Privacy Policy
Protecting the privacy of personal data
H. Lundbeck A/S (“Lundbeck”) is firmly committed to protecting the privacy of the personal data we collect. In processing personal data, Lundbeck (as data controller) will comply with applicable legislation, including the General Data Protection Regulation (“GDPR”) and the Danish Data Protection Act.
In this policy, you can read how Lundbeck processes your personal data when you use this website, www.lundbeck.com. If you use www.lundbeck.com to apply for a job or use our Compliance Hotline (as an external), please read the privacy policies specifically applicable to these services. When Lundbeck processes personal data collected through other channels than via this website, Lundbeck will specifically inform you how your personal data is processed. However, for certain specific processing activities you can read more under Section 1. If you have any questions, please don’t hesitate to reach out to Lundbeck’s Data Protection Officer using the contact details set out in Section 6.
The Information We Collect
1. Lundbeck’s processing of personal data
When you use www.lundbeck.com and the features therein, we may process the following personal data about you as set out below.
|
Type of processing and categories of individuals |
|
Categories of personal data and source if relevant |
|
Purpose of processing |
|
Legal basis |
|
Disclosure of personal data, if relevant and legal basis for the disclosure |
|
Retention |
|
Subscribers to investor notifications |
|
|
|
Providing the requested Direct marketing |
|
The legal basis is consent, cf. Article 6(1)(a) of the GDPR or Lundbeck’s legitimate interest in providing you with the requested email notifications, cf. Article 6(1)(f) of the GDPR. |
|
To continuously ensure the safety of our products we may disclose your personal data to relevant local health authorities, business partners and the Lundbeck Group companies. The legal basis for the disclosure is: a legal obligation in section 53 of the Danish Medicines Act and section 6 and 7 of the Danish executive order on the monitoring of adverse reactions from medicinal products which implements parts of Chapter 3 of Title IX of Directive 2001/83/EC of the European Parliament and of the Council of 06 Nov. 2001, as amended by Directive 2010/84/EU of the European Parliament and of the Council of 15 Dec. 2010 cf. Article 6 (1) (c) of the GDPR; to ensure high standards of quality and safety of healthcare and of medicinal products cf. Article 9(2)(i) of the GDPR. criminal convictions: section 8(4) of the Danish Data Protection Act cf. Article 10 of the GDPR. It is Lundbeck’s assessment that the disclosure of criminal convictions is necessary for the medical and scientific assessment and to ensure high standards of quality and safety of healthcare and of medicinal products |
|
Personal data related to your subscription to notifications for investors will be deleted immediately after you have unsubscribed from our service, unless storage for a longer period is required under applicable law. |
|
Users of “contact us” form (PV) |
|
If users of Lundbeck.com use our “contact form” for reporting on side effects and adverse events regarding our medicinal products (as patients), we will obtain the following data from the patient:
Healthcare professional and individuals reporting on behalf of patients:
The source of data obtained in the “contact us” form (PV) is relative/individual or healthcare professionals reporting on behalf of you and publicly available sources such as websites or social media (in general, these sources are not monitored. Dueto relevant regulation, Lundbeck employees that incidentally identify adverse events in publicly available sources (e.g. social media) are however obliged to report those to Lundbeck. |
|
It is a legal requirement that H. Lundbeck A/S collects and processes your personal data. We are obliged to register, monitor and analyse theadverse events that are reported to Lundbeck and to perform medical and scientific evaluation of any adverse event that may be related to a Lundbeck product. This is done to ensure high standards of quality, to enhance patient care and patient safety and to assess the risk-benefit profile of medicines. |
|
