Effective as of December 1, 2013
Who We Are
Thank you for your trust in Novartis Vaccines and Diagnostics (Novartis), and for taking the time to read our Privacy Statement. We are an affiliate of the Novartis Group, world leaders in healthcare with core businesses in pharmaceuticals, consumer health, generics, vaccines and diagnostics. This Privacy Statement tells you how we protect the privacy of personal information that you may provide to us.
"Safe Harbor" Certification for Privacy
As part of our commitment to privacy, Novartis has certified to the Safe Harbor privacy programs. There are two Safe Harbor programs. One is co-sponsored by the European Commission and the US Department of Commerce. The other is co-sponsored by the Swiss Federal Data Protection and Information Commission and the Department of Commerce. This means that Novartis has voluntarily implemented a set of privacy standards that are approved by the United States, European and Swiss governments for companies in the United States. Only a small percentage of US companies have certified to the Safe Harbor privacy standards.
Purpose of Privacy Statement
The purpose of this Privacy Statement is to explain what Novartis does with personally identifiable information that you provide to us, such as your name, mailing address or email address, age and information relating to your medical conditions. We want you to know how your personally identifiable information will be protected, who we may share it with, and for what purposes.
Collection of Your Information
Many of our services do not require any form of registration or identification. However, some of our services may require registration. (Some fields are required and some are optional.) This allows us to send you information that you request or to contact you about Novartis products and services on either a one-time basis, or longer. Registration is optional, but if you choose to withhold any personal data requested by us, it may not be possible for you to gain access to certain parts of the site or for us to provide the materials, information, or services that you would like to receive.
Personal Information Collected From You
The type of information collected from you will be based on the specific program that you register for, as indicated at the time of your registration. The information that we may ask you to provide may include your first and last name, your mailing address, your age, birth date, gender, or e-mail address. Novartis limits the collection and processing of personal information to what is necessary to fulfill the purposes for which it is to be used.
Consolidation of Information Collected From You
Many of our customers register for more than one Novartis program or service, through our websites, by calling Novartis, or through a third-party. When you register with us more than once, we may combine your personally identifiable information as well as any anonymous computer information collected (see below) and store it collectively. This helps us keep track of all of your preferences in one organized place, and helps us provide information to you based on a more informed review of your requests.
Novartis takes reasonable steps to ensure that personal data collected is reliable for its intended use, accurate, complete and current.
Collection of Anonymous Computer Information
When you visit our websites, we do not collect any personally identifiable information about you without your permission. However, we do collect anonymous information about you if your computer is set to allow that type of collection. (You can turn off the ability to collect some of this information on most computers.) This type of anonymous information allows us to evaluate customer interest in our websites and perform other market research activities, such as surveying browsing habits on our sites. It also allows us to monitor traffic to our websites. (For those who are interested in the details, some of the typical computer techniques we may use are "cookies", "internet tags" which are also called "action tags", "single-pixel GIFs", clear GIFs, "invisible GIFs, and "1-by-1 GIFs). If you would like more information about web tags and cookies associated with on-line advertising or how to opt-out of third-party collection of information, please visit the Network Advertising Initiative website, an independent website not sponsored by or affiliated with Novartis.
Consent to Provide Your Information to Novartis
We request your consent to collect your personally identifiable information when you seek to register for a Novartis program or service. In doing so, we also explain, for that program or service, what you are registering to receive and how we plan to use your personal information. We also offer you the option of discontinuing your consent ("opting out" or "unsubscribing") if you later decide that you no longer want to participate in that program or receive additional information from us. If we wish to use this information for purposes incompatible from those for which the data was initially collected, we will offer an effective way to opt out of the secondary use.
