Privacy Policy

Last updated: 15th January 2024

Introduction

This Privacy Notice explains how and why Huvepharma processes your personal data and describes your privacy rights. For the purposes of this notice “Huvepharma”, “we” or “us” means Huvepharma EOOD (having its seat and registered address at 3a, Nikolay Haytov Str., 5th floor, 1113 Sofia, Bulgaria), all its subsidiaries, branches, or representative offices around the world. As a global organization, Huvepharma has multiple legal entities in different jurisdictions that are responsible for the processing of your personal data. We comply with the General Data Protection Regulation (GDPR) and the respective applicable national legislation in the countries in which we operate.

Scope

This Privacy Notice applies to the processing activities we conduct towards visitors of our website at: https://huvepharma.com/, existing and prospective customers, partners, participants of Huvepharma meetings, conferences, and events. If you are an employee, contractor, consultant, or prospective employee of Huvepharma, the information about how we process your personal data will be shared with you before processing takes place. If you are visiting our website as a prospective employee, please refer to the section that applies to our job applicants here.

Who is responsible for data processing?

For the purpose of the applicable EU Data Protection law, including but not limited to GDPR, the company responsible for your personal data as a data controller is Huvepharma EOOD, having its seat and registered address at 3a, Nikolay Haytov Str., 5th floor, 1113 Sofia, Bulgaria or, as the case might be, the relevant local legal entity that is a contracting party for the purposes of providing products or services or the subsidiary you have contacted.

If you have any questions regarding this privacy notice or the processing of your personal data, please contact our Data Protection Officer by sending an e-mail to [email protected].

Personal data we collect

The personal data we collect, and the way we collect it, depends upon how you interact with us. Personal information that we hold about you may include your: names, citizenship, email address, postal address, job title/position, telephone number, data relating to our website: IP address, cookies and other technical data collected during your visit at our website (for more information, please review our Cookies Policy - https://huvepharma.com/legal/cookies/).

Why do we collect and process your personal data?

• To enter into agreements or facilitate the sales of Huvepharma products, or in order to present or popularize our products
• To maintain records of past, current, and prospective clients and partners
• To facilitate your attendance at our conferences or events
• To provide you with Huvepharma online newsletter and product information through electronic means
• To provide you with access to our apps and/or platforms and manage your accounts
• To respond to a request or a complaint you might have
• To comply with our regulatory and legal requirements and/or obligations

What is the legal basis for data processing?

• Performance of a contract: in some cases, we will need to process your personal data in order to execute the obligations or in response to steps on your part to enter into a contract with us.
• Compliance with legal obligations: processing your personal data may also be necessary for compliance with a legal requirement and/or an obligation which applies to Huvepharma.
• Legitimate interests: Huvepharma may process your data whenever it is necessary for the purposes of the legitimate interests pursued by Huvepharma, except when such interests are overridden by your interests or fundamental rights or freedoms.
• Consent: in certain circumstances, we will seek to obtain your consent before we undertake certain processing activities with your personal data (for example: when you subscribe to our newsletter).

Whom do we share personal data with?

For the purposes described above, we may share your information with any of the following groups:

• Subsidiaries, branches or representative offices, where necessary and compliant with applicable personal data protection laws and regulations
• Public authorities when the law requires
• Suppliers and services providers that support us to provide our products and services
• Third party service providers who perform functions on our behalf, where а data processing agreement or similar protection is in place (e.g., IT systems providers, cloud service providers, database providers and consultants, subcontractors, etc.)

Personal data we collect from you may also be transferred to third countries outside the European Economic Area (“EEA”) (i.e., EU Member States, together with Norway, Iceland and Liechtenstein), which may not offer the same level of personal data protection. Whenever we do such a transfer, we will provide adequate protection of your personal data and ensure that transferring is possible only if the third country provides for an adequate level of protection (according to the decisions of the European Commission) or there is an agreement in place (standard contractual clauses approved by the Euopean Commission).

How do we collect your personal data?

Directly from you: information that you communicate to us when you interact with our website, or other applications, when you request a product or service, or you register for our events. We collect personal information in writing, by telephone, e-mail or personal meetings.

From publicly available sources or third parties: we may obtain data about you from publicly available sources (websites, publications, public social media profiles, public registers, etc.) or from our business partners (e.g., to verify a business contact or financial information in a working context).

By automatic means: when you visit our website or our applications, we may collect technical data about your equipment, IP address, browsing actions and patterns through certain technologies, such as cookies.

Providing your personal data is voluntary for you, but necessary for us to be able to conclude an agreement, perform a service, or reply to an enquiry.

Processing your personal data will include automated decision-making, including profiling.

Information for marketing purposes

When you have provided a consent for processing your personal data for marketing purposes, we may send updates and news to you concerning Huvepharma products and/or services.

If you are currently receiving our marketing emails and you wish us to stop using your information for these purposes, you can use the unsubscribe link at the bottom of our newsletter or change your email preferences here (https://huvepharma.com/legal/unsubscribe/).

How long do we store your data?

We will not keep your personal data for longer than is necessary for the purposes for which we collect it unless the law requires us to preserve it longer (for example, due to the applicable statute of limitations or statutory retention periods).

What are your rights?

As a data subject you have and can exercise the following rights:

• the right to access your personal data, as well as to receive information about its processing
• the right to correct any inaccurate, or complete any incomplete, personal data
• the right to delete ("right to be forgotten") personal data processed with no valid legal basis
• the right to restrict the processing of personal data in cases of a legal dispute or defence
• the right to transfer data ("data portability") when data is processed by automatic means and based on consent or contractual obligation
• the right to object to the processing of personal data based on legitimate interest
• the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects to you or significantly affects you
• the right to withdraw any consent you have previously given at any time, and free of charge. This will not affect the lawfulness of any processing carried out before you withdraw your consent
• the right to complaint: if you are located in the EU, you also have the right to lodge a complaint about the way we handle your data with the competent supervisory authority in the relevant country. The name and contact details of the competent supervisory authorities in the EU are available at: http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

You can exercise your rights in writing to Huvepharma EOOD sent to the postal address stated above (postal service included) or via electronic document (signed on your behalf by Qualified Electronic Signature) emailed to [email protected]. If you wish, we can send to you a fill-in form or you can draft your own which contains your name, contact data, your ID (or other applicable identifier), description of your request, as well as a preferred form of communication (email, postal service, etc). Your request needs to have your contact details and be signed and dated.

How do we protect your personal data?

We take the security of your data seriously and protect the confidentiality of data and information obtained in the course of our business activities. We have internal policies and controls, as well as appropriate physical, technical and organisational measures in place to ensure that your data is not lost, accidentally destroyed, misused, or disclosed. The access to such information is limited to those employees, subsidiary companies, branches, representative offices and third parties who need to know that data for the purposes set out in this Privacy Notice.

Updates of this Privacy Notice

To apply the latest measures for data protection and comply to applicable legislation, we will regularly update this Privacy Notice. Should the changes we introduce be significant, we can publish a Notice of the changes made on our website or inform you in any other suitable manner.