Privacy policy

This information explains how personal data in relation to product safety, product quality or medical information enquiries is used by Ipsen.

Sources of Personal Data

Ipsen receives personal information directly from an individual, from someone who notifies us of an issue related to another person, or from someone making a pharmacovigilance report, quality complaint or medical information enquiry on their own behalf.

Personal Data We Collect

Where the notifier or person enquiring is a healthcare professional, we process (as relevant):

• Name and contact details (e.g. email, telephone number) along with any relevant details about their medical specialty area or place of work if needed.

Where the notifier or person enquiring is a patient or a member of the public we process (as relevant):

• Name and contact details, as needed to follow up with the enquiry or report.
• Contact details of any healthcare professional who can provide further information.
• Patient’s identification data (e.g. name, initials, age, date of birth, gender, weight, height, NHS patient identifier).
• Patient’s health data: medical condition, treatments administered, duration and frequency of treatments, test results, details of any adverse reaction(s), personal or family history, associated diseases or events, risk factors, information on the method of prescribing and use of the medicinal products and on the therapeutic conduct of the prescriber or health professionals involved in the management of the disease or adverse reaction.
• Patient’s family situation (e.g. information relating to ancestry and descent, conception, progress and outcome of pregnancy).
• Patient’s habits and behaviours (e.g. addiction, assistance, physical exercise, diet and exercise, dietary behaviour).

Telephone calls to Ipsen’s customer care, adverse reporting or medical information line(s) are recorded with your consent.

Purpose and Legal Basis of Data Processing and Personal Data Collection

Personal information is used:

• To meet our legal obligation to report adverse events/safety issues to health authorities.
• To enable the prevention, monitoring, evaluation and management of adverse events or safety issues related to medical products.
• To respond to medical information queries about our products.
• To monitor product quality complaints and potential of a market recall.
• To manage and improve the service we provide through our customer care line.

Ipsen processes personal data in relation to reporting adverse events/safety issues or product quality complaints, the legal basis for this is to meet our legal obligations under relevant health legislation.

Ipsen processes personal data in relation to medical enquiries, the legal basis for this processing is Ipsen’s Legitimate Interests as a pharmaceutical company.

Ipsen processes special category data, including health data, when a medical information enquiry is submitted to Ipsen. If you provide special category data to Ipsen about someone else’s health to us as part of a medical information enquiry you undertake to first obtain consent from the individual to process their data.

In order to fulfil its regulatory responsibility, Ipsen contacts the treating Consultant or General Practitioner, where this is needed in relation to an adverse event/safety issue or product quality complaint.

Disclosures of Personal Data

Your personal information will only be accessed by individuals authorised to have access to the personal data processed, within the limits of their Ipsen responsibilities:

• Ipsen Pharmacovigilance Teams, the collaborators and agents involved in the process of managing Pharmacovigilance.
• Ipsen Medical Information Teams, the collaborators and agents involved in the process of managing the medical information requested by you.
• Personnel of the audit department to verify compliance with regulatory requirements.
• Authorised personnel in charge of managing complaints.

The following recipients are the recipients of personal information as necessary for the performance of their duties:

• Data Processors (Pharmacovigilance and Medical Information service providers) who process data on behalf of Ipsen. This includes the ProPharma Group, who are a data processor for Ipsen, to support the processing of safety reports and product quality complaints and responding to medical information enquiries. A list of any other processors used can be provided on request.
• HCPs involved in the follow-up of the patient and HCPs or other professionals who can provide additional information.

Information related to you is made available to other entities within the Ipsen group of companies for the purpose of meeting adverse event reporting requirements.

Ipsen are required to report adverse event relevant information to Health Authorities, bodies responsible for the evaluation of a medicinal product, or parties whose medicines, devices or products could be implicated across the world, some of whom have different levels of data protection. We limit the amount of personal data included in this reporting to a minimum. For patients, we would provide patient age / date and year of birth (where applicable), initials and gender as provided, but not the patient’s name. Where adverse events/safety issues are reported on behalf of patients, we provide the patient’s name, profession, initials, address, email and telephone number of the reporter as provided. The contact information is required to be able to follow-up with the reporter to gain high quality and complete information on adverse events.