The legal basis for Lundbeck’s collection and processing of your personal data is: a legal obligation in section 53 of the Danish Medicines Act and section 5 of the Danish executive order on the monitoring of adverse reactions from medicinal products which implements parts of Chapter 1 and 3 of Title IX of Directive 2001/83/EC of the European Parliament and of the Council of 06 Nov. 2001, as amended by Directive 2010/84/EU of the European Parliament and of the Council of 15 Dec. 2010 cf. Article 6 (1) (c) of the GDPR; to ensure high standards of quality and safety of health care and of medicinal products cf. Article 9(2)(i) of the GDPR; and criminal convictions: section 8(3) of the Danish Data Protection Act cf. Article 10 of the GDPR. It is Lundbeck’s assessment that the processing of criminal convictions is (when relevant) necessary for the medical and scientific assessment and to ensure high standards of quality and safety of healthcare and of medicinal products. |
|
We may disclose your personal data to: our affiliates within the Lundbeck Group other recipients depending on your inquiry in order to handle your request. Depending on your inquiry, the legal basis for the disclosure is contract (Article 6(1)(b) of the GDPR), consent (Articles 6(1)(a) and 9(2)(a) of the GDPR), compliance with a legal obligation (Article 6(1)(c)) and/or Lundbeck’s legitimate interest in providing the requested service and handling your inquiry, cf. Article 6(1)(f) of the GDPR. |
|
According to relevant pharmacovigilance legislation we are obliged to store your personal data for the lifetime of the product plus additional 10 years, as a minimum. However, the retention period of the personal data may be longer where union law or national law so requires. |
|
Users of “contact us” form (other inquiries than PV) |
|
|
|
Providing the requested service Handling of inquiries |
|
The legal basis is Lundbeck’s legitimate interest in providing the requested service and handling inquiries, including examinations in this regard, cf. Article 6(1)(f) of the GDPR. |
|
We may disclose your personal data to our affiliates within the Lundbeck Group other recipients depending on your inquiry in order to handle your request. Depending on your inquiry, the legal basis for the disclosure is contract (Article 6(1)(b) of the GDPR), consent (Articles 6(1)(a) and 9(2)(a) of the GDPR), compliance with a legal obligation (Article 6(1)(c)) and/or Lundbeck’s legitimate interest in providing the requested service and handling your inquiry, cf. Article 6(1)(f) of the GDPR. |
|
Personal data related to your requests and inquiries will be deleted immediately after replying to you unless storage for a longer period is required under applicable law. |
|
All users of the website (via cookies) |
|
By use of cookies, we may collect information on how you use lundbeck.com and your online behaviour. The type of personal data collected are:
|
|
We use necessary cookies, functional cookies, statistical and marketing cookies. Please see a full description of these cookies in our Cookie Policy. |
|
We use necessary cookies, functional cookies, statistical and marketing cookies. Please see a full description of these cookies in our Cookie Policy. |
|
Data collected via cookies may be shared with our third party cookie providers, including via plug-ins. In certain cases, Lundbeck will be considered joint controller with some of these third parties. You can read more and find a link to the privacy notification of these third parties in our Cookie Policy. |
|
Cookies and the connected collection of personal data will be deleted as described in the Cookie Policy unless storage for a longer period is required under applicable law. |
|
Userswho order Lundbeck information (e.g. information onour Graduate Program) |
|
|
|
Providing Lundbeck information, as requested Direct marketing |
|
The legal basis is consent, cf. Article 6(1)(a) of the GDPR or Lundbeck’s legitimate interest in providing you with Lundbeck information as requested, cf. Article |
|
|
|
|
|
When Lundbeck processes personal data obtained through other channels than via this website, Lundbeck will specifically inform you how your personal data is processed. However, for certain specific processing activities where personal data is collected or obtained via other channels/devices/third parties than Lundbeck.com, you can read more if you click on the below.
|
||||||||||
2. Voluntary / mandatory provision of data
When we collect personal data directly from you, e.g. via contact forms or when you sign up for Lundbeck Magazine or Investor notifications, you provide the personal data voluntarily. You are not obligated to provide the information to us. The consequences of not providing the personal data are that we cannot provide the service or assist you in relation to the inquiry you request.
