer the website, register you for any services you have signed up to and respond to any queries or requests for information you may have.
As described above, we may occasionally obtain sensitive personal information about you, eg, if you voluntarily provide your Medical Information, as part of a request for information. In this case, We use such information only to respond to your inquiry and if applicable to provide you additional guidance (eg, to inform you of your right to submit an adverse event report). By providing Us with your sensitive personal information, you consent to Us processing these data for the purposes set out in this Privacy Notice or any collection notice provided to you.
Cookies and Do-Not-Track Signals
We may also collect information about how you use the website using cookies (and other similar technologies), as part of improving the content and functionality of the website. For more information about the use of cookies please see the cookie notice on the webpage. AstraZeneca and Amgen do not respond to Do-Not-Track Signals.
Aggregate Information
We use aggregate information, which does not identify individuals, to monitor customer traffic patterns to the website and particular pages, as well as site usage, in order to help us improve the design and layout of the content.
Who Will Have Access to Your Personal Information?
Your personal information may be transferred to other AstraZeneca group companies and Amgen affiliates. We may also share categories of your personal information listed above with certain service providers or third parties such as: IT providers for the purposes of system development and technical support; auditors and consultants to verify our compliance with external and internal requirements; statutory bodies, law enforcement agencies and litigants, as per a legal reporting requirement or claim; and a successor or business partner to AstraZeneca or Amgen or to an AstraZeneca group company or Amgen affiliate in the event that it sells, divests or sets up a collaboration/joint venture for all or part of its business.
How do We Store Your Information
AstraZeneca and Amgen will store your personal information in accordance with applicable law.
International Transfer
AstraZeneca entities, and Amgen entities and third parties may be based anywhere in the world, which could include countries that may not offer the same legal protections for personal information as your country of residence.
Irrespective of which country your personal information is transferred to, We would only share your personal data under a strict "need to know" basis and under appropriate contractual restrictions (such as AstraZeneca's Binding Corporate Rules/Amgen's Binding Corporate Rules and EU Standard Contract Clauses). You may request a copy of AstraZeneca's Binding Corporate Rules and/or AstraZeneca's EU Standard Contract Clauses by contacting AstraZeneca at Privacy.US@astrazeneca.com.
AstraZeneca's and Amgen's BCRs and any rights arising under them do not apply to personal data originating in the USA.
Our Children's Policy
The Services are not intended for use by children. If you are under the age of majority in your place of residence, you may use the Service only with the consent or under the supervision of your parent or legal guardian. Consistent with the requirements of the Children's Online Privacy Protection Act (COPPA), if we learn that a child under the age of 13 has provided personal information to or through the Services without first receiving his or her parent's verified consent, we will use that information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use the Services.
How We Protect Your Information
We have in place appropriate privacy and security policies which are intended to ensure, as far as reasonably possible, the security and integrity of all Our information, including your personal information.
What are Your Rights
You may contact Us at www.astrazenecapersonaldataretention.com at any time to request information on how We process your personal information, access to the personal information We hold about you, to correct any mistakes or to request deletion of the same or withdraw your consent to certain types of processing of your personal information. If such a request places Us in breach of Our obligations under applicable laws, regulations or codes of practice, then We may not be able to comply with your request, but you may still be able to request that We block (ie, right to object) the use of your personal information for further processing. Subject to applicable law, you can exercise these rights for free.
You may contact at Privacy.US@astrazeneca.com in case of any questions or concerns regarding the processing of your personal information.
Opting Out of Further Communications From Us
If you have elected to receive information about Our products or services, or those of other AstraZeneca companies and wish to opt-out of receiving such information, then you can do so by sending an email to privacyrequests@astrazeneca.com. You should clearly state on all communications: your name, username (if any), registration details (if any) and the name of the website.
AstraZeneca and Amgen’s SUPPLEMENTAL WEBSITE PRIVACY NOTICE for California, Colorado, Connecticut, Utah, and Virginia Consumers
This Supplemental Website Privacy Notice (“Supplemental Notice”) applies only to information collected about California, Colorado, Virginia, Utah, and Connecticut consumers. It provides information required under the California Consumer Privacy Act of 2018 and California Privacy Rights Act of 2020 (collectively, the “CPRA”), the Colorado Privacy Act of 2021 (the “CPA”), the Virginia Consumer Data Protection Act of 2021 (the “VCDPA”), the Utah Consumer Privacy Act of 2022 (the “UCPA”), and the Connecticut Data Privacy Act of 2022 (“CDPA”). We also provide a brief paragraph regarding information collected about Nevada consumers under the heading “Privacy Notice for Nevada Residents” at the end of this Supplemental Notice. The other portions of this Supplemental Notice do not apply to Nevada consumers.
This Supplemental Privacy Notice (“Supplemental Notice”) describes Our practices regarding the collection, use, and disclosure or Personal Information and provides instructions for submitting data subject requests. The Notice also describes Our processing of Personal Information in the United States.