Retention of Personal Data

Ipsen is under a legal obligation to retain adverse event information containing your personal information for a minimum of ten (10) years after the product is withdrawn in the last country where the product is marketed.

Ipsen retains personal information contained in respect of product quality complaints for a minimum of five (5) years after the enquiry.

Ipsen retains personal information in relation to medical information enquiries for a minimum of five (5) years for healthcare professionals and one (1) year for patients/consumers.

This information explains how personal data in relation to Healthcare Professionals (“HCP”), individuals from Healthcare Organisations (“HCO”) and individuals representing Patient Organisations (“PoRG”) with whom Ipsen has professional interactions is used by Ipsen.

Sources of Personal Data

Ipsen receives personal information directly from individuals, from someone who notifies us of an issue related to another person, or from various healthcare organisations and patient organisations represented by individuals.

We collect basic information about you from a range of sources, including directly from you, or your employer, the OneKey HCP database run by IQVIA, from publicly available sources, third party providers of HCP communication services and other suppliers or partners that work with us.

When we collect professional information about you, we will usually get this directly from you, although sometimes we will obtain information from publicly available sources, such as websites or publication databases, journals and other sources.

We receive some data about you from our third-party event organisers, or from other third parties working with us to fulfil other services.

Personal Data We Collect

Ipsen processes personal information about HCPs, individuals from HCOs and PoRGs for a range of business purposes. Ipsen processes the following information:

Personal Information

Basic contact details including your first name, last name, professional title, job title, email address, postal address, telephone/mobile numbers, and place of work.

Professional Information

Relevant information from your CV, academic and professional qualifications, professional registrations, Information about your medical field and therapeutic practice.

Information about your scientific experience, such as participation in past or current studies and trials, events, publication of academic or scientific research and articles.

Your professional associations through memberships, boards, links to universities, educational institutions, awards, editorial boards and other related activity.

Information relevant to Meetings, Events and Travel

Information relating to arranging attendance at professional events, including, as needed, your passport, visa information, residency, nationality, travel, special diet and accommodation requirements.

Professional information you share for an event, and any presentations or papers that relate to you.

We capture photographs or film of you at events (with your consent as appropriate). At some meetings, where we use online tools, we ask to record meeting contents.

If you visit our site, we will collect basic information to manage access to the building and we capture images on our CCTV cameras.

Financial Information relevant to Contracting

Information we need to contract with you and to pay you, including bank account details and VAT or other tax details.

Details of our interactions with you in relation to any grants, donations or sponsorship activities.

Transfers of Value

Details of all direct or indirect transfers of value, whether in cash, in kind or otherwise, provided to you.

Information about our interactions with you and your views and opinions

Information relating to your interactions with members of the Ipsen group, such as meetings we have had with you, topics of interest.

Your views and insights related to particular therapy areas or treatments.

Information about your views and opinions collected during an event, through surveys, polls or Q&A sessions.

Information about the promotional, scientific and medical activities/interactions you have with us.

Medical Enquiries

Medical enquiries you submit to any member of the Ipsen group.

IT Access Information

Identification information to deliver products or services, such as access to particular websites, for example, login details, passwords, online identifiers or cookies.

Marketing Consents

Whether you have consented to receive electronic messages of a promotional nature from Ipsen (unsolicited).

You may opt out or unsubscribe from marketing communications using our unsubscribe functionality in our communications.

Purpose and Legal Basis of Data Processing and Personal Data Collection

We use personal data to:

• To meet our legal obligation to report adverse events/safety issues to health authorities.
• To enable the prevention, monitoring, evaluation and management of adverse events or safety issues related to medical products.
• To respond to medical information queries about our products.
• To monitor product quality complaints and potential of a market recall.
• To manage and improve the service we provide through our customer care line.
• To engage with the patient organisation communities.
• To maintain relationships with you and provide relevant information and materials concerning Ipsen Products and Services.
• To keep you informed of relevant meeting and events relevant to your field of expertise and medical specialism.
• To contract with you in order for you to deliver services to Ipsen, including to organise transport and accommodation to attend meetings and events.
• To understand best practice, medical insights and current approaches within your medical field.

