Lundbeck Privacy Notification

Date: 9 October 2020.

Privacy Notification for individuals who provide information on the webpage for the Lundbeck clinical study 18922A

1. Introduction

In connection with your child’s potential participation in the Lundbeck clinical study 18922A, H. Lundbeck A/S ("Lundbeck" or "we) will (as the data controller) collect, process, use and disclose personal data about you and your child as described in more details in this Privacy Notification.

Lundbeck will process your and your child’s personal data according to applicable legislation, including the EU General Data Protection Regulation ("GDPR").

2. What categories of personal data are we processing, for what purpose and on which legal basis?

We collect and process the following types of personal data about you or your child: We process your personal data for the following purpose: We process your personal data on the following legal basis:
Your contact details (name, address, phone, and email)

Your or your child’s medical history (age, diagnosis, disease state data, and concomitant medication)
Evaluation of your or your child’s participation in a scientific research within migraine Your explicit consent, cf. GDPR Article. 6 (1) (a)

Your explicit consent, cf. GDPR Article. 9 (2) (a)

3. How did we obtain your child’s personal data?

The personal data Lundbeck is processing about your child is collected from you.

4. Will we disclose your personal data to third parties?

Personal data being shared Recipients of your personal data Purpose of sharing your personal data Legal basis for sharing your personal data
Your contact details (name, address, phone, and email)

Your or your child’s medical history (age, diagnosis, disease state data, and concomitant medication)
Hospitals/Medical facilities doing research

Lundbeck business partners [within the area of research] such as Syneos Health and X Factor Advertising.
Evaluation of your or your child’s participation in a scientific research within migraine Your explicit consent, cf. GDPR Article. 6 (1) (a)

Your explicit consent, cf. GDPR Article. 9 (2) (a)

5. Will we disclose your personal data to data processors?

We transfer your personal data to our data processors, which will process your personal data on our behalf and on our instructions.

6. How long will we store your personal data?

We store your personal data for as long as necessary to fulfil the purposes above, however, for no longer than 12 months or closure of the study.

7. Your rights

Lundbeck has taken necessary and adequate steps in order to protect your and your child’s personal data and ensure your rights as a data subject. Please note that certain limitations may apply to your ability to exercise these rights. Subject to these limitations, you have the following rights:

  • Right of access
    • You have the right to request access to the personal data Lundbeck processes about you and your child.
  • Right to rectification
    • You have the right to rectification of inaccurate personal data concerning you and your child, including completion of incomplete personal data.
  • Right to erasure (right to be forgotten)
    • You have the right to the erasure of the personal data concerning you and your child.
  • Right to restriction
    • You have the right to restrict Lundbeck's processing of personal data concerning you and your child.
  • Right to data portability
    • Where processing is based on a consent or a contract and the processing is carried out by automated means, you have the right to receive the personal data concerning you and your child in a structured, commonly used and machine-readable format. You have the right to transmit this personal data to a third party without hindrance from Lundbeck, if technically possible.
  • Automated individual decision-making, including profiling
    • As a general rule you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or affects you significantly. This does not apply if, among other things, automated decision-making and profiling is necessary for entering into, or performing, a contract between you and Lundbeck.
  • Right to object
    • You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests as legal basis for the processing (as set out in article 6(1)(f) of the GDPR and section 6 of the Danish Data Protection Act), including profiling based on this provision.
    • Where your and your child’s personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, Lundbeck must no longer process the personal data for such purposes.

If processing of your and your child's personal data is based on your consent, you may withdraw your consent at any time. Please note that this does not affect Lundbeck's processing of your personal data prior to the withdrawal of your consent.

You also have the right to lodge a complaint with the competent supervisory authority, such as the Danish Data Protection Agency.

If you wish to exercise any of your rights as described above or have any questions, please contact the Lundbeck Group Data Protection Officer by using the contact information provided under Section 8 below.

8. Contact details of Lundbeck and Lundbeck’s Group Data Protection Officer

Should you have any questions in regards to the protection of your personal data or if you wish to exercise your legal rights, please contact Lundbeck or Lundbeck’s Group Data Protection Officer by using the below contact details:

H. Lundbeck A/S
Ottiliavej 5
2900 Valby
Denmark

Lundbeck’s Group Data Protection Officer:

E-mail: Dataprivacy@Lundbeck.com
Letter: Use above address, att: Data Protection Officer
Phone: Use above phone number and ask to speak to the Data Protection Officer

If you contact us via the above email address, H. Lundbeck A/S, and other Lundbeck group entities, will process the personal data you provide to us with in order to handle and respond to your inquiry. Please read our privacy notice regarding this processing activity here.