Data protection statement: 3CB site/ multichamberbags.co.uk (the Site)

1. Introduction

Fresenius Kabi Limited has issued this data protection statement to describe how we handle personal information relating to healthcare professionals when using our Site and providing your details.

The data protection statement sets out the personal information that we collect and process when you use the Site.

If you have any comments or questions about this data protection statement, then you can contact us at the details in section 13 below.

2. Purpose of this statement

This data protection aims to give you information as to how we collect and process information on the Site.

It is important that you read this statement together with any other privacy notice or data protection statement that we provide:

• You can find out how we process your information as health care professionals and/or business contacts here Data Protection Statement for Healthcare Professionals - Fresenius Kabi Great Britain (fresenius-kabi.com)

3. About the 3CB site:

The Site is owned by Fresenius Kabi but operated by a third-party provider IQ Media Limited and developed by Page & Page Consultants UK Limited on our behalf.

We have robust agreements and appropriate controls in place with these third party providers to ensure that your data is processed only in accordance with our instructions.

All information on the Site is hosted in the UK.

4. How is your information collected

You can access content on the Site without providing your information but you must confirm that you are a Health Care Professional.

You have the option to register with the Site by completing the self-registration form and by doing so you confirm that we may process your personal information to the extent required for you to receive marketing information relating to our multi-chamber bags and related products and services.

5. Types of personal information we collect

Where you register with the Site, the types of personal information we may process about you include but are not limited to:

• Identification data such as your first name, last name, title, date of birth, job role and title.
• Organisation details
• Your contact information including your email address and telephone numbers.
• Technical data such as your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Marketing data includes your preferences in receiving marketing from us; communication preferences; responses and actions in relation to your use of our services.

6. The legal basis on which we process information

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and specific context in which we collect it.

We may use your information in order to contact and/or provide information on products and services that you may be interested in

The processing is necessary for purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6.1 f, GDPR). These legitimate interests are:

• Maintenance of a database that contains all HCPs with whom we already collaborated or may collaborate in the future, to manage the interactions with you and other HCPs
• Establishment, exercise or defence of legal claims

You have given us your consent for the intended processing of your personal data (Art. 6.1 a, GDPR)

You can withdraw your consent at any time. You can withdraw your consent to all processing or for individual purposes of your choice. The withdrawal of consent will not affect the lawfulness of processing based on your consent before the withdrawal. You can withdraw your consent by sending an email to consentukire@fresenius-kabi.com.

7. Who we share your data with

When you are using the Site, your information will be hosted by our third party service providers who provide support and maintenance services to our team.

We have implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request.

There may be situations where we are under a duty to share your information. For example, we may be required by law to report certain information – this includes Disclosure UK, the Care Quality Commission who inspect the quality and safety of the care we provide, or if a formal court order has been issued. We may also have to share your information when it’s necessary for the prevention or detection of crime, prosecution of offenders, or where there are serious risks to the public or our staff.

8. Data retention periods

Personal information will be stored in accordance with applicable laws and kept as long as needed to carry out the purposes described in this statement.

For your information, we will retain this for as long as you are registered on the Site. If there isn’t any activity for six months we will email you and if we do not hear back from you we will delete the information that we hold about you.

9. Your data privacy rights as a user of the system

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal information changes; for example, if you move roles or change your name.

If you wish to access, correct, update or request deletion of your personal information you can do so by contacting us using the contact details provided in section 12 below you can object to processing of your personal information, ask us to restrict processing of your personal information or request portability of your personal information. Again, you can exercise these rights by contacting us using the contact details provided below.

If you are in any way dissatisfied about how we process your personal information, you have a right to lodge a complaint with the Information Commissioner's Office (ICO). This can be done at https://ico.org.uk/make-a-complaint/. We would, however, appreciate the opportunity to talk to you about your concern before you approach the ICO.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

10. Data security

Where your data is stored or hosted on the Site we can confirm as follows:
Data will be protected by SSL encryption so data cannot be intercepted.
Malware and vulnerability scanning will be in place.
The number of authorised admin users restricted.
Personal information database protected by password.

11. Review of this data protection statement

We may update this statement from time to time as necessary. The terms that apply to you are those posted here on the Site on the day you use the platform. We advise you to print a copy for your records.

12. Contact Details

If you have any question regarding our data protection statement, please contact us at the address below.

Alternatively, you may raise any questions or requests with the local Data Protection Advisor by contacting data.protection-uk@fresenius-kabi.com.

The Data Protection Officer for Fresenius Kabi is located in Germany and can be contacted at dataprotectionofficer@fresenius-kabi.com.

Fresenius Kabi Limited
Cestrian Court, Eastgate Way
Runcorn, WA7 1NT
United Kingdom
E-mail:data.protection-UK@fresenius-kabi.com