In relation to those purposes. Ipsen relies on a number of different legal bases for that processing, as detailed below.

Legal basis:

Article 6 1 (f) Legitimate Interests

Purposes:

We collect and use personal data for the purposes of the legitimate interests of Ipsen to manage our relationship with you in terms of professional and scientific activities and promoting and providing information and support about our products and services. This includes:

• Our field teams keeping in touch with you, recording their interactions and sharing information about our products and therapy areas.
• At some meetings we record online meeting content, but we will inform you of this in advance and ask for your agreement. We will use this content for the purpose of training and support.
• Providing you with literature required to decide on treatment, and other commercial activities such as the provision of scientific information.
• To provide you with promotional materials and access to support tools and services and to respond to your requests for information. Providing your information to third parties sending promotional materials on our behalf.
• Communicating with you about safety issues.
• Gathering your views and opinions on our products, our activities, or therapy areas through discussion, meetings, events or surveys, market research or other activities. Inviting you to be part of advisory boards or to undertake other activities related to your specialism.
• Gathering information about you to understand your professional expertise in order to target our interaction with you, develop databases of thought leaders and specialists in different therapy areas and set fair payment rates for particular activities.
• Managing arrangements for events. Including inviting you to speak or participate and sharing data with event organisers.
• Taking film or taking photographs at events. If you do not wish to be filmed or photographed as part of the audience, please inform your contact person at Ipsen before the event. Where appropriate, we will ask for your consent to use videos or photos that focus on you as an individual.
• Inviting you to participate and managing participation in other activities, including clinical trials, grants and donations or sponsorship activities and engaging you in other specialist services.

We share data related to audit and compliance activities.

• We collect and use personal data for the purposes of meeting our obligations to evidence transactions and ensure transparency on transfers of value under the Association of the British Pharmaceutical Industry (“ABPI”) Code of Practice or the Irish Pharmaceutical Healthcare Association (IPHA) Code of Practice for the Pharmaceutical Industry, as relevant. This involves disclosing details about payments made to you to Disclosure UK and IPHA in Ireland.
• We will rely on your consent or on Ipsen’s legitimate interests to disclose transfers of value information on an individual level. The legal basis for the transfer will be provided to you in your agreement with Ipsen for the specific activity.
• We are required to disclose certain information about payments to you and our financial relationship with you to auditors, and other government agencies or auditors relating to our regulatory activities, in response to authorised information requests, or as otherwise required by laws, regulations, or industry codes. We do this for legitimate interests or because there is a legal obligation to do so.
• Relying on our legitimate interests, we will use your information to inform you prior to the publication of a transfer of value, your principal practice address and the amount of the Transfer of Value.

Legal basis:

Article 6 1 (b) Contract

Purposes:

We collect and use personal data for the purposes of contracting with you for your professional inputs, including:

• Engaging your professional services and facilitating meetings or engagements with you.
• Paying your fees and or expenses, and arranging accommodation and travel (where applicable).
• Keeping administrative records about your contract activities with us.

Legal basis:

Article 6 1 (a) Consent

Purposes:

We ask for your consent for processing your personal data in some circumstances, including:

• To send you promotional materials by email (unless you have specifically asked us to send materials to you).
• In some cases, where we provide Apps or Services that operate based on your consent.
• To use individual photographs or film or testimonials from you, where appropriate.
• Where necessary, to provide your details to third parties to make arrangements for meetings and events.

Legal basis:

Article 6 1 (c) Legal Obligation

Purposes:

We process personal information in order to meet our legal obligation to undertake adverse event or product quality investigations. A separate detailed privacy notice is available for these activities.

Retention of Personal Data

Ipsen retains financial and contractual records in relation to HCP, HCO and POrG engagements for a minimum of eight (8) years after the termination date and all other information is retained in line with Ipsen’s Retention and Archiving guidance.

This information explains how personal data in relation to Ipsen’s websites and information technology systems is used by Ipsen.

Sources of Personal Data

Ipsen receives personal information directly from individuals when they use or interact with Ipsen websites and technology systems. This information is used when they register their information as a user or send an enquiry through our website or they access Ipsen technology.

