Privacy policy

Last updated: 1st November 2022

Introduction

This Privacy Notice explains how and why Huvepharma processes your personal data and describes your privacy rights. For the purposes of this notice “Huvepharma”, “we” or “us” means Huvepharma EOOD (having its seat and registered address at 3a, Nikolay Haytov Str., 5th floor, 1113 Sofia, Bulgaria), all its subsidiaries, branches, or representative offices around the world. As a global organization, Huvepharma has multiple legal entities in different jurisdictions that are responsible for the processing of your personal data. We comply with the General Data Protection Regulation (GDPR) and the respective applicable national legislation in the countries in which we operate.

Scope

This Privacy Notice applies to the processing activities we conduct towards visitors of our website at: https://huvepharma.com/, existing and prospective customers, partners, participants of Huvepharma meetings, conferences, and events. If you are an employee, contractor, consultant, or prospective employee of Huvepharma, the information about how we process your personal data will be shared with you before processing takes place. If you are visiting our website as a prospective employee, please refer to the section that applies to our job applicants here.

Who is responsible for data processing?

For the purpose of the applicable EU Data Protection law, including but not limited to GDPR, the company responsible for your personal data as a data controller is Huvepharma EOOD, having its seat and registered address at 3a, Nikolay Haytov Str., 5th floor, 1113 Sofia, Bulgaria or, as the case might be, the relevant local legal entity that is a contracting party for the purposes of providing products or services or the subsidiary you have contacted.

If you have any questions regarding this privacy notice or the processing of your personal data, please contact our Data Protection Officer by sending an e-mail to [email protected].

Personal data we collect

The personal data that we collect, and how we collect it, depends upon how you interact with us. Personal information that we hold about you may include your: names, citizenship, email address, postal address, job title/position, telephone number, data relating to our website: IP address, cookies and other technical data collected during your visit at our website (for more information, please review our Cookies Policy - https://huvepharma.com/legal/cookies/).

Why do we use your personal data?

• To enter into agreements or facilitate the sales of Huvepharma products or in order to present or popularize our products
• To maintain records of past, current, and prospective clients and partners
• To facilitate your attendance at our conferences or events
• To provide you with Huvepharma online newsletter and product information through electronic means
• To provide you access to our apps and/or platforms and manage your accounts
• To respond to a request or a complaint you might make to us
• To comply with our regulatory and legal requirements and/or obligations

What is the legal basis for data processing?

• Performance of our contract: in some cases, we will need to process your personal data in order to execute the obligations under our contract or in order to undertake the necessary steps to enter into a contract.
• Compliance with legal obligation: processing of your personal data may also be necessary for compliance with a legal requirement and/or obligation to which Huvepharma is subject.
• Legitimate interests: Huvepharma may process your data whenever it is necessary for the purposes of the legitimate interests pursued by Huvepharma, except when such interests are overridden by the interests or fundamental rights or freedoms of data subjects.
• Consent: in certain circumstances, we will seek to obtain your consent to each processing information before we undertake certain processing activities with your personal data (for example: when you subscribe to our newsletter).

With whom we share personal data and to whom are they transferred?

For the purposes described above, we may share your information with any of the following groups:

• Any of our subsidiaries, branches or representative offices, where necessary and compliant with applicable personal data protection laws and regulations
• Public authorities when the law requires us to share this data
• Suppliers and services providers that support us to provide our products and services
• Third party service providers who perform functions on our behalf, where а data processing agreement or similar protection is in place (e.g., IT systems providers, cloud service providers, database providers and consultants, subcontractors, etc.)

The personal data we collect from you may also be transferred to third countries outside the European Economic Area (“EEA”) (i.e., the EU Member States, together with Norway, Iceland and Liechtenstein), which may not offer the same level of protection of personal data. Whenever we transfer your personal data outside of the EEA, we will provide adequate protection of your personal data and ensure that transferring personal data is possible only where the third country provides for an adequate level of protection or under an agreement which satisfies EU requirements for the transfer of personal data to data processors or data controllers outside the EEA, such as standard contractual clauses approved by the European Commission.

How do we collect your personal data?

Directly from you: information that you communicate to us when you interact with our website, or other applications or, as a customer request our products and services or register for our events. We collect personal information in writing, by telephone, by e-mail and or during our personal meetings.

Third parties or publicly available sources: we may obtain data and information about you from our business partners (e.g., to verify a business contact or financial information) or from publicly available sources (websites, publications, public social media profiles, public registers, etc.).

Data we collect automatically: when you visit our website or our applications, we may collect technical data about your equipment, IP address, browsing actions and patterns through certain technologies, such as cookies.

Providing your personal data is voluntary, however if you do not provide us with the necessary information, we will not be allowed to conclude an agreement, perform our services, or reply to your enquiry.

The processing of your personal data will not be based on automated decision-making, including profiling.

Information for marketing purposes

When you have consented to us using your personal data for marketing purposes, we may use your data and information to send you updates and news concerning Huvepharma products and/or services.

If you are currently receiving our marketing emails and you wish us to stop using your information for these purposes, then you can use the unsubscribe link at the bottom of our newsletter or change your email preferences here (https://huvepharma.com/legal/unsubscribe/).

For how long we retain your data?

We will not keep your personal data for longer than is necessary for the purposes for which we collect it unless the law requires us to preserve it (for example, due to the applicable statute of limitations or statutory retention periods).

What are your rights?

As a data subject you have and can exercise the following rights:

• the right to access your personal data, as well as to receive information about their processing
• the right to request the correction of any inaccurate or completion of any incomplete personal data
• the right to deletion ("right to be forgotten")
• the right to restrict the processing of your personal data
• the right to data portability in a structured, commonly used, and machine-readable format
• the right to withdraw any consent you have previously given at any time and free of charge. This will not affect the lawfulness of any processing carried out before you withdraw your consent
• The right to complaint: If you are located in the EU, you also have the right to lodge a complaint about the way we handle your data with the competent supervisory authority in the relevant country. The name and contact details of the competent supervisory authorities in the EU are available at the following link:
  http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

How do we protect your personal data?

We take the security of your data seriously and protect the confidentiality of data and information obtained in the course of our business activities. We have internal policies and controls, as well as appropriate physical, technical and organizational measures in place to ensure that your data is not lost, accidentally destroyed, misused, or disclosed. The access to such information is limited to those employees, subsidiary companies, branches, representative offices and third parties who need to know that data and information for the purposes set out in this privacy notice.

Updates of this Privacy Notice

To apply the most up-to-date measures for protection and with a view to comply with the effective legislation, we will update this Privacy Notice on a regular basis. Should the changes we introduce are significant, we can publish a notice of the changes made on our website or inform you in any other suitable manner.