Edited on 15 Nov 2024
Jiangsu Hengrui Pharmaceuticals Co., Ltd. and/or its branches / subsidiary companies (“Hengrui”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. Please read this Privacy Notice carefully as it contains important information on how and why Hengrui collects and processes your personal information through your use of this website.
Hengrui is the Controller of the personal data and has committed to comply with all applicable data protection legislations, including but not limited to, the Personal Information Protection Law of People's Republic of China 2021(PIPL), the General Data Protection Regulation EU 2016/679 (GDPR), Swiss Federal Act on Data Protection (FADP) and the Data Protection (Jersey) Law 2018 (PDJL).
This Privacy Notice aims to make sure that you understand what personal information is collected about you, how your personal information is used and how it is kept safe. The terms and definitions contained in this Notice shall be read and interpreted in the light of the provisions of the applicable data protection legislations.
THE USE OF OUR WEBSITE IMPLIES YOUR FULL AND UNRESERVED ACCEPTANCE OF THIS NOTICE, AS WELL AS OUR TERMS OF SERVICE. YOU ACKNOLEWDGE HAVING READ THE INFORMATION BELOW AND AUTHORIZE HENGRUI TO PROCESS, IN ACCORDANCE WITH THIS NOTICE, YOUR PERSONAL INFORMATION THAT YOU PROVIDE ON OUR WEBSITE.
We may collect and use your personal information in a variety of contexts, including when you participate in Hengrui research, take our drugs or therapies, or visit our websites or offices. Depending on your relationship or interactions with Hengrui, Hengrui may have collected and processed any of the following categories of personal information about you:
| Categories | Examples | Information recipients |
|---|---|---|
| Identification information | First name, last name, initials, gender, age or date of birth, government-issued identification (e.g. identity card, driver’s license, passport or tax ID number), photographs, videos, sound recordings, language, or Hengrui-issued access cards and IT credentials. |
|
| Contact details | Postal and/or email address, or phone number |
|
| Commercial information | Records of Hengrui’s products or services prescribed, purchased, obtained or considered, payment information (amount invoiced and/or paid, bank details, payment method, billing address), or history of our relationship |
|
Professional information | Job title, employment status, educational information, professional qualifications and licenses, or work experience and professional networks, affiliates, programs and activities |
|
| Health, biometric and genetic information | Information about your medical conditions, treatments and any adverse events you may experience while taking our drugs or therapies |
|
| Geolocation | Geolocation information obtained from your device’s GPS, Bluetooth, IP address, or other location services/technology |
|
| Information related to your exchanges with Hengrui | Date and subject of your requests or exchanges with Hengrui’s services |
|
Others | Other information needed for our relationship or interactions with you or as required by laws, our service providers or collaborators, such as the information you provide in connection with contracts and queries you make to us. |
|
The reason why we collected your information decides how we process it. Depending on your relationship and/or interactions with Hengrui, as well as, applicable legislations and our own procedures & requirements, Hengrui may process your personal information for the following reasons:
| Purpose | Examples | Legal ground |
|---|---|---|
| Managing your contact requests |
|
Legitimate interest of Hengrui to manage its contact requests |
| Managing the personal and contractual relationship with you |
|
Depending on your relationship with Hengrui:
|
| Improving the products, services and programs of Hengrui |
|
Legitimate interest of Hengrui to improve its products, services and programs |
| Sending communication that might interest you |
|
Legitimate interest of Hengrui to develop its business activities (with your consent, if required by applicable law) |
| Providing educational and awareness information |
|
Legitimate interest of Hengrui to enhance the education and awareness about health conditions and disease states |
| Managing Hengrui’ events or programs |
|
Legitimate interest of Hengrui to develop its business activities (with your consent, if required by applicable law) |
| Improving the websites and their services, as well as your user experience on the websites |
|
Legitimate interest of Hengrui to improve the Sites and their services, as well as your user experience on the Sites |
| Pre-litigation or litigation management |
|
Legitimate interest of Hengrui in defending its rights and interests |
| Compliance with legal and regulatory obligations |
|
Legal and regulatory obligations to which Hengrui is subject |
| Other |
|
Legitimate interest of Hengrui or legal and regulatory obligations to which Hengrui is subject |
You directly provide Hengrui with most of the data we collect. We collect data and process data when you:
We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of meeting any legal, accounting or reporting requirements.
We may transfer your personal data to our associated entities and service providers to the extent necessary in order to achieve the purpose we collected the data for. We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not sell, trade, or rent your personal data to third parties.
Some of our associated entities and service providers may be located outside China and/or other country where Hengrui’s branch/(es) is located. In this case, your personal data may be transferred outside of those regions and Hengrui will take steps to ensure personal data is kept secure and treated in accordance with this privacy notice. In the absence of an adequacy decision, we will implement appropriate safeguards, including where relevant by entering into appropriate standard contractual clauses with the receiving party outside of China and/or other country where Hengrui’s branch(es) is located.
Hengrui has in place appropriate security measures to ensure the security and integrity of your personal information and treats your personal data in a confidential manner. We limit access to your personal information to those individuals who have a business need to access it to protect your personal information from unauthorized access and disclosure.
