The Australian Privacy Principles apply to us from their introduction in March 2014. This policy describes how Roche manages any personal information we have about you.
Information You Provide To Us
At Roche, we only collect and hold your personal information when you choose to submit it to us. For example, you may choose to register to receive information about a disease or Roche products and/or services that interest you.
In some cases we also remove information that can directly identify you from your personal information and maintain it in a de‑identified format.
The personal information collected may vary depending on your particular interaction with Roche but Roche will only collect information that is necessary for Roche to track and manage its interaction with you or for the purposes set out in this Policy. The information may include:
- Your contact details and other information collected when you register with Roche;
- Any messages or comments you submit to us through email;
- Or any other information you provide to Roche during your interaction with Roche.
Automatically Collected Information
Roche may automatically receive certain types of information whenever you interact with us on our sites and through e-mails we may send each other. Automatic technologies we use may include, for example, Web server 10gs/IP addresses, cookies and Web beacons.
- Web Server Logs/lP Addresses - An IP address is a number assigned to your computer whenever you access the Internet. All computer identification on the Internet is conducted with IP addresses, which allow computers and servers to recognize and communicate with each other. Roche collects IP addresses to conduct system administration and report aggregate information to affiliates, business partners and/or vendors to conduct site analysis and Web site performance review.
- Web Beacons - On certain Web pages or e-mails, Roche may utilize a common Internet technology called a "Web beacon (also known as an "action tag" or "clear GIF technology"). Web beacons help analyse the effectiveness of Web sites by measuring, for example, the number of visitors to a site or how many visitors clicked on key elements of a site.
Web beacons, cookies and other tracking technologies do not automatically obtain personally identifiable information about you. Only if you voluntarily submit personally identifiable information, such as by registering or sending e-mails, can these automatic tracking technologies be used to provide further personal information about your use of the Web sites and/or interactive e-mails to improve their usefulness to you.
You have several choices when providing your personal information to Roche. You may decide not to provide your personal information at all by electing not to enter it into any forms or data fields on our Websites or other forms (such as consent or meeting registration forms) which may be provided to you from time to time. If you choose not to provide your personal information, or provide incomplete or misleading information, Roche may not be able to provide you with information and/or access to services that may be of use or interest to you.
Certain Websites may ask for your permission for certain uses of your personal information and you can elect to accept or decline those uses. If you subscribe to particular services or communications, such as an e-newsletter, you will be able to unsubscribe at any time by following the instructions included in each communication.
If you decide to unsubscribe from a service or communication or to update or remove your personal information, we will address your request and amend our records accordingly. We may require some additional information from you before we can process your request.
Roche uses technology and security precautions, rules and other procedures to protect your personal information from unauthorised access, improper use, disclosure, loss, modification, interference or destruction. To ensure the confidentiality of your personal information is maintained, Roche also uses industry standard firewalls and password protection. It is, however, your personal responsibility to ensure that the computer you are using is adequately secured and protected against malicious software, such as trojans, computer viruses and worm programs. Without adequate security measures (e.g. secure web browser configuration, up-la-date antivirus soft-ware, personal firewall software, no usage of software from dubious sources) there is a risk that the data and passwords you use to protect access to your data, could be disclosed to unauthorised third parties.
Use and Disclosure of Personal Information
Roche collects personal information at different times which may be used for one or more of a variety of purposes, to allow us to perform our business activities and functions and to provide best possible quality of customer service. The purposes for which your personal information may be collected, held, used and disclosed are:
- to contact you (or provide information and/or materials to you):
- with respect to Roche products and/or services;
- to administer educational meetings or programs;
- to update you on medical congress, events and news; and
- to conduct relevant market research;
- to fulfil our regulatory or legal obligations;
- to maintain your contact details in our records;
- to monitor the safety and efficacy of our products;
- to fulfil your requests,
Or as otherwise disclosed to you in this Policy from time to time.