In this Supplemental Notice, you’ll learn about the following:
Definitions
Sources of Personal Information
Categories of Personal Information We Process and Disclose
Purposes for Processing Personal Information
Categories of Entities with Whom We May Disclose your Personal Information
Your Rights and Choices
How to Contact Us
Updates to this Supplemental Notice
DEFINITIONS
For purposes of this supplemental notice, “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal Information includes “personal data” as that term is defined in the CPA, VCDPA, UCPA, and CDPA. Personal Information also includes “Sensitive Personal Information,” as defined below, except where otherwise noted.
“Sensitive Personal Information” means Personal Information that reveals a consumer’s social security, driver’s license, state identification card, or passport number; account log-in, financial account number, debit card number, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious beliefs, or union membership; contents of email or text messages; and genetic data. Sensitive Personal Information also includes processing of biometric information for the purpose of uniquely identifying a consumer and Personal Information collected and analyzed concerning a consumer’s health, sex life, or sexual orientation. Sensitive Personal Information also includes “sensitive data” as that term is defined in the CPA, VCDPA, UCPA, and CDPA.
“Third Party” has the meanings afforded to it in the CPRA, CPA, VCDPA, UCPA, and CDPA.
“Vendor” means a service provider, contractor, or processor as those terms are defined in the CPRA, CPA, VCDPA, UCPA, and CDPA.
To the extent other terms used in this Supplemental Notice are defined terms under the CPRA, CPA, VCDPA, UCPA, or CDPA they shall have the meanings afforded to them in those statutes, whether or not capitalized herein. As there are some variations between such definitions in each of the four statutes, the definitions applicable to you are those provided in the statute for the state in which you are a consumer. For example, if you are a Virginia consumer, terms used in this Supplemental Notice that are defined terms in the VCDPA shall have the meanings afforded to them in the VCDPA as this Supplemental Notice applies to you.
SOURCES OF PERSONAL INFORMATION
We and Our vendors collect Personal Information in a variety of ways, including:
Directly from you
From joint marketing partners
Public databases
Providers of demographic data
Publications
Professional organizations
Social media platforms
Caregivers
Vendors and Third Parties when they share the information with Us
Healthcare Providers & Insurance Companies
Automatically, such as through cookies or other technologies that provide Us with information about your use of Our online services.
CATEGORIES OF PERSONAL INFORMATION WE PROCESS AND DISCLOSE
Depending on the nature of our interactions with you in the prior 12 months, We or Our Vendors may have collected and processed the following categories of Personal Information, about you. We may disclose this Personal Information to Vendors and Third Parties.
Identifiers, such as name, alias, online identifiers, account name, address, company-generated identification number, insurance policy number
Contact information, such as email or mailing address, phone number
Mental and physical health information or conditions
Audio or visual information, such as video recordings
Financial information, such as to determine eligibility for patient assistance programs
Demographic information, such as age, date of birth, race and gender
Internet or other electronic network activity information, such as IP address, geographic location, browser type, device type, operating system, dates and times you access Our services, browsing history, and other information about your interactions with Our online services, or advertisements.
Inferences, such as notes drawn from any of the personal data listed above to create a profile or summary about, for example, an individual’s preferences and characteristics
Retention of Personal Information. We retain your Personal Information to meet Company and legal requirements on processing Personal Information as listed in the section below. We maintain a Company retention and disposal schedule describing the retention and disposal of company information assets. For AstraZeneca record retention information, visit www.astrazenecapersonaldataretention.com. For Amgen record retention information, see Section X of Amgen’s Privacy Statement at www.amgen.com/privacy.
PURPOSES FOR PROCESSING PERSONAL INFORMATION
We process Personal Information, including Sensitive Personal Information, for the following business and commercial purposes and may use any of the types of Personal Information described above:
Operate, manage, promote, and maintain Our business
Provide, develop, improve, repair, and maintain Our products and services
Personalize, advertise, and market Our products and services;
Communicate with you
Provide patient assistance programs
Conduct research, analytics, and data analysis
Maintaining Our facilities and infrastructure
Undertake quality and safety assurance measures
Conduct risk and security controls and monitoring
Detect and prevent fraud
Perform identity verification
Perform accounting, audit, and other internal functions, such as internal investigations
Detect and prevent fraud
Comply with law, legal process, and internal policies
Maintain records
Exercise and defend legal claims
Otherwise accomplish Our business purposes and objectives
CATEGORIES OF ENTITIES WITH WHOM WE MAY DISCLOSE YOUR PERSONAL INFORMATION
We grant access to Personal Information only to the extent needed to perform business functions, and require entities that receive Personal Information to protect the confidentiality and security of such information.
We may disclose your Personal Information as follows:
Vendors and business partners may receive the information We collect directly from you, other people and organizations, public sources, and automatically. We may disclose your personal data to vendors who work on Our behalf to provide certain services, for example, entities that provide Us with research services, data storage, data analysis and processing, distribution, patient support, IT and data security, and legal services. We also may disclose your data to Our business partners, for example, researchers with whom We collaborate, companies with whom We co-develop a therapy, companies with whom We co-promote a product or third-party companies managing Our in-countries operations.
Our affiliates and subsidiaries may receive the information We collect directly from you, other people and organizations, public sources, and automatically. For business purposes, We may disclose your personal data to for example, current and future companies within the AstraZeneca or Amgen family of companies so we can improve Our offerings.
We may disclose all of the information We collect in connection with a business transfer or sale, for example, as part of a sale, assignment, or transfer of an AZ or Amgen business or asset, or acquisition of or merger with another entity.
We also may disclose any of the information We collect in response to requests from government or law enforcement agencies or where required or permitted by applicable laws, court orders, or government regulations, for example, in response to a subpoena or regulatory inquiry.
We may disclose all of the information We collect to protect rights and interests, for example, when needed for corporate audits, to investigate or respond to a complaint or threat, or to exercise Our legal rights.
We may disclose any of the information We collect with your consent, for example, when you agree that We can share your personal data with an HCP.
We do not sell Personal Information. In the twelve months since this Privacy Policy took effect, for commercial purposes, we have processed or shared for targeted advertising the following categories of personal data: “Identifiers” and “Internet or other electronic network activity information”. We have shared such Personal Information for these purposes with advertisers and marketing partners, data analytics providers, and social media networks. You have the right to opt out of such “sharing” as described under Your Rights and Choices below.
We do not knowingly sell the Personal Information of consumers under 16 years of age or share such information for purposes of targeted advertising.
Disclosure About Direct Marketing for California Residents. California Civil Code § 1798.83 permits California residents to annually request certain information regarding Our disclosure of Personal Information to other entities for their direct marketing purposes in the preceding calendar year. We do not distribute your Personal Information to other entities for their own direct marketing purposes.
YOUR RIGHTS AND CHOICES
California, Colorado, Connecticut, Utah, and Virginia consumers have certain rights with respect to their Personal Information. Those rights vary by state and if you are a resident of the above-mentioned states, you may exercise the rights applicable to you. Please note that the rights described below may be subject to limitations under applicable laws and regulations.
You may contact Us at www.astrazenecapersonaldataretention.com or 1-800-236-9933 at any time to request information on how We process your personal information, access to the personal information We hold about you, to correct any mistakes or to request deletion of the same or withdraw your consent to certain types of processing of your personal information. If such a request places Us in breach of Our obligations under applicable laws, regulations or codes of practice, then We may not be able to comply with your request, but you may still be able to request that We block (ie, right to object) the use of your personal information for further processing. Subject to applicable law, you can exercise these rights for free.
You may contact at Privacy.US@astrazeneca.com in case of any questions or concerns regarding the processing of your personal information.
Verification of Request: To make your request, you must provide Us with your first and last name, email address, city and state of residence, and which of the right(s) described below you are intending to exercise. We will verify your request by comparing the information that you provide as part of your request with the information (if any) that We have about you in identifiable form.
Data Subject Rights: You may be entitled, in accordance with applicable law, to request:
Access to the specific pieces of Personal Information We have about you or more information about Our data processing practices.
Deletion of your Personal Information.
Correction of any inaccurate Personal Information We maintain about you.
Opt-Out of Processing Personal Information for Purposes of Targeted Advertising by clicking the relevant link on an AZ US website. Please note that your use of Our website may still be tracked by AZ or Amgen and/or Our Vendors.
Right to Opt-Out for the Purposes of Profiling: you may have the right to opt-out of processing of Personal Information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects. Appeals: To appeal Our decision on your data subject requests, you may contact us at Privacyrequests@astrazeneca.com. Please enclose a copy of, or otherwise specifically reference, the decision you want to appeal. We will respond to your appeal in accordance with applicable law.
Non-Discrimination: We will not discriminate against you for exercising your data subject rights, although some of the functionality and features available on the Service may change or no longer be available to you. Any difference in the Services are related to the value provided.
Use of an Authorized Agent: You may designate an authorized agent to make a request on your behalf by drafting, signing, and authenticating a letter that makes clear (i) the identity of your agent and (ii) the purposes for which you are appointing the agent. If you are an authorized agent, you must provide Us with the information described above about the consumer on whose behalf you are acting as an agent, as well as your own first and last name and email address, and a letter that has been signed and notarized by the consumer appointing you as an agent. We may require that you verify your identity to Us or confirm with Us that you provided your agent with permission to submit the request. In some instances, We may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
HOW TO CONTACT US
If you have any questions, comments, requests, or concerns related to this Supplemental Notice, Our privacy practices, or how to access this policy in another format, please contact AstraZeneca at:
AstraZeneca
Attn: Global Data Protection Officer
1 Francis Crick Avenue
Cambridge Biomedical Campus
Cambridge, CB2 0AA, United Kingdom
Amgen
Attn: Privacy Compliance
One Amgen Center Drive
Thousand Oaks, CA 91320, USA
UPDATES TO THIS SUPPLEMENTAL PRIVACY NOTICE
We reserve the right to amend this Supplemental Notice at Our discretion and at any time. When We make material changes to this Supplemental Notice, We will notify you by posting an updated Supplemental Notice on Our website and listing the effective date of such updates.
Effective Date: March 2023
© AstraZeneca and Amgen