Sharing Your Information With Third-Parties
Novartis will not share your personal information with unaffiliated third-parties, such as marketers, for their own separate use unless we have obtained your opt-in consent to do so. When you provide personally identifiable information to Novartis, it will be accessible to some of Novartis' business partners, such as companies we retain to fulfill requests for information, answer telephone calls from consumers, or provide assistance to us on specific programs or projects such as newsletters. In addition, Novartis enters into business relationships with other companies, such as for joint marketing of a product, or for the sale of a Novartis product. In those cases, the other companies may also have access to your personally identifiable information. Novartis requires third-parties to whom it discloses personal data to protect personal information using substantially similar standards to those required by Novartis. We also require that they not use your personal information for any separate use that is not specifically authorized by us. There may also be instances where Novartis may be required to share your information with third-parties who have not been retained by us (directly or indirectly), such as with health authorities to report possible adverse drug experiences, during inspections or audits or as ordered or directed by courts or other governmental agencies. Many entities receiving personally identifiable information under these conditions have privacy requirements that apply to their handling of your information.
Sharing Your Information Within the Novartis Group of Companies
The information that you provide to Novartis may sometimes be shared with Novartis subsidiaries and affiliates within the Novartis global group. This may mean that your personally identifiable information may be transferred outside of the US to Novartis affiliates in other countries. Other departments within the Novartis group and other Novartis companies that may receive your information will abide by substantially similar privacy requirements relating to your personally identifiable information.
Security of Your Information
We use appropriate technical, administrative and physical safeguards to protect data that pertains to you from loss, misuse or alteration. Of course, no organization can guarantee the absolute security of personal information. You should keep in mind that internet transmissions, particularly email transmissions, are never 100% secure or error-free. Accordingly, we also caution you to guard your own computer and password against unauthorized access by others.
Links to Other Sites
Transfer of Your Information
When Novartis transfers personal information to countries other than the country where the information was provided, we do so in compliance with applicable privacy laws. We endeavor to protect personal information entrusted to us no matter what country it is stored in or transferred to and seek to have appropriate procedures in place to help ensure the security of your personal information. As noted above, we also adhere to the US Department of Commerce's Safe Harbor standards concerning the transfer of personal data from the European Union and Switzerland to the United States of America. Furthermore, Novartis has adopted Binding Corporate Rules, a system of principles, rules and tools, provided by European law, in an effort to ensure effective levels of data protection, in particular relating to transfers of personal information outside the EEA and Switzerland. Read more about your rights under the Novartis Binding Corporate Rules.
Protection of Children
Novartis will not knowingly collect, use or disclose personally identifiable information from a minor under the age of 13, without obtaining prior consent from a person with parental responsibility (parent or guardian). Novartis abides by the Children's Online Privacy Protection Act (COPPA) in the United States, and respects similar laws of other countries that protect the privacy of children. Should a child whom we know to be under 13 provide personally identifiable information to us, we will use that information only to respond directly to that child to inform him or her that we must have parental consent before receiving information about him or her.
Our privacy practices are periodically reviewed by our auditors to verify compliance with this Privacy Statement.
Updating and Accessing Your Information
We encourage you to update the information that you provide to us, such as providing us with a new mailing or email address. This will help us continue to provide information to you that best meets your needs. In addition, Novartis complies with laws and regulations applicable to the right to amend your data in our files. These rights are limited in some ways. In addition, in order to protect your data from unauthorized access or alteration by third parties, all requests to update or access your information will be subject to verification of the identity of the requesting individual.
Updated Novartis Privacy Policies
This Privacy Statement becomes effective on December 1, 2013. Novartis may update this Privacy Statement from time to time. We encourage you to review our Privacy Statement periodically.
How to Contact Us
If you have any questions about our Privacy Statement, please email or write to us at:
Integrity and Compliance Officer
Novartis Vaccines and Diagnostics, Inc.
350 Massachusetts Avenue
Cambridge, MA 02139
About Novartis Vaccines
Novartis Vaccines is the world's fifth-largest vaccines business.
Business Development & Licensing
Finding new partnership to develop new vaccines is one of the BD&L team mission.
Corporate citizenship rests on four pillars: patients, business conduct, people & communities, environmental care.