In the normal course of functionality, Ipsen websites, apps, technology, information systems and software systems all process personal data.

Personal Data We Collect

Ipsen processes personal information for a range of business purposes. Ipsen processes the following information:

Identification Information (Website Registrations)

Personal data includes your first name, last name, professional title, job title, email address, postal address, telephone/mobile numbers, and place of work.

Technical Data

Technical Personal Data includes IP address, the type of browser used, the operating system, the domain name and address of websites from or to which it is accessed, information about the pages visited by users on the web, access time and time spent on each page, analysis of the internal path and other parameters relating to the user’s operating system and IT environment.

Such technical/IT data is collected and used exclusively in an aggregated and anonymous form and is used to determine liability in the event of alleged IT or electronic crimes that cause damage to the Website.

Purpose and Legal Basis of Data Processing and Personal Data Collection

For the purposes of Ipsen websites and technology, personal data is used:

• To respond to your interactions, requests or enquiries.
• To personalise your online or digital experience.
• To perform website analytics and measure website performance.
• To track and monitor adverse events and other activities related to pharmacovigilance.
• To maintain an Ipsen Website, including for security purposes.

Your personal data will not be sold, shared or otherwise distributed to third parties without an appropriate legal basis, or where we are required to do so because of an applicable law, court order or governmental regulation, or if such disclosure is otherwise necessary in support of any criminal or other legal investigation or proceeding here or abroad.

Ipsen processes data in relation to website visitors for a range of purposes stated above. In relation to those purposes, Ipsen relies on a number of different legal bases for that processing, as detailed below.

Legal basis:

Article 6 1 (f) Legitimate Interests

Purposes:

We collect and use personal data for the purposes of the legitimate interests of Ipsen to manage our relationship with you in terms of providing information and support about our products and services.

Legal basis:

Article 6 1 (a) Consent

Purposes:

We ask for your consent for processing your personal data in some circumstances, including:

• To send you promotional materials by email (where you have specifically registered with us to send materials to you).
• To provide Apps or Services that operate based on your consent.

Legal basis:

Article 6 1 (c) Legal Obligation

Purposes:

We process personal information captured by websites and social media forums in order to meet our legal obligation and undertake adverse event or product quality investigations.

A separate detailed privacy notice is available for these activities.

Retention of Personal Data

Ipsen retains all personal information in line with Ipsen’s Retention and Archiving guidance.

Redirect to External Sites

To make it possible to incorporate Social Network functions directly within Ipsen websites (e.g. the “Like” function on Facebook, the “Follow” function on Twitter), some special tools named Social plug-ins might be present on this website. All Social plug-ins are marked by the respective social network logo.

When you interact with a plug-in present on an Ipsen website (e.g. by clicking the “Like” button) or leave a comment, the corresponding information is sent by the browser directly to the social network platform (in this example, Facebook) and memorised by it.

Please consult the privacy policy of the social network if you would like to have more information about the purpose, type and method of personal data collection, processing, utilisation and storage by the social network platform as well as for details of how to exercise your rights.

Links From/To Third Party Websites

From Ipsen websites, there are links to other websites, and directs to the Ipsen website by third parties.

The Data Controller declines all responsibility for any requests for and/or granting of personal data to third party websites and in relation to management of the authentication credentials issued by third party entities.

You should review the privacy policies of any third-party site before providing any information.

Cookies and similar technologies

This website uses cookies and similar technologies (“cookies”), including third-party cookies. Cookies are small data files which are placed on your computer, smartphone or other device. Cookies are stored on the hard disk of your device without any risk of damaging it. When you enter the website, you can:

• Accept the use of cookies;
• Refuse the use of cookies; or
• Set your cookies preference.

Please consult our Cookies Policy if you would like to have more information.

This information explains how personal data in relation to visitors to Ipsen’s premises, including Ipsen organised events and meetings at third party premises (“Ipsen Sites”) is used by Ipsen.

Sources of Personal Data

Ipsen receives personal information directly and indirectly from individuals when they attend Ipsen Sites. This includes scenarios where a visitor attends Ipsen announced or unannounced.