3. Lundbeck’s use of data processors
Lundbeck uses data processors (e.g. hosting companies, IT providers, including for cookie purposes, consultants, business partners and members of our Lundbeck Group), and your personal data may therefore be transferred to, processed and stored by these third parties engaged by Lundbeck, who will process your data on Lundbeck's behalf and assist in the provision of the content and services you use or request. These third-party providers will be obligated by Lundbeck to safeguard the confidentiality of your data and to take adequate technical and organizational measures to protect your data against accidental or unlawful destruction, loss or alteration, unauthorized disclosure or abuse, or other unlawful processing.
4. Transfer of data to countries outside the EU/EEA
We may transfer personal data to other countries, some of which have not yet been determined by the European Commission to have an adequate level of data protection. Lundbeck will ensure that such transfer(s) will be carried out in accordance with the applicable data protection legislation, including the GDPR.
Transfers to countries outside the EU/EEA may take place if the recipient enters into the EU Standard Contractual Clauses. The transfer can also be made if the recipient is located in a country providing an adequate level of data protection (see the full list of these ‘secure countries’ on the EU Commissions’ website). If your personal data is transferred to other Lundbeck affiliates, the transfer will be based on the Lundbeck Intra Group Agreements (or the Binding Corporate Rules, once implemented). More information can be obtained by contacting Lundbeck via the contact details in Section 6.
For PV data which Lundbeck transfers to health authorities in countries outside the EU/EEA, the legal transfer basis is Article 49(1)(d) of the GDPR (transfer is necessary for important reasons of public interest).
5. Your rights as a data subject
Lundbeck has taken all necessary and adequate steps to protect your personal data and ensure your rights as a data subject.
According to the GDPR and the Danish Act on Processing of Personal Data, you have certain rights described below. Please note that certain limitations may apply to your ability to exercise these rights.
If you want to exercise any of your rights as described, please contact Lundbeck using the contact information set out in Section 6.
Right of access
You have the right to request access to the personal data Lundbeck processes about you. Lundbeck must provide a copy of the personal data undergoing processing as a starting point free of charge or by electronic means, if the request has been submitted in a commonly used electronic form.
Right to rectification
You have the right to rectification of inaccurate personal data concerning you, including completion of incomplete personal data.
Right to erasure (right to be forgotten)
You have the right to erasure of the personal data concerning you.
Right to restriction
You have the right to restrict Lundbeck's processing of personal data concerning you.
Right to data portability
Where processing is based on a consent or a contract and the processing is carried out by automated means, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format. You have the right to transmit this personal data to a third party without hindrance from Lundbeck, if technically possible.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests as legal basis for the processing (as set out in article 6(1)(f) of the GDPR and section 6 of the Danish Data Protection Act), including profiling based on this provision. Where you have exercised this right to object, Lundbeck must no longer process the personal data unless Lundbeck demonstrates compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or if processing is necessary for the establishment, exercise or defense of legal claims.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, Lundbeck must no longer process the personal data for such purposes.
Processing on the basis of a consent
If processing of your personal data is based on your consent, you may withdraw your consent at any time. Please note that this does not affect Lundbeck's processing of your personal data prior to the withdrawal of your consent.
Filing of complaint
If your complaint is not resolved by Lundbeck to your satisfaction, you can choose to file a complaint to the Danish Data Protection Agency.
Danish Data Protection Agency (in Danish Datatilsynet)
Email address: dt@datatilsynet.dk
Website: www.datatilsynet.dk
6. Contact details for Lundbeck and Lundbeck’s Data Protection Officer
If you have any questions regarding Lundbeck processing of personal data, please contact the Lundbeck Data Protection Officer.
H. Lundbeck A/S
Attn: Data Protection Officer
Ottiliavej 9
2500 Valby
Denmark
E-mail address: dataprivacy@lundbeck.com
Telephone number: + 45 3630 1311 (ask for our Data Protection Officer).
If you contact our Data Protection Officer, H. Lundbeck A/S will process the personal data you provide us with in your request with the purpose of processing and responding to your request.
Please read our privacy notification regarding this processing activity here.
7. Rights of Residents of Certain States
If you are a resident of California, please see California Consumer Privacy Act (“CCPA”) Addendum here.
