This is an educational and information website for medical practitioners, pharmacists, and patients; it also provides information about EGIS.
EGIS Pharmaceuticals Plc ("EGIS"), the representation in Romania, with its registered office located in Calea Floreasca no. 165, 4th floor, sector 1, Bucharest, 014459, Fiscal Code 11 229 221 is the operator that deals with the processing of your data on the Website.
We appreciate your interest in EGIS and our products, and we want to make sure you feel safe when it comes to protecting your personal data during our interaction. Egis complies with Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter, “GDPR”) and would like to inform you in the paragraphs below how it processes and protects your personal data.

For more information you can contact our personal data protection officer by phone, fax or e-mail:
Phone: 021 412 00 43
E-mail: dataprotection@egis.ro

Who collects your data
The controller of your personal data is Egis Pharmaceuticals PLC Romania with its registered office in Calea Floreasca no. 165, 4th floor, sector 1, Bucharest, 014459, Phone: 021 412 00 43; Fax: 021 412 00 08; E-mail: office@egis.ro
Egis collects the personal data directly communicated by you and the data are processed to the extent provided by you and may be combined with other data obtained from publicly available sources, such as public registers of legal entities, publicly available databases on healthcare professionals or from other companies of the Servier Group. Provided personal data that are not necessary for the purpose of their processing are not processed.

External service providers
We use service providers who support us in providing our services. In performing these services, these providers may process your data on our behalf, in accordance with our instructions and under our supervision solely for the purposes described in this policy or in other materials, if applicable. These service providers may also be located outside the EU. We will take all necessary measures to ensure that the data you provide are properly protected in accordance with the legal provisions, in accordance with the legal requirements applicable in the European Union regarding the protection of personal data. If your data is transferred to countries outside the European Economic Area, we provide an adequate level of data protection through appropriate safeguards
Data storage period.
Egis will store your personal data for a period based on your interactions with Egis, for a period required by law, as well as for the period specified in the regulations and necessary to establish, pursue or defend claims. Egis may store your personal data for the following periods:
- Until your consent to the processing of your personal data is withdrawn,
- 10 years after expiry of the marketing authorization for the data obtained during pharmacovigilance activities; thereafter these data will be erased or anonymized,
- 10 years counting from the beginning of the year following the financial year when the document with your personal data has been approved, for the purposes of financial and tax reporting if the data are related to such activities by Egis,
- 6 years from your last interaction with Egis, for statistical and analytical purposes and for the establishment, exercise or defense of legal claims.
For information about automatically collected data please see section “Cookies”.
Automated decision making. Your personal data will not be used for decisions based solely on automated processing, including profiling, which produces legal effects concerning you or affects you in a similarly significant way.

Purpose of data processing
Depending on the nature of your interactions with Egis, Egis may process your personal data in order to:
1. Answer your queries regarding Egis products (legal basis: Art. 6(1)(f) GDPR),
2. Provide educational and information materials about medicinal products (legal basis: Art. 6(1)(f) GDPR)
Hold meetings with specialists in Egis products (legal basis: Art. 6(1)(f) GDPR),
3. Report adverse events reactions, make complaints and implement other pharmacovigilance activities (legal basis: Art. 6(1)(c) GDPR in connection with the provisions of health care and pharmaceutical Law),
4. Perform contracts and agreements (legal basis: Art. 6(1)(b) GDPR),
5. Keep a record of samples of medicinal products provided to you (legal basis: Art. 6(1)(c) GDPR in connection with the provisions of the health care and pharmaceutical Law),
6. Organize, award and financially settle competitions and quizzes organized by Egis, and present prizes to their winners (legal basis: Art. 6(1)(f) GDPR or: Art. 6(1)(c) GDPR in connection with the provisions of the Fiscal and Accounting Law),
7. Arrange your participation in conferences and training programs (legal basis: Art. 6 (1) (b) GDPR or legal basis: Art. 6(1)(f) GDPR).
8. Manage the financial formalities connected with your activities financed by Egis (legal basis: Art. 6 (1)(c) GDPR),
9. Disclose information on the transfers of funds made to you by Egis (legal basis: Art. 6(1)(a) GDPR) in connection with the provisions of the Fiscal and Accounting Law and National Drug Agency)
10. Allow the use of Egis programs and applications (legal basis: Art. 6(1)(f) GDPR),
11. Analyze your use of Egis programs and applications, browsing the websites and accounts managed by Egis (legal basis: Art. 6(1)(f) GDPR),
12. Pursue legitimate interests of the Egis: to ensure the security of services provided by Egis, to carry on communication with you and provide information to you, to analyze your activities related to Egis products and services, to pursue potential legal claims (legal basis: Art. 6(1)(f) GDPR).

