We may process personal data that you voluntarily provide to us, which may include your name, gender, home address, age and date of birth, telephone number, and special categories of personal data. These may include diagnostic information, prescription details, other health-related information you choose to provide, and details regarding your relationship to another individual.
For adverse event reporting received from a treating physician or pharmacist, the information provided about the patient may include initials, gender, age, or date of birth. For adverse event reporting purposes, we do not collect or transmit identifiable patient personal data.
We may process personal data that you voluntarily provide to us, which may include your name, gender, home address, age and date of birth, telephone number, and special categories of personal data. These may include diagnostic information, prescription details, other health-related information you choose to provide, and details regarding your relationship to another individual.
For adverse event reporting received from a treating physician or pharmacist, the information provided about the patient may include initials, gender, age, or date of birth. For adverse event reporting purposes, we do not collect or transmit identifiable patient personal data.
The personal data you provide are used solely to examine and respond to your request, complaint, or adverse event report.
For adverse event reporting purposes, your details are recorded as the reporter’s information. The Pharmacovigilance Department may contact you for follow-up purposes, only after obtaining your consent.
When adverse event reports are received from healthcare professionals (physicians or pharmacists), we do not collect patient personal data beyond the limited information mentioned above, which is required solely for identification purposes. Patient personal data are collected only when the patient themselves is the reporter and voluntarily provides such information.
All personal data processed by us are obtained directly from you.
The processing of your personal data is necessary to comply with our legal obligation to monitor, assess, and report adverse events in accordance with applicable pharmacovigilance legislation.
Additionally, the processing of personal data for handling requests, complaints, or adverse event reports is based on our legitimate interest, as we would be unable to respond effectively without processing such data.
Your personal data will be retained for the duration required by law and as specified in the contractual agreements with the relevant manufacturer and/or marketing authorisation holder of the medicinal product.
Access to your personal data is restricted to authorised employees of CAP only.
For adverse event reporting purposes, we are legally required to share your data with authorised personnel of the pharmaceutical company supplying the product strictly for the processing of the report.
Your personal data may be transferred outside the European Economic Area. In such cases, appropriate safeguards will be implemented to ensure that your data remain adequately protected and processed in compliance with applicable European Union data protection regulations.
CAP may share your personal data with suppliers and/or partners for the purpose of handling requests, complaints, or adverse event reporting, following appropriate due diligence procedures and under written agreements that ensure confidentiality and adequate technical and organisational security measures.
CAP implements suitable legal, organisational, and technical safeguards to protect personal data in accordance with applicable privacy and data protection laws.
You have the right to:
- request information about the processing of your personal data, including access to a copy of your data
- request correction or deletion of your personal data or object to their processing
- request restriction of the processing of your personal data
- request the transfer of your personal data to another organisation in a structured, commonly used, machine-readable format
- lodge a complaint with the local data protection authority if you believe your privacy rights have been violated or your data have been unlawfully processed
Providing personal data is voluntary. If you choose not to provide personal data or object to processing, we will respect your decision unless doing so would prevent us from fulfilling our legal obligations.
To exercise your rights, please contact us using the details below.
If you have exercised one or more of your data protection rights and remain concerned about how your personal data are being processed, you have the right to contact us at:
dpo@papaellinas.com.cy.