If you are a resident of Nebraska or Texas, please see our Privacy Policy Addendum for Nebraska and Texas Residents here.
If you are a resident of Nevada or Washington State, please see our Nevada and Washington State Health Data Privacy Policy Addendum here.
US Privacy Policy
I. Welcome
This Privacy Policy applies to websites owned or operated by Lundbeck LLC, including the site at https://www.lundbeck.com/us, that link to this Privacy Policy (hereinafter collectively referred to as the “Sites”). Lundbeck affiliates maintain other websites that do not link to this policy and those websites have their own privacy policies. As used in this Privacy Policy, "You" or "Your" refers to users of the Sites. "We" or "Us" means Lundbeck LLC ("Lundbeck").
Your privacy is important to Us. This Privacy Policy explains our practices regarding collection, use, and disclosure of information that You may provide via the Sites or that we may otherwise collect about you, including personally identifiable information (“PII”). For purposes of this Policy, PII about you means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.
II. Your Consent and Policy Updates
By using any of the Sites, You are accepting the terms of this Privacy Policy (as well as the relevant Site’s Terms of Use). Whenever You submit information via the Sites, You consent to the collection, use, and disclosure of that information in accordance with this Privacy Policy, so please read this entire Privacy Policy before using, or submitting information to Us.
Lundbeck may, from time to time in its sole discretion, change or modify this Privacy Policy. Any changes or modifications will be effective upon posting of the revised Policy on the Sites. Your access and use of the Sites and provision of information is governed by the Privacy Policy then in effect. Therefore, Your continued use of the Sites following Lundbeck’s posting of any changes or modifications will constitute Your acceptance of such changes or modifications.
III. About Children
The Sites are not intended for use by persons under the age of 18. We will not knowingly collect information from visitors under the age of 18 and, in the event that We learn that a person under the age of 18 has provided Us with PII, We will delete such PII. By submitting information to these Sites, You have indicated that You are at least 18 years old.
IV. Information Collection
We collect PII about you when you actively provide it to us, such as by sending us a message through the Sites’ “Contact Us” pages, signing up to receive communications from us, or sending us an email or letter. We also may collect PII about you from sources other than you, such as our business partners; the Internet, including social media websites; the press or other print media; and other organizations or individuals as permitted under applicable law. If you apply for a job with us in the United States, we will handle your PII as more specifically set forth in our US Applicant Privacy Policy, https://www.lundbeck.com/us/careers/your-job/applicant-privacy-policy.
Listed below are the types of PII that we may have collected about you within the past 12 months. Some of these types of information may not be PII, depending on other information we have access to about you. Each type of information listed below is PII only if the information identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.
• Identifiers such as: your name, postal address, online identifier, Internet Protocol (IP) address, email address, Social Security number, driver's license number, or other similar identifiers.
• “Customer Records” information (some of which may be identifiers or professional/employment-related information as well), such as your name, signature, Social Security number, NPI number or similar professional license number, physical characteristics or description, address, telephone number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
• Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Internet or other similar network activity, such as browsing history, search history, information on your interaction with our website, mobile application(s), or an advertisement. This may include hardware and browser information of your computer or other online device.
• Geolocation data, such as the physical location of the device you use to connect with us online.
• Biometric information, such as fingerprints or voiceprints.
• Sensory data, such as audio, electronic, visual, or similar information.
• Professional or employment-related information, such as your current or past job history.
• Personal characteristics that are related to classifications legally protected from discrimination, such as race, national origin, ethnicity, marital status, age, and gender.
• Inferences drawn from other PII, such as a summary we might make based on your apparent personal preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
As You navigate through this Site, we may collect (that is, gather without You actively providing the information) certain information using cookies, depending on the cookie preference that You select when You first visit our Site. For more information on cookies, how we use them, and how you can avoid or remove them, see https://www.lundbeck.com/global/cookie-policy.
We may also use other online tracking tools on our Sites to give us more information about the way Site users navigate the Sites.
