Who is the controller of your personal information?

GlaxoSmithKline(China) Investment Co., Ltd. and its affiliated companies (e.g., GSK Shanghai R&D Co., Ltd.), are the controllers of your personal information.

Contact Information and Privacy point of contact

If you want to exercise your rights, have any questions about this Privacy Notice, need more information or would like to raise a concern, please contact GSK China Privacy Office at cn.pharma-privacy@gsk.com

What personal information do we collect about you?

The personal information we collect, and process, may include:

• Basic information – your name, surname (including prefix or title), alias, gender, age or date of birth, employer, job as well as your preferred language; 
• Contact information – information that enables us to contact you, e.g. your personal or business email, residential address, work address, address of the medical institution where the health professionals work, mailing address, telephone numbers and profile on a social media platform; 
• Financial information – your bank details, including account name, account number and sort code, and other payment and remuneration details, reimbursement record;
• Technical and network activity information – information about your device and your usage of our websites, apps and systems, including your IP address, device ID, hardware model and version, mobile network information, operating system and other online identifiers, type of browser, browsing history, search history, access time, pages viewed, URLs clicked on, forms submitted, physical location, WeChat nickname, WeChat profile photo and WeChat Open ID;
• Product use – data related to your use of our products (including feedback), your purchase history and preferences, your interactions with us, your preferred method of communications with us, and services you may use;
• Medical/Health information – your health status, health conditions you are experiencing and medical/health information inferred from information that you have provided to us (such as purchase history of medications);
• Audio visual – photos, videos and voice recordings of you. We may collect photos, videos and voice recordings of you if GSK has installed CCTV in the office and you may have just visited the office; your communication with GSK to inquire about or give feedback on GSK's products or services;
• Personal identity information: ID card number / passport number;
• Adverse reaction/event reporting information: patient’s name/ initials, gender, age, physiological characteristics (e.g., height, weight) (if needed), date of birth, ethnicity, contact information, medical record number/clinic number, family history, medication information, allergy history, medical records (such as testing reports, diagnosis and treatment, symptoms, medication records), adverse event data (i.e., adverse reaction/event occurrence time, adverse reaction/event process description (including symptoms, characteristics, clinical tests, etc.) and treatment status and results), relevance information (including reporter’s name, contact number, employer, address, email address);
• Signature information: your handwritten signature or a digitised electronic signature;
• Background and experience information: specialty/skills, position, investigator number of clinical trials, healthcare professionals’ certificate number, information contained in the CV, such as degree, educational experience, professional qualifications, work experience;
• Special categories of personal information (if applicable): This includes information about your health, disabilities or sexual orientation. We use this information to ensure that we comply with the requirements of relevant laws and regulations. Similar information about minors may also be collected in very limited circumstances, please refer to “Information about children” for more information;
• Your views and opinions on GSK: the information you provide when participating in GSK investigations or using GSK’s “Speak up”;
• Communication information – your communication records and content with GSK.
• Information about your services to GSK: company, occupation details, due date, location of work, name of line manager.

You can choose not to give us personal information when we ask you for it. If you decide not to give us your personal information, it may restrict our relationship with you. For example, we may not be able to provide you with the services that you have requested.

 

How do we collect your personal information?

Directly from you when you:

• Create an account and profile on one of our websites, or apps; 
• Register with us to use GSK’s authentication services; 
• Use your company’s sign on or other third-party authentication service (for example Microsoft, Google log in page) to gain access to our systems or apps. 
• Use our websites, apps and systems;
• Share or use your social media profile to contact GSK; 
• Sign up with us to receive promotional material;
• Enter a contest or competition organised by GSK; 
• Engage with one of our sales representatives;
• Get in touch for support or to provide feedback;
• Attend an online event such as a webcast;
• Respond to any surveys that you may choose to participate in;
• Share adverse events or medical information enquiries with us; and 
• Attend offline meetings, such as advisory boards or conferences.

From other sources:

• Publicly accessible sources;
• Joint marketing partners;
• Marketing vendors;
• Healthcare provider directories;
• Events management agencies;
• Social media platforms; and
• When you talk about us online, like when you mention a GSK product in a Tweet.