Roche will not disclose personal information about you to any person except in accordance with the Privacy Act, and only where necessary. The circumstances in which we may disclose that information include:
- where Roche notified you at the time of supply of the information to Roche or it is expressly permitted under any agreement with you;
- where it is necessary to provide you with a service or goods which you have requested;
- where required for the ordinary operation of our business (for example, to send you information about our goods and services);
- where it is necessary for support services to be provided in relation to our business activities (please note that such disclosures will only be to people and entities required to meet the same standards of data protection and are prevented from using the information for their own marketing purposes);
- where we consider the law requires it, or in response to any demand by law enforcement authorities;
- regulatory authorities (such as the Therapeutic Goods Administration and State and Territory drug and health authorities) where Roche is required to provide your personal information to the particular authority;
- third parties that we use in the ordinary operation of our business, such as for conference organising, marketing, data processing and associated printing and mailing. For example, it may also be provided to Clinical Research Organisations for the purposes of medical research. We will only provide your personal information to reputable third parties and then only on a confidential basis where we are satisfied that those third parties will similarly comply with the Australian Privacy Principals and the Privacy Act These activities may involve the export of your personal information overseas as described above;
- Companies related to Roche for the same kinds of purposes as listed above. Subsequent use and disclosure by the related company will be in compliance with the Australian Privacy Principles and the Privacy Act;
• another company for the purpose of ensuring continuity of product supply and/or service if the supply of the product or service has been transferred to that company; and
• such third parties otherwise permitted or required by law.
Your personal information may be aggregated with data from other Roche sources and stored or processed on computers or Web-based database systems located outside Australia where data protection laws may differ from ours.
Your personal information may be stored, maintained and processed on computers or web-based database systems at Roche which may be accessed by and shared with any affiliate within the global Roche group (Roche Affiliates), third-parties working with Roche Affiliates and/or regulatory authorities or as required by law.
Where practicable we will implement measures to require these third parties working with Roche to comply with the Act and the terms of this Policy.
At any time you may opt out of receiving any communications from Roche (other than as required for the operation of our business, e.g. regarding account payment if you have one with us), although Roche may then be unable to provide you with all of the information regarding our programs, events, services or products which may be of benefit to you. If you decline to provide us with your personal information (or subsequently opt-out) it will likely preclude the provision of relevant services to you by Roche.
You may request access to personal information Roche holds about you by sending an email to email@example.com if you would like to request access to your personal information held by Roche;
- request an amendment or correction of your personal information held by Roche;
- ask us to remove your personal information from our system; or
Your request should detail your name, contact details, your former name or alias, if any, and the information you believe Roche may hold on you. You do not have to provide a reason for requesting access. Where Roche holds information that you are entitled to access, we will endeavour to provide you with a suitable range of choices as to how you may access it (e.g. emailing or mailing it to you). In any event Roche will acknowledge receipt of your request within a reasonable period and in any event within 10 working days and endeavour to respond to your request within 30 days.
If you believe that personal information Roche holds about you is incorrect, incomplete or inaccurate, then you may request we amend it. We will consider if the information requires amendment. If Roche does not agree that there are grounds for amendment, then we will add a note to the personal information we hold stating that you disagree with it.
Any questions about this policy, or any complaint regarding treatment of your privacy by Roche, should be made through the contact details below.
We will attempt to confirm as appropriate with you your understanding of the conduct relevant to the complaint and what you expect as an outcome. We will inform you whether we will conduct an investigation, the name, title, and contact details of the investigating officer and the estimated completion date for the investigation process.
After we have completed our enquiries, we will contact you, usually in writing, to advise the outcome and invite a response to our conclusions about the complaint. If we receive a response from you, we will assess it and advise if we have changed our view. If you are unsatisfied with the outcome, we will advise you about further options including, if appropriate, review by the Privacy Commissioner within the Office of the Australian Information Commissioner.
|Roche Products Pty Limited||Roche Diagnostics Australia Pty Limited|
By mail to:
By email to:
By mail to:
By email to: