Data protection

Data Protection Information

This data protection information is also available in German.

1. Subject of this data protection information

We are pleased about your interest in our internet presence and our offers on these web pages. The protection of your personal data (hereinafter referred to as "data") is of great and very important concern to us. In the following we would therefore like to inform you in detail about which data is collected during your visit to our website and the use of our offers there and how this data is processed by us. Furthermore, we would like to inform you about the rights you are entitled to and the technical and organisational protective measures we have taken with regard to the processing of your data.

2. Name and address of the data controller and service provider

The responsible person with regards to GDPR and at the same time service provider within the meaning of the Telemedia Act (TMG) is Daiichi Sankyo Europe GmbH (hereinafter also referred to briefly as "Daiichi Sankyo" or "we"), Zielstattstrasse 48, 81379 Munich, see also our imprint. If you have any questions or comments about this data protection information or data protection in general, please send them to the following e-mail address: Datenschutz@daiichi-sankyo.eu You can contact Daiichi Sankyo's data protection officer as follows:

3. Collection and use of your data

The extent, type and use of your data will differ depending on whether you visit our website only to access information, or use services offered by us or log into a protected area for health care professionals (HCP):

a. Informational use

For the informational use of our website it is generally not necessary for you to provide personal data. Rather, in this case we collect and use only those of your data that your Internet browser automatically transmits to us. These are in particular the following:

• Date and time of access to one of our Internet pages
• our browser type
• the last page you visited
• the transferred data volume and the access status (file transferred, file not found, etc.) as well as
• Your IP address.

The data is stored in log files on the server for 12 months. Except for the IP address, we only process this data in non-personal form during an informational visit. This is done in order to enable you to access and use the website and to be able to check whether our websites are optimally displayed to you. The processing is carried out on the legal basis of Art. 6 para. 1 sentence 1 f) GDPR and in our interest in order to be able to display our website to you reliably and as trouble-free as possible. The data arising during the informational use including your IP address are stored in order to ensure the operation of the website and to be able to react to problems. A personal evaluation of the data does not take place. Only statistical evaluations of the use of the website are made, as described further below in this data protection information.

b. Data processing of reports of adverse reactions

If you contact a Daiichi Sankyo national subsidiary to report an adverse reaction, you can do so anonymously, i.e. without your name or other identifier, or you can provide personal information. You will find the name and contact data for Daiichi Sankyo national subsidiaries as well as contact data for their respective Data Protection Officers under section 2. If your report includes personal information, the company stores the data you provide. In addition to the report of the adverse reaction itself, the company generally stores your name, address and contact data as well as the date and time of the report. The purpose is to receive reports of adverse reactions in accordance with the prescribed rules and to be able to contact you with questions. The legal basis for such data processing is Arts. 6 (1) lit c, (2) and (3) GDPR, (1) lit. d GDPR and (1) lit. f GDPR. This personal data are not transferred to a different location. The Pharmacovigilance Department of the respective national subsidiary processes the report internally and anonymises the data before forwarding it to a global database. The data are deleted when the specific report is no longer relevant from any conceivable perspective. In general, this will occur 10 years after the expiration of the marketing authorisation for the medicine to which the adverse reaction report relates. If the report is made anonymously, the national subsidiary does not collect or process any personal data relating to you. In other respects, the report of an adverse reaction will be processed and stored / deleted in accordance with the aforementioned procedure. If you contact Daiichi Sankyo to enquire about product information in the medical field, Daiichi Sankyo stores the personal data which you provided at the time of contact. To ensure we are dealing with an HCP, this data includes your name, professional details and contact data as well as the date and time of this contact. The purpose of this storage is to be able to respond to your medical enquiry.

c. Data processing in case of medical enquiries

You will find the name and contact data for Daiichi Sankyo national subsidiaries as well as contact data for their respective Data Protection Officers under section 2. The legal basis for such data processing is Arts. 6 (1) lit. d and (1) lit. f GDPR. The data is deleted when the specific enquiry is no longer relevant from any conceivable perspective. In general, this will occur 10 years after the expiration of the marketing authorisation for the medicine to which the enquiry relates or earlier, should you request deletion

4. Use of Cookies

a. Which cookies do we use?

We use the technology of cookies for our Internet presence. Cookies are small text files that are sent from our web server to your browser during your visit to our website and are stored on your computer, tablet computer or smartphone for later retrieval. We use the following cookies on our websites:

Third-party cookies:

• Additional cookies may be set by third parties using their plug-ins.

Information on these cookies can be found under the respective sub-item of this data protection declaration as well as under the data protection declarations of the respective third party provider linked there.

b. Disabling cookies

Whether cookies can be set and retrieved can be determined by the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, limit it to certain websites or configure your browser so that it automatically informs you as soon as a cookie is to be set and asks you for feedback. You can block or delete individual cookies. For technical reasons, however, this can lead to some functions of our Internet presence being impaired and no longer functioning completely.

5. Involvement of service providers and transfer of data to third parties

Your data will be passed on to technical service providers supporting us (e.g. website hosting and support) for the provision of this website and for the aforementioned purposes, which we have of course carefully selected and commissioned in writing. These service providers are bound by our instructions and are regularly checked by us. Otherwise, your data will only be passed on to other third parties if expressly stated in this data protection declaration or if we are legally obliged to do so.

6. Your rights

You have the right to request confirmation from us whether personal data relating to you is processed; if this is the case, you have a right of access to this personal data and the information specified in Art. 15 GDPR. You have the right to request us to correct any incorrect personal data concerning you and, if necessary, to complete incomplete personal data without delay (Art. 16 GDPR). You have the right to request us to delete personal data relating to you immediately if one of the reasons listed in Art. 17 GDPR applies in detail, e.g. if the data is no longer required for the purposes pursued (right of deletion). You have the right to request us to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have filed an objection to the processing, for the duration of our examination. You have the right to object at any time for reasons arising from your particular situation to the processing of personal data concerning you, which is carried out on the basis of Art. 6 para. 1 sentence 1 e) or f) GDPR. We will then no longer process the personal data unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR). You have the right to revoke your consent to us at any time with effect for the future (right of revocation). You have the right to receive from us the data concerning you that you have provided to us in a structured, common and machine-readable format. You can also transfer this data to other locations or have it transferred by us (right to data transferability). Please contact us to exercise your rights: Datenschutz@daiichi-sankyo.eu. Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR (Art. 77 GDPR). In Bavaria, the competent supervisory authority is: Bavarian State Office for Data Protection Supervision, P.O. Box 606, 91511 Ansbach, www.lda.bayern.de.

7. Data security

We also use technical and organizational security measures to protect personal data that is collected, in particular against accidental or intentional manipulation, loss, destruction or against the attack of unauthorized persons. Our security measures are continuously improved in line with technological developments. When using our website, your personal data is encrypted using SSL/TLS technology to prevent access by unauthorized third parties.