Personal Data We Collect

Personal information is used by Ipsen to monitor and control access to Ipsen Sites for a range of business purposes, including usual business organisation, Ipsen Site security, and health and safety reasons and for a range of business purposes. Ipsen processes the following information:

Identification Information (Website Registrations)

Personal data including your first name, last name, professional title, job title, email address, postal address, telephone/mobile numbers, and place of work, dates and times of visits, photo, CCTV images, record of areas of Ipsen Sites you have accessed, records of Health and safety training, signature, fingerprints (where such biometric systems are in operation) and identification.

Purpose and Legal Basis of Data Processing and Personal Data Collection

Personal Information data is used:

• For the security of access to Ipsen Sites.
• To protect your health and safety as a visitor to Ipsen Sites.
• To prevent, investigate and detect possible non-compliance with company regulations and procedures or contribute to investigations of potential criminal activity and anti-social activity.
• To verify facts surrounding your visit where enquiries are made by yourself, Ipsen or an authority.

Ipsen processes data in relation to Ipsen Site visitors for a range of purposes stated above and data processing related to those purposes. Ipsen relies on a number of different legal bases for that processing, as detailed below.

Legal basis:

Article 6 1 (f) Legitimate Interests

Purposes:

We collect and use personal data for the purposes of the legitimate interests of Ipsen to manage our relationship with you.

Legal basis:

Article 6 1 (a) Consent

Purposes:

We ask for your consent for processing your personal data in some circumstances, in particular where this involves the processing of sensitive personal data. Examples of this includes:

• Access and disability related information to facilitate site access.

Legal basis:

Article 6 1 (c) Legal Obligation

Purposes:

We process personal information in order to meet our legal obligation to meet health and safety legislation whilst you visit Ipsen Sites.

Retention of Personal Data

Ipsen retains Site access records records for a minimum of one (1) year and all other information is retained in line with Ipsen’s Retention and Archiving guidance.

This information explains how personal data in relation to visitors to Ipsen’s Customers, Service Providers and Business Partners (collectively “Business Partners”) is used by Ipsen.

Sources of Personal Data

Ipsen receives personal information directly from Business Partners in the usual course of Ipsen business.

Personal Data We Collect

Ipsen processes personal information about Business Partners for a range of business purposes. Ipsen processes the following information:

Personal Information

Basic contact details including your first name, last name, professional title, job title, email address, postal address, telephone/mobile numbers, and place of work.

Professional Information

Relevant information from your CV, academic and professional qualifications, professional registrations, Information about your medical field and therapeutic practice.

Information about your experience, publications of academic or scientific research and articles.

Your professional associations through memberships, boards, links to universities, educational institutions, awards, editorial boards and other related activity.

Information relevant to Meetings, Events and Travel

Information relating to arranging attendance at professional events, including, as needed, your passport, visa information, residency, nationality, travel, special diet and accommodation requirements.

Professional information you share for an event, and any presentations or papers that relate to you.

We capture photographs or film of you at events (with your consent as appropriate). At some meetings, where we use online tools, we ask to record meeting contents.

If you visit our site, we will collect basic information to manage access to the building and we capture images on our CCTV cameras.

Financial Information relevant to Contracting

Information we need to contract with you and to pay you, including bank account details and VAT or other tax details.

Details of our interactions with you in relation to any grants, donations or sponsorship activities.

Transfers of Value

Details of all direct or indirect transfers of value, whether in cash, in kind or otherwise, provided to you.

Information about our interactions with you and your views and opinions

Information relating to your interactions with members of the Ipsen group, such as meetings we have had with you, topics of interest.

Your views and insights related to Ipsen business.

Information about your views and opinions collected during an event, through surveys, polls or Q&A sessions.

Information about the commercial activities/interactions you have with us.

Medical Enquiries

Medical enquiries you submit to any member of the Ipsen group.

IT Access Information

Identification information to deliver products or services, such as access to particular websites, for example, login details, passwords, online identifiers or cookies.

Marketing Consents

Whether you have consented to receive electronic messages of a promotional or marketing nature from Ipsen (solicited or unsolicited).

You may opt out or unsubscribe from marketing communications using our unsubscribe functionality in our communications.