If you connect your social media account to our websites, or apps, you will share certain personal information from your social media account with us. This may include your name, email address, photo, list of social media contacts, and any other information you make accessible to us when you connect your social media account to our websites, or apps.

We also combine information about you from various sources, including the information you provide to us and personal information, which is collected during your relationship with us.

 

How do we use your personal information or process your personal information in other ways?

We use your personal information for the purposes we have described below in this Privacy Notice, or for purposes which are reasonably compatible to the ones described. We cannot, and will not, use it for other purposes without your permission, unless we have a legal right or obligation to do so.

To manage our relationship with you.

We will use your personal information to:

• Provide our products and services to you;
• Provide you with a prize if you enter a prize draw or competition;
• Provide online services such as webcasts, employment opportunities and financial results;
• Manage your account on our websites, and apps;
• Identify you and authenticate your access rights access to our websites, systems and apps;
• To respond to your queries and provide you with information when you request it or when we believe our products and services may be of interest to you. If we intend to share electronic marketing with you, we will ask for your consent where required and you can opt out at any time;
• Invite you to provide feedback, participate in research, surveys or attend events;
• Personalise your experience when interacting with GSK;
• Respond to your drug information inquiries, provide medical knowledge and medication guidance.
• Report the adverse events you notify us about; and
• Perform analytics, market research and segmentation to understand your preferences, improve our products and services and our communications to you.

To manage and improve our processes and our business operations.

We will use your personal information to:

• Manage our network and information systems security; 
• Manage our workforce effectively;
• Respond to reports you make of a possible side effect associated with one of our products and to monitor the safety of our products;
• Keep records related to our relationship with healthcare professionals;
• Perform data analyses, auditing and research to help us deliver and improve our GSK digital platforms, content and services;
• Monitor and analyse trends, usage and activities in connection with our products and services to understand which parts of our products and services are of the most interest and to improve them accordingly; and
• Prepare and perform management reporting and analysis, including analytics and metrics.

To achieve other purposes.

We will use your personal information:

• To follow applicable laws and regulations;
• To respond to requests from competent public authorities;
• To tell you about changes to our terms, conditions and policies;
• To exercise or defend GSK against potential, threatened or actual litigation;
• To investigate and take action against illegal or harmful behaviour of users.
• To protect GSK, your vital interests, or those of another person;
• To gain insights and feedback on our products and services in order to correct or improve them, by analysing information from external sources such as Google, Facebook and Twitter (and others);
• To deliver services to you via your smart device and our mobile apps; and
• When we sell, assign or transfer all or part of our business.

To provide products or services.

We will use your personal information:

• To provide you with our vaccination reminder service and knowledge on disease prevention;
• To optimise our information services during your use of our services.

To communicate with you.

We will use your personal information:

• To respond to your queries and provide you with information when you request it or when we believe our products and services may be of interest to you. If we intend to share electronic marketing with you, we will ask for your consent where required and you can opt out at any time.

To report misconduct.

We will use your personal information:

• To provide a channel for you to report misconduct, possible violations of the GSK’s code of conduct or suspected violations of laws and regulations;
• To investigate and take action against illegal or harmful behaviour of users.

To ensure compliance.

We will use your personal information:

• To follow applicable laws and regulations;
• To exercise or defend GSK against potential, threatened or actual litigation;
• To protect GSK, your vital interests, or those of another person.

To report adverse reaction / event.

We will use your personal information:

• To process your inquires, complaints or adverse event report.

To provide reception services.

We will use your personal information:

• To provide reception service for your offline visits;
• To answer your incoming calls.

To provide you with security.

We will use your personal information:

• To maintain public security.

To invite you to become our speaker.

We will use your personal information:

• To invite you to participate as a speaker at our conferences.

To provide you with financial support or to make payment.

We will use your personal information:

• To provide you with financial support;
• To reimburse you for your expenses;
• To make payment for services provided by you.

To verify your qualifications.

We will use your personal information:

• To verify your qualification and arrange corresponding trainings before you provide the service;
• To execute the paper or digital contract for the services you provide.