By using any of the Sites, you are deemed to unambiguously agree to its use of any cookies that you do not disable.
Our Sites currently do not respond to a user’s Do-Not-Track request.
V. Use of Your Information
We may use the Information we collect from you that is not PII for any legitimate purpose. With respect to Your PII, we may use it as follows:
• To deliver services, such as information, newsletters, or other information that You request;
• To develop or continue a business relationship with You;
• To alert You to special offers, updated information, and other new services from Us, or other third parties, or to forward promotional materials to You;
• To help ensure the Sites are relevant to Your needs, including to improve their content and to customize them to your preferences;
• To respond to Your requests for information about products or services or to respond to any other question posed by You;
• To notify You of a material change to this Privacy Policy or to Our Terms of use agreement;
• For product development;
• For employment purposes; and
• For legal compliance, such as adverse event reporting.
VI. Sharing and Disclosure of Information
We may share or disclose the Information we collect from you that is not PII for any legitimate purpose. With respect to PII, we neither sell it nor share it with unaffiliated third parties for their own direct marketing purposes.
We may share Your PII in the following instances:
• With our affiliates. We may share Your PII with Lundbeck affiliates worldwide that agree to treat it in accordance with this Privacy Policy.
• With our service providers. We may share Your PII with service providers, agents, or contractors whom We use to support our business and who may also help Us maintain our Sites and provide administrative services to Us (e.g., Internet service providers, hosting companies, fulfillment services, order processing, providing customer service, maintaining and analyzing data, fulfillment of promotions, technical support, delivery services and financial institutions). We seek to ensure that these unaffiliated parties will not use the PII for any purpose other than to provide the administrative services for which they are responsible.
• Company reorganizations. We may share Your PII with third parties in connection with the sale, assignment or other transfer of the business of these Sites, or any other corporate reorganization process, including mergers or acquisitions.
• Legal compliance. We may disclose Your PII in order to comply with the law or in the good faith belief that such action is necessary in order to conform to the requirements of the law or comply with legal process served on Us, protect and defend our rights or property or act in urgent circumstances to protect the personal safety of our end Users.
• To protect health and safety. We may disclose Your PII as We believe reasonably necessary to protect the personal safety of users of Lundbeck products and services, the Sites, or the public.
• To protect against potential fraud. We may share with third parties the PII you provide to verify your identity.
VII. Correction of Your PII
At your written request, We will take reasonable steps to update or correct PII in our possession.
VIII. Security
You should keep in mind that no Internet transmission is ever 100% secure or error-free. Consequently, We cannot ensure or warrant the security of any information that You transmit to Us and You understand that any information that You transfer to Us is done at Your own risk. In particular, information sent via e-mail may not be secure, and You should therefore take special care in deciding what information You send to Us via e-mail.
We take reasonable steps to protect Your PII from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.
IX. Links to Other Websites
The Sites may contain links or references to other Sites. We do not control, review, or endorse, other Sites and this Privacy Policy does not apply to those websites. We encourage You to read the Terms of Use and Privacy Policy of every website You visit.
X. Notice for International Users
The Sites are intended for Use only by U.S. residents and You have indicated that You are a U.S. resident by entering the Sites.
If You are located in a jurisdiction outside the United States, please note when you provide PII in using our Sites, You are transferring Your PII to the United States, whose data protection laws are not the same (although they may be similar) to those applicable in the jurisdiction where you are located. By providing your PII through any of the Sites, you are consenting to the transfer of Your PII to the United States as indicated above.
XI. Rights of Residents of California and Washington
If you are a resident of California, please see California Consumer Privacy Act (“CCPA”) Addendum here.
If you are a resident of Washington State, please see Washington State Health Data Privacy Policy Addendum here.
XII. For More Information
If You have any questions or comments about this Privacy Statement, please contact Us by writing to:
Lundbeck LLC
Attn. Corporate Communications
Six Parkway North
Deerfield, Illinois 60015
Or calling Us at 847-282-1000
This Privacy Policy is effective as of April 1, 2024.