Purpose and legal Basis of Data Processing and Personal Data Collection

Personal information is used:

• To manage our business relationships.
• To respond to your interactions, requests or enquiries.
• Identify stakeholders who are relevant to Ipsen.
• Facilitate meetings and discussions.
• For sharing data as needed as part of a tendering or contracting processes.
• For managing health and safety and security at our sites, including giving access to and recording information about training we require and CCTV recordings.
• For giving access to relevant IT resources, tools and systems.
• To provide customer service support and dealing with enquiries.
• To manage audit requirements.
• To make payments, manage accounting and tax information and corporate reporting.
• To deal with possible misconduct or fraud cases.
• For complying with legal and corporate requirements and supporting any relevant litigation.

The legal bases for processing personal data of our Business Partners for the above purposes, are:

Legal basis:

Article 6 1 (b) Contractual Necessity

Purposes:

Purposes which are necessary in order to perform a contractual agreement such as basic information processing and making payments.

Legal basis:

Article 6 1 (f) Legitimate Interests

Purposes:

We collect and use personal data for the purposes of the legitimate interests of Ipsen to manage our relationship with you.

Legal basis:

Article 6 1 (a) Consent

Purposes:

We ask for your consent for processing your personal data in some circumstances, in particular where this involves the processing of sensitive personal data. Examples of this includes:

• Access and disability related information to facilitate site access.

Legal basis:

Article 6 1 (c) Legal Obligation

Purposes:

We process personal information in order to meet our legal obligation to meet health and safety legislation whilst you visit Ipsen Sites.

Retention of Personal Data

Ipsen retains financial and contractual records for a minimum of eight (8) years after the termination date and all other information is retained in line with Ipsen’s Retention and Archiving guidance.

This information explains how personal data in relation to responses to Ipsen’s job advertisements, recruitment and selection processes for candidates prior to employment with Ipsen is used by Ipsen.

Sources of Personal Data

Ipsen processes personal information about you from public digital sources, such as LinkedIn, from recruitment agencies or directly from candidates when responding to an Ipsen job advertisement on a web portal or recruitment software.

Personal Data We Collect

The personal data process includes:

Identification and Personal

Information Personal data including your first name, last name, professional title, job title, email address, postal address, telephone/mobile numbers, and place of work, academic and professional experience, CV, work history and salary expectations, your right to work in the country of an Ipsen affiliate, details about your recent employer and referencing contact information.

If we arrange an interview with you, you might be asked if you need us to make any special arrangements for your interview, which might mean you disclose some sensitive data about yourself.

We will also record information about your responses during interviews. We might also hold information about any assessments or tasks we ask you to complete during the application process.

If you are successful, we will record details of your offer. If you accept a role with us, we will then load your data onto our HR system. Before you start at Ipsen, we will ask you to complete background checks, during which we collect the following:

• Information about your health.
• Identify checks documents, i.e. a copy of your passport.
• Where appropriate, other background checks.
• And where your role requires it, checks on any criminal convictions.

Technical Data

Technical Personal Data including your IP address, the type of browser used, the operating system, the domain name and address of websites from or to which it is accessed, information about the pages visited by users on the web, access time and time spent on each page, analysis of the internal path and other parameters relating to the user’s operating system and IT environment.

Such technical/IT data is collected and used exclusively in an aggregated and anonymous form and is used to determine liability in the event of alleged IT or electronic crimes that cause damage to the Website.

Purpose and Legal Basis of Data Processing and Personal Data Collection

Personal information is used:

• To respond to your interactions, requests or enquiries.
• To personalise your online or digital experience.
• To perform website analytics and measure website performance.
• To track and monitor adverse events and other activities related to pharmacovigilance.
• To maintain an Ipsen Website, including for security purposes.

Your personal data will not be sold, shared or otherwise distributed to third parties without an appropriate legal basis, or where we are required to do so because of an applicable law, court order or governmental regulation, or if such disclosure is otherwise necessary in support of any criminal or other legal investigation or proceeding here or abroad.

Depending on the processing activity, we rely on the following lawful bases for processing your personal data.

