Privacy Policy

Updated Wednesday, April 10, 2019

Novartis acknowledges and respects the privacy of individuals.

By agreeing to this Privacy Policy, you are expressly consenting to Novartis’ use and disclosure of your personal information you enter on this web form as described in this Privacy Policy.

Data controller of personal information collected

Novartis Pharma AG (“Novartis”, “we”, “us”, “our”) will operate as Data Controller of the personal information you submit on this page. Your personal information may be shared with our country-level Novartis affiliate companies as necessary to fulfil the purpose described below.

Personal information collected

We collect the personal information you enter on this page, such as your name, country, and e-mail address (“Personal Information”).

Purpose for collecting personal information and related use

Based on your consent, we will use your Personal Information to send you updates, information, news, and notices of important events relating to the Keep It Pumping public heart failure disease awareness campaign.

Personal information disclosure to third parties

We will not sell, share, or otherwise transfer your personal data to third parties other than those indicated in this Privacy Notice.

In the course of our activities and for the same purposes as those listed in this Privacy Notice, your personal data can be accessed by or transferred to the below categories of recipients, on a need to know basis to achieve such purposes:

• Our personnel (including personnel, departments or other companies of the Novartis group); 
• Our other suppliers and services providers that provide products and services to us;
• Our IT systems providers, cloud service providers, database providers and consultants;
• Our business partners who offer products or services jointly with us;
• Any third party to whom we assign or novate any of our rights or obligations;
• Our advisors and external lawyers in the context of the sale or transfer of any part of our business or its assets

The above third parties are contractually obliged to protect the confidentiality and security of your personal data, in compliance with applicable law.

Your personal data can also be accessed by or transferred to any national and/or international regulatory, enforcement, public body or court, where we are required to do so by applicable law or regulation or at their request.

The personal data we collect from you may also be processed, accessed or stored in a country outside the country where Novartis is located, which may not offer the same level of protection of personal data.

If we transfer your personal data to external companies in other jurisdictions, we will make sure to protect your personal data by (i) applying the level of protection required under the local data protection/privacy laws applicable to Novartis, (ii) acting in accordance with our policies and standards and, (iii) for Novartis companies located in the European Economic Area (i.e. the EU Member States plus Iceland, Liechtenstein and Norway, the "EEA"), unless otherwise specified, only transferring your personal data on the basis of standard contractual clauses approved by the European Commission or the Swiss Federal Data Protection and Information Commissioner respectively. You may request additional information in relation to international transfers of personal data and obtain a copy of the adequate safeguard put in place by exercising your rights as set out in Section below.

Novartis has adopted Binding Corporate Rules, a system of principles, rules and tools, provided by European law, in an effort to ensure effective levels of data protection for sharing personal information within Novartis, in particular relating to transfers of personal information outside the EEA and Switzerland.

Novartis will not share your information with anyone who is not directly connected with this purpose.

Protection of your personal data

Novartis has implemented appropriate technical and organizational measures to provide an adequate level of security and confidentiality to your personal data, taking into account the nature of the data and the risk of processing such data.

The purpose thereof is to protect it against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.

Moreover, when handling your personal data, Novartis complies with the following obligations:

• Novartis only collects and processes personal data, which is adequate, relevant and not excessive, as required to meet the above purposes;
• Novartis ensures that your personal data remains up to date and accurate. For the latter, we may request you to confirm the personal data we hold about you. You are also invited to spontaneously inform us whenever there is a change in your personal circumstances so we can ensure your personal data is kept up-to-date.

Retention of Your Personal Information

Your personal information will be kept for a period of 24 months after your last access to this website.

Exercise of access rights and contact details

You may exercise the following rights under the conditions and within the limits set forth in the law:

• The right to access your personal data as processed by us and, if you believe that any information relating to you is incorrect, obsolete or incomplete, to request its correction or updating;
• The right to request the erasure of your personal data or the restriction thereof to specific categories of processing;
• The right to withdraw your consent at any time, without affecting the lawfulness of the processing before such withdrawal;
• The right to object, in whole or in part, to the processing of your personal data;
• The right to object to a channel of communication used for direct marketing purposes; and
• To the extent applicable the right to request its portability, i.e. that the personal data you have provided to us be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format without hindrance from us and subject to your confidentiality obligations.

If you have a question, if you are not satisfied how Novartis processes your personal data or if you want to exercise the above rights, you may send an email to global.privacy_office@novartis.com . When contacting Novartis, please add a description of your relationship and/or your interactions with us. If you wish to receive information related to your personal data, please also add a scan of your identity card for identification purpose, it being understood that we shall only use such data to verify your identity. When sending such a scan, please make sure to redact your picture and national registry number or equivalent on the scan.