We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
You will not be subject to decisions that will have a significant impact on you based solely on automated decision-making unless we have a justification for doing so and we have notified you.
Under certain laws such as GDPR, PDJL, FADP, PIPL or China’s Cybersecurity Law (including thoes implementing regulations and national standards), you may have the following rights with respect to your personal information to:
| Be informed | You have the right to know how your Personal Information is collected and used. |
| Request access | You may ask to receive a copy of your Personal Information in a commonly used format. You have the right to know whether we process Personal Information about you, and if we do so, to access certain data we hold about you and certain information about how we use it and who we share it with. |
| Request correction | You are entitled to ask us to rectify, by completing or correcting, all or certain information held about you which appears incomplete or inaccurate. |
| Request erasure | You have the right to ask us to delete or remove your Personal Information where there are no longer legitimate grounds to continue to process it. |
| Request restriction of processing | You have the right to ask that the use of your Personal Information is restricted, or even “frozen”, to leave you the possibility to exercise other rights. Your Personal Information shall not be used anymore but must be kept by us during this period. |
| Request data portability | You may ask that your Personal Information is transferred to another data controller. |
| Object to processing | You have the right to object to the processing where we are relying on legitimate interest as legal basis. |
| Withdraw consent | When you have given your consent for the processing of your Personal Information (e.g. email alerts), you can withdraw it at any time without justification as long as the processing is covered by GDPR and other applicable laws and regulations. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purposes you originally agreed to, unless we have another legitimate basis for doing so in law. |
If you have any question or request about the Privacy Notice, the ways in which Hengrui collects and uses your personal information described above, your choices and rights regarding such processing, or wish to exercise your rights under applicable data protection laws, you may do so by contacting us as follows:
- By sending an email to data.privacy@xinbailm.com
If we do not fulfil your request, you will be provided with the reason(s) for such decision.
We do not knowingly collect any personal information from or about children under 16 years old through our websites. If you have reason to believe that a child under the age of 16 has provided us personal information through our website, please contact us, and we will endeavour to delete, without undue delay, that information.
If the information you provide involves the safety information of Hengrui’s medicine products, we will collect the patient's personal information, including but not limited to: the patient's name, gender, date of birth/age, physiological signs, contact information, medical history, family history, medication information, allergy history, medical records, data related to adverse events, and the basic information of the reporter, including name, contact number, work address, and email address, for the purpose of verifying the validity of the data and processing the safety information report. Please note: According to PIPL and GDPR, past medical history, family history, medication information, allergy history, medical records, and adverse reaction event data are sensitive personal information, and we need this information for follow-up of relevant safety information to ensure that Hengrui meets the regulatory requirements of drug regulations.
If the information you provide involves a safety inquiry about medicine products of Hengrui, we will record and use the name, phone number, identity information, email address, address, workplace, professional title, medication information provided by you for the follow-up provision of medical knowledge and medication guidelines.
Hengrui will strictly follow the requirements of domestic and foreign regulators and laws and regulations to properly store and use the collected personal safety data. We will comply with all applicable laws, regulations, and industry best practices in the cross-border transfer of personal safety information, and we will always comply with the strictest requirements if the rules differ from jurisdiction to jurisdiction.
We are committed to taking appropriate technical and management measures to protect your personal information from unauthorized access, or any disclosure, alteration or loss. We promise to take appropriate measures to protect your personal information, so that the processing of your sensitive personal information will not have a significant adverse impact on your personal rights and interests. We will keep your personal information for the shortest period necessary in accordance with the requirements of laws and regulations.
You have the right to be informed about, have access to, to rectify and restrict the processing of your personal safety information, and you can contact us at any time at the hotline 86-400-8283900/86-800-8283900 to request an inquiry, to request a copy, correction, deletion of the personal information we hold about you, or to withdraw your consent to the processing of certain types of personal information. If the request results in Hengrui or its affiliates violating its obligations under applicable laws, regulations or codes of practice, then your request may not be fully met, but you can still request us to prohibit further use of your personal information. Hengrui has appointed a data protection officer to be responsible for supervising Hengrui's compliance with relevant laws and regulations on personal information protection, and if you have any questions about Hengrui's collection and processing of your personal information and your personal rights and interests, you can also send the request to data.privacy@xinbailm.com to obtain the Hengrui's Data Protection Officer support.
This website may provide links to other websites as a service to our website’s visitors. These are websites we believe may have helpful information. However, Hengrui does not endorse and is not responsible for the content and the privacy notices of third-party websites. Similarly, Hengrui does not have any control over information you may choose to provide to those websites.
Hengrui reserves the right to modify this Privacy Notices at any time. Then, we ask you to check this Notice regularly to ensure you are aware of the most recent version. We will notify you if we make any material changes to this Notice, which we may do by posting a message on our websites.
Jiangsu Hengrui Pharmaceuticals Co., Ltd., No. 7 Kunlunshan Road, Economic and Technological Development Zone, Lianyungang, Jiangsu, China
You may contact us at any time if you have questions or concerns about this Privacy Notice or our practices. Please send an email to data.privacy@xinbailm.com.