Legal basis for data processing
Your personal data may be processed by Egis on the basis of:
1. Your consent (Art. 6(1)(a) GDPR): Egis may process your personal data on the basis of your consent to data processing. For the data collected based on your consent, you may withdraw your consent at any time. The withdrawal of your consent will not affect the lawfulness of processing done on the basis of your consent before its withdrawal. Depending on the communication channel, Egis will specify how the given consent may be withdrawn; however, you may withdraw your consent at any time using the contact details provided above.
2. Compliance with the legal obligations that apply to Egis (Art. 6(1)(c) GDPR): In some situations Egis is obliged by law to collect certain personal data, in particular where it is necessary to comply with the obligations related to financial and tax reporting, pharmacovigilance activities and keeping a register of samples of medicinal products provided by Egis. In such situations you have no right to object to data processing nor request that your data be deleted. However, you still have the right to access and correct such data; you also enjoy other rights as outlined below.
3. Performance of a contract with you (Art. 6(1)(b) GDPR): Egis may process your personal data where it is needed to perform a contract between you and Egis[U1] . If the data are processed for that reason, you may not have the right to object or, should you object, it will not be possible to perform the contract. However, you still have the right to access and correct such data; you also enjoy other rights as outlined below.
4. Legitimate interests of Egis (Art. 6(1)(f) GDPR): Egis may process your personal data to pursue its legitimate interests as long as your fundamental rights and freedoms do not override such interests. Egis may process your personal data to carry on communication with you, provide information to you and analyse your activities related to Egis products and services.

Rights related to processing of personal data

You may request information about and access to the stored data concerning you and, in some cases, you have the right to receive the data you have provided in a commonly used and automatically readable format. In addition, you can also request the deletion, correction or restriction of your data processing. At the same time, you have the right to object, if the legal conditions are met. If your data is transferred to a non-EU country that does not provide adequate protection, you may request a copy of the contract or other guarantees that implement adequate protection of your personal data. For more details on these rights, see below.
1. The right of access - you can obtain, upon request and under the conditions established by the law, an indication of whether we process your personal data, and, if so, the right to obtain access / a copy of this personal data, such as and processing specific information. By exercising this right, the rights and freedoms of other data subjects should not be harmed.
2. The right to rectify your personal data - you may ask us to rectify your personal data which you consider to be incorrect / inaccurate or, as the case may be, the completion of your personal data which is incomplete, including by providing a supplementary statement.
3. The right to delete personal data (“the right to be forgotten”) - you can request the deletion of personal data concerning you, without justified delays, in the cases provided by law.
The right to delete personal data knows the following limits / situations when it is not applicable: (i) the existence of a different legal basis for the processing of personal data than consent; (ii) the existence of legitimate reasons for ours to prevail regarding the processing of the relevant personal data; (iii) where the processing of the relevant personal data implies the exercise of the right to free expression and information; (iv) if the processing of the relevant personal data involves the observance of a legal obligation or the performance of a task performed in the public interest or in the exercise of an official authority; (v) for reasons of public interest in the field of public health; (vi) when the relevant personal data are required for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes; (vii) if the processing of personal data involves finding, exercising or defending a right in court.
4. Right to restriction of processing - in certain conditions, as long as the conditions provided by law are fulfilled, you can request the restriction of the processing of your personal data.
Such conditions in which this right is incident are: (i) the data subject disputes the accuracy of the personal data, for the period that allows us to verify the accuracy of the personal data; (ii) the processing is illegal and the data subject opposes the deletion of the personal data, requesting instead the restriction of their use; (iii) the operator no longer needs the processing of personal data for the purpose for which they were collected, but the data subject requests those personal data for finding, exercising or defending a right in court; (iv) the data subject objected to the processing in accordance with Article 21 (1) of the GDPR, for the period in which it is verified that there are legitimate reasons for the operator to prevail over the interests, rights and freedoms of the data subject.
5. The right to oppose - you can at any time oppose, for well-founded and legitimate reasons related to your particular situation, as personal data that will aim to be processed if, for example, the basis of the processing is the legitimate interest, except in the cases in which we have legitimate reasons that prevail over the interests, rights and freedoms of the data subject;
At the same time, if your personal data are processed for the purpose of direct marketing activities, you have the right to object to this processing, including profiling at any time and without any justification.
6. The right to the portability of personal data - to the extent that personal data is processed by automatic means and the basis for processing is the consent or performance of the contract, you can request, under the law, (i) the supply of your personal data that you have provided to the operator in a structured form, currently used and which can be read automatically, and (ii) the transmission by the operator of this data to another data operator, provided that the conditions provided by law are met.
By exercising this right, the rights and freedoms of other data subjects should not be harmed.
7. The right to file a complaint with a National Supervisory Authority for Personal Data Processing - if you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with a national supervisory authority regarding the processing of personal data. personal data, in particular to the authority in the Member State of the European Union in which you have your habitual residence, place of employment or where you believe that the alleged breach of the GDPR has taken place.
The exercise of this right is without prejudice to the possibility of addressing justice.
8. The right to withdraw consent - if you have consented to the processing of personal data in the context of using the Website and its associated services, you may withdraw this consent at any time, with effect for the future.

