NOVARTIS GENERAL PRIVACY NOTICE FOR PARTICIPANTS OF NOVARTIS THAILAND WEBINAR

Effective: June 2021

At Novartis, we strive to be transparent in all our interactions. You are receiving this Privacy Notice because you are registering yourself with Novartis (Thailand) Co., Ltd. (referred as "Novartis" or "we" or "us") as participant (referred as “Participants”) of Novartis Thailand organized Webinar, and Novartis considers the protection of your personal data and privacy a very important matter.  

We invite you to carefully read this Novartis Privacy Notice for Participants of Novartis Thailand Webinar(“Privacy Notice”), which sets out in which context we are processing your Personal Data and explains your rights and our obligations when doing so.

What Personal Data will Novartis collect  from me
Novartis and / or its duly authorized third party may collect the following Personal Data from you through:

     Novartis Thailand Webinar Registration Page:

• your general and identification information (e.g. first name, last name, specialty and hospital / clinic) that you provided under registration page;
• your contact details (e.g., email address);
• your profession (e.g. Healthcare Professional / Novartis associates) that you provided under registration page;

Zoom Webcast -Third Party Webcast Technology Platform:

• information regarding your attendance in the forum / conference platform (eg. time sign-in/out; duration)   
• data you input into conversation or interaction features in the forum / conference platform (eg. Chatbox; Survey; Q&As)
• data that you as a Speaker / Moderator, have self-identified yourself in the event recording (eg. your visual and audio)   

   We remind you to also read the Microsoft Teams Privacy Statement available https://zoom.us/privacy [2]  which explain Microsoft Teams position as third party webcast technology platform provider position on cookies and other technologies tracking collection and processing solely for its own purpose.

How will Novartis use my Personal Data

Novartis and its affiliate entities or duly authorized third party may use my Personal Data for the following purpose:

• manage our relationship with you (e.g., through our databases);
• implement tasks in preparation of or to perform existing contracts (if any);
• provide you with appropriate knowledge on capability building programs;
• improve the quality of our interactions and services by adapting our offering to your specific needs;
• answer your requests and provide you with efficient support;
• send you surveys (e.g. to help us improve your future interactions with us);
• manage, plan and execute future communications and interactions with you (e.g. through the operation of a database keeping records of interactions with healthcare professionals / patient advocacy group or managing call planning as well as call reporting);
• invite you to events or promotional meetings sponsored by us (e.g. medical events, speaker events, conferences);
• manage our IT resources, including infrastructure management and business continuity;
• preserve the company’s economic interests and ensure compliance and reporting (such as complying with our policies and local legal requirements, tax and deductions, managing alleged cases of misconduct or fraud; conducting audits and defending litigation);
• manage mergers and acquisitions involving our company;
• archiving and record keeping; and
• any other purposes imposed by law and authorities.

Who has access to my Personal Data and to whom are they transferred  

Novartis will not sell, share, or otherwise transfer your Personal Data to third parties other than Novartis authorized third parties.  In the course of our activities and for the same purposes as those listed above, your Personal Data can be accessed by, or transferred to Novartis affiliate companies located worldwide and/or its authorized third parties such as agents or service providers, on need to know basis to achieve such purposes.

 The authorized third parties are contractually obliged to protect the confidentiality and security of your Personal Data, in compliance with applicable local law. Your Personal Data can also be accessed by or transferred to any national and/or international regulatory, enforcement, public body or court, where we are required to do so by applicable local law or regulation or at their request.

 The Personal Data we collect from you may also be processed, accessed or stored in a country outside the country where Novartis (Thailand). Co., Ltd. located, which may not offer the same level of protection of Personal Data.

 If we transfer your Personal Data to external companies in other jurisdictions, we will make sure to protect your Personal Data by:

1. applying the level of protection required under the local data protection/privacy laws applicable to Novartis (Thailand). Co., Ltd.; and
2. acting in accordance with our policies and standards

For intra-group transfers of Personal Data to our group companies the Novartis Group has adopted Binding Corporate Rules, a system of principles, rules and tools, provided by European law, in an effort to ensure effective levels of data protection relating to transfers of Personal Data outside the EEA and Switzerland.

How do we protect your Personal Data

We have implemented appropriate technical and organizational measures to provide an adequate level of security and confidentiality to protect your Personal Data against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.

How long do we store your Personal Data

Novartis will only retain your Personal Data for as long as necessary to fulfil the purpose for which it was collected and to comply with any local legal or regulatory requirements.

Personal Data collected and processed in the context of a dispute are deleted or archived (i) as soon as an amicable settlement has been reached, (ii) once a decision in last resort has been rendered or (iii) when the claim becomes time barred.

What are your rights and how can you exercise them

You may exercise the following rights under the conditions and within the limits set forth in the law: -

• the right to access your personal data as processed by us and, if you believe that any information relating to you is incorrect, obsolete or incomplete, to request its rectification or updating;
• the right to request the erasure of your personal data or the restriction thereof to specific categories of processing;
• the right to withdraw your consent at any time, without affecting the lawfulness of the processing before such withdrawal;
• the right to restrict use of your personal data;
• the right to object to the processing of your personal data;
• the right to object to direct marketing communications; and
• the right to request its portability, i.e. that the personal data you have provided to us be returned to you or transferred to the person of your choice, in a structured, commonly used and machine-readable format without hindrance from us and subject to your confidentiality obligations.

If you have data privacy related question or want to exercise the above rights, you may contact our Novartis Country Data Privacy Officer at [email protected] [3].

If you would like to know more about Privacy in Novartis please visit the following link: https://www.novartis.com/sites/www.novartis.com/files/novartis-data-privacy-principles.pdf [4]

If you are not satisfied with how we process your personal data, please address your request to our data protection officer at [email protected] [5], who will investigate your concern.

In any case, you also have the right to file a complaint with the competent data protection authorities, in addition to your rights above.

This Privacy Notice was created July 2021. Changes or additions will be notified through our usual communication channels (e.g. via this webcast site).