Legal basis:

Article 6 1 (b) Contract

Purposes:

We rely on article 6 1(b) of UK/EU GDPR, which relates to processing necessary to perform a contract or to take steps at your request, before entering a contract, for the following:

• We collect and use your information to process your application, to make decisions about shortlisting and to contact you during the application process. We will also share data with any third parties that are assisting us with the recruitment process.
• We ask you to complete assessments or tasks during the application process and we will keep data about that to help us to make a decision.
• If you are offered a post, we will process your information to make you an offer. We will also set you up on our systems.
• We might use your contact details to send you messages and meeting invitations before you start.
• If you accept our offer, we will use your information to set up your contract, make organisational arrangements and share your data with any third parties that work with us to provide any benefits.

Legal basis:

Article 6 1 (c) Legal Obligation

Purposes:

We will rely on Article 6 1 (c) to comply with our legal obligations, and the Equality Act, to process any information you provide to us to make any reasonable adjustments you might need during the recruitment process.

Where we process special category personal data about you, we do so in line with the relevant conditions for processing this type of data in Article 9 of UK/EU GDPR, which are:

Condition for processing:

Article 9 2 (b) Employment and social security and social protection law

Purposes:

We will rely on Article 9 2 (b), in relation to employment to process any information you provide as part of your application which is special category data, such as health, religious or ethnicity information including, for example:

• Collecting ethnicity data, which we use in aggregated form to monitor equality.
• To check your right to work in the country.
• To carry out background checks on your health as relevant to your role.
• To make special arrangements for your interview.

Retention of Personal Data

Ipsen retains financial and contractual records for a minimum of eight (8) years after the termination date and retains job applicant information for up to two (2) years and all other information is retained in line with Ipsen’s Retention and Archiving guidance.

This information explains how personal data in relation to Government Departments, Political Organisations, Media and Industry Organisations (“Industry Stakeholder”) interactions with Ipsen is used by Ipsen.

Sources of Personal Data

Ipsen processes personal information about you from public digital sources, Ipsen’s third party service providers and publications when interacting, contracting and engaging with Industry Stakeholders in the usual course of Ipsen business.

Personal Data We Collect

Personal information is used by Ipsen:

Personal Information

• Contact information, name, email address, telephone numbers, postal address.
• Job function, title, job title and company details, place of work and relevant business activity records.
• Professional Experience, CV, work history, media activities, publications, links to other organisations.
• Car registration, picture and badge number and CCTV footage.
• Payment details, bank account details.
• Records and results of any Health and Safety or Security training undertaken when visiting an Ipsen site.

Purpose and Legal Basis of Data Processing and Personal Data Collection

Personal information is used:

• To manage our business relationships.
• To respond to your interactions, requests or enquiries.
• Identify stakeholders who are relevant to Ipsen.
• Facilitate meetings and discussions.
• For sharing data as needed as part of a tendering or contracting processes.
• For managing health and safety and security at our sites, including giving access to and recording information about training we require and CCTV recordings.
• For giving access to relevant IT resources, tools and systems.
• To provide customer service support and dealing with enquiries.
• To manage audit requirements.
• To make payments, manage accounting and tax information and corporate reporting.
• To deal with possible misconduct or fraud cases.
• For complying with legal and corporate requirements and supporting any relevant litigation.

The legal bases for processing personal data of our Business Partners for the above purposes, are:

Legal basis:

Article 6 1 (b) Necessity

Purposes:

Purposes which are necessary in order to perform a contractual agreement such as basic information processing and making payments.

Legal basis:

Article 6 1 (f) Legitimate Interests

Purposes:

We collect and use personal data for the purposes of the legitimate interests of Ipsen to manage our relationship with you.

Legal basis:

Article 6 1 (a) Consent

Purposes:

We ask for your consent for processing your personal data in some circumstances, in particular where this involves the processing of sensitive personal data. Examples of this includes:

• Access and disability related information to facilitate site access.

Legal basis:

Article 6 1 (c) Legal Obligation

Purposes:

We process personal information in order to meet our legal obligation to meet health and safety legislation whilst you visit Ipsen Sites.

Retention of Personal Data

Ipsen retains financial and contractual records for a minimum of eight (8) years after the termination date and all other information is retained in line with Ipsen’s Retention and Archiving guidance.