Security related to personal data

We apply technical and organizational security measures to protect your personal data against misuse, loss and destruction or against unauthorized access to such data. These measures are reviewed and improved regularly.

Information notice for contact forms

The controller of the personal data of those who use the contact form available at: https://ro.egis.health/contact is Egis Pharmaceuticals PLC Romania with its registered office in Calea Floreasca no. 165, 4th floor, sector 1, Bucharest, 014459, Phone: 021 412 00 43; Fax: 021 412 00 08; E-mail: office@egis.ro
Your personal data provided in the contact form will be processed pursuant to the provisions of the General Data Protection Regulation (“GDPR”) in order to contact you and deal with your query under Art. 6 (1(f) GDPR, i.e. for the purpose of legitimate interests pursued by Egis as the controller.
1. Your personal data will be processed until your query sent via the contact form is dealt with, and thereafter until the period of limitation for lodging potential legal claims expires.
2. You have the right to access, correct, delete your personal data and to restrict their processing.
3. You also have the right to object to the processing of your personal data.
4. The data provided by you will be made available only to our subcontractors and competent authorities under the applicable regulations.
5. Decisions relating to your query will not be automated.
6. Provision of the data required in the contact form is voluntary, but necessary for dealing with your query.
7. You also have the right to file a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data is unlawful.

Information notice for job applicants
1. Your personal data will be processed in accordance with the provisions laid down in the General Data Protection Regulation (hereinafter: “GDPR”) to conduct the recruitment process pursuant to:
- Art. 6(1)(c) GDPR, i.e. fulfilment of the obligations arising from the provisions of labor law
- Art. 6(1)(a) GDPR, i.e. based on your consent – regarding the data outside the scope defined in the Labor Code; and if you have given your consent to the processing of your personal data for future recruitment purposes
2. If you consent to the processing of personal data to participate in future recruitments, your data will be processed until the consent is withdrawn, but not longer than 6 months. If you do not give your consent, your personal data will be deleted immediately after completing the recruitment process for the position.
3. Your data will be made available solely to Egis’ subcontractors. Your data may be made available to Egis Group subsidiaries [https://hu.egis.health/contact] to the extent necessary to conduct the recruitment process.
4. Decisions concerning the recruitment process and its result will not be automated.
5. Provision of your personal data as defined in the Labour Code is necessary for the recruitment process. Provision of additional personal data is voluntary and requires your consent.

Reporting adverse reactions, complaints and queries on medicinal products
Scope of the data:
Egis collects personal data communicated by you to fulfil its legal obligations and to allow for further contacts related to the reporting of adverse events reactions, queries and complaints. The Healthcare and Pharmaceutical Law does not require providing a patient’s personal data to effectively report an adverse event reaction, but the report may include such data. If a report is made by a person who is not a healthcare professional, it may include his or her data such as: name or contact details (for example of the patient, a relative or carer). Reports made by a healthcare professional will include the personal data of the reporting person.

Purposes and legal basis of data processing.
All your personal data communicated in your query will be processed to fulfil the pharmacovigilance obligations of the controller or respond to a complaint or a query regarding a product.
All your personal data communicated in your query except the telephone number will be processed under Art. 6 (1)(c) GDPR in connection with the provisions of the Healthcare and Pharmaceutical Law.
The legal basis for the processing of your telephone number is a legitimate interest of the controller who needs to be able to contact the reporting person (Art. 6 (1)(f) GDPR).

Disclosure of the data.
Your data may be disclosed to entities from the controller’s capital group Egis Group subsidiaries [https://hu.egis.health/contact] and to entities processing the data at the controller’s request, such as IT and archiving service providers.

Transfer of data to third countries.
Your personal data will not be transferred to recipients in countries outside the European Economic Area.
Your personal data may be forwarded to the European Medicines Agency (EMA) to fulfil the legal obligations.

Data storage period.
Your personal data provided in your query will be processed for the entire period when the reported medicinal product is manufactured, and thereafter for 10 years from the expiry date of the last manufactured batch.

