Alexion Pharmaceuticals, headquartered in the United States, 100 College St, New Haven, Connecticut 06510 (hereinafter also the “Data Controller”), acting as Data Controller, is committed to protecting the confidentiality of your personal data and ensuring the protection necessary against any event that could put it at risk of breach.
The Data Controller implements policies and practices concerning the collection and use of personal data and the exercise of the rights granted to you under applicable law. The Data Controller takes care to update the policies and practices adopted for the protection of personal data whenever necessary, and in any case in the event of regulatory or organizational changes that may affect the processing of your personal data.
The Data Controller has appointed a Data Protection Officer (DPO). You may contact the DPO at the following addresses and contact details: privacy@alexion.com
The Data Controller has appointed as Data Processor: Nume Plus Srl, headquartered at Via Panciatichi 40/11, Italy, whom you may contact if you have questions about the policies and practices adopted: info@nume.plus.
The Data Controller collects and/or receives information concerning you, such as:
o first name, last name
o email
o title
o work country
cookieyes-consent 1 year Cookie set by the CookieYes plugin, stores the user’s consent choice regarding the cookies used on the site.
PHPSESSID (or equivalent name detected) Session Technical cookie necessary for the operation of the site and the registration form (session state management).
The personal information concerning you will be processed for registration to the Unmasking aHUS: Interactive Clinical Cases workshop through the site ahusclinicalcases.com.
The processing of your personal data, specifically the data indicated in the registration form on the site ahusclinicalcases.com, is processed in order to carry out your request to participate in the Unmasking aHUS: Interactive Clinical Cases workshop, organized as part of the 58th ESPN Annual Meeting Congress (https://congressespn.org/), as well as to manage any requests for assistance and support regarding registration for the workshop itself.
The processing of your personal data is legally based on the fulfillment of the performance of the contractual obligations arising from the existing relationship.
The Data Controller processes your personal data, including through its suppliers (third parties and/or recipients), to the extent strictly necessary and proportionate to ensure the security and the ability of a network or the servers connected to it to withstand, at a given level of security, unforeseen events or unlawful or malicious acts that compromise the availability, authenticity, integrity, and confidentiality of the personal data stored or transmitted. For these purposes, the Data Controller has established procedures for managing personal data breaches (data breach).
The Data Controller does not transfer your personal data in countries outside the UE. Your personal data will not be disseminated or disclosed in any way to undetermined and unidentifiable parties, not even as third parties.
The disclosure concerns the categories of data whose transmission is necessary for carrying out the activities and purposes pursued by the Data Controller in managing the service provided
The personal data concerning and identifying you are necessary to fulfill the request you submitted through the registration form; if not provided, they make it impossible for the Data Controller to fulfill your requests.
The processing of data concerning you takes place through both electronic means and tools, in which case in electronic archives protected by effective and adequate security measures to counter the risk of breaches, and manual means made available to individuals acting under the authority of the Data Controller who are authorized and trained for this purpose.
Personal data is retained for the time necessary to fulfill registration requests and to send communications of this exclusive nature that the Data Controller carries out following your request, and in any case for a period not exceeding a maximum of 2 years, except in cases where events occur requiring the intervention of the competent Authorities, including in collaboration with the third parties/recipients entrusted with the IT security of the Data Controller's data, in order to carry out any investigations into the causes that determined the event.
At any time, free of charge and without any particular cost or formality, you may:
- obtain confirmation of the processing carried out by the Data Controller;
- access your personal data and know its origin (when the data is not obtained directly from you), the purposes and objectives of the processing, the details of the parties to whom it is disclosed, the retention period of your data, or the criteria used to determine it;
- withdraw your consent at any time, where this constitutes the basis for the processing. Withdrawal of consent does not, however, affect the lawfulness of processing based on consent given before such withdrawal;
- update or rectify your personal data so that it is always accurate and up to date;
- have your personal data deleted from the Data Controller's databases and/or archives, including backups, where, among other things, it is no longer necessary for the purposes of the processing or if the processing is deemed unlawful, and provided the conditions required by law are met; and in any case if the processing is not justified by another equally legitimate reason;
- restrict the processing of your personal data in certain circumstances, for example where you have contested its accuracy, for the period necessary for the Data Controller to verify its accuracy. You will be informed, within a reasonable time, when the suspension period has ended or when the grounds for the restriction no longer apply, and the restriction is therefore lifted;
- obtain your personal data, if received and/or otherwise processed by the Data Controller with your consent and/or if processed on the basis of a contract and by automated means, in electronic format, including for the purpose of transmitting it to another data controller.
The Data Controller shall act on this without delay and, in any case, no later than one month from receipt of your request. This period may be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you within one month of receiving your request and will explain the reasons for the extension.
For any further information, and in any case to submit your request, please contact the Data Controller at privacy@alexion.com
For reasons connected with your particular situation, you may object at any time to the processing of your personal data where it is based on legitimate interest, or where it concerns the processing of personal data for which provision is subject to your consent, by sending your request to the Data Controller at privacy@alexion.com
You have the right to erasure of your personal data if there is no overriding legitimate reason for the processing that prevails over the reason for your request, and in any case where you have objected to the processing.
Without prejudice to any other administrative or judicial remedy, you may lodge a complaint with the competent supervisory authority, namely the authority that carries out its tasks and exercises its powers in France, where you have your habitual residence or place of work, or, if different, in the Member State where the infringement of Regulation (UE) 2016/679 occurred.