Data Protection Notice for Medical Inquiries

We store the inquiry, the answer, as well as (if available) the name, initials, address, e-mail address, telephone number and the role in the healthcare system (e.g. doctor, pharmacist, patient, etc.).

The processing of your data is carried out based on our legitimate interest (Art. 6 (1) f) GDPR), namely the collection and processing of inquiries about medicinal products for human use.  

If we receive an adverse event with your medical request, we will process your report as described in our Privacy Policy on Pharmacovigilance Human Pharmacy. 

1.    Processing principles

Reasonable technical and organizational measures for data security are implemented through internal regulations and - if the data is processed by an external service provider - by means of appropriate contractual agreements, for example using the EU standard contract clauses for data processing outside the European Union.

2.    Data transfer / Disclosure

In compliance with legal requirements and existing internal regulations, the data required for the respective purpose can be passed to other internal and external bodies in the following cases:

a.    Service Providers

We engage service providers to process your personal data for the purposes described in this data protection notice. These service providers process the data only on our behalf, in accordance with our instructions and under our control. We ensure by means of a separate contract that our service providers comply with data protection obligations (e.g. with our data processors by concluding corresponding data processing agreements).

To process requests for medicinal products for human use, we use a platform from the operator ArisGlobal.

b.    Boehringer Ingelheim-Companies

As part of a global group of companies, we involve other Boehringer companies that support us in data processing. Please find here an overview of the major consolidated Boehringer Ingelheim companies. These group companies process the data solely for the purposes stated in this data protection policy. This data processing is based on our legitimate interest in accordance with Art. 6 (1) f) GDPR, namely the efficient organization of our corporate administration and business communication.

c.    Data transfer to recipients outside the EU

Some of these service providers and Boehringer companies process personal data outside the EU. In such cases, Boehringer Ingelheim ensures an adequate level of data protection to comply with European law (usually through EU standard contractual clauses published by the European Commission). For further information on the legal basis for the data transfer to or by service provider to third countries please contact us via the address mentioned under 5. 

3.    How long do we store personal data?

Since the documentation of your request is important for legal reasons, it will be kept for up to 30 years.  

4.    What are your rights?

a.    Withdrawal of consents: You can withdraw your consents any time with future effect. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.  
b.    Right to information: You can request access to your personal data at any time. If you have provided personal data based on a contract or consent, you have the right to receive this data in a common and machine-readable format. You can revoke your consent at any time with future effect.
c.    Right to deletion, correction, restriction, data portability: Under certain conditions, you may also request the deletion, correction or restriction of the processing of your data. If your personal data is transferred to a country outside the EU that does not provide adequate protection, you may request a copy of the contract that ensures adequate protection of personal data. 
d.    Right to objection: If we use your personal data based on legitimate interest, you can object to the processing of your data. In this case, we will no longer process your data unless our interests prevail. You can object to the use of your data for direct marketing purposes, e.g. to receive mailing campaigns, at any time without further consideration.
e.    Right to complaint: If, despite our obligation to process your data lawfully, contrary to expectations, a violation of your right to lawful processing of your data occurs, you have the right to file a complaint to the Austrian data protection authority or another data protection supervisory authority in the EU, at your place of residence or work.

5.    Contact details

If you have any further questions about our use of personal data, this data protection information or would like to exercise your rights, you can contact us at any time or you can contact our data protection officer directly:

Boehringer Ingelheim RCV GmbH & Co KG
– Data Protection Officer –
Dr.-Boehringer-Gasse 5-11
1120 Vienna, Austria

E-Mail: datenschutzbeauftragter.AT@boehringer-ingelheim.com

If you have any questions or concerns about the processing of your personal data, you can also contact a supervisory authority. Responsible for Boehringer Ingelheim is:

Österreichische Datenschutzbehörde
 Barichgasse 40-42
 1030 Vienna
Telephone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Website: www.dsb.gv.at

6.    What happens if we change this privacy policy?

We will update this privacy policy from time to time. We will inform you about any changes to our Privacy Policy by publishing the new Privacy Policy here. If there are significant changes, we will publish an eye-catching notice on our website or send you an e-mail. If necessary, we also ask for your prior consent. You should review this Privacy Policy regularly for changes.

7.    Further data protection notices

Please note that in certain situations, additional data protection notices apply (for example, contracts for clinical trials).