Automated decision making.
Your personal data will not be used for decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Information notice for healthcare professionals
As a data controller, Egis processes your personal data mainly on the basis of its legitimate interest to promote its products along with relevant medical information or on the basis of your prior consent when applicable but also in order to comply with its legal obligations related to pharmacovigilance and transparency.
Your personal data are collected and processed by Egis for the following purposes:
• Monitoring of the scientific medical liaison with healthcare professionals (HCP),
• Management of medical information delivery,
• Communication and relationship management and promotional activities (contacts with HCP) including interactions, contractual relationships management, congress and meetings management, therapeutic area experts databases, social media, E-services (e-conferencing, etc.),
• Relationship management activities with HCP in connection with clinical trials and pharmacovigilance activities,
• Transparency management (disclosure of transfers of value from Egis to health stakeholders).
Your personal data processed by Egis will only be accessible by a limited list of recipients on a need to know basis or where required by law. Thus, the main categories of recipients will be Egis’ authorized employees and departments acting within their scope of activities including but not limited to:
• Promotional Department,
• Medical Affairs Department,
• Pharmacovigilance Department,
• Information Technology Department where necessary.
Egis also uses third party providers (e.g. hosting providers) and business partners (e.g. contractual research organizations, travel and conferences agencies, agencies, hotels, air carriers etc.) who may also access to your personal data in order to provide their services. Finally, Egis shall communicate some of your personal data to the competent authorities such as health authorities.
Your personal data may be transferred to other Egis entities, and to third-parties providers and health authority which may be located inside or outside the EEA, including in the countries which do not have the same level of protection of personal data as in the EEA, in particular for hosting and IT support purposes. In such cases, Egis ensures that such transfers are carried out in compliance with the applicable
data protection laws and regulation.
Your personal data collected by Egis are kept in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed. More specifically:
• Personal data collected for scientific medical liaison with healthcare are kept for 5 years after your last interaction with Egis, then data are archived for 5 years and deleted,
• Personal data collected for clinical trials management activities with HCP are kept until the study product is marketed or until the final research report or until the publication of the research results. They are then archived in paper or electronic form for a period in accordance with applicable laws and regulations;
• Personal data collected for medical information management for more than 10 years after your request, then data are deleted,
• Personal data collected for communication, relationship management and promotional activities (contacts with HCP) are kept for 5 years after your last interaction with Egis, then data are archived for 5 years and deleted,
• Personal data collected for pharmacovigilance activities are kept for 10 years after the relevant marketing authorization has ceased to exist, then data are deleted or archived in an anonymized form, unless otherwise provided by mandatory local regulations,
• Personal data related to transparency management are kept, archived and deleted in accordance with applicable laws and regulations.
As a data subject, you have the right at any time to request from Egis as far as permitted by applicable laws and regulations, access to and rectification or erasure of your personal data. On legitimate grounds, you are also entitled to request a restriction of the processing of your personal data or to object to such processing. When a data processing is based on a contractual relationship with Egis, you may also have the right to receive the personal data concerning only you which and which you alone have provided to Egis in a structured, commonly used, machine-readable and interoperable format, and to transmit it to another Data Controller (data portability).
Finally, you are entitled to lodge a complaint with the Data Protection Authority, related to Egis’ compliance with the applicable data protection laws and regulation.

Information notice for contractors, suppliers
Scope of the data.
Egis collects your personal data directly communicated by you and those obtained from the entity you represent. Your personal data collected by Egis include your name and other business contact data: mailing address, workplace name and address, business phone number, email address, position.

Purposes and legal basis of data processing.
Your personal data communicated to Egis will be processed where it is necessary for Egis’ legitimate interests (Art. 6(1) (f) GDPR), which includes day-to-day business contacts, offering and ordering products or services and confirming completion of business activities between Egis Group subsidiaries, such as contracts.

Disclosure of the data.
To pursue these activities, Egis may use the services of other entities acting in Egis’ name and at Egis’ request (hereinafter: “Egis Suppliers”). In some situations, to the extent necessary to deal with your request, perform a contract or provide a service, Egis may disclose your personal data to other entities such as hotels, carriers, organizers of events and Egis Group subsidiaries [https://hu.egis.health/contact].

Transfer of data to third countries.
Your personal data will not be transferred to recipients in countries outside the European Economic Area.

Data storage period.
Egis will store your personal data for a period based on your interactions with Egis, for a period required by law and which is necessary for the establishment, exercise or defense of legal claims.

Automated decision making.
Your personal data will not be used for decisions based solely on automated processing, including profiling, which produces legal effects concerning you or affects you in a similarly significant way.

Contact details

For more information or to exercise your rights, please contact our Data Protection Officer (DPO) by phone or e-mail:
Phone: 021 412 00 43
E-mail: dataprotection@egis.ro

Last update: 25 June 2021