This Privacy Notice is addressed to individuals that are interested in or involved in the MyTcellTreatment Cross Border Program (the ‘Program’), including healthcare professionals and patients, and parents, legal guardians, and carers of patients.

We, Novartis Pharma AG (‘Novartis’), are a company formed under the laws of Switzerland and located at Lichtstrasse 35, 4056 Basel, Switzerland. Together with affiliated companies, which are part of our group of companies, we are responsible for processing personal information. As the ‘data controller’, we decide why and how we do this.

USING PERSONAL INFORMATION

We use personal information to deliver the Program. This includes providing information about the Program and registering and treating patients on the Program. These uses of personal information are based on consent.

We may also use personal information to comply with our legal obligations and meet requests from health authorities. This includes recording information about adverse events or product quality complaints. These uses of personal information are necessary to meet our legal obligations.

COLLECTING PERSONAL INFORMATION

For the purposes listed above, we collect:

  • Name
  • Address
  • Contact details
  • Patient medical information (this is further described in the MyTcellTreatment Patient Consent Form)

SHARING PERSONAL INFORMATION WITH TREATMENT CENTRES

Personal information may be available to healthcare professionals involved in the treatment of patients at treatment centres. For example, if you are a healthcare professional that enrolls a patient on the Program, your personal information will be available to healthcare professionals at the centre(s) treating the patient, which may be located outside of your country.

Treatment centers are separately responsible for using personal information. This Privacy Notice does not apply to the use of personal information by treatment centers. You can ask treatment centers about their use of personal information.

SHARING PERSONAL INFORMATION WITH OTHERS

The Program is managed on behalf of Novartis by Uniphar Public Limited Company (‘Uniphar’), a company formed under the laws of Ireland and located at 4045 Kingswood Road, Citywest Business Park Co, Dublin, D24 VO6K, Ireland. Uniphar acts on the instructions of Novartis and cannot use personal information for its own purposes.

Translation services for the Program are provided by TransPerfect International LLC (‘TransPerfect’), a company formed under the laws of USA and located at Block 2 Harcourt Business Centre, Harcourt Street, Dublin 2, Ireland. TransPerfect acts on the instructions of Novartis and cannot use personal information for its own purposes.

Travel services are provided by CWT Global B.V. (‘CWT’), a company formed under the laws of Netherlands and located at Oval Tower, De Entree 159, 1101 HE, Amsterdam. CWT acts on the instructions of Novartis and cannot use personal information for its own purposes.
Novartis employees and other service providers will also have access to personal information for the purposes described above. For example, we use third parties to provide IT services (e.g. store our data) and to provide business services (e.g. perform some of our business processes).

By law, our employees and service providers must protect the confidentiality and security of personal information. You can ask us for a list of organisations that will handle personal information on our behalf. Personal information can also be provided to a national or international authority if we are required or allowed to do so by law or regulation.

Personal information may be processed, accessed, or stored outside the country you are located in, and where the same level of protection is not provided. In this case, we will make sure personal information is protected as required by law.

RETAINING PERSONAL INFORMATION

We only retain personal information for as long as necessary to fulfil the purpose for which it was collected or to comply with legal or regulatory requirements. Information associated with the Program is retained for a period of 5 years.

PROTECTING PERSONAL INFORMATION

We have appropriate measures in place to provide an adequate level of security and confidentiality to personal information. These measures will protect personal information against accidental or unlawful destruction or alteration, accidental loss, unauthorized access or sharing, and any unlawful forms of processing.

YOUR RIGHTS

According to applicable law, you have a right to request a copy of your information. You can also object to its use or ask for it to be updated, restricted, erased, or transferred to another organisation. You may withdraw your consent at any time.

If you have a question or want to exercise the above rights, you can email us at the address below.

If you are not satisfied with how we use personal information, you can address your concern to our data protection officer at global.privacy_office@novartis.com. You also have the right to complain to your data protection authority.

POINT OF CONTACT

If you have a question about the collection or use of personal information, or you wish to exercise your rights, please contact mytcelltreatment@uniphar.com or visit novartis.com/privacy.

April 2022